This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/ZOavrk-QF97rJP_2jNT7lmVgOvE.roa
File: ZOavrk-QF97rJP_2jNT7lmVgOvE.roa (raw, json)
Hash identifier: r2s3h1w3Hjfzrez9cKoP8cqtXCYOTfAkva8ue3B7Z2Q=
Subject key identifier: 64:E6:AF:AE:4F:90:17:DE:EB:24:FF:F6:8C:D4:FB:96:65:60:3A:F1
Certificate issuer: /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial: 019B7834A981EA0A00A6A27FBBBE6F4D8AB3
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/ZOavrk-QF97rJP_2jNT7lmVgOvE.roa
Signing time: Thu 01 Jan 2026 06:17:55 +0000
ROA not before: Thu 01 Jan 2026 06:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209252
IP address blocks: 185.62.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:a9:81:ea:0a:00:a6:a2:7f:bb:be:6f:4d:8a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
Validity
Not Before: Jan 1 06:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64e6afae4f9017deeb24fff68cd4fb9665603af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8d:95:cf:8e:3e:9f:31:65:61:33:69:83:66:
58:e6:03:a4:af:8a:46:cb:0f:dc:65:bd:a2:42:3a:
56:98:86:30:a8:ed:76:ca:51:62:44:09:44:b1:81:
68:31:55:ef:95:2a:cd:d6:7f:d1:16:c7:40:e7:9e:
ce:1a:01:fb:21:04:72:a5:af:3f:f3:5c:4d:33:18:
02:a8:46:0c:ec:a7:78:10:5d:65:69:93:62:c5:d7:
e5:18:b7:86:12:d9:2d:e1:30:e0:8a:1a:d2:da:b8:
c5:b3:b1:4b:49:d7:e9:d4:05:94:c7:4c:a6:52:4c:
e5:34:9a:2d:ef:59:c5:65:7b:b7:cc:2d:4c:f5:63:
f6:33:7f:2e:a8:a9:0c:53:ff:f5:59:8b:8f:17:03:
c9:1a:d8:a8:00:4c:c5:78:1c:2c:1a:44:37:6c:a2:
7d:09:de:20:96:57:31:63:d7:59:56:8d:fc:f5:56:
23:e8:05:c6:9c:36:02:78:e8:05:9c:a6:c7:9b:a8:
2b:61:e7:1f:84:9d:be:32:d8:5d:63:6e:54:0f:00:
3a:7f:71:1d:10:33:03:7c:15:99:85:b2:47:c9:96:
63:11:54:39:ba:94:dc:08:e3:07:04:c2:50:d7:0b:
0c:1e:c1:f2:20:2d:f0:5d:e0:26:dc:b4:05:f2:12:
72:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E6:AF:AE:4F:90:17:DE:EB:24:FF:F6:8C:D4:FB:96:65:60:3A:F1
X509v3 Authority Key Identifier:
keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/ZOavrk-QF97rJP_2jNT7lmVgOvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.206.0/24
Signature Algorithm: sha256WithRSAEncryption
21:03:fb:8c:9d:c9:d4:c6:2f:5f:97:ae:26:e3:55:70:d3:ba:
07:8d:d1:b0:7f:d7:bf:64:ae:dd:ab:2a:10:78:57:27:7c:d5:
70:12:31:a4:d9:dd:6b:f3:44:b0:91:c0:b4:15:08:51:ec:f6:
0e:7c:18:68:9c:1a:1e:36:31:3c:c4:67:8f:c1:53:9b:06:c0:
f2:e7:8d:24:aa:9c:8c:52:6a:c0:ab:a0:a7:98:5d:6e:66:07:
f8:55:35:83:25:0f:07:0d:0f:4a:c1:fe:37:b3:d5:4a:3a:95:
b8:bd:10:69:29:fc:4e:e6:16:00:b7:da:67:11:e2:47:8d:62:
ba:e6:8e:0c:2e:f9:39:c1:63:48:5d:f2:52:dd:d2:1a:4b:9e:
ff:0f:3c:d7:8a:4c:14:04:1f:2a:16:22:ad:fb:b2:41:b6:b6:
33:41:52:67:cb:f2:fd:a5:b8:7b:b3:6e:88:d2:1c:eb:9c:f1:
e4:88:0b:e2:55:93:24:0e:df:92:c1:0a:0f:70:c5:23:04:f7:
4f:77:e3:f5:22:50:c2:26:af:2f:e2:0b:37:3f:2e:ce:19:2e:
f8:f3:82:57:b2:9c:51:8c:8a:ef:74:7b:6d:12:ef:6b:fd:f9:
30:47:a2:6f:6a:2c:a2:51:19:24:4a:61:2f:5d:1d:da:bc:b5:
8e:45:50:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:12:38 2026 by rpki-client