This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/Z5Q4cX10r4SFheIcdGTrUpCvuZU.roa File: Z5Q4cX10r4SFheIcdGTrUpCvuZU.roa (raw, json) Hash identifier: wMHIcBIbfU58/UoUwoAfje3LCzt53bakhjFaSE6tCKY= Subject key identifier: 67:94:38:71:7D:74:AF:84:85:85:E2:1C:74:64:EB:52:90:AF:B9:95 Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 019B7D5D0072E8EA774DA7E4E34C96FAA4F6 Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/Z5Q4cX10r4SFheIcdGTrUpCvuZU.roa Signing time: Fri 02 Jan 2026 06:20:05 +0000 ROA not before: Fri 02 Jan 2026 06:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202425 IP address blocks: 92.63.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:00:72:e8:ea:77:4d:a7:e4:e3:4c:96:fa:a4:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Jan 2 06:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=679438717d74af848585e21c7464eb5290afb995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0a:f1:f3:4b:7e:55:af:8b:00:6c:45:08:e1: 3c:0e:c2:33:6f:db:4d:5a:f9:83:e4:24:29:7a:ce: 29:ee:ff:53:d0:63:e7:4c:30:24:50:f8:53:51:29: 55:f9:25:37:27:fe:41:29:c9:b1:0a:cb:e1:a0:b1: 7a:87:37:47:08:07:e7:47:1e:63:f1:86:aa:e8:e2: da:00:15:b5:52:63:c2:d6:24:a4:62:d3:6b:74:12: ce:d9:69:3b:3e:1b:6f:57:a6:c4:32:b6:28:9f:c3: 20:cf:1f:cd:e6:7d:31:c7:cd:b5:53:f6:17:c7:0e: ad:10:4f:7f:41:86:1e:19:4a:fd:17:57:f3:18:57: 89:c4:98:44:e8:c6:0e:3c:b4:3b:03:2b:6c:f3:14: 4a:ca:e3:8b:20:89:ce:c4:7d:f3:37:3b:c2:ef:95: 8f:33:6a:e0:cf:44:96:42:a0:04:01:e0:8c:3a:6c: 44:dc:2e:b0:39:d4:8e:29:52:69:c9:b3:ad:29:42: a0:ef:70:7b:86:c8:a1:8e:c0:62:37:08:75:9b:3e: aa:38:4b:01:0e:46:d3:43:27:64:32:6d:c7:86:58: c7:e9:22:c2:b4:4b:f6:ad:f8:63:e8:68:37:31:8a: 28:67:c3:82:4a:2f:08:f9:6d:fd:7a:32:50:88:71: ef:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:94:38:71:7D:74:AF:84:85:85:E2:1C:74:64:EB:52:90:AF:B9:95 X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/Z5Q4cX10r4SFheIcdGTrUpCvuZU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.63.196.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:d1:0f:f3:de:5f:c3:6d:e6:71:63:5c:14:f3:93:01:39:c0: 87:a7:ba:3c:5e:19:93:8f:cb:5a:06:7d:96:80:80:ae:4a:d4: 97:b6:be:87:cb:13:c2:5c:b4:f6:3b:e3:0a:0d:95:c5:4d:45: 27:d5:09:d7:3a:04:62:61:bd:f9:73:2f:66:e1:df:e0:9f:4c: 0a:32:33:82:ea:d9:ec:ef:e4:00:17:b2:e5:a1:16:8e:55:44: 6a:0d:c8:0b:33:15:71:25:3c:fe:60:2e:b1:57:c9:82:e2:3c: 03:ab:a4:e2:f9:d3:cb:bf:23:b2:eb:a1:d6:06:a1:79:3c:45: 2b:3b:1b:26:3a:28:ac:ef:9a:92:85:2c:10:67:22:01:bf:4a: fd:42:84:ad:82:11:d8:a6:dc:fd:9a:b8:1a:1d:5f:97:c5:64: 2d:63:6d:52:99:ab:42:6d:76:5d:01:5b:ca:eb:4b:61:cd:f1: 5c:0c:28:b0:f3:b2:bf:e0:ab:4a:82:84:75:bf:78:f8:3f:3d: 54:b1:19:93:5a:09:31:41:58:a7:c0:84:fc:3e:eb:24:3d:1a: d1:fa:78:7d:83:ad:9d:a4:f3:93:a0:23:fe:fa:82:ea:cb:b6: c0:36:24:04:fb:e1:9b:12:8f:0d:4d:81:a1:08:c5:a2:75:09: 49:8c:d5:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XQBy6Op3Tafk40yW+qT2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjYwMTAyMDYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Nzk0Mzg3MTdkNzRhZjg0ODU4NWUyMWM3NDY0ZWI1MjkwYWZiOTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywrx80t+Va+LAGxFCOE8DsIzb9tN WvmD5CQpes4p7v9T0GPnTDAkUPhTUSlV+SU3J/5BKcmxCsvhoLF6hzdHCAfnRx5j 8Yaq6OLaABW1UmPC1iSkYtNrdBLO2Wk7PhtvV6bEMrYon8Mgzx/N5n0xx821U/YX xw6tEE9/QYYeGUr9F1fzGFeJxJhE6MYOPLQ7Ayts8xRKyuOLIInOxH3zNzvC75WP M2rgz0SWQqAEAeCMOmxE3C6wOdSOKVJpybOtKUKg73B7hsihjsBiNwh1mz6qOEsB DkbTQydkMm3HhljH6SLCtEv2rfhj6Gg3MYooZ8OCSi8I+W39ejJQiHHvDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGeUOHF9dK+EhYXiHHRk61KQr7mVMB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvWjVRNGNYMTByNFNGaGVJY2RHVHJVcEN2dVpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXD/EMA0G CSqGSIb3DQEBCwUAA4IBAQBP0Q/z3l/DbeZxY1wU85MBOcCHp7o8XhmTj8taBn2W gICuStSXtr6HyxPCXLT2O+MKDZXFTUUn1QnXOgRiYb35cy9m4d/gn0wKMjOC6tns 7+QAF7LloRaOVURqDcgLMxVxJTz+YC6xV8mC4jwDq6Ti+dPLvyOy66HWBqF5PEUr OxsmOiis75qShSwQZyIBv0r9QoStghHYptz9mrgaHV+XxWQtY21SmatCbXZdAVvK 60thzfFcDCiw87K/4KtKgoR1v3j4Pz1UsRmTWgkxQVinwIT8PuskPRrR+nh9g62d pPOToCP++oLqy7bANiQE++GbEo8NTYGhCMWidQlJjNWp -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:32 2026 by rpki-client