This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/ZZanlFxScyN4CQoGhBTQl2sVxVg.roa File: ZZanlFxScyN4CQoGhBTQl2sVxVg.roa (raw, json) Hash identifier: A34wmEZaQFDCuGsNd+TzvMoOwERkMP/gXQVur9pCPCA= Subject key identifier: 65:96:A7:94:5C:52:73:23:78:09:0A:06:84:14:D0:97:6B:15:C5:58 Certificate issuer: /CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57 Certificate serial: 019B7FF12290A97923AAF7BA530F10B29143 Authority key identifier: F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/ZZanlFxScyN4CQoGhBTQl2sVxVg.roa Signing time: Fri 02 Jan 2026 18:21:08 +0000 ROA not before: Fri 02 Jan 2026 18:21:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 194.113.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 06:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:22:90:a9:79:23:aa:f7:ba:53:0f:10:b2:91:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57 Validity Not Before: Jan 2 18:21:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6596a7945c52732378090a068414d0976b15c558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4b:76:a4:19:50:33:23:34:34:a3:e6:ac:fc: b3:29:55:33:6f:60:8f:0f:cd:3d:be:91:e4:d4:10: 3c:02:f0:97:9f:59:22:69:9e:43:a8:36:a7:a2:a9: 78:4e:55:9b:76:a0:b9:ff:67:a5:fe:e8:5b:53:2a: ce:69:c9:d0:c2:a4:cf:6d:da:29:09:8b:e2:11:21: cc:97:5c:4e:65:be:89:54:6b:39:e7:97:d9:a8:23: c6:27:d6:1a:66:e5:f2:e5:fe:c9:5d:4d:4d:74:c5: 46:85:4f:e6:09:e1:67:07:83:5c:0c:e6:a3:02:ca: f2:80:77:3c:69:74:49:5f:b0:2f:d9:59:e8:e3:66: f0:29:cc:99:2f:f3:1c:63:82:27:44:d6:8c:1c:5e: 68:d3:2b:bf:3a:64:82:df:9b:8c:b4:f2:2c:04:96: 87:5c:5d:11:a5:09:cb:4e:7e:b5:9d:f5:bf:a5:27: c0:ec:9f:ea:15:ac:35:14:59:1d:c2:1b:5b:68:0f: 3e:80:36:da:50:9c:60:0a:b4:71:64:40:d2:92:a3: 72:0f:cf:44:d3:9d:5f:46:82:72:4b:66:70:2a:63: 09:7b:a5:56:63:20:94:3a:d8:f6:f3:ab:b4:c3:f4: 5e:49:52:4b:81:5b:2d:0d:81:09:e9:33:79:11:f8: d0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:96:A7:94:5C:52:73:23:78:09:0A:06:84:14:D0:97:6B:15:C5:58 X509v3 Authority Key Identifier: keyid:F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/ZZanlFxScyN4CQoGhBTQl2sVxVg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.113.20.0/23 Signature Algorithm: sha256WithRSAEncryption 39:83:ba:d1:c9:ba:e1:ba:4d:6c:4e:e7:c5:ff:0d:0e:64:2a: 7d:72:83:ce:4c:a9:f5:0c:05:6b:87:43:17:1a:19:51:d5:1f: 87:74:0f:1f:c2:a8:a0:0a:8a:e8:79:20:2c:56:3e:64:dc:b0: 41:0b:21:cc:dd:26:2c:c1:43:32:f7:32:df:25:4f:d7:da:a1: cf:3e:b5:75:ea:39:cd:e1:a4:91:bd:0f:26:71:49:3b:b0:d1: ea:b5:97:e2:7c:cf:45:9d:49:d8:5a:51:1e:ca:50:c5:ff:f7: d2:77:d3:6c:f7:48:a5:22:83:b1:24:63:a4:9e:ae:e2:ce:67: 3e:4b:32:b3:1a:d5:fd:09:02:4b:0c:8b:cc:66:bf:01:d1:fb: 5a:dc:70:d8:63:be:c8:f2:00:a5:3e:8a:d1:cb:f6:39:a6:6b: 1e:e9:5b:b1:87:aa:0a:f8:6d:b1:8f:ed:46:a4:28:f8:2e:f8: 5c:49:89:4a:5e:61:7e:66:af:6d:a6:f2:f6:ea:b9:d3:8f:32: 3a:b7:f2:ac:30:5e:70:63:45:07:7d:f8:94:0d:1b:2d:e6:dc: b2:28:a0:93:f9:df:67:c2:62:74:5f:ed:83:a5:af:35:53:5b: 78:72:af:3b:fe:d7:fd:28:cc:99:8d:6e:dd:07:92:e2:95:cf: 71:3e:82:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8SKQqXkjqve6Uw8QspFDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NGFkNDVkMjJiNWYzY2YyZTcxY2UwYWMwMTA3NGI3Y2Qy MWFjNTcwHhcNMjYwMTAyMTgyMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTk2YTc5NDVjNTI3MzIzNzgwOTBhMDY4NDE0ZDA5NzZiMTVjNTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0t2pBlQMyM0NKPmrPyzKVUzb2CP D809vpHk1BA8AvCXn1kiaZ5DqDanoql4TlWbdqC5/2el/uhbUyrOacnQwqTPbdop CYviESHMl1xOZb6JVGs555fZqCPGJ9YaZuXy5f7JXU1NdMVGhU/mCeFnB4NcDOaj AsrygHc8aXRJX7Av2Vno42bwKcyZL/McY4InRNaMHF5o0yu/OmSC35uMtPIsBJaH XF0RpQnLTn61nfW/pSfA7J/qFaw1FFkdwhtbaA8+gDbaUJxgCrRxZEDSkqNyD89E 051fRoJyS2ZwKmMJe6VWYyCUOtj286u0w/ReSVJLgVstDYEJ6TN5EfjQ0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGWWp5RcUnMjeAkKBoQU0JdrFcVYMB8GA1UdIwQY MBaAFPZK1F0itfPPLnHOCsAQdLfNIaxXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWtyVVhTSzE4ODh1Y2M0S3dCQjB0ODBockZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9lZTNiODQtMjdkNy00ZGM3LThmM2Qt Njk5YjIzNGZjNzhjLzEvWlphbmxGeFNjeU40Q1FvR2hCVFFsMnNWeFZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9lZTNiODQtMjdkNy00ZGM3LThmM2QtNjk5YjIzNGZjNzhj LzEvOWtyVVhTSzE4ODh1Y2M0S3dCQjB0ODBockZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwnEUMA0G CSqGSIb3DQEBCwUAA4IBAQA5g7rRybrhuk1sTufF/w0OZCp9coPOTKn1DAVrh0MX GhlR1R+HdA8fwqigCoroeSAsVj5k3LBBCyHM3SYswUMy9zLfJU/X2qHPPrV16jnN 4aSRvQ8mcUk7sNHqtZfifM9FnUnYWlEeylDF//fSd9Ns90ilIoOxJGOknq7izmc+ SzKzGtX9CQJLDIvMZr8B0fta3HDYY77I8gClPorRy/Y5pmse6Vuxh6oK+G2xj+1G pCj4LvhcSYlKXmF+Zq9tpvL26rnTjzI6t/KsMF5wY0UHffiUDRst5tyyKKCT+d9n wmJ0X+2Dpa81U1t4cq87/tf9KMyZjW7dB5Lilc9xPoJS -----END CERTIFICATE-----Generated at Mon Jan 19 11:50:20 2026 by rpki-client