This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/l-6nzd356yZWqDEY9DG-Da5JKys.roa File: l-6nzd356yZWqDEY9DG-Da5JKys.roa (raw, json) Hash identifier: OR4c0rfMD7ZWa8BaNFc1YAW9kkgFhCHBU/rMA3THGI4= Subject key identifier: 97:EE:A7:CD:DD:F9:EB:26:56:A8:31:18:F4:31:BE:0D:AE:49:2B:2B Certificate issuer: /CN=02807e0863103f0912e7e0247811d167797d8107 Certificate serial: 019B77C690FD73FEFD9E56684FB6E9C16673 Authority key identifier: 02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/l-6nzd356yZWqDEY9DG-Da5JKys.roa Signing time: Thu 01 Jan 2026 04:17:40 +0000 ROA not before: Thu 01 Jan 2026 04:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57794 IP address blocks: 213.108.88.0/21 maxlen: 21 213.108.88.0/22 maxlen: 22 213.108.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:90:fd:73:fe:fd:9e:56:68:4f:b6:e9:c1:66:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02807e0863103f0912e7e0247811d167797d8107 Validity Not Before: Jan 1 04:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97eea7cdddf9eb2656a83118f431be0dae492b2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1b:1d:47:3c:67:bf:2b:6e:3b:f0:fd:1a:22: 1a:2a:e7:94:91:e3:38:ad:38:8b:22:98:32:6c:ed: 00:3b:11:0b:1b:b4:2b:ae:fe:99:5b:75:25:a3:21: d8:ac:84:36:fb:4d:50:68:21:81:42:7d:95:8b:c1: 2f:e8:3a:4d:c6:8c:2e:c2:23:21:88:b6:43:5f:eb: 9a:4f:80:dd:42:81:96:82:f7:86:74:41:45:6c:c1: f0:de:d9:12:9c:3e:a5:86:dd:79:22:6f:9c:ce:9f: b8:32:d4:df:e8:cf:fb:5e:05:48:4c:d7:04:c5:53: a9:81:6c:81:6f:e7:f3:96:0f:4e:b0:ea:15:4f:7c: 44:fc:bd:27:c5:cb:8c:ea:69:e6:9a:a9:d2:38:7f: b2:19:63:09:1f:31:e5:79:6f:41:c9:eb:44:b3:b2: b0:d3:24:8e:30:33:b8:8c:88:ea:77:80:0f:cb:f9: 51:0d:a4:d4:61:22:d0:97:69:c8:7b:fd:aa:a5:d3: d3:3f:0c:bb:b4:05:4d:4a:3d:c2:7b:d6:3a:94:4e: fe:d6:b6:e5:1d:b6:9c:b6:c7:d2:7a:8f:e4:95:6e: 62:6d:7d:cf:ba:77:5c:6e:4b:cd:c0:b8:99:10:df: 48:b7:4d:e0:90:86:a5:fc:bc:eb:da:dc:ec:84:a1: 99:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:EE:A7:CD:DD:F9:EB:26:56:A8:31:18:F4:31:BE:0D:AE:49:2B:2B X509v3 Authority Key Identifier: keyid:02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/l-6nzd356yZWqDEY9DG-Da5JKys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.108.88.0/21 Signature Algorithm: sha256WithRSAEncryption 29:22:e9:3a:7d:f2:e9:ce:e5:b8:21:d2:ae:04:f5:eb:12:d2: 0f:99:ef:67:5c:40:4c:b9:17:77:c7:5a:f1:eb:f5:15:b0:15: 