This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/zj5taZjjhdwiLqYv5pODda2Zbac.roa File: zj5taZjjhdwiLqYv5pODda2Zbac.roa (raw, json) Hash identifier: KiZrGb0dbN2vh+XlNRMzZClIBxdDlFw7IVjwNS6448E= Subject key identifier: CE:3E:6D:69:98:E3:85:DC:22:2E:A6:2F:E6:93:83:75:AD:99:6D:A7 Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Certificate serial: 019B7C807CCE4BE96D59424980C26D4299ED Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/zj5taZjjhdwiLqYv5pODda2Zbac.roa Signing time: Fri 02 Jan 2026 02:19:13 +0000 ROA not before: Fri 02 Jan 2026 02:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41994 IP address blocks: 212.163.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:7c:ce:4b:e9:6d:59:42:49:80:c2:6d:42:99:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Validity Not Before: Jan 2 02:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce3e6d6998e385dc222ea62fe6938375ad996da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2c:5b:bf:90:b4:03:ef:9f:bc:fc:05:4a:62: 7b:15:c8:75:52:a1:70:1a:67:67:ad:38:fe:dc:10: 9a:6a:2f:23:9f:b0:45:75:22:b4:b4:77:b6:a3:d8: 43:5f:09:b2:ca:08:4b:81:a3:12:c8:98:7d:09:cc: 95:2a:ee:83:fa:cb:fe:26:75:d0:9f:ce:03:60:00: 5a:82:52:67:c7:49:60:4f:87:e8:15:85:1a:83:f3: e5:5b:d9:dd:b7:9a:c7:2f:ef:4d:6e:41:43:7d:02: 93:60:03:55:ed:b7:fd:21:05:a3:35:35:47:6a:79: 07:2b:aa:7f:3c:69:c5:88:a8:49:7e:84:81:df:21: f4:8a:f0:86:cc:2b:0a:6e:c1:cd:6c:ed:40:39:a0: 39:0d:7a:b9:34:8b:ee:4a:4a:8a:8d:1d:82:97:bb: de:8f:c9:f7:35:e1:3b:95:ed:e9:ff:d5:f9:be:48: c8:24:14:38:1e:18:19:d5:6d:96:a1:1e:f3:b6:ad: 05:79:76:a7:5a:4a:b8:f7:03:35:fc:cf:ef:6d:a2: cb:99:27:0f:00:ff:c1:35:3d:6f:6c:17:f2:03:af: 54:b2:18:80:f7:dc:e0:1b:c2:87:69:65:1e:24:81: 0a:d8:eb:45:7d:6b:3f:a7:2b:4c:51:53:eb:63:38: 1f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3E:6D:69:98:E3:85:DC:22:2E:A6:2F:E6:93:83:75:AD:99:6D:A7 X509v3 Authority Key Identifier: keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/zj5taZjjhdwiLqYv5pODda2Zbac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.163.10.0/24 Signature Algorithm: sha256WithRSAEncryption 62:ef:a7:e1:47:8f:e0:14:04:87:11:6e:fa:85:01:16:e2:da: eb:79:99:4f:56:eb:ea:73:f5:33:b7:97:b3:92:4e:89:68:72: 2b:c9:6a:1d:05:b3:84:ee:16:56:89:69:95:b6:c0:35:65:04: c6:e3:38:b5:57:8f:a1:73:33:d4:c1:a0:c6:24:0d:88:28:ac: 27:38:5e:af:cf:c4:72:c1:75:98:68:a4:30:fe:2f:ce:7a:54: 19:9e:8f:ce:4b:a6:c2:8e:8b:88:8a:0c:e7:08:53:c7:bf:c6: 1d:6e:fd:2b:41:8f:c8:44:d2:d5:72:c0:28:98:01:b0:61:b9: f5:ef:f4:15:1f:21:2e:46:b2:66:56:10:e5:6f:76:0c:70:a5: ce:e9:c9:88:b0:15:d8:b3:f6:c1:90:41:7d:0a:11:cf:bf:c4: cb:33:8d:d5:7e:28:b1:51:1e:c3:15:41:d9:72:0d:cf:a1:18: 73:ec:f8:5b:4e:9b:10:9c:4c:ef:04:62:95:77:75:42:c9:3d: 9f:d2:df:65:b3:8d:4d:40:9b:a6:22:a6:fd:77:99:f3:7c:0d: b9:cb:71:28:ad:cd:8f:34:aa:9d:ae:d5:e0:1d:91:3e:e3:08: 48:d5:55:61:0d:b7:82:0b:c7:bb:6d:b2:3b:f7:f7:bd:1d:5e: 06:1a:c9:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gHzOS+ltWUJJgMJtQpntMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQ5NjFmNjdmMjJjNjFlODRhNjZjOGFkOWMxYThjZTUx ZDA5OWIwHhcNMjYwMTAyMDIxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTNlNmQ2OTk4ZTM4NWRjMjIyZWE2MmZlNjkzODM3NWFkOTk2ZGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Cxbv5C0A++fvPwFSmJ7Fch1UqFw GmdnrTj+3BCaai8jn7BFdSK0tHe2o9hDXwmyyghLgaMSyJh9CcyVKu6D+sv+JnXQ n84DYABaglJnx0lgT4foFYUag/PlW9ndt5rHL+9NbkFDfQKTYANV7bf9IQWjNTVH ankHK6p/PGnFiKhJfoSB3yH0ivCGzCsKbsHNbO1AOaA5DXq5NIvuSkqKjR2Cl7ve j8n3NeE7le3p/9X5vkjIJBQ4HhgZ1W2WoR7ztq0FeXanWkq49wM1/M/vbaLLmScP AP/BNT1vbBfyA69UshiA99zgG8KHaWUeJIEK2OtFfWs/pytMUVPrYzgfKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM4+bWmY44XcIi6mL+aTg3WtmW2nMB8GA1UdIwQY MBaAFLkUlh9n8ixh6EpmyK2cGozlHQmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTIt Mjc0NzNjYTYxMmRlLzEvemo1dGFaampoZHdpTHFZdjVwT0RkYTJaYmFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTItMjc0NzNjYTYxMmRl LzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1KMKMA0G CSqGSIb3DQEBCwUAA4IBAQBi76fhR4/gFASHEW76hQEW4trreZlPVuvqc/Uzt5ez kk6JaHIryWodBbOE7hZWiWmVtsA1ZQTG4zi1V4+hczPUwaDGJA2IKKwnOF6vz8Ry wXWYaKQw/i/OelQZno/OS6bCjouIigznCFPHv8Ydbv0rQY/IRNLVcsAomAGwYbn1 7/QVHyEuRrJmVhDlb3YMcKXO6cmIsBXYs/bBkEF9ChHPv8TLM43VfiixUR7DFUHZ cg3PoRhz7PhbTpsQnEzvBGKVd3VCyT2f0t9ls41NQJumIqb9d5nzfA25y3Eorc2P NKqdrtXgHZE+4whI1VVhDbeCC8e7bbI79/e9HV4GGslM -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:28 2026 by rpki-client