This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/Z_w4aPulJHpP1k4S12nmqYPNDKU.roa File: Z_w4aPulJHpP1k4S12nmqYPNDKU.roa (raw, json) Hash identifier: iK5E7nGl49/OpF7LyhdmSl2uhfb3R0xz5hjbEmccmrc= Subject key identifier: 67:FC:38:68:FB:A5:24:7A:4F:D6:4E:12:D7:69:E6:A9:83:CD:0C:A5 Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b Certificate serial: 019B791077007D77FCD81A93AE3B607B98BD Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/Z_w4aPulJHpP1k4S12nmqYPNDKU.roa Signing time: Thu 01 Jan 2026 10:18:00 +0000 ROA not before: Thu 01 Jan 2026 10:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213702 IP address blocks: 103.101.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:77:00:7d:77:fc:d8:1a:93:ae:3b:60:7b:98:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b Validity Not Before: Jan 1 10:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67fc3868fba5247a4fd64e12d769e6a983cd0ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6a:3f:b9:09:ed:25:60:e7:ed:73:72:41:53: 5c:81:45:6f:ba:64:5f:f1:4f:69:97:b5:b0:5f:70: 5a:f0:8b:e4:da:60:fb:dc:6a:79:a8:2a:12:e3:58: 3c:49:cb:46:54:43:6c:d0:b4:28:fc:37:c5:b6:12: 02:3b:06:61:e1:e8:26:b6:d3:18:7b:97:4e:ee:8b: c4:87:27:60:11:8b:0b:07:47:9f:40:76:06:e8:06: c5:3b:a4:92:bc:0f:18:73:62:14:22:65:9d:fd:a0: 8e:4e:81:f7:45:22:0a:f0:0b:27:77:ee:12:9b:61: 87:af:e3:97:2d:a9:a5:aa:42:83:a7:54:92:b2:f0: a6:a0:3f:c1:84:68:6f:61:be:90:71:d1:45:12:5c: ee:fe:3c:34:eb:b5:7f:b0:b5:7d:f8:8a:29:f4:8b: ad:f6:2d:39:0a:92:a3:fb:f3:a8:94:5c:6e:da:39: eb:5a:36:cf:48:fb:db:1e:03:e9:91:7e:47:8b:49: 0a:83:07:3f:09:d6:5b:c4:c1:e6:a8:75:a6:80:4c: 4b:c5:6d:18:04:3b:1c:d2:87:7b:a6:70:9e:e6:75: 99:b1:23:a4:c1:5c:1d:1f:15:e8:b9:51:30:e7:55: 89:69:58:85:60:ae:43:5d:42:be:b9:b4:92:10:8b: 77:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FC:38:68:FB:A5:24:7A:4F:D6:4E:12:D7:69:E6:A9:83:CD:0C:A5 X509v3 Authority Key Identifier: keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/Z_w4aPulJHpP1k4S12nmqYPNDKU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.101.85.0/24 Signature Algorithm: sha256WithRSAEncryption 26:2a:75:6b:5f:5c:c4:ea:9c:16:c9:c0:f4:f8:71:d2:94:0b: 35:16:67:f3:52:b3:69:29:0c:1b:a9:25:11:a9:34:b7:6d:c3: ad:49:b4:a8:5f:a0:dc:ff:8e:6c:0c:7b:de:36:01:f7:d5:f0: b6:8e:f7:55:58:36:18:b8:66:df:0f:80:e8:46:d9:82:31:bf: 15:f0:a4:a0:ec:a2:ef:56:f9:a6:c6:74:58:51:27:97:5b:7a: 14:a2:2a:79:b3:c1:f0:9a:51:30:98:26:6f:8e:22:da:70:53: 3f:92:7e:2c:3a:54:27:f0:01:78:61:8c:00:8c:4b:90:c0:1f: 67:87:ac:4b:f3:e6:c8:44:eb:9e:3b:73:6f:9d:6a:4e:a1:14: c7:cd:db:c9:8e:d9:3e:2c:fd:a4:62:cd:3c:57:fa:4e:4a:20: d7:c6:2c:9e:af:e5:a5:f9:1f:3d:94:e7:b7:14:b0:9e:43:3b: 69:8b:10:6a:48:c4:d9:09:7d:63:16:33:ee:42:b5:2f:04:d4: 5f:41:7a:68:f9:f8:07:45:52:94:58:2a:0c:79:b8:df:9c:2f: 1d:1c:ef:8e:6c:3b:d4:20:a9:8b:0d:e4:22:66:66:50:81:e8: 06:df:9d:c9:ae:bf:ef:21:41:f1:e5:16:b7:04:76:dc:a7:16: 70:93:66:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EHcAfXf82BqTrjtge5i9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5 M2U0NmIwHhcNMjYwMTAxMTAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2ZjMzg2OGZiYTUyNDdhNGZkNjRlMTJkNzY5ZTZhOTgzY2QwY2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Go/uQntJWDn7XNyQVNcgUVvumRf 8U9pl7WwX3Ba8Ivk2mD73Gp5qCoS41g8SctGVENs0LQo/DfFthICOwZh4egmttMY e5dO7ovEhydgEYsLB0efQHYG6AbFO6SSvA8Yc2IUImWd/aCOToH3RSIK8Asnd+4S m2GHr+OXLamlqkKDp1SSsvCmoD/BhGhvYb6QcdFFElzu/jw067V/sLV9+Iop9Iut 9i05CpKj+/OolFxu2jnrWjbPSPvbHgPpkX5Hi0kKgwc/CdZbxMHmqHWmgExLxW0Y BDsc0od7pnCe5nWZsSOkwVwdHxXouVEw51WJaViFYK5DXUK+ubSSEIt3pwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGf8OGj7pSR6T9ZOEtdp5qmDzQylMB8GA1UdIwQY MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt Y2Q2MTUyMjYxYzZmLzEvWl93NGFQdWxKSHBQMWs0UzEybm1xWVBOREtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2VVMA0G CSqGSIb3DQEBCwUAA4IBAQAmKnVrX1zE6pwWycD0+HHSlAs1FmfzUrNpKQwbqSUR qTS3bcOtSbSoX6Dc/45sDHveNgH31fC2jvdVWDYYuGbfD4DoRtmCMb8V8KSg7KLv VvmmxnRYUSeXW3oUoip5s8HwmlEwmCZvjiLacFM/kn4sOlQn8AF4YYwAjEuQwB9n h6xL8+bIROueO3NvnWpOoRTHzdvJjtk+LP2kYs08V/pOSiDXxiyer+Wl+R89lOe3 FLCeQztpixBqSMTZCX1jFjPuQrUvBNRfQXpo+fgHRVKUWCoMebjfnC8dHO+ObDvU IKmLDeQiZmZQgegG353Jrr/vIUHx5Ra3BHbcpxZwk2af -----END CERTIFICATE-----Generated at Sun Jan 25 13:47:10 2026 by rpki-client