This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/Zyw5_8Nteer4-rTQFPhGEoSIkpQ.roa File: Zyw5_8Nteer4-rTQFPhGEoSIkpQ.roa (raw, json) Hash identifier: lSlHzj3YUg48qGAcx07eSiHqKx+/oNohvCt3Q7Sk0hM= Subject key identifier: 67:2C:39:FF:C3:6D:79:EA:F8:FA:B4:D0:14:F8:46:12:84:88:92:94 Certificate issuer: /CN=eb78358a6a97d19b2f5afff1cfc793fbb4eafc9d Certificate serial: 019B7CED70A64925089AE29AF0C243A9D181 Authority key identifier: EB:78:35:8A:6A:97:D1:9B:2F:5A:FF:F1:CF:C7:93:FB:B4:EA:FC:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/Zyw5_8Nteer4-rTQFPhGEoSIkpQ.roa Signing time: Fri 02 Jan 2026 04:18:14 +0000 ROA not before: Fri 02 Jan 2026 04:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 31.204.1.0/24 maxlen: 24 31.204.2.0/23 maxlen: 24 31.204.4.0/22 maxlen: 24 31.204.8.0/21 maxlen: 24 31.204.16.0/20 maxlen: 24 31.204.26.0/24 maxlen: 24 31.204.32.0/19 maxlen: 24 31.204.49.0/24 maxlen: 24 31.204.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.mft rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:70:a6:49:25:08:9a:e2:9a:f0:c2:43:a9:d1:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb78358a6a97d19b2f5afff1cfc793fbb4eafc9d Validity Not Before: Jan 2 04:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=672c39ffc36d79eaf8fab4d014f8461284889294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d8:2e:b2:4e:91:f4:3f:94:42:9d:e2:95:ad: 16:6c:3e:40:68:e3:2e:d3:8d:d8:5a:a1:da:17:6e: 5d:99:8d:3e:b6:a5:c7:e3:aa:0b:74:85:3b:f7:8d: 82:99:b5:7b:7b:47:ba:eb:2c:e2:b3:40:01:2a:f2: 07:99:33:03:dc:be:4a:e9:b0:c1:d3:7e:f7:79:6d: 94:11:ea:77:43:c9:13:4c:a9:cb:c3:66:cd:d5:ea: b3:6c:6a:ba:51:b4:76:cd:44:7f:aa:d7:f3:f4:8f: 31:06:a9:88:12:93:fa:59:b3:28:9b:30:12:34:1c: 0e:c9:f1:5d:6a:38:ba:9c:89:b6:43:2e:94:85:05: a3:a7:7e:cb:f1:f4:32:73:07:e2:2b:d2:b4:d9:18: 61:1a:5e:30:71:1d:92:1a:19:8d:2f:dc:ff:94:b0: e8:ed:7f:97:43:1d:0a:d7:68:d8:9f:7c:d2:aa:d6: c5:fe:08:80:5f:70:e4:ed:a5:b1:53:60:34:fa:21: 5b:4e:10:bf:f4:cd:02:63:29:d7:2d:d6:a7:75:37: 21:2a:17:e3:e0:2a:3c:73:2c:b2:a3:6c:c1:89:1c: 51:1a:65:43:b3:82:78:d6:c5:5c:75:07:38:78:16: 7b:0b:6b:39:14:59:62:42:b4:9e:ad:9c:fc:fd:7b: 7b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2C:39:FF:C3:6D:79:EA:F8:FA:B4:D0:14:F8:46:12:84:88:92:94 X509v3 Authority Key Identifier: keyid:EB:78:35:8A:6A:97:D1:9B:2F:5A:FF:F1:CF:C7:93:FB:B4:EA:FC:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/Zyw5_8Nteer4-rTQFPhGEoSIkpQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.204.1.0-31.204.63.255 Signature Algorithm: