This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/zSAvFjTGIZNZQugEHveBHELdn1Y.roa File: zSAvFjTGIZNZQugEHveBHELdn1Y.roa (raw, json) Hash identifier: CXzOAflbazRPSskBL/AIymp/SWQ3K3xlxPcN85lCvzQ= Subject key identifier: CD:20:2F:16:34:C6:21:93:59:42:E8:04:1E:F7:81:1C:42:DD:9F:56 Certificate issuer: /CN=99956edfd46d7820616c567074d1c4b754f1cc0b Certificate serial: 019B76EB7644E1C07836E3244F068F050679 Authority key identifier: 99:95:6E:DF:D4:6D:78:20:61:6C:56:70:74:D1:C4:B7:54:F1:CC:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/zSAvFjTGIZNZQugEHveBHELdn1Y.roa Signing time: Thu 01 Jan 2026 00:18:21 +0000 ROA not before: Thu 01 Jan 2026 00:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29143 IP address blocks: 194.48.68.0/22 maxlen: 22 194.48.72.0/21 maxlen: 21 194.48.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:76:44:e1:c0:78:36:e3:24:4f:06:8f:05:06:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99956edfd46d7820616c567074d1c4b754f1cc0b Validity Not Before: Jan 1 00:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd202f1634c621935942e8041ef7811c42dd9f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:74:f4:d3:ca:25:c3:37:91:d9:9d:4e:af:56: 34:8e:c8:6e:c4:1d:46:5d:83:88:ad:9a:db:c1:0e: 60:c3:05:55:3d:2c:cd:37:9a:01:9c:0a:df:c9:d9: c6:1c:ad:ed:4c:0c:2b:d0:78:ff:3b:f2:12:63:1d: 67:fe:57:3c:e7:f0:07:f8:88:c1:63:82:34:2b:4c: cd:8a:d2:2b:c7:c9:e4:80:e7:9b:c2:d3:b8:29:e3: 50:77:62:64:d6:36:e4:4c:fc:b1:b9:2a:3e:dc:e1: 5b:e8:e5:23:01:5c:1c:2a:d4:41:09:ab:f6:d5:b2: 1d:ab:fa:7a:1f:90:71:4b:18:52:d9:31:ad:68:7a: 11:3f:26:66:91:e1:24:52:ae:aa:17:74:d3:6b:a3: 81:ae:3f:86:c1:71:15:3f:48:4c:f4:22:22:f1:5b: 69:d9:db:a2:1d:16:02:10:99:9c:4e:fb:14:ec:3c: a1:56:81:37:71:20:1a:76:a0:f5:f8:8e:7f:66:3c: 55:a5:5f:b1:6a:53:58:64:31:80:31:98:08:60:f5: 83:bb:75:eb:cb:c7:c8:a0:67:97:53:92:4f:e4:5d: 5e:ed:31:bd:45:66:5a:6f:78:55:5d:48:49:cc:01: ce:b8:cc:90:09:31:ff:12:db:2e:b1:79:42:4e:0b: 38:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:20:2F:16:34:C6:21:93:59:42:E8:04:1E:F7:81:1C:42:DD:9F:56 X509v3 Authority Key Identifier: keyid:99:95:6E:DF:D4:6D:78:20:61:6C:56:70:74:D1:C4:B7:54:F1:CC:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/zSAvFjTGIZNZQugEHveBHELdn1Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.48.68.0-194.48.83.255 Signature Algorithm: sha256WithRSAEncryption 28:24:0a:27:1e:2d:36:fb:5d:a2:f6:31:9c:84:4f:93:6d:64: 