This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/zc3uA_Kqejq-ynl5hw7DgsICqZs.roa File: zc3uA_Kqejq-ynl5hw7DgsICqZs.roa (raw, json) Hash identifier: J23fc0kk/YQdneIepC92Zz7vs5gfl3zjCFcARQvJKXo= Subject key identifier: CD:CD:EE:03:F2:AA:7A:3A:BE:CA:79:79:87:0E:C3:82:C2:02:A9:9B Certificate issuer: /CN=c0aab396d650826027c2bd8a0620721092109e29 Certificate serial: 019B78A26A85D8477DDE68BF5C176E5070AC Authority key identifier: C0:AA:B3:96:D6:50:82:60:27:C2:BD:8A:06:20:72:10:92:10:9E:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/zc3uA_Kqejq-ynl5hw7DgsICqZs.roa Signing time: Thu 01 Jan 2026 08:17:48 +0000 ROA not before: Thu 01 Jan 2026 08:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59782 IP address blocks: 81.163.200.0/21 maxlen: 32 2001:67c:d64::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 08:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:6a:85:d8:47:7d:de:68:bf:5c:17:6e:50:70:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0aab396d650826027c2bd8a0620721092109e29 Validity Not Before: Jan 1 08:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cdcdee03f2aa7a3abeca7979870ec382c202a99b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5a:0c:fc:4f:2e:d9:3e:94:21:e8:ec:e4:3c: a8:98:df:ad:26:96:af:13:ad:e4:92:af:7e:ec:36: f6:2e:51:76:e1:9f:96:fd:5e:81:23:09:67:05:aa: 22:0e:5e:38:eb:04:5c:31:4c:86:95:46:7e:a3:7e: aa:d4:d4:46:90:62:5c:d3:0b:34:73:20:7d:3a:5c: 9c:bb:7f:51:b3:ef:8d:1e:3b:91:f5:63:e3:ec:f8: 65:ee:bf:7a:5c:48:1c:c9:3b:c8:c5:ca:4b:ac:e8: 08:11:48:24:a6:2c:3b:90:b7:a2:ec:eb:8b:5b:b6: 6e:ed:03:8b:22:27:78:24:99:3f:0e:8f:7b:05:d6: af:43:ef:94:2f:cc:0b:ba:fd:1b:57:ab:3d:89:02: eb:67:57:24:1d:49:eb:cb:7b:66:32:a2:44:da:0f: 55:dc:b6:ee:de:3d:f2:8f:cd:c9:5b:1a:63:b0:9e: 68:76:b7:27:a2:33:ad:ed:da:ce:a7:66:c8:7f:16: ad:c2:e3:cc:01:20:30:43:04:d4:71:79:f1:50:8b: cc:5d:94:2a:7d:b1:fb:5d:0d:63:e8:7a:4a:fa:09: f6:a3:7f:22:46:36:b8:e6:35:94:fd:6b:01:8b:1c: d7:ad:ad:35:98:6f:87:1b:1e:58:d1:8f:d9:c8:65: 7d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:CD:EE:03:F2:AA:7A:3A:BE:CA:79:79:87:0E:C3:82:C2:02:A9:9B X509v3 Authority Key Identifier: keyid:C0:AA:B3:96:D6:50:82:60:27:C2:BD:8A:06:20:72:10:92:10:9E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/zc3uA_Kqejq-ynl5hw7DgsICqZs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.163.200.0/21 IPv6: 2001:67c:d64::/48 Signature Algorithm: sha256WithRSAEncryption 7b:0d:aa:8e:37:2a:9b:06:6e:6d:76:1e:04:7d:fb:e8:60:78: 