This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/ZTkkr8A-pu4VErIYAfOwtOL1xB0.roa File: ZTkkr8A-pu4VErIYAfOwtOL1xB0.roa (raw, json) Hash identifier: RCu5F9BHN+FsFu6QEVOPg1gjGcIiYWmxnihME0bALsk= Subject key identifier: 65:39:24:AF:C0:3E:A6:EE:15:12:B2:18:01:F3:B0:B4:E2:F5:C4:1D Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f Certificate serial: 019A6CFAC9E777235F207C6BD76516F57C9C Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/ZTkkr8A-pu4VErIYAfOwtOL1xB0.roa Signing time: Mon 10 Nov 2025 08:56:06 +0000 ROA not before: Mon 10 Nov 2025 08:56:06 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 139853 IP address blocks: 149.20.126.0/24 maxlen: 24 149.20.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6c:fa:c9:e7:77:23:5f:20:7c:6b:d7:65:16:f5:7c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f Validity Not Before: Nov 10 08:56:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=653924afc03ea6ee1512b21801f3b0b4e2f5c41d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:58:b5:a9:ee:83:6a:0e:79:d5:45:d2:91:78: 2e:18:e9:71:9f:a2:ce:2f:b5:b8:3e:2d:96:c7:d9: b9:0c:20:62:3e:f4:29:da:5c:78:ec:d3:ba:66:c7: d0:a0:76:a7:80:b8:4c:ae:f5:91:1b:57:84:80:39: 5a:24:e4:01:14:21:56:b7:37:e8:e5:b8:d5:9f:1f: 80:24:19:7a:a1:a8:9a:df:9b:5f:8c:0d:07:e8:61: 07:28:6b:ca:e6:28:b0:58:48:d9:f4:94:24:96:58: 7c:73:32:62:59:5b:87:bf:08:92:ca:68:c5:b8:05: 58:8e:d9:1e:28:e9:07:27:92:12:9d:a0:91:23:78: b5:16:e5:cd:3c:98:af:5e:5e:88:82:6c:e5:5e:3a: 46:29:66:56:13:2b:1f:79:70:58:81:f7:68:f5:00: 6e:d3:90:5d:0d:93:1a:e4:75:01:af:72:d1:26:7b: 71:85:3b:75:b0:5e:14:c0:03:a1:3a:97:69:02:b3: 60:f7:a3:a9:b8:42:2e:03:cd:f5:42:ab:e0:2a:27: 8e:74:eb:2c:f8:24:2c:8a:23:3a:d6:d5:13:c7:1b: 4e:53:7c:bf:bc:cd:2d:39:a5:d5:ed:68:fa:43:a7: 1a:35:9d:5b:a9:b3:f4:e7:d9:37:78:0f:b5:07:24: 8b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:39:24:AF:C0:3E:A6:EE:15:12:B2:18:01:F3:B0:B4:E2:F5:C4:1D X509v3 Authority Key Identifier: keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/ZTkkr8A-pu4VErIYAfOwtOL1xB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.20.126.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:10:16:2f:8b:e0:07:eb:30:f9:d2:b3:29:a0:aa:9f:db:d4: c5:fd:6f:62:03:bc:b7:ce:27:56:3e:cf:0c:13:cd:3d:29:7d: a9:c4:ba:eb:d8:c3:1c:75:0f:a6:1b:f8:c5:c9:47:3a:f5:4d: f0:78:ba:60:90:ba:8a:ad:5d:bd:4c:5c:3f:d8:36:ee:8f:19: b4:26:4a:a4:cf:c3:12:36:62:44:56:41:09:d7:e9:a3:a0:58: cb:9b:42:45:aa:8b:50:be:1d:01:3a:3c:47:75:10:5e:63:dc: 0d:40:17:82:97:e3:5e:cf:e6:87:f1:8a:69:f6:0a:65:dd:51: 8f:81:0c:a6:cd:ea:9e:c8:64:2e:ed:ce:d0:ea:ff:a0:8c:64: 93:27:11:3d:c9:ce:af:63:c5:cf:63:64:d3:ca:42:93:d8:cb: 6d:78:dd:d5:67:b0:dc:fb:9b:b2:b1:5c:dc:91:56:66:63:02: 43:9e:22:4b:f5:8c:f6:29:88:55:a7:48:d2:3d:ac:34:c6:61: fc:cb:0d:d3:5c:6c:77:9b:b4:59:7c:61:56:2c:cb:aa:7a:2d: 40:a8:4e:eb:cc:f6:cb:83:94:11:d2:e3:4e:a0:f7:a2:8c:2e: b1:ca:59:f2:30:ce:98:92:d4:89:4d:26:d0:65:b0:14:27:4d: c0:24:89:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZps+snndyNfIHxr12UW9XycMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMmVjYzZjYzU5MDNhZWEwZGI2MTIwMGY0Y2NkNGY4MjRj ZGQ1NGYwHhcNMjUxMTEwMDg1NjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTM5MjRhZmMwM2VhNmVlMTUxMmIyMTgwMWYzYjBiNGUyZjVjNDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1i1qe6Dag551UXSkXguGOlxn6LO L7W4Pi2Wx9m5DCBiPvQp2lx47NO6ZsfQoHangLhMrvWRG1eEgDlaJOQBFCFWtzfo 5bjVnx+AJBl6oaia35tfjA0H6GEHKGvK5iiwWEjZ9JQkllh8czJiWVuHvwiSymjF uAVYjtkeKOkHJ5ISnaCRI3i1FuXNPJivXl6IgmzlXjpGKWZWEysfeXBYgfdo9QBu 05BdDZMa5HUBr3LRJntxhTt1sF4UwAOhOpdpArNg96OpuEIuA831QqvgKieOdOss +CQsiiM61tUTxxtOU3y/vM0tOaXV7Wj6Q6caNZ1bqbP059k3eA+1BySLLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGU5JK/APqbuFRKyGAHzsLTi9cQdMB8GA1UdIwQY MBaAFGIuzGzFkDrqDbYSAPTM1PgkzdVPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWk3TWJNV1FPdW9OdGhJQTlNelUtQ1ROMVU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yNjJhNGItYzcwMS00OGRjLTlhZTUt MzQ2MzY4ODI3ZTY4LzEvWlRra3I4QS1wdTRWRXJJWUFmT3d0T0wxeEIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8yNjJhNGItYzcwMS00OGRjLTlhZTUtMzQ2MzY4ODI3ZTY4 LzEvWWk3TWJNV1FPdW9OdGhJQTlNelUtQ1ROMVU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlRR+MA0G CSqGSIb3DQEBCwUAA4IBAQBvEBYvi+AH6zD50rMpoKqf29TF/W9iA7y3zidWPs8M E809KX2pxLrr2MMcdQ+mG/jFyUc69U3weLpgkLqKrV29TFw/2Dbujxm0Jkqkz8MS NmJEVkEJ1+mjoFjLm0JFqotQvh0BOjxHdRBeY9wNQBeCl+Nez+aH8Ypp9gpl3VGP gQymzeqeyGQu7c7Q6v+gjGSTJxE9yc6vY8XPY2TTykKT2MtteN3VZ7Dc+5uysVzc kVZmYwJDniJL9Yz2KYhVp0jSPaw0xmH8yw3TXGx3m7RZfGFWLMuqei1AqE7rzPbL g5QR0uNOoPeijC6xylnyMM6YktSJTSbQZbAUJ03AJIka -----END CERTIFICATE-----Generated at Sat Dec 6 15:39:14 2025 by rpki-client