This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/ZxOMX8jLnOMNJ0h5pILVLwIuapU.roa File: ZxOMX8jLnOMNJ0h5pILVLwIuapU.roa (raw, json) Hash identifier: 2tuw1jY2OxZRTtvUxqcy7Nsr44VQDPN/Do/SNOdYK/s= Subject key identifier: 67:13:8C:5F:C8:CB:9C:E3:0D:27:48:79:A4:82:D5:2F:02:2E:6A:95 Certificate issuer: /CN=c3037d2e7b09a0fbd108168a44874f6bd1689b60 Certificate serial: 019B7D5CF58AD8576FB5F3476F420F2457DB Authority key identifier: C3:03:7D:2E:7B:09:A0:FB:D1:08:16:8A:44:87:4F:6B:D1:68:9B:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwN9LnsJoPvRCBaKRIdPa9Fom2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/ZxOMX8jLnOMNJ0h5pILVLwIuapU.roa Signing time: Fri 02 Jan 2026 06:20:02 +0000 ROA not before: Fri 02 Jan 2026 06:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24929 IP address blocks: 195.144.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.crl rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft rsync://rpki.ripe.net/repository/DEFAULT/wwN9LnsJoPvRCBaKRIdPa9Fom2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f5:8a:d8:57:6f:b5:f3:47:6f:42:0f:24:57:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3037d2e7b09a0fbd108168a44874f6bd1689b60 Validity Not Before: Jan 2 06:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67138c5fc8cb9ce30d274879a482d52f022e6a95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:08:e8:47:e6:4c:80:e0:c7:3a:cf:6f:06:d7: 88:3a:8d:ce:4b:97:a8:bf:b6:1b:81:9d:60:e7:d7: 6f:53:78:e9:65:a5:9e:e0:50:a4:65:f8:78:f6:fd: a1:f7:ed:9f:50:e4:f2:0c:52:3c:e3:17:b8:63:0c: 4e:18:83:70:86:37:72:99:ca:6f:08:8e:51:62:9b: f3:35:9b:5e:0d:d1:45:09:fd:28:c8:5b:4b:e6:45: 69:b3:90:f5:7f:77:f0:1c:75:b1:e5:25:16:96:9d: f1:aa:40:ab:9a:98:d2:d6:09:91:f5:33:9a:f7:f0: 46:6e:38:cb:96:81:2a:d9:06:6c:23:2b:8c:2a:6d: a5:b8:d8:3b:05:99:a7:94:37:68:73:1b:61:ca:c9: 3d:0a:a0:b6:06:99:7a:79:2b:7e:d9:3b:f6:37:ff: d7:a4:2b:5b:af:c5:c2:e0:2c:3a:bd:7e:0b:c4:63: 9f:b9:22:9e:0a:a4:39:79:24:15:f4:13:d7:7d:aa: fb:36:a5:f2:e5:16:0e:f1:a9:97:9e:96:ba:61:ea: c7:35:cb:ae:ef:05:68:a5:d3:e8:bc:15:5c:d8:27: 8a:e9:f8:bf:fa:08:52:2a:cf:3e:d5:44:d0:8e:3a: 02:99:f9:5b:40:d3:1a:7d:91:8c:e5:c2:fd:1e:46: 9b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:13:8C:5F:C8:CB:9C:E3:0D:27:48:79:A4:82:D5:2F:02:2E:6A:95 X509v3 Authority Key Identifier: keyid:C3:03:7D:2E:7B:09:A0:FB:D1:08:16:8A:44:87:4F:6B:D1:68:9B:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwN9LnsJoPvRCBaKRIdPa9Fom2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/ZxOMX8jLnOMNJ0h5pILVLwIuapU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.144.9.0/24 