This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Zky2MCblYDExuWnMaLgW0wpkVA4.roa File: Zky2MCblYDExuWnMaLgW0wpkVA4.roa (raw, json) Hash identifier: bRUMOKz6u+1tMPLkFm7UG+pus1Ih39xY2InoJ0pLcps= Subject key identifier: 66:4C:B6:30:26:E5:60:31:31:B9:69:CC:68:B8:16:D3:0A:64:54:0E Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12EB32B44820C0FE0097A22D11718E Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Zky2MCblYDExuWnMaLgW0wpkVA4.roa Signing time: Fri 02 Jan 2026 00:19:33 +0000 ROA not before: Fri 02 Jan 2026 00:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203861 IP address blocks: 5.175.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:eb:32:b4:48:20:c0:fe:00:97:a2:2d:11:71:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=664cb63026e5603131b969cc68b816d30a64540e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e7:8a:2e:c7:dd:eb:35:33:ee:24:05:ac:51: 3f:61:2f:d6:28:e8:90:80:63:5b:d6:9f:aa:8e:e2: 90:34:70:d0:33:6f:db:8c:d2:8b:46:a7:9b:c4:55: e1:1b:e8:0b:88:99:36:f8:ce:ff:d7:76:36:84:6a: 88:25:1b:4c:b0:f5:40:ea:a9:44:e7:87:ba:6f:f4: b1:9a:8a:f1:ed:85:6c:dd:c7:ef:d5:fd:78:d4:ce: ce:9c:f7:f6:2a:af:32:97:ce:9f:ff:23:14:8b:95: 7a:22:78:b8:14:2a:b4:2b:84:d5:a0:20:e1:b8:56: ef:b4:be:d1:78:62:65:c0:05:9e:a5:19:54:d9:c2: 91:51:74:ba:d5:65:f8:22:5e:8b:68:97:68:cf:c1: c2:7b:6e:71:dc:59:61:b4:30:b5:ed:b5:55:a1:97: 43:a0:b4:00:38:14:95:83:a9:46:fe:04:e4:7b:93: e0:cb:db:af:f9:20:d0:5d:1c:d8:29:67:03:61:2f: 69:ec:91:c4:2d:62:34:46:f5:16:d5:42:73:c1:ee: 34:c0:9f:bb:6f:16:1d:3f:2f:41:71:8d:f7:2b:23: e4:69:ed:2f:70:01:e4:c6:2f:b5:d7:d2:1e:3f:79: 65:b3:a7:9e:50:8d:ed:75:dc:25:ca:10:97:84:43: 47:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:4C:B6:30:26:E5:60:31:31:B9:69:CC:68:B8:16:D3:0A:64:54:0E X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Zky2MCblYDExuWnMaLgW0wpkVA4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.215.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:9b:4f:cd:4f:59:b9:01:5e:d5:66:38:26:83:2a:2f:76:e5: ec:84:74:e0:62:fe:3f:f2:5f:7c:25:30:03:f4:15:40:31:ab: 1c:2b:0b:9b:1d:91:3d:6a:21:c2:48:1f:5b:61:65:0c:72:51: 87:dd:9a:88:21:e9:04:c7:9c:44:43:92:d9:28:0f:cc:d7:20: 57:cc:13:98:06:5a:a5:cb:71:a7:40:39:5c:59:bf:21:3c:89: ba:89:0b:8b:90:02:0c:af:ea:17:d3:8e:09:4e:bd:22:d0:e2: 09:1d:69:be:83:32:aa:38:3d:0c:ae:bc:ba:78:72:a5:bb:34: 28:85:2d:60:60:60:c2:79:e5:a8:5f:c9:8f:d1:ef:1c:e2:84: da:98:4d:7f:fd:58:6b:6b:fc:e4:f7:de:dd:79:ba:6d:9c:c4: d5:3a:78:28:f1:fc:c0:ab:fa:0c:72:db:12:dc:03:5f:9c:f3: 96:ff:e8:77:43:4a:67:be:9e:66:fe:d2:6f:c3:cd:89:17:86: 10:45:28:fd:49:ee:f8:fd:b4:6a:3f:fd:d1:eb:6d:87:1d:0d: 63:aa:65:4f:22:71:ec:23:1b:a4:56:2d:78:cd:fb:fa:d4:b9: 13:f8:a2:07:21:94:ac:68:6f:14:ff:07:54:76:93:b2:21:3e: 64:ee:cf:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EusytEggwP4Al6ItEXGOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjRjYjYzMDI2ZTU2MDMxMzFiOTY5Y2M2OGI4MTZkMzBhNjQ1NDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmueKLsfd6zUz7iQFrFE/YS/WKOiQ gGNb1p+qjuKQNHDQM2/bjNKLRqebxFXhG+gLiJk2+M7/13Y2hGqIJRtMsPVA6qlE 54e6b/Sxmorx7YVs3cfv1f141M7OnPf2Kq8yl86f/yMUi5V6Ini4FCq0K4TVoCDh uFbvtL7ReGJlwAWepRlU2cKRUXS61WX4Il6LaJdoz8HCe25x3FlhtDC17bVVoZdD oLQAOBSVg6lG/gTke5Pgy9uv+SDQXRzYKWcDYS9p7JHELWI0RvUW1UJzwe40wJ+7 bxYdPy9BcY33KyPkae0vcAHkxi+119IeP3lls6eeUI3tddwlyhCXhENH8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGZMtjAm5WAxMblpzGi4FtMKZFQOMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvWmt5Mk1DYmxZREV4dVduTWFMZ1cwd3BrVkE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa/XMA0G CSqGSIb3DQEBCwUAA4IBAQBqm0/NT1m5AV7VZjgmgyovduXshHTgYv4/8l98JTAD 9BVAMascKwubHZE9aiHCSB9bYWUMclGH3ZqIIekEx5xEQ5LZKA/M1yBXzBOYBlql y3GnQDlcWb8hPIm6iQuLkAIMr+oX044JTr0i0OIJHWm+gzKqOD0Mrry6eHKluzQo hS1gYGDCeeWoX8mP0e8c4oTamE1//Vhra/zk997debptnMTVOngo8fzAq/oMctsS 3ANfnPOW/+h3Q0pnvp5m/tJvw82JF4YQRSj9Se74/bRqP/3R622HHQ1jqmVPInHs IxukVi14zfv61LkT+KIHIZSsaG8U/wdUdpOyIT5k7s8w -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:23 2026 by rpki-client