This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/ZnincJbZ5PaTXoMonj_Ctiiqrus.roa File: ZnincJbZ5PaTXoMonj_Ctiiqrus.roa (raw, json) Hash identifier: isWE5Tfc29wZU5CXfTVoPdXm00k/FOrPBirq1sQW5u0= Subject key identifier: 66:78:A7:70:96:D9:E4:F6:93:5E:83:28:9E:3F:C2:B6:28:AA:AE:EB Certificate issuer: /CN=69a4d6916b93159aa80984a9b3774683bb550ebd Certificate serial: 019B7C126D5AA65355EADEA2C6C262B29CB1 Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/ZnincJbZ5PaTXoMonj_Ctiiqrus.roa Signing time: Fri 02 Jan 2026 00:19:00 +0000 ROA not before: Fri 02 Jan 2026 00:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41535 IP address blocks: 62.113.80.0/22 maxlen: 22 62.213.86.0/24 maxlen: 24 77.221.130.0/24 maxlen: 24 89.253.192.0/21 maxlen: 21 89.253.200.0/21 maxlen: 21 89.253.202.0/24 maxlen: 24 89.253.203.0/24 maxlen: 24 89.253.208.0/21 maxlen: 21 89.253.216.0/21 maxlen: 21 89.253.224.0/21 maxlen: 21 89.253.232.0/21 maxlen: 21 89.253.240.0/21 maxlen: 21 89.253.248.0/21 maxlen: 21 109.120.162.0/24 maxlen: 24 109.120.167.0/24 maxlen: 24 109.120.172.0/24 maxlen: 24 185.48.236.0/22 maxlen: 22 193.32.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:6d:5a:a6:53:55:ea:de:a2:c6:c2:62:b2:9c:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd Validity Not Before: Jan 2 00:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6678a77096d9e4f6935e83289e3fc2b628aaaeeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:41:0e:55:cf:80:5e:c5:78:80:19:0c:1d:34: 8f:f3:a4:59:01:91:e7:13:56:16:08:6e:87:dc:6f: e8:69:2c:8e:2c:b5:7d:dd:25:b9:6d:dc:ca:f0:22: aa:2b:88:18:9b:ca:17:eb:fa:9c:97:fd:d3:70:d9: e3:a4:55:30:e2:eb:7a:ae:8f:1f:90:04:52:27:0d: e3:60:6d:8b:99:a6:7b:f1:d0:31:ba:fc:df:0a:c9: 0f:6f:a8:f6:0d:87:54:fb:eb:11:56:50:36:ea:28: 06:f1:c5:1e:b0:58:ca:57:13:6b:9d:a4:59:f2:4a: 54:03:e5:21:e6:e3:fd:2a:ef:8b:18:03:4f:8c:2e: e0:fe:5a:74:cd:6e:ef:fc:c0:2d:f3:05:06:02:62: 2b:bf:5d:13:46:a0:dd:cd:aa:49:eb:76:c5:3d:1f: 81:d2:0a:aa:f4:ac:81:07:94:fa:c4:55:e3:1a:e0: 2a:25:80:01:e7:94:b7:f3:0c:8e:1f:b9:fd:19:67: 44:82:57:2f:2d:fe:ce:99:73:6c:d2:f8:b2:64:b9: a9:e1:e9:d3:da:8f:10:94:2e:ee:e2:bc:76:41:2b: c6:46:cd:5f:c1:d6:2d:22:ac:b9:7e:49:cd:b4:a2: d9:e5:b3:30:cb:07:f8:93:e9:22:3e:98:f0:c6:99: ab:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:78:A7:70:96:D9:E4:F6:93:5E:83:28:9E:3F:C2:B6:28:AA:AE:EB X509v3 Authority Key Identifier: keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/ZnincJbZ5PaTXoMonj_Ctiiqrus.