Signature Algorithm: sha256WithRSAEncryption 59:51:66:4a:cd:ad:07:d5:f0:39:f2:a6:39:9f:94:2c:8a:8e: 7c:12:12:0c:7a:2f:84:c8:11:df:b7:0a:18:82:c2:78:67:43: dc:13:36:df:28:36:37:f4:97:8f:bc:49:c7:a0:b9:41:10:16: 0d:ba:11:e9:3c:93:f4:57:20:d5:4b:fb:7e:a7:5e:59:42:57: 43:aa:79:f5:3c:a9:f9:5a:84:f8:f1:a6:b7:c9:ea:2c:bd:42: ac:31:3a:63:f1:fa:40:cd:bc:87:c3:94:c2:d1:e2:5c:94:33: 8f:c0:98:05:47:39:03:d2:25:68:d6:d3:9b:2d:6a:59:3e:27: d8:41:74:77:e3:ea:7e:bd:84:8f:45:bb:99:96:f2:a8:82:82: a7:03:0b:81:4d:0c:5c:7c:6b:16:5e:14:0e:25:23:3d:6d:ce: 80:27:60:6a:b7:45:47:ed:05:47:33:b8:25:c1:e2:fc:3f:ef: a2:6d:08:20:32:35:60:bd:17:fe:6b:a9:61:58:a8:a4:fb:c4: 55:84:5e:db:90:ac:08:60:85:26:8a:a1:d1:38:3d:29:32:c2: ef:a8:55:20:1a:f2:a0:67:63:26:0b:7c:34:3c:3a:75:35:90: e3:c3:98:3e:d8:d9:2a:40:5b:25:f4:bc:a2:cf:fa:f8:ee:5f: dc:53:15:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XPWK2FdvtfNHb0IPJFfbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMDM3ZDJlN2IwOWEwZmJkMTA4MTY4YTQ0ODc0ZjZiZDE2 ODliNjAwHhcNMjYwMTAyMDYyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzEzOGM1ZmM4Y2I5Y2UzMGQyNzQ4NzlhNDgyZDUyZjAyMmU2YTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gjoR+ZMgODHOs9vBteIOo3OS5eo v7YbgZ1g59dvU3jpZaWe4FCkZfh49v2h9+2fUOTyDFI84xe4YwxOGINwhjdymcpv CI5RYpvzNZteDdFFCf0oyFtL5kVps5D1f3fwHHWx5SUWlp3xqkCrmpjS1gmR9TOa 9/BGbjjLloEq2QZsIyuMKm2luNg7BZmnlDdocxthysk9CqC2Bpl6eSt+2Tv2N//X pCtbr8XC4Cw6vX4LxGOfuSKeCqQ5eSQV9BPXfar7NqXy5RYO8amXnpa6YerHNcuu 7wVopdPovBVc2CeK6fi/+ghSKs8+1UTQjjoCmflbQNMafZGM5cL9HkabBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGcTjF/Iy5zjDSdIeaSC1S8CLmqVMB8GA1UdIwQY MBaAFMMDfS57CaD70QgWikSHT2vRaJtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3dOOUxuc0pvUHZSQ0JhS1JJZFBhOUZvbTJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS82Y2I3MmQtNjkwYS00MDZmLThhZGQt ODBlN2JiYjA0MWIyLzEvWnhPTVg4akxuT01OSjBoNXBJTFZMd0l1YXBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS82Y2I3MmQtNjkwYS00MDZmLThhZGQtODBlN2JiYjA0MWIy LzEvd3dOOUxuc0pvUHZSQ0JhS1JJZFBhOUZvbTJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw5AJMA0G CSqGSIb3DQEBCwUAA4IBAQBZUWZKza0H1fA58qY5n5Qsio58EhIMei+EyBHftwoY gsJ4Z0PcEzbfKDY39JePvEnHoLlBEBYNuhHpPJP0VyDVS/t+p15ZQldDqnn1PKn5 WoT48aa3yeosvUKsMTpj8fpAzbyHw5TC0eJclDOPwJgFRzkD0iVo1tObLWpZPifY QXR34+p+vYSPRbuZlvKogoKnAwuBTQxcfGsWXhQOJSM9bc6AJ2Bqt0VH7QVHM7gl weL8P++ibQggMjVgvRf+a6lhWKik+8RVhF7bkKwIYIUmiqHROD0pMsLvqFUgGvKg Z2MmC3w0PDp1NZDjw5g+2NkqQFsl9Lyiz/r47l/cUxWF -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:36 2026 by rpki-client