98:b2:3c:35:11:44:ea:48:87:c5:f9:0e:0f:65:ec:28:d7:78: c8:11:4e:19:74:66:f6:59:bb:40:5c:f4:17:27:1b:5f:f4:54: e7:5b:c8:c6:e1:ca:40:d6:25:95:bd:70:d3:22:93:c7:2a:47: 74:fa:de:98:f4:fc:a3:d7:55:aa:ce:2d:69:9b:a6:1d:91:cd: 91:62:71:19:9b:d9:5b:7a:7b:b9:76:f3:87:6d:8a:9e:f4:a8: 5d:98:82:ce:b0:21:05:3a:a5:d5:ba:3a:35:fd:34:ab:a6:39: c8:c3:71:c6:84:5d:1e:be:22:96:9f:6c:47:15:b2:1b:59:f0: c2:df:8b:3d:7d:cc:c1:be:53:bf:1f:9d:4a:97:5f:9a:f8:26: 52:af:3c:bc:d7:fa:98:60:20:94:a5:32:1d:a1:ea:6c:df:f1: 07:50:39:e8:5b:15:65:3f:31:9d:b1:09:4f:29:aa:03:b1:c0: b1:f5:1e:e1:4d:c0:86:a8:79:b8:c5:56:2a:10:1d:2f:50:fa: 35:f6:b8:00:c1:78:61:ff:4b:8b:72:9a:6a:8a:4c:98:e8:68: 94:60:33:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xpD9c/79nlZoT7bpwWZzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyODA3ZTA4NjMxMDNmMDkxMmU3ZTAyNDc4MTFkMTY3Nzk3 ZDgxMDcwHhcNMjYwMTAxMDQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2VlYTdjZGRkZjllYjI2NTZhODMxMThmNDMxYmUwZGFlNDkyYjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRsdRzxnvytuO/D9GiIaKueUkeM4 rTiLIpgybO0AOxELG7Qrrv6ZW3UloyHYrIQ2+01QaCGBQn2Vi8Ev6DpNxowuwiMh iLZDX+uaT4DdQoGWgveGdEFFbMHw3tkSnD6lht15Im+czp+4MtTf6M/7XgVITNcE xVOpgWyBb+fzlg9OsOoVT3xE/L0nxcuM6mnmmqnSOH+yGWMJHzHleW9ByetEs7Kw 0ySOMDO4jIjqd4APy/lRDaTUYSLQl2nIe/2qpdPTPwy7tAVNSj3Ce9Y6lE7+1rbl HbactsfSeo/klW5ibX3PundcbkvNwLiZEN9It03gkIal/Lzr2tzshKGZSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJfup83d+esmVqgxGPQxvg2uSSsrMB8GA1UdIwQY MBaAFAKAfghjED8JEufgJHgR0Wd5fYEHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW9CLUNHTVFQd2tTNS1Ba2VCSFJaM2w5Z1FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9iZjYwNDktOGQxZC00YmU4LTlmNTct OGJhYjc4ZGUzMmM5LzEvbC02bnpkMzU2eVpXcURFWTlERy1EYTVKS3lzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9iZjYwNDktOGQxZC00YmU4LTlmNTctOGJhYjc4ZGUzMmM5 LzEvQW9CLUNHTVFQd2tTNS1Ba2VCSFJaM2w5Z1FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD1WxYMA0G CSqGSIb3DQEBCwUAA4IBAQApIuk6ffLpzuW4IdKuBPXrEtIPme9nXEBMuRd3x1rx 6/UVsBWYsjw1EUTqSIfF+Q4PZewo13jIEU4ZdGb2WbtAXPQXJxtf9FTnW8jG4cpA 1iWVvXDTIpPHKkd0+t6Y9Pyj11Wqzi1pm6Ydkc2RYnEZm9lbenu5dvOHbYqe9Khd mILOsCEFOqXVujo1/TSrpjnIw3HGhF0eviKWn2xHFbIbWfDC34s9fczBvlO/H51K l1+a+CZSrzy81/qYYCCUpTIdoeps3/EHUDnoWxVlPzGdsQlPKaoDscCx9R7hTcCG qHm4xVYqEB0vUPo19rgAwXhh/0uLcppqikyY6GiUYDMR -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:28 2026 by rpki-client