This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/cz3i4996YniCM04uBoqxYULZ1OE.roa File: cz3i4996YniCM04uBoqxYULZ1OE.roa (raw, json) Hash identifier: nyw3jhYkbjvahgBCKXr44jUJF3r/xMEzYzkBBzdxVio= Subject key identifier: 73:3D:E2:E3:DF:7A:62:78:82:33:4E:2E:06:8A:B1:61:42:D9:D4:E1 Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Certificate serial: 019B7E384BB64011295DAA98DD742EE29321 Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/cz3i4996YniCM04uBoqxYULZ1OE.roa Signing time: Fri 02 Jan 2026 10:19:37 +0000 ROA not before: Fri 02 Jan 2026 10:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16322 IP address blocks: 5.63.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:4b:b6:40:11:29:5d:aa:98:dd:74:2e:e2:93:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Validity Not Before: Jan 2 10:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=733de2e3df7a627882334e2e068ab16142d9d4e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:54:69:4b:4a:76:66:af:28:2b:90:97:bf:48: 85:e7:70:3e:34:9f:b1:91:68:2d:d1:3a:69:ad:20: dd:94:25:2e:fa:29:dc:58:ea:67:86:9c:e5:a1:8b: 90:2c:f2:72:71:18:8d:5a:c6:65:4f:aa:6f:3b:1f: f4:ce:29:4f:80:1e:31:be:79:d7:03:33:8a:df:8c: df:8a:e5:bb:ab:56:28:fd:87:31:49:cc:c2:a7:39: d5:bb:ce:75:be:8f:a6:b8:ba:bf:94:06:34:74:bb: a9:66:59:5a:1e:c4:f3:27:da:7c:c8:c7:bd:15:a7: 6a:98:4a:aa:27:ef:c4:3b:5f:37:5d:f6:a3:d3:de: 8c:17:8b:46:65:a9:b1:87:4a:41:46:97:7d:35:88: fe:d8:e6:91:cb:25:e4:a9:5b:fa:a7:45:df:e9:26: 8f:d9:83:09:d4:fa:7f:de:67:ec:1c:69:5c:e8:c9: 27:6c:39:eb:75:eb:b1:6f:07:e4:b4:ec:d9:11:f6: 04:c5:b8:15:cb:d6:ce:39:ec:49:5e:dd:9e:2d:1e: 95:75:4c:12:f2:bf:1f:35:ea:d9:b0:41:cc:1b:6c: 9b:5c:33:fd:4e:e9:b2:08:bb:f9:ea:dc:73:b0:20: 34:0b:38:00:95:a0:9a:ae:3b:c3:12:65:8b:b1:37: b4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3D:E2:E3:DF:7A:62:78:82:33:4E:2E:06:8A:B1:61:42:D9:D4:E1 X509v3 Authority Key Identifier: keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/cz3i4996YniCM04uBoqxYULZ1OE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.63.12.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:7d:b5:32:a1:d8:1e:7d:dd:84:89:88:6f:5d:f2:08:47:94: 10:09:da:c8:6b:65:11:68:24:4b:ea:85:be:fa:a5:75:e3:1c: cb:a5:de:69:ad:5c:f9:7e:01:ba:e9:f2:0d:f2:7b:6f:9e:66: e9:67:21:34:2d:49:3b:b4:d2:3f:90:8f:de:38:d4:2d:5b:99: a1:f7:5f:f2:fc:ff:2d:30:04:c8:4f:5b:56:5d:57:4e:02:c5: 7b:26:7a:6b:98:00:47:3e:72:d6:b1:8b:09:2f:8d:91:8b:87: 4a:62:dd:f9:79:f6:d0:d4:dc:67:e3:d3:86:88:f6:0e:8b:ef: 63:3f:54:8d:a6:89:f1:1f:41:e6:51:ca:77:91:0b:da:a9:4b: c2:5c:49:a6:38:18:57:f8:b3:a7:1e:1e:8b:87:66:bc:c3:c6: a1:bb:d6:42:76:d3:b3:73:93:7e:f4:39:49:cf:59:31:c6:33: 4a:8e:25:f4:29:97:6d:6d:42:dc:85:a8:89:b0:70:51:81:38: b8:19:10:7d:23:67:f9:b6:5c:d0:1b:9e:23:35:e1:a1:b8:c1: 41:37:de:fc:10:82:78:d1:18:2a:f8:5e:9e:c1:5a:5a:65:28: 52:14:d2:55:70:76:8c:8c:99:87:b9:50:e9:80:5c:d5:0f:d7: bc:e8:38:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OEu2QBEpXaqY3XQu4pMhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YzE2N2RmYTk4ODJiMmFhOGY4NDU5NWY1OGE5N2MzMDVj YTQzYzUwHhcNMjYwMTAyMTAxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzNkZTJlM2RmN2E2Mjc4ODIzMzRlMmUwNjhhYjE2MTQyZDlkNGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lRpS0p2Zq8oK5CXv0iF53A+NJ+x kWgt0TpprSDdlCUu+incWOpnhpzloYuQLPJycRiNWsZlT6pvOx/0zilPgB4xvnnX AzOK34zfiuW7q1Yo/YcxSczCpznVu851vo+muLq/lAY0dLupZllaHsTzJ9p8yMe9 FadqmEqqJ+/EO183Xfaj096MF4tGZamxh0pBRpd9NYj+2OaRyyXkqVv6p0Xf6SaP 2YMJ1Pp/3mfsHGlc6MknbDnrdeuxbwfktOzZEfYExbgVy9bOOexJXt2eLR6VdUwS 8r8fNerZsEHMG2ybXDP9TumyCLv56txzsCA0CzgAlaCarjvDEmWLsTe0RQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHM94uPfemJ4gjNOLgaKsWFC2dThMB8GA1UdIwQY MBaAFLbBZ9+piCsqqPhFlfWKl8MFykPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUt YWNmYzNkMmMyNTIyLzEvY3ozaTQ5OTZZbmlDTTA0dUJvcXhZVUxaMU9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUtYWNmYzNkMmMyNTIy LzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABT8MMA0G CSqGSIb3DQEBCwUAA4IBAQAOfbUyodgefd2EiYhvXfIIR5QQCdrIa2URaCRL6oW+ +qV14xzLpd5prVz5fgG66fIN8ntvnmbpZyE0LUk7tNI/kI/eONQtW5mh91/y/P8t MATIT1tWXVdOAsV7JnprmABHPnLWsYsJL42Ri4dKYt35efbQ1Nxn49OGiPYOi+9j P1SNponxH0HmUcp3kQvaqUvCXEmmOBhX+LOnHh6Lh2a8w8ahu9ZCdtOzc5N+9DlJ z1kxxjNKjiX0KZdtbULchaiJsHBRgTi4GRB9I2f5tlzQG54jNeGhuMFBN978EIJ4 0Rgq+F6ewVpaZShSFNJVcHaMjJmHuVDpgFzVD9e86DhS -----END CERTIFICATE-----Generated at Mon Jan 26 16:23:59 2026 by rpki-client