This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/zNRNe7iUmnwTGKB5gWzqcAs33dM.roa File: zNRNe7iUmnwTGKB5gWzqcAs33dM.roa (raw, json) Hash identifier: bT6PruvyhscdCADKkTGMrN3neh191s3DkCniaGWu0zI= Subject key identifier: CC:D4:4D:7B:B8:94:9A:7C:13:18:A0:79:81:6C:EA:70:0B:37:DD:D3 Certificate issuer: /CN=54d65d06de265da2b5d588e06df8816ef45b2e17 Certificate serial: 019B7C1161A4651779AAA225BF4D17252EDA Authority key identifier: 54:D6:5D:06:DE:26:5D:A2:B5:D5:88:E0:6D:F8:81:6E:F4:5B:2E:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/zNRNe7iUmnwTGKB5gWzqcAs33dM.roa Signing time: Fri 02 Jan 2026 00:17:52 +0000 ROA not before: Fri 02 Jan 2026 00:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16740 IP address blocks: 130.43.163.0/24 maxlen: 24 2a11:46c0::/32 maxlen: 48 2a11:46c0::/48 maxlen: 48 2a11:46c0:2e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:61:a4:65:17:79:aa:a2:25:bf:4d:17:25:2e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54d65d06de265da2b5d588e06df8816ef45b2e17 Validity Not Before: Jan 2 00:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ccd44d7bb8949a7c1318a079816cea700b37ddd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5a:0e:4b:73:10:06:b6:be:58:a6:7b:8b:ef: 11:a5:f5:50:23:ec:39:73:ca:83:d6:74:ad:3e:f8: 79:c4:4f:ae:d8:38:cc:f6:3a:4b:2f:52:32:eb:7f: 74:51:56:73:ff:eb:11:56:09:34:8a:33:1e:48:b3: 32:22:2d:4d:51:0c:89:2f:1a:d3:3a:e7:8b:10:35: 28:6a:0f:bf:2d:76:c8:91:f1:19:5a:c2:d5:bc:3d: f7:ea:d5:aa:e6:03:c1:3b:ca:3b:4c:8f:0a:77:54: 30:14:b6:6a:3b:c2:a8:05:b0:c8:d3:5c:f4:e4:61: 78:a2:91:2d:58:c4:44:33:10:2c:5d:1e:7d:24:2f: eb:e5:82:10:d9:05:2b:25:b7:b7:b3:85:31:80:da: 30:43:b5:e0:7f:6a:c0:02:ba:e3:d1:13:cc:95:61: e9:57:38:d5:0d:70:a0:4d:c0:4b:c8:0c:e2:ee:8a: 85:15:e1:2d:9a:3a:f9:8b:2b:31:b1:93:12:48:f0: 53:f2:44:4a:89:c8:05:a6:55:c4:b8:8c:f7:54:1e: 5b:bb:69:c2:fa:50:b8:53:e3:d5:3c:59:dd:f5:f1: a1:88:54:df:03:fa:20:c8:43:d2:81:4c:8d:a4:28: c7:71:62:55:11:8c:8a:09:41:f1:18:1d:ac:84:a3: e6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D4:4D:7B:B8:94:9A:7C:13:18:A0:79:81:6C:EA:70:0B:37:DD:D3 X509v3 Authority Key Identifier: keyid:54:D6:5D:06:DE:26:5D:A2:B5:D5:88:E0:6D:F8:81:6E:F4:5B:2E:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/zNRNe7iUmnwTGKB5gWzqcAs33dM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.43.163.0/24 IPv6: 2a11:46c0::/32 Signature Algorithm: sha256WithRSAEncryption 84:15:28:df:da:48:16:da:49:ad:22:c7:26:9f:4c:ca:74:53: 