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.113.80.0/22 62.213.86.0/24 77.221.130.0/24 89.253.192.0/18 109.120.162.0/24 109.120.167.0/24 109.120.172.0/24 185.48.236.0/22 193.32.198.0/23 Signature Algorithm: sha256WithRSAEncryption ad:a9:37:d1:bf:56:26:3a:05:b4:18:59:8a:e2:ff:df:67:ce: c9:85:87:67:00:56:19:47:d4:76:17:06:30:36:0e:89:5b:6d: ed:48:42:62:f8:18:d0:81:24:a0:63:31:c7:b0:3a:c4:c3:cc: 12:7d:9b:7d:eb:30:a9:43:25:09:73:cb:a7:f1:42:95:18:8d: 02:7f:08:9e:bb:02:ac:62:df:0d:e4:c8:4a:e0:74:62:33:d7: 40:ad:09:09:2f:df:39:76:8e:06:7d:17:f6:1b:ec:9a:cd:01: 2b:a0:ee:ab:e5:fe:6f:ea:22:67:23:74:a0:0b:48:55:29:05: bd:d3:41:5d:ef:d2:cd:76:c4:d7:f0:ba:c2:ee:cf:41:52:92: a5:64:87:d1:12:5b:ff:41:53:42:80:bf:6f:30:d0:de:92:4b: 1f:4e:03:86:2c:0b:ef:3d:b6:5b:b6:8b:fa:3b:fe:0f:97:88: e0:be:ee:c0:40:07:14:d6:f5:2b:53:f0:b4:bf:f0:f9:13:9c: c7:d4:4e:63:46:c1:a3:a1:81:cf:7b:19:c0:4e:4f:e7:22:12: e0:fb:66:a6:90:20:11:d0:25:b5:67:16:87:3e:4e:18:e6:0f: bb:d6:07:e7:e1:34:ca:58:1b:a8:0c:42:e6:79:a4:b2:2f:2d: 9b:26:6e:6f -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt8Em1aplNV6t6ixsJispyxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YTRkNjkxNmI5MzE1OWFhODA5ODRhOWIzNzc0NjgzYmI1 NTBlYmQwHhcNMjYwMTAyMDAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Njc4YTc3MDk2ZDllNGY2OTM1ZTgzMjg5ZTNmYzJiNjI4YWFhZWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EEOVc+AXsV4gBkMHTSP86RZAZHn E1YWCG6H3G/oaSyOLLV93SW5bdzK8CKqK4gYm8oX6/qcl/3TcNnjpFUw4ut6ro8f kARSJw3jYG2LmaZ78dAxuvzfCskPb6j2DYdU++sRVlA26igG8cUesFjKVxNrnaRZ 8kpUA+Uh5uP9Ku+LGANPjC7g/lp0zW7v/MAt8wUGAmIrv10TRqDdzapJ63bFPR+B 0gqq9KyBB5T6xFXjGuAqJYAB55S38wyOH7n9GWdEglcvLf7OmXNs0viyZLmp4enT 2o8QlC7u4rx2QSvGRs1fwdYtIqy5fknNtKLZ5bMwywf4k+kiPpjwxpmrbQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFGZ4p3CW2eT2k16DKJ4/wrYoqq7rMB8GA1UdIwQY MBaAFGmk1pFrkxWaqAmEqbN3RoO7VQ69MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWFUV2tXdVRGWnFvQ1lTcHMzZEdnN3RWRHIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9jMDMxZTUtZmM2Ny00MWY1LThlYmUt MzE5NzExMDA5N2M5LzEvWm5pbmNKYlo1UGFUWG9Nb25qX0N0aWlxcnVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9jMDMxZTUtZmM2Ny00MWY1LThlYmUtMzE5NzExMDA5N2M5 LzEvYWFUV2tXdVRGWnFvQ1lTcHMzZEdnN3RWRHIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQCPnFQAwQA PtVWAwQATd2CAwQGWf3AAwQAbXiiAwQAbXinAwQAbXisAwQCuTDsAwQBwSDGMA0G CSqGSIb3DQEBCwUAA4IBAQCtqTfRv1YmOgW0GFmK4v/fZ87JhYdnAFYZR9R2FwYw Ng6JW23tSEJi+BjQgSSgYzHHsDrEw8wSfZt96zCpQyUJc8un8UKVGI0CfwieuwKs Yt8N5MhK4HRiM9dArQkJL985do4GfRf2G+yazQEroO6r5f5v6iJnI3SgC0hVKQW9 00Fd79LNdsTX8LrC7s9BUpKlZIfRElv/QVNCgL9vMNDekksfTgOGLAvvPbZbtov6 O/4Pl4jgvu7AQAcU1vUrU/C0v/D5E5zH1E5jRsGjoYHPexnATk/nIhLg+2amkCAR 0CW1ZxaHPk4Y5g+71gfn4TTKWBuoDELmeaSyLy2bJm5v -----END CERTIFICATE-----Generated at Mon Jan 26 06:30:09 2026 by rpki-client