This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/zqy4-8i-jVyEkauns-Q70vLxJ7g.roa File: zqy4-8i-jVyEkauns-Q70vLxJ7g.roa (raw, json) Hash identifier: /+2VvxY6g7nawCNN+tHR9sxwJbIZL9KweE6iqZH7VO4= Subject key identifier: CE:AC:B8:FB:C8:BE:8D:5C:84:91:AB:A7:B3:E4:3B:D2:F2:F1:27:B8 Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Certificate serial: 019B7E37EE76369A298492D30154494A1AD6 Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/zqy4-8i-jVyEkauns-Q70vLxJ7g.roa Signing time: Fri 02 Jan 2026 10:19:13 +0000 ROA not before: Fri 02 Jan 2026 10:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60083 IP address blocks: 31.145.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ee:76:36:9a:29:84:92:d3:01:54:49:4a:1a:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Validity Not Before: Jan 2 10:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ceacb8fbc8be8d5c8491aba7b3e43bd2f2f127b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7d:09:ef:44:51:7c:3e:be:ec:d3:30:59:1a: e6:5e:36:e9:24:f3:0e:cb:64:13:2c:cb:68:03:59: fe:5e:f0:e7:3f:eb:a7:44:4f:5b:06:41:30:52:ad: 72:25:75:e6:ac:08:a0:e6:42:43:1a:35:77:cb:b3: 8b:2e:ae:45:a1:c2:1c:c7:8e:ea:3f:1c:c1:1b:41: 37:6f:05:b9:23:9b:4a:33:34:88:3f:07:59:21:58: d1:7d:76:f2:1c:aa:6c:99:e3:c0:f0:70:db:df:59: 2e:00:0c:2c:1d:5f:7f:da:a1:5b:0e:50:eb:fa:2c: 12:ab:f1:dd:1c:d8:6a:f6:5c:12:52:c3:d2:56:d6: 39:6f:5c:1d:df:d7:38:57:43:53:79:36:e8:22:2e: 90:6d:c1:96:29:03:0d:9b:51:17:06:ba:82:7f:7c: 4a:0c:2c:07:94:6c:00:04:a8:66:4b:4d:d7:46:2a: 40:99:97:2f:16:0c:62:0d:17:5f:e9:fc:7e:98:b6: 2f:fb:58:d1:13:3f:48:6b:08:7e:9e:6f:95:4f:e4: e8:2a:8d:05:6e:e4:4f:e3:03:84:8a:b6:29:b1:25: 7f:7e:a7:f5:43:6b:f0:b8:49:5c:c8:0b:59:0b:f1: ee:4b:73:45:ff:eb:00:ce:fc:84:d7:6b:38:f1:b3: 5b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AC:B8:FB:C8:BE:8D:5C:84:91:AB:A7:B3:E4:3B:D2:F2:F1:27:B8 X509v3 Authority Key Identifier: keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/zqy4-8i-jVyEkauns-Q70vLxJ7g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.145.60.0/24 Signature Algorithm: sha256WithRSAEncryption d2:ac:01:c5:50:d5:00:01:c6:00:4d:e3:47:b6:3c:af:81:eb: 57:01:19:b0:05:0f:bd:4f:ac:91:ed:db:03:86:23:98:b2:53: 46:50:f0:06:42:b1:fa:5d:01:f9:88:af:5d:2b:64:66:f3:ab: e3:5d:b0:e6:34:67:2c:6d:c0:06:01:92:d7:d9:21:cf:50:70: 92:25:81:de:cd:da:4c:33:00:5b:03:c0:a0:2f:46:7e:45:7d: 8a:f4:08:b5:95:f9:7a:d8:83:fe:b3:2d:cd:04:25:4b:73:8b: 5e:01:e2:13:66:c6:65:01:00:fe:83:a5:52:d6:e6:5d:fc:d7: 07:2a:83:f6:ce:00:7a:5b:29:64:09:29:f9:75:9a:05:30:b2: 08:4b:50:77:a4:cd:6a:9c:e2:c5:8f:ec:a5:8a:0c:b6:3a:bb: 34:86:70:59:cc:ba:c2:fb:cb:7d:fd:de:4d:0f:74:93:a3:6f: 87:64:33:35:d0:9c:bb:49:ea:cc:3c:ac:8c:5c:04:78:10:fe: 22:79:cd:fe:a2:6c:60:1c:e1:18:f9:fb:d9:ff:4f:63:ab:69: 3b:c3:30:4f:33:76:cb:92:b8:ca:f1:3b:0d:c4:14:61:af:16: 5b:20:e9:99:7d:d9:7d:f8:20:de:01:e8:9e:f5:f0:04:b7:26: 80:50:2b:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N+52NpophJLTAVRJShrWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw MWY0YzkwHhcNMjYwMTAyMTAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWFjYjhmYmM4YmU4ZDVjODQ5MWFiYTdiM2U0M2JkMmYyZjEyN2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs30J70RRfD6+7NMwWRrmXjbpJPMO y2QTLMtoA1n+XvDnP+unRE9bBkEwUq1yJXXmrAig5kJDGjV3y7OLLq5FocIcx47q PxzBG0E3bwW5I5tKMzSIPwdZIVjRfXbyHKpsmePA8HDb31kuAAwsHV9/2qFbDlDr +iwSq/HdHNhq9lwSUsPSVtY5b1wd39c4V0NTeTboIi6QbcGWKQMNm1EXBrqCf3xK DCwHlGwABKhmS03XRipAmZcvFgxiDRdf6fx+mLYv+1jREz9Iawh+nm+VT+ToKo0F buRP4wOEirYpsSV/fqf1Q2vwuElcyAtZC/HuS3NF/+sAzvyE12s48bNbpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM6suPvIvo1chJGrp7PkO9Ly8Se4MB8GA1UdIwQY MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt ODNkNjQ4Zjc5NzQ2LzEvenF5NC04aS1qVnlFa2F1bnMtUTcwdkx4SjdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2 LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH5E8MA0G CSqGSIb3DQEBCwUAA4IBAQDSrAHFUNUAAcYATeNHtjyvgetXARmwBQ+9T6yR7dsD hiOYslNGUPAGQrH6XQH5iK9dK2Rm86vjXbDmNGcsbcAGAZLX2SHPUHCSJYHezdpM MwBbA8CgL0Z+RX2K9Ai1lfl62IP+sy3NBCVLc4teAeITZsZlAQD+g6VS1uZd/NcH KoP2zgB6WylkCSn5dZoFMLIIS1B3pM1qnOLFj+yligy2Ors0hnBZzLrC+8t9/d5N D3STo2+HZDM10Jy7SerMPKyMXAR4EP4iec3+omxgHOEY+fvZ/09jq2k7wzBPM3bL krjK8TsNxBRhrxZbIOmZfdl9+CDeAeie9fAEtyaAUCtz -----END CERTIFICATE-----Generated at Mon Jan 26 14:09:38 2026 by rpki-client