This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/ZCmPNfqIdlxAM9m53SDv9GQZfCc.roa File: ZCmPNfqIdlxAM9m53SDv9GQZfCc.roa (raw, json) Hash identifier: pdrlFcu3fc1loHOmCUjjHjU4v0K6/wgDY+DGkNkZZzc= Subject key identifier: 64:29:8F:35:FA:88:76:5C:40:33:D9:B9:DD:20:EF:F4:64:19:7C:27 Certificate issuer: /CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa Certificate serial: 019B7AC8DF100FCB500EE62223A7216D9686 Authority key identifier: A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/ZCmPNfqIdlxAM9m53SDv9GQZfCc.roa Signing time: Thu 01 Jan 2026 18:19:03 +0000 ROA not before: Thu 01 Jan 2026 18:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59956 IP address blocks: 195.191.200.0/24 maxlen: 24 195.191.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:df:10:0f:cb:50:0e:e6:22:23:a7:21:6d:96:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa Validity Not Before: Jan 1 18:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64298f35fa88765c4033d9b9dd20eff464197c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4f:4c:98:b1:17:40:d3:59:db:cb:40:b3:3c: 1d:b9:0f:5a:31:05:e5:76:7d:2f:c3:14:b7:86:c2: 52:20:ae:ca:3f:ca:50:8a:51:23:ec:20:6f:c7:27: f6:87:73:1f:75:17:b3:b6:bc:fb:21:ff:6f:6d:b7: fb:23:66:2c:56:b1:7f:61:7a:1f:e6:d9:e0:56:73: 3c:8a:96:2b:ea:46:c2:1f:07:50:a3:78:1d:56:52: a1:cd:a1:e2:41:8f:b4:8e:de:c5:82:21:86:85:7a: 8a:4b:ba:f7:26:75:7e:ef:23:32:3f:17:90:6b:2e: 14:73:ec:5e:ae:9f:8f:b3:ad:77:20:06:0f:33:9d: 4f:a0:36:9d:00:4d:e3:1f:82:4a:fb:69:e1:2c:2e: 71:12:a1:20:ea:c1:48:62:f2:fd:01:a1:6e:f8:f4: 42:b7:38:6d:eb:e7:07:7d:6c:0b:6c:eb:e7:94:df: 91:dd:80:32:81:01:7a:be:07:1e:b5:41:f4:d0:c7: 19:3f:c3:50:8d:19:0b:fd:5b:4a:e3:70:44:0c:74: 4d:f9:8a:0c:78:5b:cd:c4:02:8c:be:35:29:24:5f: 89:77:37:62:81:aa:c9:43:f6:bf:9c:3f:54:69:cf: 36:f0:f6:dd:5f:0a:87:a9:d0:a2:f6:8a:b2:a8:34: 27:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:29:8F:35:FA:88:76:5C:40:33:D9:B9:DD:20:EF:F4:64:19:7C:27 X509v3 Authority Key Identifier: keyid:A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/ZCmPNfqIdlxAM9m53SDv9GQZfCc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.191.200.0/23 Signature Algorithm: sha256WithRSAEncryption 05:1c:52:32:02:18:ea:43:27:40:f3:79:76:68:75:61:d8:8d: 00:db:9f:9b:fb:dc:a8:08:67:0f:8a:71:80:5b:2a:c6:6f:3e: c9:e2:f5:85:32:9e:c3:84:4b:80:93:12:26:fd:53:a6:1d:db: ed:04:9f:57:00:a2:5c:25:dd:f1:fa:38:5e:b4:18:7c:a8:80: 78:a4:df:af:b2:7e:84:69:dd:ca:60:f4:46:98:32:86:e8:2d: 52:6f:14:a2:9d:61:db:b7:eb:31:09:57:b1:9c:ed:cd:9a:ff: 64:a0:6a:15:64:1a:36:5f:d5:b1:38:2a:52:a8:70:6b:20:dc: 12:c5:b8:18:4e:ba:36:9f:b3:bf:6b:62:54:df:f1:46:3c:79: 56:87:d8:3d:4b:e4:e7:cb:d0:0b:56:fb:40:c7:5c:19:aa:fc: 0e:89:a4:4d:04:a9:2c:68:88:e0:5b:21:e8:46:34:23:3c:c5: 62:80:9f:68:25:be:a4:b2:ae:bc:01:08:25:5a:f6:23:0d:b3: 04:0a:34:53:1d:77:53:fc:f8:42:6f:f0:b8:63:f4:44:c0:58: 03:6c:d4:f9:ac:ba:df:d9:ad:92:e8:72:18:39:2f:a0:62:8b: fb:4c:70:c7:85:8c:87:64:8d:3e:72:83:e7:15:05:e9:c2:8b: 04:2d:71:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yN8QD8tQDuYiI6chbZaGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MTYyMTAyZTVhM2MwYWVlYWI2M2MyMWVkOTJhODA1ODI2 ZGI3YWEwHhcNMjYwMTAxMTgxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDI5OGYzNWZhODg3NjVjNDAzM2Q5YjlkZDIwZWZmNDY0MTk3YzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE9MmLEXQNNZ28tAszwduQ9aMQXl dn0vwxS3hsJSIK7KP8pQilEj7CBvxyf2h3MfdReztrz7If9vbbf7I2YsVrF/YXof 5tngVnM8ipYr6kbCHwdQo3gdVlKhzaHiQY+0jt7FgiGGhXqKS7r3JnV+7yMyPxeQ ay4Uc+xerp+Ps613IAYPM51PoDadAE3jH4JK+2nhLC5xEqEg6sFIYvL9AaFu+PRC tzht6+cHfWwLbOvnlN+R3YAygQF6vgcetUH00McZP8NQjRkL/VtK43BEDHRN+YoM eFvNxAKMvjUpJF+JdzdigarJQ/a/nD9Uac828PbdXwqHqdCi9oqyqDQncQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGQpjzX6iHZcQDPZud0g7/RkGXwnMB8GA1UdIwQY MBaAFKYWIQLlo8Cu6rY8Ie2SqAWCbbeqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGhZaEF1V2p3SzdxdGp3aDdaS29CWUp0dDZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83ZGQyNWQtYTUyMS00NzljLTk4OGIt OWNlZTc3YmM1MjIyLzEvWkNtUE5mcUlkbHhBTTltNTNTRHY5R1FaZkNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy83ZGQyNWQtYTUyMS00NzljLTk4OGItOWNlZTc3YmM1MjIy LzEvcGhZaEF1V2p3SzdxdGp3aDdaS29CWUp0dDZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw7/IMA0G CSqGSIb3DQEBCwUAA4IBAQAFHFIyAhjqQydA83l2aHVh2I0A25+b+9yoCGcPinGA WyrGbz7J4vWFMp7DhEuAkxIm/VOmHdvtBJ9XAKJcJd3x+jhetBh8qIB4pN+vsn6E ad3KYPRGmDKG6C1SbxSinWHbt+sxCVexnO3Nmv9koGoVZBo2X9WxOCpSqHBrINwS xbgYTro2n7O/a2JU3/FGPHlWh9g9S+Tny9ALVvtAx1wZqvwOiaRNBKksaIjgWyHo RjQjPMVigJ9oJb6ksq68AQglWvYjDbMECjRTHXdT/PhCb/C4Y/REwFgDbNT5rLrf 2a2S6HIYOS+gYov7THDHhYyHZI0+coPnFQXpwosELXFQ -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:04 2026 by rpki-client