9f:47:ac:c1:5e:69:e1:e2:ec:1a:7d:70:ee:3b:cd:31:fd:2e: 10:0a:19:5e:91:4c:73:a9:c4:0f:4a:f2:42:fb:64:60:19:71: 70:d2:94:f6:e4:3e:8d:cc:85:09:bf:6b:59:01:61:aa:94:f6: f4:76:9f:43:40:93:95:00:d9:63:f6:f4:19:55:d9:70:50:17: 8b:83:c9:4e:fa:b5:2a:34:85:f0:3c:e2:53:35:3b:08:84:91: a3:d8:68:0f:3c:43:0f:6d:ed:f1:00:94:88:15:52:7d:84:17: 2c:14:da:60:72:50:71:6a:77:af:e8:dd:7d:e8:56:a6:97:cb: 76:ce:c0:bc:bb:d5:55:7b:b6:a2:0d:5e:5a:49:61:a3:9e:03: 93:0d:5b:07:7c:24:b9:20:b2:09:a2:6f:5c:9b:e4:39:b1:a0: d3:c6:58:0b:71:33:c9:ba:80:03:fa:d0:0b:d4:5c:fc:8b:b2: fb:33:4a:b4:33:97:5f:54:d1:af:8b:bd:9e:78:5e:14:ba:6f: 39:82:ad:1a:fc:33:e3:2f:dd:06:b8:dd:e7:de:0d:e7:fd:ef: 75:fc:c0:2d:ce:f9:15:a5:d9:70:ef:c6:a5:51:7f:99:16:5d: 4a:c1:2e:6e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8EWGkZRd5qqIlv00XJS7aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ZDY1ZDA2ZGUyNjVkYTJiNWQ1ODhlMDZkZjg4MTZlZjQ1 YjJlMTcwHhcNMjYwMTAyMDAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2Q0NGQ3YmI4OTQ5YTdjMTMxOGEwNzk4MTZjZWE3MDBiMzdkZGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1oOS3MQBra+WKZ7i+8RpfVQI+w5 c8qD1nStPvh5xE+u2DjM9jpLL1Iy6390UVZz/+sRVgk0ijMeSLMyIi1NUQyJLxrT OueLEDUoag+/LXbIkfEZWsLVvD336tWq5gPBO8o7TI8Kd1QwFLZqO8KoBbDI01z0 5GF4opEtWMREMxAsXR59JC/r5YIQ2QUrJbe3s4UxgNowQ7Xgf2rAArrj0RPMlWHp VzjVDXCgTcBLyAzi7oqFFeEtmjr5iysxsZMSSPBT8kRKicgFplXEuIz3VB5bu2nC +lC4U+PVPFnd9fGhiFTfA/ogyEPSgUyNpCjHcWJVEYyKCUHxGB2shKPmJwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMzUTXu4lJp8ExigeYFs6nALN93TMB8GA1UdIwQY MBaAFFTWXQbeJl2itdWI4G34gW70Wy4XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk5aZEJ0NG1YYUsxMVlqZ2JmaUJidlJiTGhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80ZWE4NzMtZmFmYy00MGQxLWFhZWIt YTEzOTc4NzBiMTY2LzEvek5STmU3aVVtbndUR0tCNWdXenFjQXMzM2RNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS80ZWE4NzMtZmFmYy00MGQxLWFhZWItYTEzOTc4NzBiMTY2 LzEvVk5aZEJ0NG1YYUsxMVlqZ2JmaUJidlJiTGhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAgiujMA0E AgACMAcDBQAqEUbAMA0GCSqGSIb3DQEBCwUAA4IBAQCEFSjf2kgW2kmtIscmn0zK dFOfR6zBXmnh4uwafXDuO80x/S4QChlekUxzqcQPSvJC+2RgGXFw0pT25D6NzIUJ v2tZAWGqlPb0dp9DQJOVANlj9vQZVdlwUBeLg8lO+rUqNIXwPOJTNTsIhJGj2GgP PEMPbe3xAJSIFVJ9hBcsFNpgclBxanev6N196Faml8t2zsC8u9VVe7aiDV5aSWGj ngOTDVsHfCS5ILIJom9cm+Q5saDTxlgLcTPJuoAD+tAL1Fz8i7L7M0q0M5dfVNGv i72eeF4Uum85gq0a/DPjL90GuN3n3g3n/e91/MAtzvkVpdlw78alUX+ZFl1KwS5u -----END CERTIFICATE-----Generated at Mon Jan 26 00:26:08 2026 by rpki-client