This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Z6EsTbxAZh_DeqdSbPTSOzNP4Rg.roa File: Z6EsTbxAZh_DeqdSbPTSOzNP4Rg.roa (raw, json) Hash identifier: APqfOMx9drqqUU8AfkRut1w66GM/87hHdYwHbA7Vv4o= Subject key identifier: 67:A1:2C:4D:BC:40:66:1F:C3:7A:A7:52:6C:F4:D2:3B:33:4F:E1:18 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F85755F5442EC93C09170F622D6703F Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Z6EsTbxAZh_DeqdSbPTSOzNP4Rg.roa Signing time: Fri 02 Jan 2026 16:23:31 +0000 ROA not before: Fri 02 Jan 2026 16:23:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215594 IP address blocks: 212.193.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:75:5f:54:42:ec:93:c0:91:70:f6:22:d6:70:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67a12c4dbc40661fc37aa7526cf4d23b334fe118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ac:f9:88:9b:d6:70:c9:e5:2a:27:cd:76:4e: ec:75:92:bf:05:c7:49:ce:bb:49:35:8c:d8:a6:dc: 36:17:51:b7:6e:a9:22:ee:b3:8f:99:ba:09:16:29: a0:96:38:9b:7e:97:2f:68:d2:e0:63:b5:ca:60:e7: 90:e0:ae:82:11:11:57:fa:5e:1a:fe:8c:8e:3d:27: 1d:06:5e:6a:ec:04:e2:67:a7:84:ef:98:e3:ed:91: 81:b6:36:76:8c:53:be:b4:60:e2:d3:d9:1a:72:64: e2:dc:17:47:99:de:a5:c2:6f:55:e9:9c:78:c5:be: a3:4f:fb:88:ed:11:13:bb:33:84:55:f3:d1:99:9a: 6c:bd:71:57:09:c4:48:c8:54:ab:81:36:b2:ac:db: 7f:25:32:8a:d4:d6:85:36:a4:62:f0:f2:05:c1:2d: c9:5d:d9:45:b1:db:ea:3b:f3:47:2d:97:60:f9:64: c4:80:2f:36:1e:74:bd:c3:1b:c4:f8:48:63:11:52: 55:77:c5:ab:34:13:7a:72:45:3e:7c:11:e1:26:17: bd:09:54:25:3d:38:8f:54:d0:c7:a8:c3:7a:d8:79: 14:d5:24:dc:e8:9b:7e:f5:8b:18:b3:46:f7:00:1a: ea:1e:c4:86:93:2d:06:37:48:9c:58:e5:cd:10:55: e3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A1:2C:4D:BC:40:66:1F:C3:7A:A7:52:6C:F4:D2:3B:33:4F:E1:18 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Z6EsTbxAZh_DeqdSbPTSOzNP4Rg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.193.28.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:3e:43:ff:72:e8:08:33:0c:4b:76:cc:bb:b5:ea:e1:9d:38: 7b:00:ce:8b:83:bc:21:a2:0c:32:ea:5b:ae:6e:60:f3:3a:f2: 3f:e8:0e:5c:df:65:7c:42:7d:c9:d7:43:c5:8f:9f:31:15:2f: 07:85:32:4a:87:55:36:7c:2d:19:e7:5c:00:f1:92:3f:42:e8: ef:1a:51:48:c0:b9:58:06:3c:3a:38:b3:e6:26:1b:42:fe:30: 37:be:dd:80:5c:a9:60:53:77:bf:8f:5f:b5:66:f4:07:0d:92: 35:f4:30:b5:94:cb:e4:4a:05:0d:4d:ec:69:bd:2a:16:77:5c: a4:9e:96:2f:6f:56:0a:ae:7c:51:77:ad:dd:0c:79:66:02:85: f7:2c:ea:a0:54:b0:23:a1:24:1d:f9:b7:49:87:a0:e6:3b:b3: b7:4f:0b:35:e2:0b:be:6e:e8:ab:ab:22:db:dc:da:d4:c8:c9: 64:14:98:40:1f:bc:7d:d0:21:91:0e:35:5b:ac:2d:62:6e:5a: 39:c3:8b:d7:c6:9e:b2:92:62:88:26:b7:4d:41:89:02:ae:f5: e6:91:34:b1:fc:df:fd:f1:c0:74:d6:08:5d:ed:6a:09:55:71: 1d:69:d7:92:03:9f:78:ee:84:e3:c7:00:7e:11:ed:a7:33:36: 84:2c:ca:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hXVfVELsk8CRcPYi1nA/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2ExMmM0ZGJjNDA2NjFmYzM3YWE3NTI2Y2Y0ZDIzYjMzNGZlMTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6z5iJvWcMnlKifNdk7sdZK/BcdJ zrtJNYzYptw2F1G3bqki7rOPmboJFimgljibfpcvaNLgY7XKYOeQ4K6CERFX+l4a /oyOPScdBl5q7ATiZ6eE75jj7ZGBtjZ2jFO+tGDi09kacmTi3BdHmd6lwm9V6Zx4 xb6jT/uI7RETuzOEVfPRmZpsvXFXCcRIyFSrgTayrNt/JTKK1NaFNqRi8PIFwS3J XdlFsdvqO/NHLZdg+WTEgC82HnS9wxvE+EhjEVJVd8WrNBN6ckU+fBHhJhe9CVQl PTiPVNDHqMN62HkU1STc6Jt+9YsYs0b3ABrqHsSGky0GN0icWOXNEFXjBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGehLE28QGYfw3qnUmz00jszT+EYMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvWjZFc1RieEFaaF9EZXFkU2JQVFNPek5QNFJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1MEcMA0G CSqGSIb3DQEBCwUAA4IBAQA+PkP/cugIMwxLdsy7terhnTh7AM6Lg7whogwy6luu bmDzOvI/6A5c32V8Qn3J10PFj58xFS8HhTJKh1U2fC0Z51wA8ZI/QujvGlFIwLlY Bjw6OLPmJhtC/jA3vt2AXKlgU3e/j1+1ZvQHDZI19DC1lMvkSgUNTexpvSoWd1yk npYvb1YKrnxRd63dDHlmAoX3LOqgVLAjoSQd+bdJh6DmO7O3Tws14gu+buirqyLb 3NrUyMlkFJhAH7x90CGRDjVbrC1iblo5w4vXxp6ykmKIJrdNQYkCrvXmkTSx/N/9 8cB01ghd7WoJVXEdadeSA5947oTjxwB+Ee2nMzaELMoJ -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:50 2026 by rpki-client