This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ZcMDnxFKg86WG985x8gSYpkiw0w.roa File: ZcMDnxFKg86WG985x8gSYpkiw0w.roa (raw, json) Hash identifier: NWzoV3X+tjCKZ4ahSvdzMzLxfudtWlBZs1TQLyd53h4= Subject key identifier: 65:C3:03:9F:11:4A:83:CE:96:1B:DF:39:C7:C8:12:62:99:22:C3:4C Certificate issuer: /CN=01292e03a731796e1d7b148b1dd235d144352f5d Certificate serial: 019B783513FB5FB1C81B4BD7EB60D9882219 Authority key identifier: 01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ZcMDnxFKg86WG985x8gSYpkiw0w.roa Signing time: Thu 01 Jan 2026 06:18:22 +0000 ROA not before: Thu 01 Jan 2026 06:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57474 IP address blocks: 195.96.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:13:fb:5f:b1:c8:1b:4b:d7:eb:60:d9:88:22:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01292e03a731796e1d7b148b1dd235d144352f5d Validity Not Before: Jan 1 06:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65c3039f114a83ce961bdf39c7c812629922c34c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:42:76:76:41:12:63:eb:20:54:f3:d5:a3:b8: 2e:5e:d3:8f:32:ec:87:b5:fa:d9:30:ba:e1:88:8c: a0:47:a9:21:aa:4b:58:64:be:63:e6:21:e9:04:be: b4:c3:40:8c:6f:a4:9f:dc:10:6c:a4:1f:5c:8f:7f: d8:cd:c5:dd:9f:6c:9e:63:b1:ec:67:03:f2:1d:19: 0b:88:59:05:80:da:4e:57:80:b8:74:a4:d1:3b:57: ae:b8:07:5d:da:79:f7:06:98:09:7a:eb:ac:b9:f8: e2:c1:5d:f7:7f:e2:75:f7:11:6c:28:bf:4e:13:97: 91:b4:cc:04:86:a7:69:95:03:21:23:7f:aa:f3:b8: 41:f5:83:f1:cf:f8:90:2d:a8:f7:31:94:e6:af:42: ee:e4:6c:b4:b9:26:ed:49:76:14:64:29:de:64:4b: 10:37:94:b6:c5:d3:4c:7a:d5:90:f7:da:35:9c:e0: cf:6e:c8:7d:ed:25:ae:54:ad:fe:69:e1:b1:77:8d: 84:32:bf:2a:bd:43:fb:14:51:ce:c3:99:c6:ee:3f: 03:a1:fe:ff:08:fc:11:ea:49:ea:5e:44:28:72:4f: d7:e1:a1:d5:34:74:05:ce:c4:5b:1b:f7:b8:1a:63: d6:92:57:cd:04:06:7b:e5:37:a8:76:e7:4a:af:70: 96:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C3:03:9F:11:4A:83:CE:96:1B:DF:39:C7:C8:12:62:99:22:C3:4C X509v3 Authority Key Identifier: keyid:01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ZcMDnxFKg86WG985x8gSYpkiw0w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.96.153.0/24 Signature Algorithm: sha256WithRSAEncryption af:68:3c:11:09:2d:ee:89:29:5c:22:ee:be:83:fc:0e:7c:2d: bb:60:9c:16:eb:96:4c:5a:84:fc:06:c4:8b:42:92:c8:14:8f: 90:c6:e3:95:80:4c:9b:e8:54:5d:9d:fe:1a:2a:fd:47:db:4d: b9:12:c6:aa:31:d4:35:e8:1c:d1:ee:4f:ee:43:ff:5d:fc:d5: 29:f2:ab:d8:ed:6c:d4:33:82:35:e4:f2:84:75:a4:c0:29:5a: e4:eb:24:db:37:2a:a3:db:95:6e:ea:51:48:34:b7:72:3d:2d: 91:ea:59:81:29:43:e7:87:15:b3:24:36:f5:3b:03:67:77:89: 35:cb:fb:49:7c:7e:74:e9:78:50:b0:be:bf:63:6d:fe:3d:0d: 0a:70:81:15:1e:27:4c:fe:0b:9b:f5:cb:dc:fa:32:6c:8b:5b: 14:7c:50:46:1f:15:b2:84:3e:03:80:f5:8c:03:2e:82:42:2f: 63:ba:03:fa:1f:c4:37:59:9e:ec:c2:bb:45:45:8d:ae:4d:5f: 6f:1f:7d:35:75:64:68:d1:f0:cf:db:61:76:bd:1f:13:12:7a: 2c:59:16:2d:36:29:c8:11:f9:a1:4d:4a:45:c6:81:ae:5c:ad: ca:ba:a5:33:38:9b:9e:1e:5d:7a:a9:73:07:d7:1e:cb:14:1b: f3:72:0d:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NRP7X7HIG0vX62DZiCIZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMjkyZTAzYTczMTc5NmUxZDdiMTQ4YjFkZDIzNWQxNDQz NTJmNWQwHhcNMjYwMTAxMDYxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWMzMDM5ZjExNGE4M2NlOTYxYmRmMzljN2M4MTI2Mjk5MjJjMzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEJ2dkESY+sgVPPVo7guXtOPMuyH tfrZMLrhiIygR6khqktYZL5j5iHpBL60w0CMb6Sf3BBspB9cj3/YzcXdn2yeY7Hs ZwPyHRkLiFkFgNpOV4C4dKTRO1euuAdd2nn3BpgJeuusufjiwV33f+J19xFsKL9O E5eRtMwEhqdplQMhI3+q87hB9YPxz/iQLaj3MZTmr0Lu5Gy0uSbtSXYUZCneZEsQ N5S2xdNMetWQ99o1nODPbsh97SWuVK3+aeGxd42EMr8qvUP7FFHOw5nG7j8Dof7/ CPwR6knqXkQock/X4aHVNHQFzsRbG/e4GmPWklfNBAZ75TeodudKr3CWyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGXDA58RSoPOlhvfOcfIEmKZIsNMMB8GA1UdIwQY MBaAFAEpLgOnMXluHXsUix3SNdFENS9dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVNrdUE2Y3hlVzRkZXhTTEhkSTEwVVExTDEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zYWEwZjUtZWFlNS00OWEzLThlZTkt MGRmN2RmNGQ1YjAxLzEvWmNNRG54RktnODZXRzk4NXg4Z1NZcGtpdzB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zYWEwZjUtZWFlNS00OWEzLThlZTktMGRmN2RmNGQ1YjAx LzEvQVNrdUE2Y3hlVzRkZXhTTEhkSTEwVVExTDEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw2CZMA0G CSqGSIb3DQEBCwUAA4IBAQCvaDwRCS3uiSlcIu6+g/wOfC27YJwW65ZMWoT8BsSL QpLIFI+QxuOVgEyb6FRdnf4aKv1H2025EsaqMdQ16BzR7k/uQ/9d/NUp8qvY7WzU M4I15PKEdaTAKVrk6yTbNyqj25Vu6lFINLdyPS2R6lmBKUPnhxWzJDb1OwNnd4k1 y/tJfH506XhQsL6/Y23+PQ0KcIEVHidM/gub9cvc+jJsi1sUfFBGHxWyhD4DgPWM Ay6CQi9jugP6H8Q3WZ7swrtFRY2uTV9vH301dWRo0fDP22F2vR8TEnosWRYtNinI EfmhTUpFxoGuXK3KuqUzOJueHl16qXMH1x7LFBvzcg2g -----END CERTIFICATE-----Generated at Tue Jan 27 00:06:25 2026 by rpki-client