This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/zuvfz_qQwxwSkAdtG0Js-khyYL4.roa File: zuvfz_qQwxwSkAdtG0Js-khyYL4.roa (raw, json) Hash identifier: xagvaZCpPwHCxyMBtZK7vMyfxxV2ODbD7qNizvfSRvo= Subject key identifier: CE:EB:DF:CF:FA:90:C3:1C:12:90:07:6D:1B:42:6C:FA:48:72:60:BE Certificate issuer: /CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71 Certificate serial: 019B7DCAF0C576D7B9DEDD2A95905380758D Authority key identifier: 49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/zuvfz_qQwxwSkAdtG0Js-khyYL4.roa Signing time: Fri 02 Jan 2026 08:20:10 +0000 ROA not before: Fri 02 Jan 2026 08:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31543 IP address blocks: 5.133.32.0/21 maxlen: 24 31.216.128.0/22 maxlen: 24 45.65.120.0/22 maxlen: 24 89.44.116.0/23 maxlen: 24 89.44.148.0/23 maxlen: 24 95.214.252.0/22 maxlen: 24 185.112.184.0/22 maxlen: 24 185.121.100.0/22 maxlen: 24 185.123.176.0/22 maxlen: 24 185.154.64.0/22 maxlen: 24 185.187.220.0/22 maxlen: 24 185.224.204.0/22 maxlen: 24 2a06:9d40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:f0:c5:76:d7:b9:de:dd:2a:95:90:53:80:75:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71 Validity Not Before: Jan 2 08:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ceebdfcffa90c31c1290076d1b426cfa487260be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:09:89:eb:fb:cd:f6:d1:97:be:1e:7b:80:9a: 92:10:85:65:e3:d9:b9:8b:4b:8b:b6:0d:0f:56:f0: f0:50:2b:26:85:f4:83:ef:92:b1:c9:b1:65:84:bf: 32:66:cd:0f:30:fa:c8:94:fa:7b:fc:0d:ef:0e:3e: 08:65:7e:bf:a3:a3:a1:f4:49:bb:6d:17:9e:07:da: 6d:ff:b0:a4:7f:75:7b:7d:71:1e:d5:37:bf:5b:5f: a6:97:56:09:7f:af:fa:87:47:0a:42:bb:df:01:0b: 6f:b8:4a:54:5e:38:55:11:fa:85:02:ba:7d:bb:46: 7c:50:2d:5a:33:94:7b:00:79:2c:17:83:2f:7e:9d: 8e:57:ea:d3:5f:fb:10:98:80:04:6b:a6:95:35:6a: 87:d0:af:32:1d:a8:18:b4:d2:cd:71:c6:b8:6a:8f: 7e:cb:55:46:9e:35:4b:62:d1:f1:ea:bd:cc:2c:2a: d0:b1:38:1f:27:59:85:3b:e0:72:e1:7d:dd:28:f7: 84:d2:10:cf:a3:c1:dd:3c:ed:be:e7:57:b4:fa:d7: de:93:a9:eb:d2:f4:3e:ff:e4:ee:d3:85:b7:90:34: ad:37:38:95:3b:e6:f8:7c:fe:30:bc:e3:a3:20:64: 32:32:3e:81:58:f9:d8:14:39:1c:cf:63:33:fb:47: 52:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EB:DF:CF:FA:90:C3:1C:12:90:07:6D:1B:42:6C:FA:48:72:60:BE X509v3 Authority Key Identifier: keyid:49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/zuvfz_qQwxwSkAdtG0Js-khyYL4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.32.0/21 31.216.128.0/22 45.65.120.0/22 89.44.116.0/23 89.44.148.0/23 95.214.252.0/22 185.112.184.0/22 185.121.100.0/22 185.123.176.0/22 185.154.64.0/22 185.187.220.0/22 185.224.204.0/22 IPv6: 2a06:9d40::/29 