This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/Cz_a_hN6yBF6d6EikyPX9dnCGUg.roa File: Cz_a_hN6yBF6d6EikyPX9dnCGUg.roa (raw, json) Hash identifier: qy7AUSlBaydAqvPsyhzQW0HVNJ0F6mRPexKdol8Sv3g= Subject key identifier: 0B:3F:DA:FE:13:7A:C8:11:7A:77:A1:22:93:23:D7:F5:D9:C2:19:48 Certificate issuer: /CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd Certificate serial: 019B7CED078F8A63A492D3B59147240BAECE Authority key identifier: 6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/Cz_a_hN6yBF6d6EikyPX9dnCGUg.roa Signing time: Fri 02 Jan 2026 04:17:47 +0000 ROA not before: Fri 02 Jan 2026 04:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204333 IP address blocks: 185.255.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.mft rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:07:8f:8a:63:a4:92:d3:b5:91:47:24:0b:ae:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd Validity Not Before: Jan 2 04:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b3fdafe137ac8117a77a1229323d7f5d9c21948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5b:b4:e3:89:ff:a4:52:06:58:93:5f:73:b1: d1:64:ef:e9:2a:01:29:7e:b0:97:44:c3:41:b7:ad: 90:91:de:eb:32:fa:a7:93:3e:87:d2:63:03:8a:48: ea:d8:c0:79:96:1a:16:e4:fb:f9:40:f8:41:a0:d6: 20:17:2b:02:50:2e:7d:74:bd:c9:07:23:2b:c1:e4: 53:15:1c:6d:2f:49:04:bf:e4:40:4b:00:10:6a:e9: 71:2b:57:59:18:2c:e6:21:28:47:46:cd:50:bf:cf: 38:9b:e6:ad:6d:7d:54:c6:12:f2:15:54:08:0e:2c: 89:1b:6e:71:6b:fa:41:d2:ca:f2:57:1b:b4:1d:2a: 56:19:f3:1b:a1:4d:ec:d4:fd:31:f9:fa:50:04:6d: da:47:b3:32:ba:1d:f9:01:69:ce:e7:e9:17:a0:62: d8:7c:cf:7e:aa:a6:20:a2:f3:2a:08:33:12:bc:eb: 81:95:52:fc:c1:ac:c8:e7:d7:b7:1d:95:5f:e4:34: 53:44:19:5a:6b:30:a9:dd:18:19:9e:fb:e6:89:42: b9:b4:e4:cd:24:77:9a:29:14:8c:61:f3:7f:f2:f2: 17:67:62:aa:29:f6:e3:d7:5a:61:c6:67:3c:eb:04: 19:cc:e9:4c:f1:04:2c:d1:ac:ee:b8:f2:5f:31:2a: 8a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3F:DA:FE:13:7A:C8:11:7A:77:A1:22:93:23:D7:F5:D9:C2:19:48 X509v3 Authority Key Identifier: keyid:6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/Cz_a_hN6yBF6d6EikyPX9dnCGUg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.121.0/24 Signature Algorithm: sha256WithRSAEncryption 32:a1:51:d1:80:ee:30:d4:35:b8:b9:29:8f:b5:ec:be:88:ae: 6b:51:52:62:93:66:01:26:f1:54:09:ea:e0:4c:97:1e:49:e0: 6f:c2:7d:93:8e:f5:bb:bc:e8:7a:86:9d:fd:b8:71:02:47:da: 3f:3c:10:e8:77:ec:8f:5c:40:7a:2e:89:a1:dd:a6:2f:b3:a3: f6:9a:37:c5:89:ee:3c:1f:4e:c5:c1:b3:0a:1f:67:ba:29:15: 1a:e0:7e:33:c9:39:63:d7:e3:e4:81:8b:93:bc:db:3c:6c:fb: 21:35:cc:5f:cc:ec:be:a2:0b:b3:39:90:65:7a:87:ae:34:d6: 95:e3:83:c1:2c:65:76:87:e0:3c:ea:d5:b6:e3:ef:b8:a7:42: a8:c1:4b:9c:66:17:6c:20:71:a8:6e:69:59:07:8d:74:16:a0: 73:bd:85:5a:c6:1d:1a:1f:33:05:c3:13:98:a8:74:8f:33:4a: d9:10:7e:6e:82:0a:c6:49:1c:48:83:ee:82:57:d1:c0:2b:4f: f0:fa:c0:2f:10:75:cc:9b:7e:77:1a:38:f9:68:a1:2c:58:e5: 6f:e8:34:75:3b:9c:8c:34:f4:b6:fe:24:ef:fe:86:d5:f8:19: 90:fc:bf:c9:e4:16:bb:c6:02:2e:bd:25:9b:b9:10:04:30:51: db:07:2b:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87QePimOkktO1kUckC67OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNzk4ZjBmZTRmNGRmZmRmZWQyYzhlNjJkMjM1NDMwZjQ5 Mzc3Y2QwHhcNMjYwMTAyMDQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjNmZGFmZTEzN2FjODExN2E3N2ExMjI5MzIzZDdmNWQ5YzIxOTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVu044n/pFIGWJNfc7HRZO/pKgEp frCXRMNBt62Qkd7rMvqnkz6H0mMDikjq2MB5lhoW5Pv5QPhBoNYgFysCUC59dL3J ByMrweRTFRxtL0kEv+RASwAQaulxK1dZGCzmIShHRs1Qv884m+atbX1UxhLyFVQI DiyJG25xa/pB0sryVxu0HSpWGfMboU3s1P0x+fpQBG3aR7Myuh35AWnO5+kXoGLY fM9+qqYgovMqCDMSvOuBlVL8wazI59e3HZVf5DRTRBlaazCp3RgZnvvmiUK5tOTN JHeaKRSMYfN/8vIXZ2KqKfbj11phxmc86wQZzOlM8QQs0azuuPJfMSqK9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAs/2v4TesgRenehIpMj1/XZwhlIMB8GA1UdIwQY MBaAFGp5jw/k9N/9/tLI5i0jVDD0k3fNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYW5tUEQtVDAzXzMtMHNqbUxTTlVNUFNUZDgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83Yjc4MjUtYTBmNy00ZjViLTljMjMt NzdjZjgxMDQxMDgzLzEvQ3pfYV9oTjZ5QkY2ZDZFaWt5UFg5ZG5DR1VnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC83Yjc4MjUtYTBmNy00ZjViLTljMjMtNzdjZjgxMDQxMDgz LzEvYW5tUEQtVDAzXzMtMHNqbUxTTlVNUFNUZDgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf95MA0G CSqGSIb3DQEBCwUAA4IBAQAyoVHRgO4w1DW4uSmPtey+iK5rUVJik2YBJvFUCerg TJceSeBvwn2TjvW7vOh6hp39uHECR9o/PBDod+yPXEB6Lomh3aYvs6P2mjfFie48 H07FwbMKH2e6KRUa4H4zyTlj1+PkgYuTvNs8bPshNcxfzOy+oguzOZBleoeuNNaV 44PBLGV2h+A86tW24++4p0KowUucZhdsIHGobmlZB410FqBzvYVaxh0aHzMFwxOY qHSPM0rZEH5uggrGSRxIg+6CV9HAK0/w+sAvEHXMm353Gjj5aKEsWOVv6DR1O5yM NPS2/iTv/obV+BmQ/L/J5Ba7xgIuvSWbuRAEMFHbByv4 -----END CERTIFICATE-----Generated at Mon Jan 12 03:48:09 2026 by rpki-client