This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/zpeTK5PwMk-4Xj5vBZGegdo8ck8.roa File: zpeTK5PwMk-4Xj5vBZGegdo8ck8.roa (raw, json) Hash identifier: CqrBs9z5utywXd/u1L7nQWwUGdydAl74Sn0Il70tRPo= Subject key identifier: CE:97:93:2B:93:F0:32:4F:B8:5E:3E:6F:05:91:9E:81:DA:3C:72:4F Certificate issuer: /CN=927af7d407f045dbea80773265b04ce574d0b7e3 Certificate serial: 019B7B35D668E1C458F9F7549141AA3C5E9C Authority key identifier: 92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/zpeTK5PwMk-4Xj5vBZGegdo8ck8.roa Signing time: Thu 01 Jan 2026 20:18:04 +0000 ROA not before: Thu 01 Jan 2026 20:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1103 IP address blocks: 192.104.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:d6:68:e1:c4:58:f9:f7:54:91:41:aa:3c:5e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927af7d407f045dbea80773265b04ce574d0b7e3 Validity Not Before: Jan 1 20:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce97932b93f0324fb85e3e6f05919e81da3c724f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ca:52:e4:b9:6c:aa:f3:b9:3c:25:0d:f5:6a: bb:8a:a7:2b:e8:91:2f:69:d5:18:c9:bc:4e:e4:50: c1:a6:60:8a:6e:47:0d:a6:1b:b9:08:ce:7e:8f:89: 07:17:0f:78:0c:dd:37:08:8a:a6:e6:ee:3c:f1:5d: 07:d3:34:43:8b:b7:17:1c:9c:f3:22:22:36:0f:20: d4:8d:30:ad:b7:7e:20:dc:75:17:4a:70:1d:3c:fd: 83:ee:a9:d0:e0:c3:c8:ca:ed:c7:05:22:3c:72:85: 21:6f:26:d5:a4:ba:6a:bb:ae:16:d0:bc:4c:99:63: e4:1c:5f:f9:7b:02:ba:49:67:d1:34:d1:21:77:54: 60:0b:fb:fe:ce:30:96:f5:98:29:80:93:5b:bd:a1: 89:dd:cf:db:cc:cf:45:e1:a5:dd:2f:b7:e0:87:62: 4f:38:f2:88:65:a8:61:e7:33:aa:90:c3:9f:ef:9f: 48:24:86:36:b0:02:8c:0a:71:ca:45:21:6c:15:42: 34:1f:4d:f7:33:ca:c5:94:fb:9c:93:2d:bf:00:c3: 1e:7c:30:2a:f4:e2:a0:45:ba:68:de:bf:d6:37:39: ce:d7:0b:76:6e:a6:1b:c8:55:64:60:8e:fa:e3:83: d1:97:51:8f:35:8a:30:41:54:8c:25:b0:c3:30:7c: a6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:97:93:2B:93:F0:32:4F:B8:5E:3E:6F:05:91:9E:81:DA:3C:72:4F X509v3 Authority Key Identifier: keyid:92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/zpeTK5PwMk-4Xj5vBZGegdo8ck8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.104.140.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:e7:1c:c4:b7:cc:75:d7:22:85:13:2e:da:d7:30:e9:4c:ef: bd:d4:4d:7d:26:95:3c:14:b3:f7:ea:26:bf:46:b7:8e:95:50: cd:f2:cf:e2:5d:de:1d:d2:88:46:ae:8f:d8:20:1e:d0:fd:e3: 78:0c:0d:3e:36:1f:e1:c9:23:33:69:33:06:ea:0b:69:30:1d: fa:fb:d4:23:30:bf:82:7e:fa:f1:32:d4:ee:45:5e:04:f3:7d: 94:4f:10:24:fa:48:ad:b2:10:3d:1f:39:3b:ea:c1:9d:59:31: 7f:41:6b:2f:9e:98:f1:5f:10:c8:c8:24:ed:a3:d0:41:cb:f5: 88:e7:53:01:10:55:0f:28:ad:f7:63:99:15:e6:98:c5:ff:6f: 92:f7:5c:60:e4:06:10:10:37:25:87:97:f7:a2:7d:99:61:ab: 11:f3:63:15:79:24:77:a9:74:c1:1f:78:c6:44:3a:d0:30:5b: af:cd:15:5a:75:be:ff:8c:a9:a4:c8:df:cf:a4:6a:d2:3e:cc: 65:60:ae:7c:58:98:7e:e0:6c:da:c3:3a:f9:4a:18:b9:37:72: 38:50:22:32:a5:4c:4b:f0:c5:14:79:71:70:e2:ad:09:39:18: 7c:ed:ab:97:02:fa:03:0d:c4:a9:5c:be:40:38:23:83:5a:86: 9b:33:12:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NdZo4cRY+fdUkUGqPF6cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyN2FmN2Q0MDdmMDQ1ZGJlYTgwNzczMjY1YjA0Y2U1NzRk MGI3ZTMwHhcNMjYwMTAxMjAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTk3OTMyYjkzZjAzMjRmYjg1ZTNlNmYwNTkxOWU4MWRhM2M3MjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8pS5LlsqvO5PCUN9Wq7iqcr6JEv adUYybxO5FDBpmCKbkcNphu5CM5+j4kHFw94DN03CIqm5u488V0H0zRDi7cXHJzz IiI2DyDUjTCtt34g3HUXSnAdPP2D7qnQ4MPIyu3HBSI8coUhbybVpLpqu64W0LxM mWPkHF/5ewK6SWfRNNEhd1RgC/v+zjCW9ZgpgJNbvaGJ3c/bzM9F4aXdL7fgh2JP OPKIZahh5zOqkMOf759IJIY2sAKMCnHKRSFsFUI0H033M8rFlPucky2/AMMefDAq 9OKgRbpo3r/WNznO1wt2bqYbyFVkYI7644PRl1GPNYowQVSMJbDDMHymtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM6XkyuT8DJPuF4+bwWRnoHaPHJPMB8GA1UdIwQY MBaAFJJ699QH8EXb6oB3MmWwTOV00LfjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva25yMzFBZndSZHZxZ0hjeVpiQk01WFRRdC1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82ZDVlMjktYWY2ZS00YzhjLWIwYWQt NTE2ZTBiMzBlYjEwLzEvenBlVEs1UHdNay00WGo1dkJaR2VnZG84Y2s4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC82ZDVlMjktYWY2ZS00YzhjLWIwYWQtNTE2ZTBiMzBlYjEw LzEva25yMzFBZndSZHZxZ0hjeVpiQk01WFRRdC1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGiMMA0G CSqGSIb3DQEBCwUAA4IBAQCP5xzEt8x11yKFEy7a1zDpTO+91E19JpU8FLP36ia/ RreOlVDN8s/iXd4d0ohGro/YIB7Q/eN4DA0+Nh/hySMzaTMG6gtpMB36+9QjML+C fvrxMtTuRV4E832UTxAk+kitshA9Hzk76sGdWTF/QWsvnpjxXxDIyCTto9BBy/WI 51MBEFUPKK33Y5kV5pjF/2+S91xg5AYQEDclh5f3on2ZYasR82MVeSR3qXTBH3jG RDrQMFuvzRVadb7/jKmkyN/PpGrSPsxlYK58WJh+4Gzawzr5Shi5N3I4UCIypUxL 8MUUeXFw4q0JORh87auXAvoDDcSpXL5AOCODWoabMxLG -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:25 2026 by rpki-client