This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/cpZoZ10aBNNPxq3hdaGW_4ZG290.roa File: cpZoZ10aBNNPxq3hdaGW_4ZG290.roa (raw, json) Hash identifier: bdq1vLVTsHkPkx6hNpQzkfsY/RYRRIKrPjqEGG+1vI4= Subject key identifier: 72:96:68:67:5D:1A:04:D3:4F:C6:AD:E1:75:A1:96:FF:86:46:DB:DD Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78348D5851703DE26B6B8CC4911399E8 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/cpZoZ10aBNNPxq3hdaGW_4ZG290.roa Signing time: Thu 01 Jan 2026 06:17:48 +0000 ROA not before: Thu 01 Jan 2026 06:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208760 IP address blocks: 192.165.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:8d:58:51:70:3d:e2:6b:6b:8c:c4:91:13:99:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=729668675d1a04d34fc6ade175a196ff8646dbdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:92:7c:49:9e:68:42:3e:ff:e3:c9:b2:28:bb: 53:09:32:94:13:31:f4:fc:23:aa:9e:27:1d:b7:25: da:5b:35:9b:a0:1c:b5:3e:f0:44:49:2e:dc:ca:0d: 42:c8:74:bf:80:df:a7:b3:dc:62:2b:12:4b:da:1d: 06:8b:57:ba:80:85:77:31:f7:70:39:f6:39:47:8e: 37:f2:f8:83:08:e6:be:6a:92:9c:5b:d1:2b:bf:9b: d0:db:9e:ee:8a:47:94:c5:77:9d:a4:7b:d9:bb:18: c3:06:95:a5:e1:03:fc:5e:af:4c:3f:57:89:cd:f6: f5:e0:8f:14:43:36:59:c7:3d:85:df:40:e0:96:ea: f2:20:5b:d1:df:51:ce:a8:68:27:d6:89:53:a4:80: 78:96:65:19:ff:2d:92:e7:06:d5:4a:0c:f7:84:2f: 52:f2:99:98:ef:c8:a3:cc:8c:24:13:4e:25:09:35: 0d:b4:fd:d3:d8:1f:0e:ff:8d:eb:c7:af:02:b9:a0: 6d:01:b2:a7:24:5e:dc:fc:c5:53:98:31:2b:a3:54: 45:4f:92:2b:b9:9c:0f:01:27:d6:31:5d:74:1d:9c: 09:ac:02:bf:2f:5e:bc:6d:f3:f5:8d:32:ac:54:f1: 2b:0d:4c:12:3a:51:5d:89:5f:4d:04:d2:06:9d:7c: 52:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:96:68:67:5D:1A:04:D3:4F:C6:AD:E1:75:A1:96:FF:86:46:DB:DD X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/cpZoZ10aBNNPxq3hdaGW_4ZG290.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.165.10.0/24 Signature Algorithm: sha256WithRSAEncryption 29:f9:1a:a8:63:ff:1a:35:6a:59:0c:30:78:b6:37:17:f7:a6: b4:32:68:7d:b6:77:9f:8f:af:dc:35:00:bb:10:b5:7a:74:7f: 57:0e:85:9f:62:06:d3:60:60:44:46:5c:9f:e8:6a:cd:3b:ae: ab:28:e8:68:2c:57:7b:60:73:f8:50:47:2e:cd:0e:7c:c7:3d: d3:67:5f:6a:db:24:57:e1:a8:ca:e4:fc:90:e5:c5:98:52:22: e7:64:bd:c5:08:c7:ef:91:81:f8:42:b5:af:cd:5d:54:b5:c0: 52:56:a1:89:6c:6e:c2:49:5e:e6:9d:84:d0:37:72:4e:23:6c: c1:62:8e:54:17:99:29:dc:58:f9:e5:b2:47:70:31:cc:ab:ea: 7c:b4:b7:3d:79:f3:72:f3:26:0c:2b:78:52:e4:e9:b8:11:46: 3a:75:e3:e7:1a:6a:fc:05:26:36:4f:5a:12:49:f6:c1:d6:d6: 3b:c1:c9:65:bc:b2:9f:34:72:22:6e:1e:31:3b:b9:e7:8a:e7: e4:1d:a3:e7:49:fd:ed:1b:7a:d3:74:f0:8d:ef:ba:a7:24:38: a0:97:dd:9c:68:cf:63:58:b7:a0:ab:f5:2c:26:00:91:d3:48: a9:fb:29:d4:60:5c:60:24:3a:6c:5c:c9:a9:af:bb:b5:bd:00: 2c:1a:5f:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NI1YUXA94mtrjMSRE5noMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Mjk2Njg2NzVkMWEwNGQzNGZjNmFkZTE3NWExOTZmZjg2NDZkYmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpJ8SZ5oQj7/48myKLtTCTKUEzH0 /COqnicdtyXaWzWboBy1PvBESS7cyg1CyHS/gN+ns9xiKxJL2h0Gi1e6gIV3Mfdw OfY5R4438viDCOa+apKcW9Erv5vQ257uikeUxXedpHvZuxjDBpWl4QP8Xq9MP1eJ zfb14I8UQzZZxz2F30DgluryIFvR31HOqGgn1olTpIB4lmUZ/y2S5wbVSgz3hC9S 8pmY78ijzIwkE04lCTUNtP3T2B8O/43rx68CuaBtAbKnJF7c/MVTmDEro1RFT5Ir uZwPASfWMV10HZwJrAK/L168bfP1jTKsVPErDUwSOlFdiV9NBNIGnXxSswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHKWaGddGgTTT8at4XWhlv+GRtvdMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvY3Bab1oxMGFCTk5QeHEzaGRhR1dfNFpHMjkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKUKMA0G CSqGSIb3DQEBCwUAA4IBAQAp+RqoY/8aNWpZDDB4tjcX96a0Mmh9tnefj6/cNQC7 ELV6dH9XDoWfYgbTYGBERlyf6GrNO66rKOhoLFd7YHP4UEcuzQ58xz3TZ19q2yRX 4ajK5PyQ5cWYUiLnZL3FCMfvkYH4QrWvzV1UtcBSVqGJbG7CSV7mnYTQN3JOI2zB Yo5UF5kp3Fj55bJHcDHMq+p8tLc9efNy8yYMK3hS5Om4EUY6dePnGmr8BSY2T1oS SfbB1tY7wcllvLKfNHIibh4xO7nniufkHaPnSf3tG3rTdPCN77qnJDigl92caM9j WLegq/UsJgCR00ip+ynUYFxgJDpsXMmpr7u1vQAsGl8c -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:00 2026 by rpki-client