This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Zw2FuO9ciaINX_lvGyfSaK_a_oo.roa File: Zw2FuO9ciaINX_lvGyfSaK_a_oo.roa (raw, json) Hash identifier: oypHEtey2P8cKDImmvzLPgQVWo3d1AkiBxOPOuvpJoQ= Subject key identifier: 67:0D:85:B8:EF:5C:89:A2:0D:5F:F9:6F:1B:27:D2:68:AF:DA:FE:8A Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C77993257E88E0C9B4DBAE7137BBAF Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Zw2FuO9ciaINX_lvGyfSaK_a_oo.roa Signing time: Thu 01 Jan 2026 04:18:40 +0000 ROA not before: Thu 01 Jan 2026 04:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204271 IP address blocks: 62.89.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:79:93:25:7e:88:e0:c9:b4:db:ae:71:37:bb:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=670d85b8ef5c89a20d5ff96f1b27d268afdafe8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d6:fd:9d:62:0d:52:4b:06:b1:db:93:11:f5: 79:b0:f0:30:b8:dd:c5:2a:f9:4c:c6:80:17:2a:7e: df:d8:c7:00:34:93:2f:ad:cf:ce:b0:83:f0:fc:aa: 18:1d:07:51:39:71:2a:47:a9:cd:a2:33:08:6c:63: f4:8d:35:78:21:8b:da:22:e4:eb:a8:b0:d0:93:39: e4:ba:90:0d:b8:87:43:da:b8:9d:64:9a:7f:bc:0f: b0:7b:e8:0b:fe:68:d6:93:08:b6:6a:2d:26:70:a3: 79:3a:de:cc:fb:35:86:13:d5:e4:23:e1:75:70:8f: 42:a1:07:7b:e2:46:32:f7:49:70:3a:17:65:df:07: 94:d1:62:17:4e:e5:eb:c6:c7:61:45:03:af:26:21: 2f:36:73:1b:ee:3e:ad:a8:0a:87:db:8d:cc:72:8a: 9e:79:71:c1:9f:77:63:82:5e:32:76:a3:d0:00:73: 03:c6:fc:e2:3d:44:9e:8c:91:de:89:e5:94:77:51: 41:9b:81:c0:e5:15:cc:35:1e:de:9e:f3:68:53:6c: d3:f1:b3:b9:54:5f:18:60:e6:41:9c:e7:42:2e:f5: 9c:ed:62:c6:73:b0:61:2f:9d:0c:5c:91:ac:7f:8f: 63:08:26:11:c9:7e:dd:17:a4:dc:bb:5a:56:df:41: 7d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0D:85:B8:EF:5C:89:A2:0D:5F:F9:6F:1B:27:D2:68:AF:DA:FE:8A X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Zw2FuO9ciaINX_lvGyfSaK_a_oo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.89.193.0/24 Signature Algorithm: sha256WithRSAEncryption 71:91:85:5a:bd:f8:f0:80:40:f6:9a:a7:65:2a:5b:48:d1:b6: 6e:bb:9b:94:51:ae:c6:00:a1:a5:77:c3:2b:01:ea:6a:90:55: d7:a2:83:ce:30:bc:e4:a0:d7:43:13:9a:eb:a1:98:c9:ca:25: 11:b9:93:e6:a7:9d:70:39:23:2a:17:72:18:0b:58:de:d5:5d: 33:15:56:34:cb:a7:ad:68:70:bb:56:14:d1:e0:e4:ed:4e:dd: 48:3f:db:13:af:7d:ae:44:08:dc:e8:00:b4:ff:be:62:1c:6a: 5d:e0:6f:90:9e:53:07:77:7a:4b:53:af:0a:f1:63:20:3b:61: 54:af:ae:2c:31:11:c9:17:03:94:ff:e5:ed:14:6a:9d:45:63: dc:a6:c6:0c:d4:a5:ca:52:99:b9:e0:28:4a:a1:df:a8:81:e6: 4d:b8:83:18:1c:99:ee:4c:9b:aa:52:a8:e0:a8:d8:44:c5:1e: 93:5f:61:c2:65:10:09:6f:a9:ad:b9:dc:60:24:24:09:82:13: 7b:a0:b0:7f:c9:7c:d4:12:a5:15:ac:5e:0c:f8:d7:12:d7:e6: a4:bd:76:1a:c0:b9:53:e3:1b:e6:a0:ca:90:f6:01:c3:2a:63: d4:3b:49:24:5a:b6:21:d8:f4:db:cb:89:93:16:bc:38:ca:1c: 9b:02:fc:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3mTJX6I4Mm0265xN7uvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzBkODViOGVmNWM4OWEyMGQ1ZmY5NmYxYjI3ZDI2OGFmZGFmZThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9b9nWINUksGsduTEfV5sPAwuN3F KvlMxoAXKn7f2McANJMvrc/OsIPw/KoYHQdROXEqR6nNojMIbGP0jTV4IYvaIuTr qLDQkznkupANuIdD2ridZJp/vA+we+gL/mjWkwi2ai0mcKN5Ot7M+zWGE9XkI+F1 cI9CoQd74kYy90lwOhdl3weU0WIXTuXrxsdhRQOvJiEvNnMb7j6tqAqH243Mcoqe eXHBn3djgl4ydqPQAHMDxvziPUSejJHeieWUd1FBm4HA5RXMNR7envNoU2zT8bO5 VF8YYOZBnOdCLvWc7WLGc7BhL50MXJGsf49jCCYRyX7dF6Tcu1pW30F9WwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGcNhbjvXImiDV/5bxsn0miv2v6KMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvWncyRnVPOWNpYUlOWF9sdkd5ZlNhS19hX29vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPlnBMA0G CSqGSIb3DQEBCwUAA4IBAQBxkYVavfjwgED2mqdlKltI0bZuu5uUUa7GAKGld8Mr AepqkFXXooPOMLzkoNdDE5rroZjJyiURuZPmp51wOSMqF3IYC1je1V0zFVY0y6et aHC7VhTR4OTtTt1IP9sTr32uRAjc6AC0/75iHGpd4G+QnlMHd3pLU68K8WMgO2FU r64sMRHJFwOU/+XtFGqdRWPcpsYM1KXKUpm54ChKod+ogeZNuIMYHJnuTJuqUqjg qNhExR6TX2HCZRAJb6mtudxgJCQJghN7oLB/yXzUEqUVrF4M+NcS1+akvXYawLlT 4xvmoMqQ9gHDKmPUO0kkWrYh2PTby4mTFrw4yhybAvza -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:04 2026 by rpki-client