This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/zLPd6uaNhEYIigV3kvzlHJIvTH4.roa File: zLPd6uaNhEYIigV3kvzlHJIvTH4.roa (raw, json) Hash identifier: tk6Y8DqBSL9/1u7Y9F6ipEsLVlx2f1XyZLdRg6GvQEI= Subject key identifier: CC:B3:DD:EA:E6:8D:84:46:08:8A:05:77:92:FC:E5:1C:92:2F:4C:7E Certificate issuer: /CN=1c04848bfef724e26abed3c65e4e8f9508fb1796 Certificate serial: 019B7C806A15ACCD73FDB6E9EB54C2FDB4C9 Authority key identifier: 1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/zLPd6uaNhEYIigV3kvzlHJIvTH4.roa Signing time: Fri 02 Jan 2026 02:19:09 +0000 ROA not before: Fri 02 Jan 2026 02:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32693 IP address blocks: 193.135.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:6a:15:ac:cd:73:fd:b6:e9:eb:54:c2:fd:b4:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c04848bfef724e26abed3c65e4e8f9508fb1796 Validity Not Before: Jan 2 02:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ccb3ddeae68d8446088a057792fce51c922f4c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:88:5d:1d:f8:32:19:ec:24:29:3e:29:85:47: 50:99:c4:c8:d5:f5:62:a3:40:a4:e9:80:41:a2:8d: 73:82:8c:30:1a:85:46:61:2a:7e:24:fd:9b:44:d9: 1f:1b:5b:85:94:cc:69:8e:c8:af:8c:e7:c3:c1:90: 05:a1:6b:79:ac:f9:8a:55:e1:57:c5:b0:f6:40:db: d6:b5:67:43:73:63:05:dc:76:73:82:e5:3c:c6:ad: ba:3e:c9:23:3f:bd:6a:1e:64:d9:f7:18:30:10:2d: a1:0b:62:24:8e:54:7f:5a:c1:5e:84:c0:fa:9d:55: b7:fe:7b:3d:02:2e:eb:a0:13:04:37:b3:ef:e0:ca: 58:0f:aa:64:3b:6f:cc:cb:cd:86:12:ad:c8:2a:62: d2:25:76:67:ef:9e:66:75:4a:d2:1c:d5:00:35:b0: 1b:f7:64:21:b5:e7:11:f2:89:f1:73:f9:10:a7:0e: ce:a4:6b:a8:52:6b:a6:34:cb:70:af:f1:2e:1d:2a: ba:00:3a:a1:8f:8e:1c:26:dc:67:4c:38:b9:bd:40: 46:41:04:f6:f0:34:55:d6:25:41:84:c5:55:e1:39: 3e:dd:ed:99:07:b2:bc:cd:7c:cd:61:87:02:e1:ac: d0:36:ff:70:b7:b5:c3:1f:c1:03:6b:dd:da:fb:15: 5e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B3:DD:EA:E6:8D:84:46:08:8A:05:77:92:FC:E5:1C:92:2F:4C:7E X509v3 Authority Key Identifier: keyid:1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/zLPd6uaNhEYIigV3kvzlHJIvTH4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.135.118.0/24 Signature Algorithm: sha256WithRSAEncryption 62:cf:ea:55:4d:16:01:24:9f:f7:d9:a9:16:0c:8c:e9:c8:e0: 99:29:82:42:9c:aa:a9:02:72:57:dd:dc:d1:37:f8:56:f8:4f: 8b:8f:04:45:18:5d:72:b0:55:71:0f:cb:96:da:13:a8:0b:00: 