This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/zYtzyTWTnlnucMc3LvFfSuz8nK0.roa File: zYtzyTWTnlnucMc3LvFfSuz8nK0.roa (raw, json) Hash identifier: AGCVB7kNqblaiA5QTuc5I1MPwcbOpyt71G2YpLmroRI= Subject key identifier: CD:8B:73:C9:35:93:9E:59:EE:70:C7:37:2E:F1:5F:4A:EC:FC:9C:AD Certificate issuer: /CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b Certificate serial: 019B77C68077643F6054A35D71203A377718 Authority key identifier: BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/zYtzyTWTnlnucMc3LvFfSuz8nK0.roa Signing time: Thu 01 Jan 2026 04:17:36 +0000 ROA not before: Thu 01 Jan 2026 04:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215186 IP address blocks: 31.12.73.0/24 maxlen: 24 2a12:99c0::/29 maxlen: 29 2a12:99c0::/32 maxlen: 32 2a12:99c1::/32 maxlen: 32 2a12:99c2::/32 maxlen: 32 2a12:99c3::/32 maxlen: 32 2a12:99c4::/32 maxlen: 32 2a12:99c5::/32 maxlen: 32 2a12:99c6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:80:77:64:3f:60:54:a3:5d:71:20:3a:37:77:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b Validity Not Before: Jan 1 04:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd8b73c935939e59ee70c7372ef15f4aecfc9cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f5:48:5f:95:23:6d:1c:14:a1:00:07:8f:c1: 27:ea:96:22:69:6d:86:af:7c:20:33:0b:60:ee:7c: 72:04:c3:15:3c:71:5b:4e:1f:d2:d7:2f:ff:6b:37: 83:74:09:20:88:df:cc:fe:2e:e0:51:63:a7:22:82: ba:19:fc:ca:29:db:14:d3:ce:15:74:55:7a:44:a4: f1:21:69:66:0b:fa:70:5d:27:35:44:c4:fb:86:05: c1:73:bc:65:b7:80:4e:5e:69:8a:22:01:5f:d3:89: 20:a8:ed:6f:e7:dc:1b:92:3e:83:69:b7:47:9c:6f: c3:40:e8:c6:6a:c8:f6:ff:59:ac:cc:9a:11:3c:e7: fe:ba:cd:e1:b4:3f:a8:01:3f:ea:97:0d:8f:3f:c0: 0b:6f:a2:58:cd:5d:f5:1a:d6:af:60:93:95:ef:aa: 9b:2a:4c:60:67:df:5a:ec:fe:9a:ef:b4:f1:d4:b8: b8:48:8b:49:75:b0:be:76:69:6d:0c:ca:ba:fc:84: d2:b0:2c:03:a5:9e:a8:db:18:2b:67:ff:75:7b:35: 82:34:9d:c5:be:74:fe:19:33:eb:fd:9e:16:3c:d8: 49:1b:80:b0:92:d3:4c:ac:ff:fe:5a:6b:57:c9:85: a0:a9:b9:de:c6:d5:f9:65:b7:14:c3:1e:8b:4c:9c: 32:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8B:73:C9:35:93:9E:59:EE:70:C7:37:2E:F1:5F:4A:EC:FC:9C:AD X509v3 Authority Key Identifier: keyid:BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/zYtzyTWTnlnucMc3LvFfSuz8nK0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.12.73.0/24 IPv6: 2a12:99c0::/29 Signature Algorithm: sha256WithRSAEncryption 15:9e:6b:c2:da:b0:78:5d:0b:eb:a7:74:cf:6e:b2:91:1b:ed: 