This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Z7DBXC4bsonuKEa3ZeJsPyOhf5s.roa File: Z7DBXC4bsonuKEa3ZeJsPyOhf5s.roa (raw, json) Hash identifier: zgnbyZ4uFKWuRSuw9F5S4UChu+BtYd3J8aEjAfDMJyY= Subject key identifier: 67:B0:C1:5C:2E:1B:B2:89:EE:28:46:B7:65:E2:6C:3F:23:A1:7F:9B Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C78C40E9E63E5D356ED41EC82D0A47 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Z7DBXC4bsonuKEa3ZeJsPyOhf5s.roa Signing time: Thu 01 Jan 2026 04:18:44 +0000 ROA not before: Thu 01 Jan 2026 04:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204744 IP address blocks: 195.136.27.0/24 maxlen: 24 195.136.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:8c:40:e9:e6:3e:5d:35:6e:d4:1e:c8:2d:0a:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67b0c15c2e1bb289ee2846b765e26c3f23a17f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cd:46:49:9c:d9:4b:59:02:07:d1:db:d3:6d: 0a:96:77:29:ed:94:5b:4e:29:bb:37:6d:c6:08:33: 21:54:aa:5b:f5:f5:dc:bb:08:e6:b5:6b:61:62:5c: b8:a2:4a:0a:bf:ec:21:8c:4c:b1:99:8e:53:b6:29: dc:e1:64:de:99:07:55:f5:06:54:77:d7:a0:f9:e0: 70:f4:89:66:db:33:d7:65:d2:e8:d0:6d:08:8e:c9: ae:ac:d1:f3:23:54:62:c8:70:3a:4d:b0:2f:fb:43: cf:ce:fd:8f:ad:14:87:b0:fb:5b:e9:43:b7:b1:f8: 86:10:c0:16:a8:87:3b:03:9c:f2:e4:8f:a1:0d:cb: 30:8e:d1:30:59:e0:67:f9:d8:84:93:62:38:7f:bb: a9:12:f1:29:8e:fb:8e:1d:47:c8:c9:0b:88:ed:17: b2:ff:63:b3:5c:e0:77:4a:b7:9b:02:07:f5:88:76: 0b:2f:c2:b8:d9:6b:b5:45:8f:52:c5:e8:bf:f7:e7: cf:9e:0a:dd:49:9a:55:12:31:6b:52:5c:c8:f0:70: 63:82:49:cd:07:53:d9:e6:ce:32:e7:de:5e:a0:77: 88:a3:ba:9c:ab:47:d8:97:cf:0f:69:2e:8a:a9:4d: db:43:9d:6d:c0:04:a3:1e:7b:71:8b:3e:0f:83:eb: 1a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B0:C1:5C:2E:1B:B2:89:EE:28:46:B7:65:E2:6C:3F:23:A1:7F:9B X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Z7DBXC4bsonuKEa3ZeJsPyOhf5s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.136.27.0/24 195.136.65.0/24 Signature Algorithm: sha256WithRSAEncryption ac:51:f5:c4:55:85:4f:06:6c:b6:a4:76:b1:d5:d6:d5:7b:3a: 34:93:16:90:06:0a:d3:18:56:73:0b:ec:72:7d:e4:11:b6:2b: bb:f4:27:1c:3e:7d:dc:fc:42:dd:a4:5e:28:58:6e:eb:0e:61: 81:68:cf:78:5f:2a:fc:41:60:5d:d1:e4:e2:6a:60:4a:9f:17: bb:c2:e8:82:0c:6f:a6:c2:97:a7:75:fa:28:5a:37:a6:7c:74: 12:fa:15:88:5b:5f:68:56:ec:8e:5f:bc:64:43:3a:b6:50:8b: c6:6b:ef:32:0c:90:31:8c:86:86:3c:7f:7c:5f:98:67:c6:d5: 8b:c8:9b:d1:f1:8e:ad:cb:16:93:76:68:51:a6:fb:2c:00:dd: 3a:15:5c:7c:98:9e:9d:ac:2f:ce:a1:f3:5d:44:10:25:77:2d: 49:90:4a:1d:a8:24:58:6d:d9:60:63:6b:b0:82:db:20:03:db: 05:d8:ff:f2:40:68:9c:38:bd:e7:ec:bd:b8:e0:33:c0:ec:a8: 60:4e:c6:ed:76:ff:45:49:c2:ad:b2:36:92:71:21:5c:6c:f0: d8:f7:48:ac:17:35:5a:8a:28:ee:96:10:24:3a:b7:2c:7d:9f: 02:1d:b3:55:39:6e:0a:0f:8e:ac:19:e2:e5:97:f4:6c:f1:eb: de:1a:af:eb -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x4xA6eY+XTVu1B7ILQpHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2IwYzE1YzJlMWJiMjg5ZWUyODQ2Yjc2NWUyNmMzZjIzYTE3ZjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn81GSZzZS1kCB9Hb020Klncp7ZRb Tim7N23GCDMhVKpb9fXcuwjmtWthYly4okoKv+whjEyxmY5Ttinc4WTemQdV9QZU d9eg+eBw9Ilm2zPXZdLo0G0IjsmurNHzI1RiyHA6TbAv+0PPzv2PrRSHsPtb6UO3 sfiGEMAWqIc7A5zy5I+hDcswjtEwWeBn+diEk2I4f7upEvEpjvuOHUfIyQuI7Rey /2OzXOB3SrebAgf1iHYLL8K42Wu1RY9Sxei/9+fPngrdSZpVEjFrUlzI8HBjgknN B1PZ5s4y595eoHeIo7qcq0fYl88PaS6KqU3bQ51twASjHntxiz4Pg+saYwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGewwVwuG7KJ7ihGt2XibD8joX+bMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvWjdEQlhDNGJzb251S0VhM1plSnNQeU9oZjVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw4gbAwQA w4hBMA0GCSqGSIb3DQEBCwUAA4IBAQCsUfXEVYVPBmy2pHax1dbVezo0kxaQBgrT GFZzC+xyfeQRtiu79CccPn3c/ELdpF4oWG7rDmGBaM94Xyr8QWBd0eTiamBKnxe7 wuiCDG+mwpendfooWjemfHQS+hWIW19oVuyOX7xkQzq2UIvGa+8yDJAxjIaGPH98 X5hnxtWLyJvR8Y6tyxaTdmhRpvssAN06FVx8mJ6drC/OofNdRBAldy1JkEodqCRY bdlgY2uwgtsgA9sF2P/yQGicOL3n7L244DPA7KhgTsbtdv9FScKtsjaScSFcbPDY 90isFzVaiijulhAkOrcsfZ8CHbNVOW4KD46sGeLll/Rs8eveGq/r -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:08 2026 by rpki-client