60:d1:1b:bd:5e:24:82:65:7c:17:09:85:41:10:38:89:72:7e: 09:aa:ac:f1:8c:95:5e:c0:0e:d1:1b:b0:3b:79:fc:62:e5:b6: 4f:d9:24:cc:11:70:56:12:c7:80:22:c9:be:49:1a:73:1b:fc: 57:95:d8:34:b1:c7:6b:26:88:a2:20:81:23:77:50:80:fc:67: 39:29:b9:b4:c6:83:1f:c7:66:4c:cc:8f:c9:5d:9b:fb:c3:e1: aa:1a:a7:7f:c4:16:d8:07:98:17:77:93:07:95:04:34:69:84: be:21:89:e1:9b:c5:07:01:a4:27:bf:e4:e1:80:6c:77:02:a6: bc:a2:34:c2:6f:fb:02:9d:5b:5c:2b:50:65:e4:4b:0b:53:b3: 61:82:7b:5c:8a:a0:99:03:7b:9a:56:0c:fb:6b:04:e0:9d:ca: ba:ef:a2:59:6d:95:16:1a:a5:0a:a8:ce:9c:6c:25:5d:c5:31: 64:f3:57:50:67:af:c7:67:f3:e3:fe:49:84:15:9e:7e:62:b4: 67:85:c0:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gGoVrM1z/bbp61TC/bTJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMDQ4NDhiZmVmNzI0ZTI2YWJlZDNjNjVlNGU4Zjk1MDhm YjE3OTYwHhcNMjYwMTAyMDIxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2IzZGRlYWU2OGQ4NDQ2MDg4YTA1Nzc5MmZjZTUxYzkyMmY0YzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYhdHfgyGewkKT4phUdQmcTI1fVi o0Ck6YBBoo1zgowwGoVGYSp+JP2bRNkfG1uFlMxpjsivjOfDwZAFoWt5rPmKVeFX xbD2QNvWtWdDc2MF3HZzguU8xq26PskjP71qHmTZ9xgwEC2hC2IkjlR/WsFehMD6 nVW3/ns9Ai7roBMEN7Pv4MpYD6pkO2/My82GEq3IKmLSJXZn755mdUrSHNUANbAb 92QhtecR8onxc/kQpw7OpGuoUmumNMtwr/EuHSq6ADqhj44cJtxnTDi5vUBGQQT2 8DRV1iVBhMVV4Tk+3e2ZB7K8zXzNYYcC4azQNv9wt7XDH8EDa93a+xVetwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMyz3ermjYRGCIoFd5L85RySL0x+MB8GA1UdIwQY MBaAFBwEhIv+9yTiar7Txl5Oj5UI+xeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEFTRWlfNzNKT0pxdnRQR1hrNlBsUWo3RjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny82NzI2MjktYTBlMi00NzZmLWFlYWQt ZWUzODBiODJjZmNhLzEvekxQZDZ1YU5oRVlJaWdWM2t2emxISkl2VEg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny82NzI2MjktYTBlMi00NzZmLWFlYWQtZWUzODBiODJjZmNh LzEvSEFTRWlfNzNKT0pxdnRQR1hrNlBsUWo3RjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwYd2MA0G CSqGSIb3DQEBCwUAA4IBAQBiz+pVTRYBJJ/32akWDIzpyOCZKYJCnKqpAnJX3dzR N/hW+E+LjwRFGF1ysFVxD8uW2hOoCwBg0Ru9XiSCZXwXCYVBEDiJcn4JqqzxjJVe wA7RG7A7efxi5bZP2STMEXBWEseAIsm+SRpzG/xXldg0scdrJoiiIIEjd1CA/Gc5 Kbm0xoMfx2ZMzI/JXZv7w+GqGqd/xBbYB5gXd5MHlQQ0aYS+IYnhm8UHAaQnv+Th gGx3Aqa8ojTCb/sCnVtcK1Bl5EsLU7NhgntciqCZA3uaVgz7awTgncq676JZbZUW GqUKqM6cbCVdxTFk81dQZ6/HZ/Pj/kmEFZ5+YrRnhcAO -----END CERTIFICATE-----Generated at Sun Jan 11 18:13:07 2026 by rpki-client