This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/zfNePtARpLFBJ2ZsTJgcRyy7hbY.roa File: zfNePtARpLFBJ2ZsTJgcRyy7hbY.roa (raw, json) Hash identifier: I0uU5C0D3tokTUSoJLjLeAGIF9rraTRy7Q8Sr7jnK44= Subject key identifier: CD:F3:5E:3E:D0:11:A4:B1:41:27:66:6C:4C:98:1C:47:2C:BB:85:B6 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37CBDBC969F24194D6025E97634B6A Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/zfNePtARpLFBJ2ZsTJgcRyy7hbY.roa Signing time: Fri 02 Jan 2026 10:19:04 +0000 ROA not before: Fri 02 Jan 2026 10:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212683 IP address blocks: 158.173.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:cb:db:c9:69:f2:41:94:d6:02:5e:97:63:4b:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cdf35e3ed011a4b14127666c4c981c472cbb85b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:42:ad:98:be:be:4d:3c:f2:91:54:3d:8b:11: ea:04:46:81:54:cc:8f:20:ca:c0:83:a5:98:d7:0a: fc:f7:de:f4:26:51:2f:9a:7f:5f:da:d5:c3:41:53: a0:fc:13:83:20:3e:b5:b3:62:0a:c8:e5:29:0e:48: 3b:9a:cc:fb:1f:58:59:67:3c:9d:09:09:0c:3a:98: d4:c6:71:b3:4f:d2:6a:1b:15:b0:e1:f3:2c:bd:a2: 13:37:a2:45:5b:84:4d:e1:d2:cc:02:2a:44:b7:61: 5f:a8:14:06:99:e1:62:d0:63:3e:63:d1:80:21:eb: 5c:a3:a1:04:4e:45:8c:f4:66:d5:34:21:c6:74:e5: 3c:fd:a3:a5:c0:87:f6:bb:27:0d:b1:59:a7:25:23: 57:99:1b:66:ee:dd:bc:fb:04:ad:3b:9d:42:54:2b: 80:ec:e0:8f:7c:1d:a7:f0:1c:3a:af:06:98:72:ae: 63:cb:9a:41:e6:64:a7:25:8f:29:79:ce:82:69:43: 6f:e1:80:c2:8a:1c:eb:88:83:f7:c4:34:81:24:83: 22:aa:79:4f:ee:7f:e2:df:3a:ba:cd:80:a7:53:d4: 1a:29:43:80:b8:64:28:ea:8a:4a:a0:a0:4a:c5:58: 83:1e:1d:ab:c6:f3:17:02:9e:2f:8a:cd:f2:68:f6: a3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F3:5E:3E:D0:11:A4:B1:41:27:66:6C:4C:98:1C:47:2C:BB:85:B6 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/zfNePtARpLFBJ2ZsTJgcRyy7hbY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.173.146.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:1e:66:fc:58:db:f7:b2:a9:48:56:2a:11:9d:1b:e0:b3:7c: 9b:53:f7:62:51:a0:81:e5:26:1b:1b:95:a0:a6:4d:d0:10:df: 62:13:00:82:f6:93:9e:60:8f:7e:0f:d2:9e:06:4b:0c:43:dd: 3f:e6:58:0a:a8:f4:db:59:c8:fc:a6:62:54:fb:04:6b:b0:25: d4:1b:ce:4b:4a:4a:f8:74:7f:d3:f1:5a:69:15:0e:01:4c:84: c7:9b:ad:74:6b:92:87:be:f3:0a:bf:b7:18:fc:c5:16:f1:c6: 02:21:72:0e:a0:f5:84:9a:d8:41:a7:0d:b1:e2:0d:05:e7:b0: 79:47:7b:87:af:07:f9:c6:e5:f6:14:a5:5f:ca:b7:da:30:48: f3:2e:ac:de:d0:bd:99:b9:53:d6:92:72:cc:cd:6c:e9:ca:cb: 5a:78:f8:09:7f:60:62:fe:39:31:e7:42:16:e9:99:b7:2b:70: 6a:2a:aa:7c:55:1f:b3:2a:49:4e:b4:b7:f0:6e:a9:d8:b1:a5: 15:b3:8a:5c:fa:31:de:25:02:d1:a2:c1:e6:8b:a8:cb:be:df: c8:74:2b:4d:d4:d6:dd:3b:e6:1d:78:7a:83:85:b1:9c:b9:33: 88:79:17:8d:c2:ad:fa:ef:ef:41:53:5b:a0:a5:01:75:81:a4: fe:c9:f5:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N8vbyWnyQZTWAl6XY0tqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGYzNWUzZWQwMTFhNGIxNDEyNzY2NmM0Yzk4MWM0NzJjYmI4NWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9UKtmL6+TTzykVQ9ixHqBEaBVMyP IMrAg6WY1wr89970JlEvmn9f2tXDQVOg/BODID61s2IKyOUpDkg7msz7H1hZZzyd CQkMOpjUxnGzT9JqGxWw4fMsvaITN6JFW4RN4dLMAipEt2FfqBQGmeFi0GM+Y9GA Ietco6EETkWM9GbVNCHGdOU8/aOlwIf2uycNsVmnJSNXmRtm7t28+wStO51CVCuA 7OCPfB2n8Bw6rwaYcq5jy5pB5mSnJY8pec6CaUNv4YDCihzriIP3xDSBJIMiqnlP 7n/i3zq6zYCnU9QaKUOAuGQo6opKoKBKxViDHh2rxvMXAp4vis3yaPajiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM3zXj7QEaSxQSdmbEyYHEcsu4W2MB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvemZOZVB0QVJwTEZCSjJac1RKZ2NSeXk3aGJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnq2SMA0G CSqGSIb3DQEBCwUAA4IBAQCfHmb8WNv3sqlIVioRnRvgs3ybU/diUaCB5SYbG5Wg pk3QEN9iEwCC9pOeYI9+D9KeBksMQ90/5lgKqPTbWcj8pmJU+wRrsCXUG85LSkr4 dH/T8VppFQ4BTITHm610a5KHvvMKv7cY/MUW8cYCIXIOoPWEmthBpw2x4g0F57B5 R3uHrwf5xuX2FKVfyrfaMEjzLqze0L2ZuVPWknLMzWzpystaePgJf2Bi/jkx50IW 6Zm3K3BqKqp8VR+zKklOtLfwbqnYsaUVs4pc+jHeJQLRosHmi6jLvt/IdCtN1Nbd O+YdeHqDhbGcuTOIeReNwq367+9BU1ugpQF1gaT+yfXi -----END CERTIFICATE-----Generated at Fri Jan 23 04:39:27 2026 by rpki-client