9f:59:18:68:74:a5:4e:f2:d3:f0:48:1d:86:54:6a:05:52:99: 08:60:53:6b:1e:1a:f2:cc:d3:c7:96:57:ad:c3:3d:25:4f:14: d0:7a:04:f6:66:ba:a9:f1:71:d9:fc:98:d4:2a:58:c5:ec:fd: 36:e2:53:17:e1:f3:7a:3b:00:ca:9d:c9:9b:ad:54:67:74:74: ea:64:8f:66:64:eb:84:9f:9c:78:30:2d:bb:ea:7f:ce:13:f8: 26:9a:be:7e:97:82:f8:6c:fb:79:6d:6c:ba:8d:c9:20:29:f4: 66:a1:c7:28:f0:21:11:5c:4a:ea:5e:e6:62:68:c8:bc:7b:6a: e0:52:b3:7a:ce:05:3c:72:be:00:cd:c6:94:27:fa:2b:a5:ea: 19:f4:db:3c:52:16:a2:40:24:c1:14:e8:c1:10:3d:a1:3e:b5: c6:e3:b9:82:fe:a1:7d:c4:0a:da:8d:3e:71:90:f5:29:a3:c9: e3:26:19:f6:bf:31:5c:6b:5b:16:ed:50:1a:6b:15:96:7b:b4: 9c:35:cb:0f:34:28:8e:00:17:c6:76:90:13:16:d7:d8:32:a7: 80:38:a4:30:65:00:3e:d7:69:f8:ca:6a:a4:84:54:b9:d9:73: 22:aa:71:15 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xoB3ZD9gVKNdcSA6N3cYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjOGMxYTgwMzJmNTdmMjJiMDE0NTRhNjVlZjMyZGVhNzc0 OTZkMGIwHhcNMjYwMTAxMDQxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDhiNzNjOTM1OTM5ZTU5ZWU3MGM3MzcyZWYxNWY0YWVjZmM5Y2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPVIX5UjbRwUoQAHj8En6pYiaW2G r3wgMwtg7nxyBMMVPHFbTh/S1y//azeDdAkgiN/M/i7gUWOnIoK6GfzKKdsU084V dFV6RKTxIWlmC/pwXSc1RMT7hgXBc7xlt4BOXmmKIgFf04kgqO1v59wbkj6DabdH nG/DQOjGasj2/1mszJoRPOf+us3htD+oAT/qlw2PP8ALb6JYzV31GtavYJOV76qb KkxgZ99a7P6a77Tx1Li4SItJdbC+dmltDMq6/ITSsCwDpZ6o2xgrZ/91ezWCNJ3F vnT+GTPr/Z4WPNhJG4CwktNMrP/+WmtXyYWgqbnextX5ZbcUwx6LTJwyRQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFM2Lc8k1k55Z7nDHNy7xX0rs/JytMB8GA1UdIwQY MBaAFLyMGoAy9X8isBRUpl7zLep3SW0LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkl3YWdETDFmeUt3RkZTbVh2TXQ2bmRKYlFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85ZjQyODItZGZlYi00MGMxLWFmODQt YTU2NGVjMDExYzVkLzEvell0enlUV1RubG51Y01jM0x2RmZTdXo4bkswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC85ZjQyODItZGZlYi00MGMxLWFmODQtYTU2NGVjMDExYzVk LzEvdkl3YWdETDFmeUt3RkZTbVh2TXQ2bmRKYlFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAHwxJMA0E AgACMAcDBQMqEpnAMA0GCSqGSIb3DQEBCwUAA4IBAQAVnmvC2rB4XQvrp3TPbrKR G+2fWRhodKVO8tPwSB2GVGoFUpkIYFNrHhryzNPHlletwz0lTxTQegT2Zrqp8XHZ /JjUKljF7P024lMX4fN6OwDKncmbrVRndHTqZI9mZOuEn5x4MC276n/OE/gmmr5+ l4L4bPt5bWy6jckgKfRmocco8CERXErqXuZiaMi8e2rgUrN6zgU8cr4AzcaUJ/or peoZ9Ns8UhaiQCTBFOjBED2hPrXG47mC/qF9xArajT5xkPUpo8njJhn2vzFca1sW 7VAaaxWWe7ScNcsPNCiOABfGdpATFtfYMqeAOKQwZQA+12n4ymqkhFS52XMiqnEV -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:52 2026 by rpki-client