This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/_Zz8VQ7MI8grviAkY8_zaADFei8.roa File: _Zz8VQ7MI8grviAkY8_zaADFei8.roa (raw, json) Hash identifier: LJuW+ggL7EdFwcEegbo8DIuepwgPOczDjMEaP85LPEY= Subject key identifier: FD:9C:FC:55:0E:CC:23:C8:2B:BE:20:24:63:CF:F3:68:00:C5:7A:2F Certificate issuer: /CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c Certificate serial: 019B7CEE5B63BF11B465AAB1A621B16DA6A4 Authority key identifier: 1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/_Zz8VQ7MI8grviAkY8_zaADFei8.roa Signing time: Fri 02 Jan 2026 04:19:14 +0000 ROA not before: Fri 02 Jan 2026 04:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 132.66.0.0/16 maxlen: 16 132.67.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:5b:63:bf:11:b4:65:aa:b1:a6:21:b1:6d:a6:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c Validity Not Before: Jan 2 04:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd9cfc550ecc23c82bbe202463cff36800c57a2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4c:b0:bd:aa:80:e8:d1:c3:56:9c:7f:98:40: 84:71:78:aa:04:f5:7d:13:47:fc:c0:fb:05:84:16: ee:0d:10:1a:cf:0a:b5:be:1d:c8:db:10:4f:6c:fb: 92:27:03:e2:0d:e3:f6:88:8f:af:62:e2:8f:2a:ad: 1b:67:22:99:8e:22:46:d0:4a:d8:5b:0e:ed:69:31: 42:ed:c3:13:0a:53:da:72:49:29:90:ab:18:22:93: 53:a3:4e:17:af:ff:6e:8b:78:ac:3b:96:12:8f:ee: 32:37:91:7d:cb:38:59:9d:02:0b:df:09:14:cf:e7: 24:84:62:29:95:e6:00:31:9c:40:da:2e:26:de:79: d3:e8:d4:4f:16:02:10:51:c0:5e:61:53:01:d1:c9: 7e:cd:05:7c:3a:c5:28:f6:ea:2a:b8:fa:2d:a1:15: bc:6b:78:ae:c1:52:a4:e9:d2:6f:dc:20:9a:d9:75: 2e:25:1c:be:91:b0:63:65:fa:3a:54:32:ef:36:45: 08:77:b1:e1:85:72:a0:94:ea:e2:49:d0:4e:fb:5a: 99:8c:59:ef:46:51:7e:44:71:c4:78:d6:46:d1:ac: a6:b7:fc:9c:8b:7c:fe:a4:4c:5a:7a:b4:c2:7d:5a: d6:f9:ab:2c:bd:af:91:a7:96:38:ab:f9:d8:7b:78: 9e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:9C:FC:55:0E:CC:23:C8:2B:BE:20:24:63:CF:F3:68:00:C5:7A:2F X509v3 Authority Key Identifier: keyid:1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/_Zz8VQ7MI8grviAkY8_zaADFei8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.66.0.0/15 Signature Algorithm: sha256WithRSAEncryption 94:1b:d6:ec:75:e4:f4:13:f6:b3:ee:9c:64:72:6b:37:c2:20: 1b:79:e4:b5:c0:3f:9d:99:03:74:2a:d6:ed:b6:3b:36:fe:64: f7:66:bf:34:f8:87:fc:8e:ac:bf:0e:2d:84:05:f4:c6:d3:a5: 28:5d:a2:a9:17:21:9a:5f:0e:4c:cf:88:78:c4:0a:4b:10:30: 19:98:12:31:0e:c2:c6:ba:0c:aa:e2:04:d3:93:3a:f9:3f:3b: 1a:c3:41:f1:45:4b:ab:46:81:ed:b7:88:14:36:ce:f0:c0:2e: b2:e2:bf:f4:c1:84:77:4b:df:5c:88:fe:b3:be:c4:72:57:a2: 12:38:da:e1:db:7d:e1:1d:20:5d:86:46:b6:a3:8a:85:b2:d3: f0:11:49:4c:5d:f2:fa:74:17:f9:62:ea:81:cc:9c:75:88:b1: 1a:18:ed:58:d1:14:ee:6d:c2:25:8a:91:8b:54:f6:07:06:4b: cf:78:01:60:11:e8:17:01:eb:fa:32:41:c0:a0:42:38:b2:4d: e4:89:8f:9c:d0:8f:f7:df:3e:08:b2:1f:81:ea:b7:29:4f:17: dd:f8:18:33:61:b4:28:46:e7:38:ec:0b:7e:e6:fe:bd:e0:74: c2:15:7a:70:8f:7e:ea:d9:38:c4:4a:e4:f3:07:99:79:55:cc: a1:86:f0:23 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt87ltjvxG0ZaqxpiGxbaakMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMmNkY2I5Yzc2ZjVlMGNlMGMzODVkN2UwZWYxNTU3MmQx NWE1NGMwHhcNMjYwMTAyMDQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDljZmM1NTBlY2MyM2M4MmJiZTIwMjQ2M2NmZjM2ODAwYzU3YTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0ywvaqA6NHDVpx/mECEcXiqBPV9 E0f8wPsFhBbuDRAazwq1vh3I2xBPbPuSJwPiDeP2iI+vYuKPKq0bZyKZjiJG0ErY Ww7taTFC7cMTClPackkpkKsYIpNTo04Xr/9ui3isO5YSj+4yN5F9yzhZnQIL3wkU z+ckhGIpleYAMZxA2i4m3nnT6NRPFgIQUcBeYVMB0cl+zQV8OsUo9uoquPotoRW8 a3iuwVKk6dJv3CCa2XUuJRy+kbBjZfo6VDLvNkUId7HhhXKglOriSdBO+1qZjFnv RlF+RHHEeNZG0aymt/yci3z+pExaerTCfVrW+assva+Rp5Y4q/nYe3ieOwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFP2c/FUOzCPIK74gJGPP82gAxXovMB8GA1UdIwQY MBaAFB0s3LnHb14M4MOF1+DvFVctFaVMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFN6Y3VjZHZYZ3pndzRYWDRPOFZWeTBWcFV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNjY2NjYtYjNiNy00MjQ4LWFlNjUt NzYwZTRlZTRjNmIyLzEvX1p6OFZRN01JOGdydmlBa1k4X3phQURGZWk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iNjY2NjYtYjNiNy00MjQ4LWFlNjUtNzYwZTRlZTRjNmIy LzEvSFN6Y3VjZHZYZ3pndzRYWDRPOFZWeTBWcFV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBhEIwDQYJ KoZIhvcNAQELBQADggEBAJQb1ux15PQT9rPunGRyazfCIBt55LXAP52ZA3Qq1u22 Ozb+ZPdmvzT4h/yOrL8OLYQF9MbTpShdoqkXIZpfDkzPiHjECksQMBmYEjEOwsa6 DKriBNOTOvk/OxrDQfFFS6tGge23iBQ2zvDALrLiv/TBhHdL31yI/rO+xHJXohI4 2uHbfeEdIF2GRrajioWy0/ARSUxd8vp0F/li6oHMnHWIsRoY7VjRFO5twiWKkYtU 9gcGS894AWAR6BcB6/oyQcCgQjiyTeSJj5zQj/ffPgiyH4HqtylPF934GDNhtChG 5zjsC37m/r3gdMIVenCPfurZOMRK5PMHmXlVzKGG8CM= -----END CERTIFICATE-----Generated at Wed Jan 7 22:29:19 2026 by rpki-client