53:29:22:cd:9a:2c:27:da:d4:06:b0:58:bb:16:e5:79:53:26: ac:f7:fa:7b:88:a0:70:c0:4a:6b:6e:3a:fa:db:6e:7a:cb:e6: dc:73:69:af:21:9d:f0:73:98:9f:12:e3:64:11:f7:b1:2e:5e: 72:d7:81:15:db:5e:a7:95:17:05:79:3f:5d:df:e1:6a:2e:72: dd:6d:f8:0d:0a:2e:a2:d9:86:d7:b5:96:93:99:b3:14:f5:b6: 08:a1:0d:6d:21:cf:da:37:d5:2c:98:e1:b3:d6:a6:97:e5:c3: 8a:51:d2:eb:0f:88:a4:85:39:b3:7f:e8:d8:60:2d:12:a1:fb: 91:ed:2c:34:b8:6a:59:d2:c4:26:ef:d2:f1:a3:56:29:07:e4: 3e:98:48:76:e0:f3:81:5d:bf:8d:37:df:d2:af:90:9d:f9:33: 59:83:1c:04:a8:26:e7:0e:ae:b6:83:62:6f:1a:d7:fa:e8:0f: c1:10:ad:ca:79:0f:0a:6f:d4:0f:2a:4b:55:cc:3b:3d:fb:b2: fc:fd:af:cf:a4:ed:36:a4:e4:58:95:8b:a8:f1:f9:56:cd:22: bd:37:92:36:5e:3f:58:cb:8a:3a:ad:ab:a0:2d:10:13:2a:f8: 29:26:10:7f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt263ZE4cB4NuMkTwaPBQZ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5OTU2ZWRmZDQ2ZDc4MjA2MTZjNTY3MDc0ZDFjNGI3NTRm MWNjMGIwHhcNMjYwMTAxMDAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDIwMmYxNjM0YzYyMTkzNTk0MmU4MDQxZWY3ODExYzQyZGQ5ZjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XT008olwzeR2Z1Or1Y0jshuxB1G XYOIrZrbwQ5gwwVVPSzNN5oBnArfydnGHK3tTAwr0Hj/O/ISYx1n/lc85/AH+IjB Y4I0K0zNitIrx8nkgOebwtO4KeNQd2Jk1jbkTPyxuSo+3OFb6OUjAVwcKtRBCav2 1bIdq/p6H5BxSxhS2TGtaHoRPyZmkeEkUq6qF3TTa6OBrj+GwXEVP0hM9CIi8Vtp 2duiHRYCEJmcTvsU7DyhVoE3cSAadqD1+I5/ZjxVpV+xalNYZDGAMZgIYPWDu3Xr y8fIoGeXU5JP5F1e7TG9RWZab3hVXUhJzAHOuMyQCTH/EtsusXlCTgs4uwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFM0gLxY0xiGTWULoBB73gRxC3Z9WMB8GA1UdIwQY MBaAFJmVbt/UbXggYWxWcHTRxLdU8cwLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVpWdTM5UnRlQ0JoYkZad2ROSEV0MVR4ekFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wODJhZTMtMzYxYi00ZmNmLTlmM2Et YmU1ZWQ2NzYxNDExLzEvelNBdkZqVEdJWk5aUXVnRUh2ZUJIRUxkbjFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8wODJhZTMtMzYxYi00ZmNmLTlmM2EtYmU1ZWQ2NzYxNDEx LzEvbVpWdTM5UnRlQ0JoYkZad2ROSEV0MVR4ekFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALCMEQD BALCMFAwDQYJKoZIhvcNAQELBQADggEBACgkCiceLTb7XaL2MZyET5NtZFMpIs2a LCfa1AawWLsW5XlTJqz3+nuIoHDASmtuOvrbbnrL5txzaa8hnfBzmJ8S42QR97Eu XnLXgRXbXqeVFwV5P13f4Wouct1t+A0KLqLZhte1lpOZsxT1tgihDW0hz9o31SyY 4bPWppflw4pR0usPiKSFObN/6NhgLRKh+5HtLDS4alnSxCbv0vGjVikH5D6YSHbg 84Fdv40339KvkJ35M1mDHASoJucOrraDYm8a1/roD8EQrcp5Dwpv1A8qS1XMOz37 svz9r8+k7Tak5FiVi6jx+VbNIr03kjZeP1jLijqtq6AtEBMq+CkmEH8= -----END CERTIFICATE-----Generated at Thu Jan 1 17:28:20 2026 by rpki-client