This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/0Zc__kN3HwhsJoBnO7wdin2RQss.roa File: 0Zc__kN3HwhsJoBnO7wdin2RQss.roa (raw, json) Hash identifier: CXzPpL1BSz7J6w6QJARe0QxvknuDCjM8a8ZeWT+w+XI= Subject key identifier: D1:97:3F:FE:43:77:1F:08:6C:26:80:67:3B:BC:1D:8A:7D:91:42:CB Certificate issuer: /CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed Certificate serial: 019B7C1117F6286791241ECBA6BCDFD97677 Authority key identifier: 4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/0Zc__kN3HwhsJoBnO7wdin2RQss.roa Signing time: Fri 02 Jan 2026 00:17:33 +0000 ROA not before: Fri 02 Jan 2026 00:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55497 IP address blocks: 5.42.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:17:f6:28:67:91:24:1e:cb:a6:bc:df:d9:76:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed Validity Not Before: Jan 2 00:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1973ffe43771f086c2680673bbc1d8a7d9142cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:90:1c:90:f1:d8:13:a1:63:e6:f8:63:e6:9b: 81:79:0e:f5:fb:c9:04:ad:96:4c:8e:b5:77:26:ca: a4:cb:2c:86:8f:06:36:04:bd:59:c7:b4:f7:b3:1c: 10:e2:3f:7f:2b:6d:cf:fd:96:3b:fe:66:83:f7:0f: 87:67:1e:f1:da:44:36:3a:7d:30:8b:6a:38:e3:ff: 1c:4d:c5:cd:b0:35:67:42:7a:f6:1f:76:a7:af:a9: 25:38:38:18:05:0a:4c:e4:35:ca:2b:7c:ff:7e:39: b2:2f:ac:fd:51:61:e7:c4:e3:d3:a2:3e:cf:8e:7a: d6:a9:61:3e:be:4e:aa:7a:c5:e0:fd:03:9a:df:bd: 6c:65:16:43:39:c1:02:11:fe:96:6e:49:7f:31:f6: b3:ee:11:a0:7e:8b:b9:b6:b2:8a:00:0c:a8:33:08: 5a:2f:0d:28:b3:aa:12:c9:67:ea:23:bc:de:88:d1: be:73:5e:4a:36:a6:02:3e:f6:98:35:f6:74:02:7c: b5:63:c2:71:55:d4:39:4e:30:f3:95:e9:03:46:3d: 9d:93:c6:e8:d2:ad:17:c5:12:be:80:49:f6:c1:bd: 0a:bc:cf:1d:08:a1:ad:23:f3:15:72:83:6c:0e:26: 97:85:b6:75:f9:76:24:ef:ce:7b:17:f2:c7:f5:82: 6d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:97:3F:FE:43:77:1F:08:6C:26:80:67:3B:BC:1D:8A:7D:91:42:CB X509v3 Authority Key Identifier: keyid:4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/0Zc__kN3HwhsJoBnO7wdin2RQss.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.42.160.0/21 Signature Algorithm: sha256WithRSAEncryption 85:88:f1:93:1a:c8:60:d2:0c:bd:40:98:3c:cb:f7:e9:03:95: a8:4c:5c:f3:a4:45:24:08:72:65:ee:cd:a5:52:f7:17:7f:4e: 69:76:cc:6d:47:7e:04:22:67:ef:30:17:89:72:2d:1e:ba:98: 2b:76:b8:7d:43:da:1e:69:36:6f:65:ad:eb:54:35:d2:51:c6: 32:c6:ef:6a:86:41:d2:9a:6b:f2:01:6f:7b:a6:b1:17:6d:e0: 6c:d2:0c:e1:51:91:c6:7e:0c:79:f4:ac:60:4e:3d:b3:10:a6: 97:71:04:6f:d1:34:12:a9:9a:dc:38:f9:c5:30:79:b2:c6:a4: 12:e8:08:bf:77:dd:a4:65:c0:cd:7d:53:b6:02:8a:69:cd:2a: 45:79:c7:8c:43:92:fc:52:e8:97:28:9a:89:84:77:12:24:72: e0:e0:4f:0f:aa:a3:ca:34:32:3d:9e:e8:29:bd:ce:a5:8c:ef: 60:fd:db:c7:bf:c6:7a:ef:fe:75:a0:85:36:cc:cc:c9:e3:33: b2:9a:44:fa:b1:5b:08:82:da:77:2f:ab:73:04:c7:d9:66:80: ca:52:be:4f:d6:87:77:0a:59:97:17:6d:d4:76:9f:1f:53:70: 53:22:93:be:a7:f9:3d:fd:2c:80:d9:e3:ad:62:77:2c:b1:5d: 53:33:cc:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ERf2KGeRJB7Lprzf2XZ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZjNmYjhmZjhkZGFmZGE4OWRiMzk3MDVmNzhmNjQxOGVm ZDFmZWQwHhcNMjYwMTAyMDAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTk3M2ZmZTQzNzcxZjA4NmMyNjgwNjczYmJjMWQ4YTdkOTE0MmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5AckPHYE6Fj5vhj5puBeQ71+8kE rZZMjrV3JsqkyyyGjwY2BL1Zx7T3sxwQ4j9/K23P/ZY7/maD9w+HZx7x2kQ2On0w i2o44/8cTcXNsDVnQnr2H3anr6klODgYBQpM5DXKK3z/fjmyL6z9UWHnxOPToj7P jnrWqWE+vk6qesXg/QOa371sZRZDOcECEf6Wbkl/Mfaz7hGgfou5trKKAAyoMwha Lw0os6oSyWfqI7zeiNG+c15KNqYCPvaYNfZ0Any1Y8JxVdQ5TjDzlekDRj2dk8bo 0q0XxRK+gEn2wb0KvM8dCKGtI/MVcoNsDiaXhbZ1+XYk7857F/LH9YJtsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNGXP/5Ddx8IbCaAZzu8HYp9kULLMB8GA1UdIwQY MBaAFEvz+4/43a/aids5cF949kGO/R/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU19QN2pfamRyOXFKMnpsd1gzajJRWTc5SC0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83Yjg1MTMtZjE4OS00MzMwLWI2ZjAt ZDBkMjU4ZTRiNDM1LzEvMFpjX19rTjNId2hzSm9Cbk83d2RpbjJSUXNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS83Yjg1MTMtZjE4OS00MzMwLWI2ZjAtZDBkMjU4ZTRiNDM1 LzEvU19QN2pfamRyOXFKMnpsd1gzajJRWTc5SC0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDBSqgMA0G CSqGSIb3DQEBCwUAA4IBAQCFiPGTGshg0gy9QJg8y/fpA5WoTFzzpEUkCHJl7s2l UvcXf05pdsxtR34EImfvMBeJci0eupgrdrh9Q9oeaTZvZa3rVDXSUcYyxu9qhkHS mmvyAW97prEXbeBs0gzhUZHGfgx59KxgTj2zEKaXcQRv0TQSqZrcOPnFMHmyxqQS 6Ai/d92kZcDNfVO2AoppzSpFeceMQ5L8UuiXKJqJhHcSJHLg4E8PqqPKNDI9nugp vc6ljO9g/dvHv8Z67/51oIU2zMzJ4zOymkT6sVsIgtp3L6tzBMfZZoDKUr5P1od3 ClmXF23Udp8fU3BTIpO+p/k9/SyA2eOtYncssV1TM8yJ -----END CERTIFICATE-----Generated at Sun Jan 25 12:46:40 2026 by rpki-client