sha256WithRSAEncryption 11:1c:9f:81:c4:27:5f:81:5c:a4:32:40:8d:2e:95:14:9c:60: cf:67:34:55:39:0d:4c:a4:e1:35:6c:b0:ec:37:f1:16:79:46: 2f:0c:5b:f7:1c:57:77:78:d6:dc:7d:fb:37:c8:85:b3:66:5b: 01:a7:5d:93:9a:3a:a3:75:d7:f5:32:fc:d2:c8:39:b0:aa:87: 57:bb:31:bd:02:06:03:28:b6:b1:87:a3:4d:93:4b:53:70:60: 3f:77:47:01:e8:bc:ac:a4:f4:4f:76:90:0d:5a:2b:4e:51:42: 76:2b:0a:2d:98:17:20:27:91:6d:39:ff:15:4b:22:b6:2a:48: 86:64:a3:b6:76:30:96:90:71:e0:85:7d:ea:ca:b8:37:bb:fb: d8:49:f9:42:d4:09:db:79:a7:db:96:2d:99:b4:a3:9b:1b:b7: 88:61:6d:03:26:0e:03:26:25:a0:10:a8:2c:87:60:92:c1:2a: b5:3a:cd:ed:4c:77:b3:42:6e:f1:77:27:d5:fa:2d:ab:0e:e7: 13:3c:70:5d:0a:b5:c0:59:b0:13:1a:44:65:c6:b3:9e:ff:5a: 55:09:36:2d:b0:a5:6e:38:31:2a:1f:e5:f6:43:73:34:28:35: 01:48:f5:42:d1:86:08:f0:87:1e:fc:08:2b:dc:eb:bc:fe:42: 25:7e:c0:1e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt87XCmSSUImuKa8MJDqdGBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViNzgzNThhNmE5N2QxOWIyZjVhZmZmMWNmYzc5M2ZiYjRl YWZjOWQwHhcNMjYwMTAyMDQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzJjMzlmZmMzNmQ3OWVhZjhmYWI0ZDAxNGY4NDYxMjg0ODg5Mjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNgusk6R9D+UQp3ila0WbD5AaOMu 043YWqHaF25dmY0+tqXH46oLdIU7942CmbV7e0e66yzis0ABKvIHmTMD3L5K6bDB 0373eW2UEep3Q8kTTKnLw2bN1eqzbGq6UbR2zUR/qtfz9I8xBqmIEpP6WbMomzAS NBwOyfFdaji6nIm2Qy6UhQWjp37L8fQycwfiK9K02RhhGl4wcR2SGhmNL9z/lLDo 7X+XQx0K12jYn3zSqtbF/giAX3Dk7aWxU2A0+iFbThC/9M0CYynXLdandTchKhfj 4Co8cyyyo2zBiRxRGmVDs4J41sVcdQc4eBZ7C2s5FFliQrSerZz8/Xt70QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGcsOf/DbXnq+Pq00BT4RhKEiJKUMB8GA1UdIwQY MBaAFOt4NYpql9GbL1r/8c/Hk/u06vydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjNnMWltcVgwWnN2V3ZfeHo4ZVQtN1RxX0owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80NjhiNzUtNTk5NC00OGZiLWE4NWQt NGE1ZWVkMWVlNWJjLzEvWnl3NV84TnRlZXI0LXJUUUZQaEdFb1NJa3BRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi80NjhiNzUtNTk5NC00OGZiLWE4NWQtNGE1ZWVkMWVlNWJj LzEvNjNnMWltcVgwWnN2V3ZfeHo4ZVQtN1RxX0owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAfzAED BAYfzAAwDQYJKoZIhvcNAQELBQADggEBABEcn4HEJ1+BXKQyQI0ulRScYM9nNFU5 DUyk4TVssOw38RZ5Ri8MW/ccV3d41tx9+zfIhbNmWwGnXZOaOqN11/Uy/NLIObCq h1e7Mb0CBgMotrGHo02TS1NwYD93RwHovKyk9E92kA1aK05RQnYrCi2YFyAnkW05 /xVLIrYqSIZko7Z2MJaQceCFferKuDe7+9hJ+ULUCdt5p9uWLZm0o5sbt4hhbQMm DgMmJaAQqCyHYJLBKrU6ze1Md7NCbvF3J9X6LasO5xM8cF0KtcBZsBMaRGXGs57/ WlUJNi2wpW44MSof5fZDczQoNQFI9ULRhgjwhx78CCvc67z+QiV+wB4= -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:52 2026 by rpki-client