This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/ZMUCUaol16FS16uvGYc5LMi3mms.roa File: ZMUCUaol16FS16uvGYc5LMi3mms.roa (raw, json) Hash identifier: 1PMSBIos5jL1U1+prZU3noEZyRlQ7CsZEb3CRHH/Kmg= Subject key identifier: 64:C5:02:51:AA:25:D7:A1:52:D7:AB:AF:19:87:39:2C:C8:B7:9A:6B Certificate issuer: /CN=74c7f8e91b81fe6487307c5226eb044f92396cea Certificate serial: 019B7D5B40A0BC6F4D1631502156681490A6 Authority key identifier: 74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/ZMUCUaol16FS16uvGYc5LMi3mms.roa Signing time: Fri 02 Jan 2026 06:18:10 +0000 ROA not before: Fri 02 Jan 2026 06:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33915 IP address blocks: 193.176.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:40:a0:bc:6f:4d:16:31:50:21:56:68:14:90:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74c7f8e91b81fe6487307c5226eb044f92396cea Validity Not Before: Jan 2 06:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64c50251aa25d7a152d7abaf1987392cc8b79a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8a:1a:f1:0e:9a:40:4f:0c:4e:a9:e9:d2:70: 12:86:c3:de:58:18:e8:49:8f:16:b2:86:11:ff:ce: 61:73:72:8c:56:83:b8:59:b2:a0:58:93:99:b2:90: 80:ab:a1:46:af:6e:54:f3:a8:23:7d:48:c4:3a:ca: 12:e6:ee:92:bb:16:5e:aa:3a:58:94:86:b7:10:97: 1e:63:10:e5:79:d4:29:41:00:a7:51:bb:7b:3c:80: af:4b:aa:c9:9a:29:71:b0:ec:23:b2:93:a1:3d:66: cb:38:f5:69:63:6c:79:b5:ef:fd:2d:19:a1:19:b5: 91:33:bf:f4:df:a1:d3:c1:2c:ac:93:b6:63:64:27: d8:27:4d:e3:28:a2:3b:ab:fd:b3:b1:1d:4d:00:60: 52:a9:58:9e:83:e4:9e:b0:c9:64:a7:42:86:c1:ad: ff:f7:a4:48:92:05:dc:9c:6e:3c:ed:a7:4a:9a:aa: d6:13:2a:97:02:ec:97:39:dd:3c:2f:f3:e6:77:44: 7f:9a:cb:1d:ba:67:8d:7a:8c:ec:de:3b:f9:f4:c6: e7:b4:ed:f0:4a:dc:0d:ea:1b:fe:b3:e1:ab:6d:cb: 58:45:d3:ce:ef:a5:fe:2f:b1:ad:79:21:29:68:0a: a4:c2:98:a1:de:82:fd:21:22:3c:ed:cc:cc:e4:53: 94:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C5:02:51:AA:25:D7:A1:52:D7:AB:AF:19:87:39:2C:C8:B7:9A:6B X509v3 Authority Key Identifier: keyid:74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/ZMUCUaol16FS16uvGYc5LMi3mms.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.176.136.0/21 Signature Algorithm: sha256WithRSAEncryption c3:6f:07:76:81:87:83:07:34:00:f0:e0:3b:dc:b6:2b:4d:b0: f3:1d:95:aa:d9:9d:23:3b:76:18:a3:b2:0c:3b:e8:61:a2:25: 6a:c1:82:4d:80:ab:1b:0e:c1:42:cc:0f:55:15:92:05:d9:44: f1:29:12:84:9f:4e:b4:25:18:9a:c3:05:45:49:78:14:bf:7a: 54:57:aa:4e:1a:46:37:b5:ab:83:a5:36:e7:b1:72:ac:55:d8: b1:85:6a:48:be:5e:05:d0:34:44:d3:d9:4f:db:87:74:3f:05: 08:90:eb:af:b4:ec:3c:d5:37:a0:bb:0b:c5:b6:94:9b:ba:a5: 97:76:d8:6f:ce:ef:64:fb:23:24:37:4f:dc:4a:7b:bd:8e:bd: b8:ee:5e:56:ac:9e:53:0f:12:52:23:32:41:09:62:97:e7:9a: 65:66:ce:0c:46:b7:ed:c3:5e:c1:25:00:5b:da:9c:7a:7e:5b: 26:af:8c:5d:ff:e2:6c:48:c9:09:14:62:7b:4a:55:49:cd:00: ba:93:d0:1d:f1:bb:ea:be:0a:3b:19:d2:99:d7:98:30:ff:21: d2:08:87:c8:e2:ac:af:17:88:a2:12:10:e3:62:16:bc:93:5f: c8:b8:4b:30:ad:ed:45:17:c0:9c:74:c8:3c:96:0e:ee:52:2d: 69:d6:49:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W0CgvG9NFjFQIVZoFJCmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YzdmOGU5MWI4MWZlNjQ4NzMwN2M1MjI2ZWIwNDRmOTIz OTZjZWEwHhcNMjYwMTAyMDYxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGM1MDI1MWFhMjVkN2ExNTJkN2FiYWYxOTg3MzkyY2M4Yjc5YTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ioa8Q6aQE8MTqnp0nAShsPeWBjo SY8WsoYR/85hc3KMVoO4WbKgWJOZspCAq6FGr25U86gjfUjEOsoS5u6SuxZeqjpY lIa3EJceYxDledQpQQCnUbt7PICvS6rJmilxsOwjspOhPWbLOPVpY2x5te/9LRmh GbWRM7/036HTwSysk7ZjZCfYJ03jKKI7q/2zsR1NAGBSqVieg+SesMlkp0KGwa3/ 96RIkgXcnG487adKmqrWEyqXAuyXOd08L/Pmd0R/mssdumeNeozs3jv59MbntO3w StwN6hv+s+GrbctYRdPO76X+L7GteSEpaAqkwpih3oL9ISI87czM5FOULQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGTFAlGqJdehUterrxmHOSzIt5prMB8GA1UdIwQY MBaAFHTH+Okbgf5khzB8UibrBE+SOWzqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE1mNDZSdUJfbVNITUh4U0p1c0VUNUk1Yk9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hOWM2YWMtZjlhMi00NDYyLThhYWEt OGI2NGY3YzNhNzZlLzEvWk1VQ1Vhb2wxNkZTMTZ1dkdZYzVMTWkzbW1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9hOWM2YWMtZjlhMi00NDYyLThhYWEtOGI2NGY3YzNhNzZl LzEvZE1mNDZSdUJfbVNITUh4U0p1c0VUNUk1Yk9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwbCIMA0G CSqGSIb3DQEBCwUAA4IBAQDDbwd2gYeDBzQA8OA73LYrTbDzHZWq2Z0jO3YYo7IM O+hhoiVqwYJNgKsbDsFCzA9VFZIF2UTxKRKEn060JRiawwVFSXgUv3pUV6pOGkY3 tauDpTbnsXKsVdixhWpIvl4F0DRE09lP24d0PwUIkOuvtOw81TeguwvFtpSbuqWX dthvzu9k+yMkN0/cSnu9jr247l5WrJ5TDxJSIzJBCWKX55plZs4MRrftw17BJQBb 2px6flsmr4xd/+JsSMkJFGJ7SlVJzQC6k9Ad8bvqvgo7GdKZ15gw/yHSCIfI4qyv F4iiEhDjYha8k1/IuEswre1FF8CcdMg8lg7uUi1p1kkB -----END CERTIFICATE-----Generated at Mon Jan 26 22:36:07 2026 by rpki-client