This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/ztKZKXz5sSSd9mxS9EgI0poqAYg.roa File: ztKZKXz5sSSd9mxS9EgI0poqAYg.roa (raw, json) Hash identifier: nBdrQf8RxLCFFDAly/9t+zuqKEqOGBMYF3lSM61ag10= Subject key identifier: CE:D2:99:29:7C:F9:B1:24:9D:F6:6C:52:F4:48:08:D2:9A:2A:01:88 Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 019B7A5B64C7101355357D5540D9C323E231 Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/ztKZKXz5sSSd9mxS9EgI0poqAYg.roa Signing time: Thu 01 Jan 2026 16:19:28 +0000 ROA not before: Thu 01 Jan 2026 16:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214268 IP address blocks: 31.41.12.0/23 maxlen: 23 176.124.16.0/23 maxlen: 24 178.217.160.0/22 maxlen: 24 178.217.164.0/22 maxlen: 24 178.217.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:64:c7:10:13:55:35:7d:55:40:d9:c3:23:e2:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Jan 1 16:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ced299297cf9b1249df66c52f44808d29a2a0188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0d:8f:eb:c8:8f:3e:5c:30:24:23:b6:f1:07: 1e:44:0d:55:bd:84:fb:04:9c:1d:af:53:8f:d6:97: 4f:f4:b7:40:b8:50:ef:7d:37:72:25:82:51:8e:18: 7a:8a:e3:8f:87:80:eb:bf:10:a5:0e:bd:8a:bc:e0: fd:aa:e4:4c:68:90:aa:ab:59:7a:13:87:89:ee:11: 7c:2f:53:4d:1c:ab:84:32:b2:f8:4d:2b:98:af:37: b2:e9:67:95:06:17:f0:e9:b6:e5:e9:5d:a1:ef:32: 1c:87:41:3a:a7:79:d2:ed:d3:c9:68:0f:06:07:da: 70:37:f6:d5:b9:29:31:0e:cf:2b:a4:d6:59:d4:4e: 4b:ae:eb:83:de:b7:98:bd:bd:af:da:89:3a:1e:0c: 0e:af:d0:d2:9a:66:75:25:0a:60:2b:d1:e3:93:0a: 08:45:86:61:81:55:c6:b0:fd:cf:a8:56:39:2b:6c: f0:cd:67:cc:bf:18:a9:ae:4f:2a:58:c3:64:8b:4e: 19:ce:ce:70:86:4b:38:73:d1:2b:ae:94:c2:35:1f: b1:2b:fb:ae:b2:e3:87:97:12:01:77:e8:41:36:a5: 2c:ae:08:f7:5f:f1:31:a4:a3:5c:02:23:75:b2:d1: 26:cd:18:4f:ac:f1:3a:c7:ab:4f:12:cd:ae:b8:de: 40:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D2:99:29:7C:F9:B1:24:9D:F6:6C:52:F4:48:08:D2:9A:2A:01:88 X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/ztKZKXz5sSSd9mxS9EgI0poqAYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.41.12.0/23 176.124.16.0/23 178.217.160.0/21 Signature Algorithm: sha256WithRSAEncryption ba:03:fb:dc:bf:5b:8d:ff:35:f3:90:cb:cc:74:6b:cb:fb:b0: 23:9b:61:b1:ec:db:c7:8b:aa:3e:f2:59:51:1d:18:02:2b:0f: 3c:90:54:ff:b9:ee:4c:47:12:92:93:65:aa:e2:89:93:42:d5: 03:e6:4c:a8:34:f4:b4:ce:ab:07:b2:71:1a:03:fc:cd:8a:6b: c6:eb:1d:de:f8:b9:3d:e3:58:c6:f6:4a:ca:25:4c:68:9f:3e: 7d:7d:37:86:12:f7:4d:09:05:99:9d:ab:52:93:8c:77:e4:e2: e4:8c:7f:41:71:79:97:87:20:79:65:48:48:55:dc:3f:b2:4d: 33:65:30:f6:32:70:90:65:23:d6:06:87:3e:c8:83:1e:f5:53: f2:5c:a6:51:b1:4f:a2:13:9e:30:b9:38:48:63:16:b9:1a:0b: 3e:ef:70:10:44:92:da:ac:f7:29:93:39:5f:43:7e:d3:a1:26: ae:e1:af:ac:db:07:a7:fd:e3:c3:71:08:ec:b1:c3:38:8f:92: 5d:dd:24:6c:e8:31:9a:4e:ea:e0:01:f5:fd:06:aa:eb:40:46: 78:d0:b8:c2:11:31:9f:ab:62:72:a0:24:bc:9e:0c:9f:f8:82: fe:5c:04:89:bf:8d:24:aa:54:4c:bc:74:96:07:fe:28:cb:a9: 4f:da:56:db -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6W2THEBNVNX1VQNnDI+IxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjYwMTAxMTYxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWQyOTkyOTdjZjliMTI0OWRmNjZjNTJmNDQ4MDhkMjlhMmEwMTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw2P68iPPlwwJCO28QceRA1VvYT7 BJwdr1OP1pdP9LdAuFDvfTdyJYJRjhh6iuOPh4DrvxClDr2KvOD9quRMaJCqq1l6 E4eJ7hF8L1NNHKuEMrL4TSuYrzey6WeVBhfw6bbl6V2h7zIch0E6p3nS7dPJaA8G B9pwN/bVuSkxDs8rpNZZ1E5LruuD3reYvb2v2ok6HgwOr9DSmmZ1JQpgK9HjkwoI RYZhgVXGsP3PqFY5K2zwzWfMvxiprk8qWMNki04Zzs5whks4c9ErrpTCNR+xK/uu suOHlxIBd+hBNqUsrgj3X/ExpKNcAiN1stEmzRhPrPE6x6tPEs2uuN5ASwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFM7SmSl8+bEknfZsUvRICNKaKgGIMB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvenRLWktYejVzU1NkOW14UzlFZ0kwcG9xQVlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBHykMAwQB sHwQAwQDstmgMA0GCSqGSIb3DQEBCwUAA4IBAQC6A/vcv1uN/zXzkMvMdGvL+7Aj m2Gx7NvHi6o+8llRHRgCKw88kFT/ue5MRxKSk2Wq4omTQtUD5kyoNPS0zqsHsnEa A/zNimvG6x3e+Lk941jG9krKJUxonz59fTeGEvdNCQWZnatSk4x35OLkjH9BcXmX hyB5ZUhIVdw/sk0zZTD2MnCQZSPWBoc+yIMe9VPyXKZRsU+iE54wuThIYxa5Ggs+ 73AQRJLarPcpkzlfQ37ToSau4a+s2wen/ePDcQjsscM4j5Jd3SRs6DGaTurgAfX9 BqrrQEZ40LjCETGfq2JyoCS8ngyf+IL+XASJv40kqlRMvHSWB/4oy6lP2lbb -----END CERTIFICATE-----Generated at Mon Jan 26 04:56:16 2026 by rpki-client