This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/c3rz_qnKouFWFsxqpnJ4-B9oKJ8.roa File: c3rz_qnKouFWFsxqpnJ4-B9oKJ8.roa (raw, json) Hash identifier: q1FoERSAG1CZ2+/I1H71ycDFKWpa3QIpL1CV49ZYyiE= Subject key identifier: 73:7A:F3:FE:A9:CA:A2:E1:56:16:CC:6A:A6:72:78:F8:1F:68:28:9F Certificate issuer: /CN=501459c027a86e1a55709f860937fe2f81b312f0 Certificate serial: 019B7AC785D718F29A997115055231210CCF Authority key identifier: 50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/c3rz_qnKouFWFsxqpnJ4-B9oKJ8.roa Signing time: Thu 01 Jan 2026 18:17:34 +0000 ROA not before: Thu 01 Jan 2026 18:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 147.233.0.0/17 maxlen: 17 147.233.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:85:d7:18:f2:9a:99:71:15:05:52:31:21:0c:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=501459c027a86e1a55709f860937fe2f81b312f0 Validity Not Before: Jan 1 18:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=737af3fea9caa2e15616cc6aa67278f81f68289f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b9:82:10:2a:9d:b5:82:3c:ba:6e:b4:e6:43: 90:b0:8b:ff:1b:8a:47:55:6a:9d:98:0a:ac:f6:91: 4d:55:cc:95:d8:7c:96:2b:55:17:00:98:6b:a0:36: c0:87:aa:8f:27:44:0a:6f:74:53:25:62:29:53:f4: 9e:ef:c4:50:24:a2:9b:fc:d5:e5:6a:ed:71:3d:58: 3d:c1:96:a5:1f:62:b7:95:4f:d2:35:53:73:8f:62: cb:6c:e6:d6:c2:2e:d2:a4:59:67:13:34:8b:ef:3b: 5c:c6:1d:0f:b5:5f:37:e2:8a:ca:32:dc:94:aa:23: 46:4e:ba:6a:14:69:3a:94:a2:0e:97:44:e4:d7:28: df:e2:1a:17:e0:43:d4:09:ac:05:bf:51:ff:1d:ad: 1f:bd:99:a0:89:03:7e:d8:e5:72:b3:27:35:29:1b: 53:b9:2f:d4:5c:93:2b:70:d5:f3:fc:b8:ed:a8:0e: f4:fc:29:2f:fb:f5:a9:92:d0:6d:5f:fb:86:1b:f7: 54:83:c7:f5:ff:9e:3e:5b:5c:db:83:1f:ed:e6:e5: 8b:4b:d0:f3:b4:63:64:f8:c2:21:62:1a:2d:99:80: 33:cf:0e:84:6b:6d:ce:df:30:15:30:9a:04:af:25: 7c:50:96:56:c5:11:e5:ce:47:e7:25:a5:33:fa:03: 2b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7A:F3:FE:A9:CA:A2:E1:56:16:CC:6A:A6:72:78:F8:1F:68:28:9F X509v3 Authority Key Identifier: keyid:50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/c3rz_qnKouFWFsxqpnJ4-B9oKJ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.233.0.0/16 Signature Algorithm: sha256WithRSAEncryption 09:66:e1:fc:a2:d0:96:94:f0:94:9d:4c:0d:6b:4c:5f:b6:bd: 6d:d6:2c:bf:3f:4f:80:2e:23:a4:fa:83:4a:ec:49:d1:47:b6: 44:9c:fc:db:7d:18:7d:6e:4d:c6:19:e5:38:42:f3:aa:09:4f: 