This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/ZiWqWZABnq_eiO62wMwzhJ88P8o.roa File: ZiWqWZABnq_eiO62wMwzhJ88P8o.roa (raw, json) Hash identifier: QMjkQdLnnhm5XVKipPX5kzLqwqqwc6MMLi86/hK/bzo= Subject key identifier: 66:25:AA:59:90:01:9E:AF:DE:88:EE:B6:C0:CC:33:84:9F:3C:3F:CA Certificate issuer: /CN=07730862dfb740166df453fb6e9c8508af5d9c56 Certificate serial: 019B76EAD2C7D77F587184DF3DC904D1B908 Authority key identifier: 07:73:08:62:DF:B7:40:16:6D:F4:53:FB:6E:9C:85:08:AF:5D:9C:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/ZiWqWZABnq_eiO62wMwzhJ88P8o.roa Signing time: Thu 01 Jan 2026 00:17:39 +0000 ROA not before: Thu 01 Jan 2026 00:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19399 IP address blocks: 131.205.0.0/16 maxlen: 16 136.155.0.0/16 maxlen: 16 147.180.0.0/16 maxlen: 16 159.38.0.0/16 maxlen: 16 192.44.240.0/21 maxlen: 21 192.44.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft rsync://rpki.ripe.net/repository/DEFAULT/B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d2:c7:d7:7f:58:71:84:df:3d:c9:04:d1:b9:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07730862dfb740166df453fb6e9c8508af5d9c56 Validity Not Before: Jan 1 00:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6625aa5990019eafde88eeb6c0cc33849f3c3fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b1:51:2a:80:b3:df:0b:bd:52:cc:db:9e:d0: 76:b4:9b:68:7d:11:fe:eb:07:40:b7:30:c0:65:91: 1c:8b:9d:77:e7:98:52:c7:f6:19:7a:08:f0:87:f3: 3f:89:57:9b:03:c4:2b:12:fe:ad:6f:7b:64:21:bc: 6c:a6:97:e5:bc:71:22:2a:01:77:97:86:c1:21:00: 61:6b:8a:32:9f:2d:22:e2:a9:61:f6:b7:df:e2:5d: 15:0d:ee:b3:c5:77:42:b7:d2:ed:9d:87:92:4c:34: dd:58:d4:22:0b:4d:b7:84:d8:f3:61:4d:51:3c:fe: b2:e5:5c:ce:cd:29:92:c8:13:01:5c:c4:9f:6d:33: c7:0f:aa:53:27:32:5a:9b:3a:8c:c7:e0:e0:55:8a: e3:dc:d4:f5:e5:ce:86:84:e8:57:4c:40:23:c7:7f: 55:8f:8f:4f:43:16:79:63:26:d8:83:d9:01:20:62: ae:d3:d6:59:bf:a1:89:50:48:c0:9b:14:52:4f:6e: fb:42:8f:b8:11:61:cc:9f:5d:29:af:d6:f1:c9:72: 49:47:de:e9:3f:48:25:66:c0:ab:8a:59:2b:19:38: 0c:21:4e:9c:2f:0d:c3:ff:29:5b:9e:9f:c0:2e:54: e8:59:57:0d:60:1f:b9:c4:b0:05:ec:26:61:51:58: 76:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:25:AA:59:90:01:9E:AF:DE:88:EE:B6:C0:CC:33:84:9F:3C:3F:CA X509v3 Authority Key Identifier: keyid:07:73:08:62:DF:B7:40:16:6D:F4:53:FB:6E:9C:85:08:AF:5D:9C:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/ZiWqWZABnq_eiO62wMwzhJ88P8o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.205.0.0/16 136.155.0.0/16 147.180.0.0/16 159.38.0.0/16 192.44.240.0-192.44.251.255 Signature Algorithm: sha256WithRSAEncryption a3:ac:20:25:b9:c0:ac:cf:07:5d:9f:68:5c:52:d3:a9:87:e6: 13:5e:fb:96:2c:0b:c2:d4:f2:35:a5:79:7a:79:8b:21:22:9f: 02:8e:94:af:57:68:20:f3:ad:8f:19:b8:3f:c0:b9:b2:1b:b8: 6d:f6:1d:b6:34:f5:33:58:a8:0e:70:b1:1f:ae:ae:f8:09:b4: fe:40:d0:df:8b:19:a3:87:8f:23:3a:12:a2:23:84:c5:34:74: f5:01:46:d0:7f:fa:53:6e:19:4a:b9:f8:ce:90:53:b1:12:4c: fb:d0:e7:84:62:bd:c5:1f:fd:9e:e0:37:48:36:a6:eb:02:75: 1d:7d:ac:45:6a:a1:bb:ab:f4:2a:e5:d3:fc:26:9f:9f:56:6e: a8:4e:32:75:e2:a4:c6:0f:b6:f4:34:60:f0:79:45:0a:7e:0f: 69:ed:9f:b9:3d:01:ed:4b:af:b7:7a:51:53:e8:de:35:7a:50: f8:e8:dc:fa:ad:31:1d:13:a4:61:0a:98:90:1f:0a:9a:e9:c3: e1:3b:ab:f7:1a:2a:0b:62:fe:11:88:67:3d:57:a7:9a:1a:7e: 48:2e:cb:70:e3:dc:45:1b:29:5e:62:18:e2:e5:18:ac:3a:12: 80:1f:e4:33:db:66:65:8b:01:ee:54:ad:4c:cc:af:8e:94:95: 23:ad:6e:d3 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt26tLH139YcYTfPckE0bkIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NzMwODYyZGZiNzQwMTY2ZGY0NTNmYjZlOWM4NTA4YWY1 ZDljNTYwHhcNMjYwMTAxMDAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjI1YWE1OTkwMDE5ZWFmZGU4OGVlYjZjMGNjMzM4NDlmM2MzZmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbFRKoCz3wu9UszbntB2tJtofRH+ 6wdAtzDAZZEci51355hSx/YZegjwh/M/iVebA8QrEv6tb3tkIbxsppflvHEiKgF3 l4bBIQBha4oyny0i4qlh9rff4l0VDe6zxXdCt9LtnYeSTDTdWNQiC023hNjzYU1R PP6y5VzOzSmSyBMBXMSfbTPHD6pTJzJamzqMx+DgVYrj3NT15c6GhOhXTEAjx39V j49PQxZ5YybYg9kBIGKu09ZZv6GJUEjAmxRST277Qo+4EWHMn10pr9bxyXJJR97p P0glZsCrilkrGTgMIU6cLw3D/ylbnp/ALlToWVcNYB+5xLAF7CZhUVh2QQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGYlqlmQAZ6v3ojutsDMM4SfPD/KMB8GA1UdIwQY MBaAFAdzCGLft0AWbfRT+26chQivXZxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjNNSVl0LTNRQlp0OUZQN2JweUZDSzlkbkZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi81YzA2YzMtYjQ0Zi00YmU5LThiMmUt NWVlYmUzNTM1MmU4LzEvWmlXcVdaQUJucV9laU82MndNd3poSjg4UDhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi81YzA2YzMtYjQ0Zi00YmU5LThiMmUtNWVlYmUzNTM1MmU4 LzEvQjNNSVl0LTNRQlp0OUZQN2JweUZDSzlkbkZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwMAg80DAwCI mwMDAJO0AwMAnyYwDAMEBMAs8AMEAsAs+DANBgkqhkiG9w0BAQsFAAOCAQEAo6wg JbnArM8HXZ9oXFLTqYfmE177liwLwtTyNaV5enmLISKfAo6Ur1doIPOtjxm4P8C5 shu4bfYdtjT1M1ioDnCxH66u+Am0/kDQ34sZo4ePIzoSoiOExTR09QFG0H/6U24Z Srn4zpBTsRJM+9DnhGK9xR/9nuA3SDam6wJ1HX2sRWqhu6v0KuXT/Cafn1ZuqE4y deKkxg+29DRg8HlFCn4Pae2fuT0B7Uuvt3pRU+jeNXpQ+Ojc+q0xHROkYQqYkB8K munD4Tur9xoqC2L+EYhnPVenmhp+SC7LcOPcRRspXmIY4uUYrDoSgB/kM9tmZYsB 7lStTMyvjpSVI61u0w== -----END CERTIFICATE-----Generated at Sun Jan 25 21:04:58 2026 by rpki-client