16:0c:50:30:dc:8c:0b:b3:91:22:38:2a:41:96:41:11:87:f8: b1:86:92:ab:c1:14:ca:5a:2f:60:f2:a1:32:86:d6:7c:36:4d: 51:02:ce:90:06:d7:05:c3:e7:98:43:46:2f:9f:7f:e6:ef:aa: a4:39:9f:0b:43:cf:40:6a:76:d4:e7:21:a9:50:d8:2c:44:46: df:63:33:ad:1c:52:54:ad:9e:07:65:21:08:9b:b2:a3:e4:3e: eb:09:00:95:b6:89:5d:14:68:ba:18:48:79:a6:df:34:d5:e6: 34:24:db:b6:26:ee:9a:b3:d4:82:8b:aa:46:78:47:4c:b2:42: 48:0f:91:27:a1:3c:a9:0a:68:ed:68:cb:f0:2f:66:f9:c9:59: 0e:96:e0:2b:35:f7:f0:78:cd:e1:15:77:4c:47:62:f9:18:5c: b0:a4:0d:a8:d4:92:84:c4:1b:ba:c7:bf:f1:37:a1:ee:26:dc: 3c:07:4d:de:33:23:be:30:b3:15:c8:8a:16:83:5d:e2:e3:61: 95:08:0a:61:eb:c6:3c:e4:f5:bd:b5:25:68:5c:4c:6a:e5:0e: e2:a6:97:5a:9d:5e:b4:f9:67:14:b9:82:2c:d2:28:14:d9:ef: 9d:51:ad:66 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4omqF2Ed93mi/XBduUHCsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYWFiMzk2ZDY1MDgyNjAyN2MyYmQ4YTA2MjA3MjEwOTIx MDllMjkwHhcNMjYwMTAxMDgxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGNkZWUwM2YyYWE3YTNhYmVjYTc5Nzk4NzBlYzM4MmMyMDJhOTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1oM/E8u2T6UIejs5DyomN+tJpav E63kkq9+7Db2LlF24Z+W/V6BIwlnBaoiDl446wRcMUyGlUZ+o36q1NRGkGJc0ws0 cyB9Olycu39Rs++NHjuR9WPj7Phl7r96XEgcyTvIxcpLrOgIEUgkpiw7kLei7OuL W7Zu7QOLIid4JJk/Do97BdavQ++UL8wLuv0bV6s9iQLrZ1ckHUnry3tmMqJE2g9V 3Lbu3j3yj83JWxpjsJ5odrcnojOt7drOp2bIfxatwuPMASAwQwTUcXnxUIvMXZQq fbH7XQ1j6HpK+gn2o38iRja45jWU/WsBixzXra01mG+HGx5Y0Y/ZyGV9ZwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFM3N7gPyqno6vsp5eYcOw4LCAqmbMB8GA1UdIwQY MBaAFMCqs5bWUIJgJ8K9igYgchCSEJ4pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0txemx0WlFnbUFud3IyS0JpQnlFSklRbmlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xZDRlMDYtNGZhYS00OWE5LTg0OWIt ZTk1MDY5OTE1N2UxLzEvemMzdUFfS3FlanEteW5sNWh3N0Rnc0lDcVpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8xZDRlMDYtNGZhYS00OWE5LTg0OWItZTk1MDY5OTE1N2Ux LzEvd0txemx0WlFnbUFud3IyS0JpQnlFSklRbmlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDUaPIMA8E AgACMAkDBwAgAQZ8DWQwDQYJKoZIhvcNAQELBQADggEBAHsNqo43KpsGbm12HgR9 ++hgeBYMUDDcjAuzkSI4KkGWQRGH+LGGkqvBFMpaL2DyoTKG1nw2TVECzpAG1wXD 55hDRi+ff+bvqqQ5nwtDz0BqdtTnIalQ2CxERt9jM60cUlStngdlIQibsqPkPusJ AJW2iV0UaLoYSHmm3zTV5jQk27Ym7pqz1IKLqkZ4R0yyQkgPkSehPKkKaO1oy/Av ZvnJWQ6W4Cs19/B4zeEVd0xHYvkYXLCkDajUkoTEG7rHv/E3oe4m3DwHTd4zI74w sxXIihaDXeLjYZUICmHrxjzk9b21JWhcTGrlDuKml1qdXrT5ZxS5gizSKBTZ751R rWY= -----END CERTIFICATE-----Generated at Thu Jan 1 14:05:33 2026 by rpki-client