65:52:08:64:a5:4a:53:b8:7a:40:80:ac:03:0b:2e:ec:96:6f: 8d:9a:4f:fc:17:f8:1f:51:35:b7:8e:6e:ae:d5:42:97:f8:47: 37:28:19:ee:55:ae:af:32:df:c0:6d:69:41:25:ed:bb:77:bd: 5d:c2:26:1a:52:03:1b:4d:04:01:6f:4e:74:dc:53:bf:90:e0: cb:af:12:88:28:1c:22:6a:79:3e:f8:48:0d:0c:74:e1:04:30: 9c:26:99:19:65:8a:6f:61:47:cd:69:a4:c8:12:b6:46:c8:6a: ea:fd:c0:42:2d:4f:69:da:40:39:a9:86:3f:4a:80:1c:f5:2a: 0f:00:ff:36:01:df:4e:08:01:d7:d9:a9:41:91:d2:0b:c7:18: df:1e:78:da:a3:24:1b:b5:ee:3f:82:3c:96:d1:c9:1c:fb:9c: 50:78:2d:74:e2:04:d2:f3:73:21:af:40:bb:72:7a:f8:1a:9b: 88:0b:c9:6a:65:63:dc:d5:38:84:17:a0:0b:48:13:76:df:9c: 0a:5d:c4:16 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt6x4XXGPKamXEVBVIxIQzPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMTQ1OWMwMjdhODZlMWE1NTcwOWY4NjA5MzdmZTJmODFi MzEyZjAwHhcNMjYwMTAxMTgxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzdhZjNmZWE5Y2FhMmUxNTYxNmNjNmFhNjcyNzhmODFmNjgyODlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrmCECqdtYI8um605kOQsIv/G4pH VWqdmAqs9pFNVcyV2HyWK1UXAJhroDbAh6qPJ0QKb3RTJWIpU/Se78RQJKKb/NXl au1xPVg9wZalH2K3lU/SNVNzj2LLbObWwi7SpFlnEzSL7ztcxh0PtV834orKMtyU qiNGTrpqFGk6lKIOl0Tk1yjf4hoX4EPUCawFv1H/Ha0fvZmgiQN+2OVysyc1KRtT uS/UXJMrcNXz/LjtqA70/Ckv+/WpktBtX/uGG/dUg8f1/54+W1zbgx/t5uWLS9Dz tGNk+MIhYhotmYAzzw6Ea23O3zAVMJoEryV8UJZWxRHlzkfnJaUz+gMrlQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFHN68/6pyqLhVhbMaqZyePgfaCifMB8GA1UdIwQY MBaAFFAUWcAnqG4aVXCfhgk3/i+BsxLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUJSWndDZW9iaHBWY0otR0NUZi1MNEd6RXZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85ZWRlOTItYTgzOC00MGJjLWEyNjYt MTYyYjAyYmIxNWJkLzEvYzNyel9xbktvdUZXRnN4cXBuSjQtQjlvS0o4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi85ZWRlOTItYTgzOC00MGJjLWEyNjYtMTYyYjAyYmIxNWJk LzEvVUJSWndDZW9iaHBWY0otR0NUZi1MNEd6RXZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAk+kwDQYJ KoZIhvcNAQELBQADggEBAAlm4fyi0JaU8JSdTA1rTF+2vW3WLL8/T4AuI6T6g0rs SdFHtkSc/Nt9GH1uTcYZ5ThC86oJT2VSCGSlSlO4ekCArAMLLuyWb42aT/wX+B9R NbeObq7VQpf4RzcoGe5Vrq8y38BtaUEl7bt3vV3CJhpSAxtNBAFvTnTcU7+Q4Muv EogoHCJqeT74SA0MdOEEMJwmmRllim9hR81ppMgStkbIaur9wEItT2naQDmphj9K gBz1Kg8A/zYB304IAdfZqUGR0gvHGN8eeNqjJBu17j+CPJbRyRz7nFB4LXTiBNLz cyGvQLtyevgam4gLyWplY9zVOIQXoAtIE3bfnApdxBY= -----END CERTIFICATE-----Generated at Wed Jan 7 22:30:25 2026 by rpki-client