This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/Zc2NwjC7aoT6KGmTlpJCVRtAAxM.roa File: Zc2NwjC7aoT6KGmTlpJCVRtAAxM.roa (raw, json) Hash identifier: Lw8AgQnNa+u3srZTik73U4zlVyuicSwiTs/U27h1T58= Subject key identifier: 65:CD:8D:C2:30:BB:6A:84:FA:28:69:93:96:92:42:55:1B:40:03:13 Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Certificate serial: 019B797F082CCC2923570B25315693D9E140 Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/Zc2NwjC7aoT6KGmTlpJCVRtAAxM.roa Signing time: Thu 01 Jan 2026 12:18:46 +0000 ROA not before: Thu 01 Jan 2026 12:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200856 IP address blocks: 212.19.58.0/24 maxlen: 32 2a02:2e0:406::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:08:2c:cc:29:23:57:0b:25:31:56:93:d9:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Validity Not Before: Jan 1 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65cd8dc230bb6a84fa286993969242551b400313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:67:c3:56:ba:b2:8a:59:f9:72:5b:bf:fc:ba: c8:8f:6c:10:f6:ed:24:8f:5b:ac:5b:5f:65:6a:21: 5b:bf:c5:be:b8:1d:35:b6:d1:d6:a7:1d:a8:d1:37: 13:be:0d:f7:86:f2:04:df:bf:2c:91:cc:fa:11:4b: 15:7c:0a:13:81:6a:88:ea:49:20:33:e4:87:6c:8e: f0:6d:e0:c0:e6:d4:7a:5a:d7:a8:9f:d4:92:95:0e: ed:bf:fc:d3:33:ea:a2:01:ba:03:4c:9a:92:c6:1a: 6c:50:54:1e:be:df:0f:18:95:c7:87:44:06:07:c0: 25:05:23:d4:7f:25:94:b6:fb:4e:fd:10:91:ee:3d: 71:e9:71:4f:b3:4d:e2:19:35:b9:3f:a4:53:38:7e: 7e:17:0b:11:0d:61:d6:f6:cd:82:56:77:18:e5:02: fd:49:53:f1:52:9a:9c:55:e1:46:a7:40:00:10:62: 02:25:21:93:6f:30:07:1a:75:99:77:f3:a9:1d:48: eb:e5:9c:ab:8b:27:f3:03:9a:ae:a0:f9:c6:9e:86: b3:30:7a:dc:f0:0c:f7:46:a7:7a:69:38:8c:20:d7: 88:83:b1:a9:8f:68:61:1a:3c:16:76:56:57:38:7b: e9:d1:c0:b1:cc:eb:a3:c7:e3:90:ca:72:34:66:09: fb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CD:8D:C2:30:BB:6A:84:FA:28:69:93:96:92:42:55:1B:40:03:13 X509v3 Authority Key Identifier: keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/Zc2NwjC7aoT6KGmTlpJCVRtAAxM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.19.58.0/24 IPv6: 2a02:2e0:406::/48 Signature Algorithm: sha256WithRSAEncryption 46:7d:81:54:ea:c9:6b:fa:a9:05:86:bb:d7:0a:07:39:0a:ca: 75:4e:90:da:a6:09:48:ab:b1:bc:79:47:2e:2a:b6:e6:10:25: c5:2b:e8:1b:e6:f0:7e:1d:95:e0:aa:67:b0:3f:91:da:24:39: 83:ef:2b:70:28:e2:c2:fe:b4:1b:d0:9e:e8:26:47:7f:76:66: ed:e1:eb:56:81:3d:7e:6d:bf:75:5f:d5:c0:19:dc:09:7c:d5: a0:6e:b3:34:66:67:c4:30:fd:e5:b8:b1:96:b4:6d:5c:8c:98: 49:2e:8e:32:7c:b7:73:ef:80:4c:80:2b:01:e2:55:6d:fc:97: dd:d5:53:21:d6:48:9e:34:47:b0:7c:8a:0f:cc:5c:a9:f5:9c: c6:d7:24:e7:6f:f0:0c:e6:df:de:09:a6:b9:4e:fb:bf:ef:0e: 5e:21:76:2b:72:63:c6:be:69:3c:d8:d1:d3:a4:06:c8:cd:74: 3b:81:ab:ba:0f:a7:44:a9:e0:ca:3e:e2:10:c0:05:87:a5:e2: 49:50:dc:ea:65:3f:69:9f:b9:06:0c:28:b5:cd:79:d9:53:d5: fd:fc:9f:e3:db:a9:b5:43:47:1d:4c:15:c9:4d:8b:b1:20:99: 2c:94:97:ad:2d:2e:62:fe:c5:cc:e8:19:eb:5d:6b:27:1a:26: 5f:dc:bf:90 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5fwgszCkjVwslMVaT2eFAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk NGJiNWMwHhcNMjYwMTAxMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWNkOGRjMjMwYmI2YTg0ZmEyODY5OTM5NjkyNDI1NTFiNDAwMzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WfDVrqyiln5clu//LrIj2wQ9u0k j1usW19laiFbv8W+uB01ttHWpx2o0TcTvg33hvIE378skcz6EUsVfAoTgWqI6kkg M+SHbI7wbeDA5tR6Wteon9SSlQ7tv/zTM+qiAboDTJqSxhpsUFQevt8PGJXHh0QG B8AlBSPUfyWUtvtO/RCR7j1x6XFPs03iGTW5P6RTOH5+FwsRDWHW9s2CVncY5QL9 SVPxUpqcVeFGp0AAEGICJSGTbzAHGnWZd/OpHUjr5ZyriyfzA5quoPnGnoazMHrc 8Az3Rqd6aTiMINeIg7Gpj2hhGjwWdlZXOHvp0cCxzOujx+OQynI0Zgn7QwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGXNjcIwu2qE+ihpk5aSQlUbQAMTMB8GA1UdIwQY MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt YTU2ODM4NDRlNzkyLzEvWmMyTndqQzdhb1Q2S0dtVGxwSkNWUnRBQXhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA1BM6MA8E AgACMAkDBwAqAgLgBAYwDQYJKoZIhvcNAQELBQADggEBAEZ9gVTqyWv6qQWGu9cK BzkKynVOkNqmCUirsbx5Ry4qtuYQJcUr6Bvm8H4dleCqZ7A/kdokOYPvK3Ao4sL+ tBvQnugmR392Zu3h61aBPX5tv3Vf1cAZ3Al81aBuszRmZ8Qw/eW4sZa0bVyMmEku jjJ8t3PvgEyAKwHiVW38l93VUyHWSJ40R7B8ig/MXKn1nMbXJOdv8Azm394JprlO +7/vDl4hdityY8a+aTzY0dOkBsjNdDuBq7oPp0Sp4Mo+4hDABYel4klQ3OplP2mf uQYMKLXNedlT1f38n+PbqbVDRx1MFclNi7EgmSyUl60tLmL+xczoGetdaycaJl/c v5A= -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:41 2026 by rpki-client