This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/ZY_Rj1feokqcGi3G8L0WAPl0kI4.roa
File: ZY_Rj1feokqcGi3G8L0WAPl0kI4.roa (raw, json)
Hash identifier: mbBMJSTyfI2VzBuWzMkS287FyWqD5btpEmqCqBM0tFM=
Subject key identifier: 65:8F:D1:8F:57:DE:A2:4A:9C:1A:2D:C6:F0:BD:16:00:F9:74:90:8E
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019C06518068D241A54E2EFCA93BA2C38E57
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/ZY_Rj1feokqcGi3G8L0WAPl0kI4.roa
Signing time: Wed 28 Jan 2026 20:35:30 +0000
ROA not before: Wed 28 Jan 2026 20:35:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51248
IP address blocks: 135.106.134.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Feb 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:06:51:80:68:d2:41:a5:4e:2e:fc:a9:3b:a2:c3:8e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Jan 28 20:35:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=658fd18f57dea24a9c1a2dc6f0bd1600f974908e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:10:83:80:f9:7e:37:f8:c3:25:a8:96:ba:fc:
23:b4:90:1a:f4:66:18:a1:24:51:dc:59:34:36:34:
84:8e:85:a2:fc:1a:30:03:cf:97:e9:f6:7d:d4:f7:
0b:f1:e1:6d:39:e6:0a:6a:ea:17:55:f9:1f:bf:59:
48:e4:31:b2:2f:22:47:87:87:c9:81:8f:66:75:ad:
f2:cf:ff:75:f5:06:e0:e2:ad:16:b1:4c:f8:45:bb:
c3:5c:e1:47:aa:fe:e3:a9:46:b1:d3:9f:52:80:24:
06:bf:fe:42:e2:8a:eb:44:d2:fd:5e:23:f0:50:34:
77:07:18:83:17:c4:52:ef:ca:f9:a6:af:2f:5f:fd:
f0:a7:87:e4:1c:ce:47:6c:e5:49:c0:ee:06:0b:54:
b0:56:9f:69:a1:20:eb:b9:88:71:ae:ac:4b:7f:53:
4a:9f:c3:2d:5c:37:f0:0a:c5:50:d5:73:17:4d:52:
62:d9:0c:ed:7a:c8:73:db:e8:42:ab:1b:fa:63:47:
66:74:17:59:ae:2f:b0:94:81:17:96:85:9e:20:e5:
38:43:8e:2e:6f:5c:08:42:0a:65:6d:76:a5:4b:3b:
dc:e4:39:4f:05:5b:b8:70:19:d6:d6:c2:c9:c2:90:
3a:46:f5:ff:3e:34:50:44:61:40:fa:57:27:eb:8a:
8b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8F:D1:8F:57:DE:A2:4A:9C:1A:2D:C6:F0:BD:16:00:F9:74:90:8E
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/ZY_Rj1feokqcGi3G8L0WAPl0kI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
135.106.134.0/23
Signature Algorithm: sha256WithRSAEncryption
98:40:0c:4a:23:b2:ff:1d:20:cd:fb:47:2c:39:c0:20:75:0b:
9b:ba:c8:3f:65:e8:2a:d6:67:da:0a:7f:8e:d4:12:69:70:23:
41:e2:1c:c7:87:20:dc:cc:1e:c5:e1:4a:a2:b9:1f:0b:dd:74:
db:ab:06:80:86:ac:f2:fa:1c:e5:c5:42:27:02:6d:a7:43:c4:
9e:58:a4:e4:8f:ae:71:c7:fb:dd:dc:0b:02:1c:1b:cd:16:fc:
3c:3e:1d:00:bf:a6:ba:8d:fe:ed:bd:02:ec:73:d2:f5:4b:68:
33:66:e7:6c:1a:cb:b3:64:f5:50:b2:12:65:80:28:bf:07:31:
f9:81:39:62:9e:0b:f3:1a:84:85:f6:af:95:bc:fb:2c:45:f5:
5c:28:30:a9:da:71:50:43:0e:11:fe:bf:ae:90:9a:f5:ed:15:
27:c3:1e:96:b1:89:65:50:10:2a:3b:a6:29:ad:3f:c8:69:f7:
97:fe:99:ed:e2:90:9f:a8:63:d5:40:19:74:4d:65:59:97:2e:
05:9a:9e:e2:36:4b:72:b9:4a:eb:de:9b:4a:b9:78:82:2b:43:
d9:c9:f5:e9:f0:7b:c0:c4:1f:65:de:c4:03:d1:82:99:1b:0e:
f2:a7:20:83:cf:23:ea:32:ac:97:9e:c7:7a:c6:03:5e:98:96:
09:9c:2c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 13:12:54 2026 by rpki-client