Signature Algorithm: sha256WithRSAEncryption 00:cb:38:a2:b7:d1:83:90:b2:3d:10:a2:5b:68:de:fd:8f:0c: 34:6f:25:03:d2:ac:ce:7c:ea:49:44:35:b3:d9:d6:38:db:81: 5f:47:08:0d:44:2b:77:0d:ee:e7:bd:b5:0d:6c:61:6e:15:2a: 83:e0:16:bc:9d:5e:46:7f:5b:45:64:aa:e8:c0:fb:e5:30:e2: a9:c6:c4:a1:20:b2:33:bf:f8:77:b7:5c:54:26:32:4a:57:d6: cb:4d:c2:86:20:bb:4d:2e:db:f6:af:80:35:e0:9e:8c:25:fd: 55:e5:54:24:d6:12:fd:7a:d4:7c:c0:34:27:f4:00:94:7c:df: 4f:ba:fe:cb:64:01:85:4a:f2:f6:0b:b4:bd:2b:bf:a8:74:4a: 44:eb:21:74:fd:5a:dc:e5:52:d9:e3:df:74:32:a1:96:1b:69: f2:a8:a1:61:2a:41:d7:c4:b1:97:3a:72:e5:09:4a:bc:eb:bb: 82:fc:cd:1d:73:e1:b0:d1:28:14:4b:23:7a:9e:70:a0:2e:e3: 07:d9:1e:26:9b:c9:32:c3:08:3e:20:b7:58:d5:5f:19:6a:bf: ec:e5:03:f1:7f:24:86:5e:27:7a:8b:56:16:71:e9:2c:af:80: e8:28:01:35:24:90:00:dd:f2:2f:53:9a:62:d5:ae:71:e7:c7: 39:2e:c2:73 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgISAZt9yvDFdte53t0qlZBTgHWNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZmU4YzcyYWEzMmRlOTU3YjI0Y2Y5ZjczZjhhN2ZiMWFj ZjBiNzEwHhcNMjYwMTAyMDgyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWViZGZjZmZhOTBjMzFjMTI5MDA3NmQxYjQyNmNmYTQ4NzI2MGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwmJ6/vN9tGXvh57gJqSEIVl49m5 i0uLtg0PVvDwUCsmhfSD75KxybFlhL8yZs0PMPrIlPp7/A3vDj4IZX6/o6Oh9Em7 bReeB9pt/7Ckf3V7fXEe1Te/W1+ml1YJf6/6h0cKQrvfAQtvuEpUXjhVEfqFArp9 u0Z8UC1aM5R7AHksF4Mvfp2OV+rTX/sQmIAEa6aVNWqH0K8yHagYtNLNcca4ao9+ y1VGnjVLYtHx6r3MLCrQsTgfJ1mFO+By4X3dKPeE0hDPo8HdPO2+51e0+tfek6nr 0vQ+/+Tu04W3kDStNziVO+b4fP4wvOOjIGQyMj6BWPnYFDkcz2Mz+0dSzwIDAQAB o4ICWjCCAlYwHQYDVR0OBBYEFM7r38/6kMMcEpAHbRtCbPpIcmC+MB8GA1UdIwQY MBaAFEn+jHKqMt6VeyTPn3P4p/sazwtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2Y2TWNxb3kzcFY3Sk0tZmNfaW4teHJQQzNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy80MTE0YTctMzEyMi00ODY0LTg1YWUt NDI5N2U1NzI2MTdlLzEvenV2ZnpfcVF3eHdTa0FkdEcwSnMta2h5WUw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy80MTE0YTctMzEyMi00ODY0LTg1YWUtNDI5N2U1NzI2MTdl LzEvU2Y2TWNxb3kzcFY3Sk0tZmNfaW4teHJQQzNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBOBAIAATBIAwQDBYUgAwQC H9iAAwQCLUF4AwQBWSx0AwQBWSyUAwQCX9b8AwQCuXC4AwQCuXlkAwQCuXuwAwQC uZpAAwQCubvcAwQCueDMMA0EAgACMAcDBQMqBp1AMA0GCSqGSIb3DQEBCwUAA4IB AQAAyziit9GDkLI9EKJbaN79jww0byUD0qzOfOpJRDWz2dY424FfRwgNRCt3De7n vbUNbGFuFSqD4Ba8nV5Gf1tFZKrowPvlMOKpxsShILIzv/h3t1xUJjJKV9bLTcKG ILtNLtv2r4A14J6MJf1V5VQk1hL9etR8wDQn9ACUfN9Puv7LZAGFSvL2C7S9K7+o dEpE6yF0/Vrc5VLZ4990MqGWG2nyqKFhKkHXxLGXOnLlCUq867uC/M0dc+Gw0SgU SyN6nnCgLuMH2R4mm8kywwg+ILdY1V8Zar/s5QPxfySGXid6i1YWceksr4DoKAE1 JJAA3fIvU5pi1a5x58c5LsJz -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:20 2026 by rpki-client