This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/ZAbsRN0fUXbnd5YBz0EAlHk_95M.roa File: ZAbsRN0fUXbnd5YBz0EAlHk_95M.roa (raw, json) Hash identifier: ZZQdUJPsVGvVmbO6BIZT7SnJBcEBT1ZftSP8BYy67GI= Subject key identifier: 64:06:EC:44:DD:1F:51:76:E7:77:96:01:CF:41:00:94:79:3F:F7:93 Certificate issuer: /CN=9c8a1876fddc2b63748b457b770b79a7e66e793c Certificate serial: 019B797E59329EE660C1DA0CD38D170D0A18 Authority key identifier: 9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/ZAbsRN0fUXbnd5YBz0EAlHk_95M.roa Signing time: Thu 01 Jan 2026 12:18:02 +0000 ROA not before: Thu 01 Jan 2026 12:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209585 IP address blocks: 193.16.97.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:59:32:9e:e6:60:c1:da:0c:d3:8d:17:0d:0a:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c8a1876fddc2b63748b457b770b79a7e66e793c Validity Not Before: Jan 1 12:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6406ec44dd1f5176e7779601cf410094793ff793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:62:f8:fc:17:36:e4:83:7c:b1:0a:94:a9:1e: 94:93:e1:e0:06:aa:46:b9:a4:b8:1e:0e:9e:96:c0: 48:b2:19:24:32:0e:db:36:a1:fc:e5:f7:86:15:ec: 66:7c:bf:d8:7a:fa:28:0e:e4:f2:0e:ef:81:5d:d9: ce:72:0c:5a:9c:93:f2:b2:3f:0d:fb:bd:5d:01:db: 5c:b7:26:c7:bf:6c:b9:64:e9:92:7a:f9:3b:cb:0b: 46:fd:ac:d1:61:40:f8:1b:89:71:f5:0f:e0:b7:ef: 36:53:72:ca:2d:01:c3:07:65:39:c1:6d:53:de:cb: 4b:bf:de:ca:8b:4c:f9:99:5d:ee:00:b5:fb:88:78: b8:6b:6b:33:ca:f4:d9:1f:a6:5a:c1:8a:a1:a7:ce: dd:7f:fd:f7:9b:e1:a6:c0:14:14:26:81:59:34:2e: 09:01:66:45:61:07:57:2c:67:5f:55:d5:55:09:ac: b7:3a:8c:a6:1f:59:cd:2b:6c:d7:d7:2c:3f:9c:e2: a0:07:b1:d9:ca:f6:ea:9c:3c:1b:b5:f5:11:61:f7: 3c:e4:e4:36:c8:7a:7d:9f:95:30:33:2e:34:f3:c5: 7f:47:5a:f4:2b:e7:ce:06:9e:3c:45:c7:b8:fb:04: a7:12:19:54:cd:bd:5d:57:27:e8:9a:7d:f9:f5:72: 29:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:06:EC:44:DD:1F:51:76:E7:77:96:01:CF:41:00:94:79:3F:F7:93 X509v3 Authority Key Identifier: keyid:9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/ZAbsRN0fUXbnd5YBz0EAlHk_95M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.16.97.0/24 Signature Algorithm: sha256WithRSAEncryption c3:6c:f9:df:4d:d9:eb:09:80:61:a8:ac:12:89:73:63:e5:61: 5b:20:e2:cf:23:d3:6d:f0:0c:fd:f8:9e:65:f3:17:1b:d7:fd: 95:cc:d2:d3:05:d0:1b:c3:8f:8b:8e:ba:51:b8:78:2c:43:cc: ce:26:fe:9e:98:82:df:bd:ad:bf:4e:26:84:22:07:ff:7e:2d: ec:81:ac:3c:2d:28:d3:cd:b0:0c:9e:c4:ad:3e:70:e3:e0:45: e7:b9:dd:86:84:54:4e:bd:f1:bc:fb:a2:48:75:4f:fe:85:25: 5c:e6:d6:6b:0c:90:60:24:47:29:fd:c8:5d:05:a2:d1:57:c4: 15:b8:69:9a:a4:f5:b1:84:3c:57:d1:4f:5c:df:7c:d9:da:3c: 22:35:28:2d:90:25:27:f9:13:d0:0e:38:f7:8c:25:6d:b0:92: 3a:12:cd:e7:bf:ca:52:43:51:f5:1b:c4:b4:45:40:03:ba:cb: eb:90:a3:9d:7f:08:6f:9d:a9:ef:e3:76:35:88:05:32:7c:51: a8:1f:d5:fa:53:b1:d4:51:93:83:a1:e1:1a:5d:d2:70:bd:85: 5f:39:d1:3f:10:7f:29:ed:1b:d8:83:42:6d:b5:b0:9f:f3:5a: 6a:97:45:ae:b6:36:a7:6b:a5:e0:78:4c:9c:9a:9d:da:2f:7b: ae:34:82:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5flkynuZgwdoM040XDQoYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljOGExODc2ZmRkYzJiNjM3NDhiNDU3Yjc3MGI3OWE3ZTY2 ZTc5M2MwHhcNMjYwMTAxMTIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDA2ZWM0NGRkMWY1MTc2ZTc3Nzk2MDFjZjQxMDA5NDc5M2ZmNzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WL4/Bc25IN8sQqUqR6Uk+HgBqpG uaS4Hg6elsBIshkkMg7bNqH85feGFexmfL/YevooDuTyDu+BXdnOcgxanJPysj8N +71dAdtctybHv2y5ZOmSevk7ywtG/azRYUD4G4lx9Q/gt+82U3LKLQHDB2U5wW1T 3stLv97Ki0z5mV3uALX7iHi4a2szyvTZH6ZawYqhp87df/33m+GmwBQUJoFZNC4J AWZFYQdXLGdfVdVVCay3OoymH1nNK2zX1yw/nOKgB7HZyvbqnDwbtfURYfc85OQ2 yHp9n5UwMy4088V/R1r0K+fOBp48Rce4+wSnEhlUzb1dVyfomn359XIpFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGQG7ETdH1F253eWAc9BAJR5P/eTMB8GA1UdIwQY MBaAFJyKGHb93CtjdItFe3cLeafmbnk8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbklvWWR2M2NLMk4waTBWN2R3dDVwLVp1ZVR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy85ZWE2OGYtNzQzZC00N2RhLWI3MWMt NzA5ZmJlODRjZGZiLzEvWkFic1JOMGZVWGJuZDVZQnowRUFsSGtfOTVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy85ZWE2OGYtNzQzZC00N2RhLWI3MWMtNzA5ZmJlODRjZGZi LzEvbklvWWR2M2NLMk4waTBWN2R3dDVwLVp1ZVR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRBhMA0G CSqGSIb3DQEBCwUAA4IBAQDDbPnfTdnrCYBhqKwSiXNj5WFbIOLPI9Nt8Az9+J5l 8xcb1/2VzNLTBdAbw4+LjrpRuHgsQ8zOJv6emILfva2/TiaEIgf/fi3sgaw8LSjT zbAMnsStPnDj4EXnud2GhFROvfG8+6JIdU/+hSVc5tZrDJBgJEcp/chdBaLRV8QV uGmapPWxhDxX0U9c33zZ2jwiNSgtkCUn+RPQDjj3jCVtsJI6Es3nv8pSQ1H1G8S0 RUADusvrkKOdfwhvnanv43Y1iAUyfFGoH9X6U7HUUZODoeEaXdJwvYVfOdE/EH8p 7RvYg0JttbCf81pql0Wutjana6XgeEycmp3aL3uuNIJW -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:20 2026 by rpki-client