This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/zDk64z6NkHXx103b_DDKnk_Pj-c.roa File: zDk64z6NkHXx103b_DDKnk_Pj-c.roa (raw, json) Hash identifier: 8SAIBtw8DhrZJ/a4ePIKes3vCLUWaDEFEnhQa263Bg8= Subject key identifier: CC:39:3A:E3:3E:8D:90:75:F1:D7:4D:DB:FC:30:CA:9E:4F:CF:8F:E7 Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 019B7CEE353EE2E2F63E2D6FF3DDC46DA443 Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/zDk64z6NkHXx103b_DDKnk_Pj-c.roa Signing time: Fri 02 Jan 2026 04:19:04 +0000 ROA not before: Fri 02 Jan 2026 04:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7488 IP address blocks: 5.102.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:35:3e:e2:e2:f6:3e:2d:6f:f3:dd:c4:6d:a4:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: Jan 2 04:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc393ae33e8d9075f1d74ddbfc30ca9e4fcf8fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7f:47:0d:d8:49:c3:ad:ef:89:6c:a9:87:49: df:5f:13:23:bb:5a:08:82:5a:ce:ca:73:18:b4:23: fd:b5:a5:28:ae:0e:65:fe:19:91:bf:b4:65:c0:92: 74:3f:c5:3d:f0:69:bb:a0:58:cf:4a:93:35:0a:a7: cc:5e:ea:0b:74:b1:bd:7a:17:cf:81:9d:59:21:f4: 82:a1:67:82:64:84:e2:25:98:bd:24:38:ca:3e:52: 6c:3b:c8:90:7e:c0:24:bb:91:25:69:6e:92:e1:38: 2f:64:db:3b:1d:e9:3a:4b:9c:ad:64:eb:e6:95:eb: 3e:c2:9f:18:b9:26:f9:64:34:43:e0:b6:14:36:ab: f3:f6:e0:df:43:46:ec:b2:6b:6c:64:c7:c2:a4:a2: 92:a2:88:03:b9:69:24:83:2e:e2:f3:a9:aa:a8:12: 0b:9d:a4:f3:ed:fd:b1:9c:31:68:2d:ec:da:e6:f4: 61:53:50:28:5c:67:89:2a:0b:6b:32:82:e0:91:68: 71:15:a8:33:98:bc:f0:6c:d5:ac:4a:ab:8c:56:10: f8:11:92:b3:6a:b2:4b:c6:16:7a:36:56:75:35:12: 21:5f:bd:9d:18:bf:f4:f3:6e:46:30:42:d5:eb:d9: 84:3c:e2:59:9c:e7:69:d1:c9:f0:d3:51:1f:4d:dc: 8c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:39:3A:E3:3E:8D:90:75:F1:D7:4D:DB:FC:30:CA:9E:4F:CF:8F:E7 X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/zDk64z6NkHXx103b_DDKnk_Pj-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.102.96.0/22 Signature Algorithm: sha256WithRSAEncryption 25:9d:58:be:c1:34:f2:36:ef:0b:e1:81:71:11:e5:f7:e0:02: db:08:47:83:d0:d3:c6:e4:c5:c4:ee:75:a9:09:d3:b5:ee:1c: e7:d3:05:4a:ca:cf:80:dd:21:74:e5:71:97:8d:4b:6b:16:e3: 14:51:bf:54:e8:ba:9e:10:e2:93:e4:f1:76:a6:57:33:77:1c: 68:d4:e9:6a:5f:c0:0d:70:63:6a:4e:d6:65:e5:60:05:99:44: f2:a1:f8:d0:0d:25:21:c6:18:f2:f5:39:f7:a7:0a:72:a6:dd: 91:27:ea:27:48:42:db:19:a1:7a:71:a6:a9:75:0e:49:ef:7a: f7:0b:89:a8:c5:aa:a6:1e:f2:ad:d4:91:75:d6:c8:1b:00:a7: 0f:a2:31:00:3e:03:d6:17:a2:4b:0a:46:fa:f6:d2:64:b0:c7: 78:f2:16:b8:fc:2f:64:d1:a9:53:7b:80:d4:e3:c4:90:96:82: 7d:43:3d:d4:38:79:5d:27:90:d2:ca:00:5a:e4:a1:23:0f:8f: c5:a9:4c:9d:5d:f2:75:36:cb:64:45:0c:4e:68:30:a9:41:7d: dd:65:99:b5:87:d8:21:3e:b4:20:b3:c6:86:ff:a0:eb:c9:c0: 1b:55:06:e5:bf:60:84:77:38:ed:af:9e:ea:be:ca:bd:07:93: d1:ad:3a:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87jU+4uL2Pi1v893EbaRDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjYwMTAyMDQxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzM5M2FlMzNlOGQ5MDc1ZjFkNzRkZGJmYzMwY2E5ZTRmY2Y4ZmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3n9HDdhJw63viWyph0nfXxMju1oI glrOynMYtCP9taUorg5l/hmRv7RlwJJ0P8U98Gm7oFjPSpM1CqfMXuoLdLG9ehfP gZ1ZIfSCoWeCZITiJZi9JDjKPlJsO8iQfsAku5ElaW6S4TgvZNs7Hek6S5ytZOvm les+wp8YuSb5ZDRD4LYUNqvz9uDfQ0bssmtsZMfCpKKSoogDuWkkgy7i86mqqBIL naTz7f2xnDFoLeza5vRhU1AoXGeJKgtrMoLgkWhxFagzmLzwbNWsSquMVhD4EZKz arJLxhZ6NlZ1NRIhX72dGL/0825GMELV69mEPOJZnOdp0cnw01EfTdyM4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMw5OuM+jZB18ddN2/wwyp5Pz4/nMB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEvekRrNjR6Nk5rSFh4MTAzYl9EREtua19Qai1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBWZgMA0G CSqGSIb3DQEBCwUAA4IBAQAlnVi+wTTyNu8L4YFxEeX34ALbCEeD0NPG5MXE7nWp CdO17hzn0wVKys+A3SF05XGXjUtrFuMUUb9U6LqeEOKT5PF2plczdxxo1OlqX8AN cGNqTtZl5WAFmUTyofjQDSUhxhjy9Tn3pwpypt2RJ+onSELbGaF6caapdQ5J73r3 C4moxaqmHvKt1JF11sgbAKcPojEAPgPWF6JLCkb69tJksMd48ha4/C9k0alTe4DU 48SQloJ9Qz3UOHldJ5DSygBa5KEjD4/FqUydXfJ1NstkRQxOaDCpQX3dZZm1h9gh PrQgs8aG/6DrycAbVQblv2CEdzjtr57qvsq9B5PRrTpU -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:41 2026 by rpki-client