This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/ZxAO1g5tLovdFHx98vpMiQ1WLz4.roa File: ZxAO1g5tLovdFHx98vpMiQ1WLz4.roa (raw, json) Hash identifier: CM8QEi63p9MT40UeW8+7QssJWJfwAhtsxeVw1ixi6/M= Subject key identifier: 67:10:0E:D6:0E:6D:2E:8B:DD:14:7C:7D:F2:FA:4C:89:0D:56:2F:3E Certificate issuer: /CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc Certificate serial: 019B7E37988424166731D42460B9BFD3F2F9 Authority key identifier: C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/ZxAO1g5tLovdFHx98vpMiQ1WLz4.roa Signing time: Fri 02 Jan 2026 10:18:51 +0000 ROA not before: Fri 02 Jan 2026 10:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199430 IP address blocks: 37.203.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:98:84:24:16:67:31:d4:24:60:b9:bf:d3:f2:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc Validity Not Before: Jan 2 10:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67100ed60e6d2e8bdd147c7df2fa4c890d562f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a8:d3:59:48:14:84:e5:9a:7c:b4:b8:7a:a6: 0f:ec:20:67:6e:62:75:e8:b5:71:be:f6:67:e6:74: 56:d5:95:24:8c:f6:86:ae:8b:bd:23:66:0b:ce:5f: 77:59:00:cb:5f:cf:02:d8:72:04:21:7c:1f:c6:c5: fd:91:9b:b9:48:0e:c7:a8:97:ce:77:b9:88:13:72: c1:6f:4a:89:2d:a6:99:97:c0:f8:ae:59:b6:c7:06: 17:1f:c8:dc:db:ee:f7:97:05:19:5d:a4:b2:20:fb: 8f:45:e2:8a:8d:35:60:63:71:cc:54:bb:80:dc:30: 91:d7:66:be:d1:c8:75:5c:9c:0b:d5:bd:1f:49:53: f7:70:15:b1:92:17:89:df:33:d3:bc:cf:24:a9:a6: 43:c7:92:4a:0a:5e:bf:0d:95:53:53:99:7a:c5:34: ce:1f:a2:28:3f:19:d6:17:88:cf:7d:40:65:56:51: e0:b5:ce:a5:c3:b3:0e:4c:f0:49:69:8c:d9:5b:dc: ed:7c:52:4e:73:4a:fa:37:35:3a:03:4b:10:f3:ad: c4:e8:03:06:46:28:e1:e1:b6:05:37:8e:32:e5:cd: ee:06:ff:b5:20:2b:db:b3:9f:00:11:89:b2:30:c5: ef:a9:7c:e3:81:54:0f:a3:af:59:2a:4a:2e:dc:2b: 03:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:10:0E:D6:0E:6D:2E:8B:DD:14:7C:7D:F2:FA:4C:89:0D:56:2F:3E X509v3 Authority Key Identifier: keyid:C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/ZxAO1g5tLovdFHx98vpMiQ1WLz4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.203.241.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:46:a0:6c:b8:20:9a:0d:aa:14:40:1c:ec:29:8c:3a:ce:92: 65:02:41:42:91:5a:1b:fd:b3:a1:7a:8e:54:d5:c7:6d:59:1a: ef:b9:f4:44:37:1b:70:ac:8d:3d:6c:36:78:49:b3:95:ce:d5: b9:70:55:b6:50:60:d9:7c:cb:53:d8:70:0d:6d:cc:0e:3e:61: f0:c8:02:8a:0b:4d:4a:a8:28:6f:7f:06:61:cd:f5:dd:eb:6e: c4:ff:b9:42:dc:67:b7:4f:9d:bd:81:25:59:37:8f:0b:d1:8f: 1d:d7:cf:8e:ad:5a:50:7d:aa:4e:df:e5:6c:30:33:f8:9a:82: 25:8f:94:26:10:2e:91:c5:78:d4:17:1e:71:5c:c3:1a:22:25: 5e:8b:9a:e1:00:ae:de:5f:5e:89:2e:ba:ec:b4:57:58:c2:33: 17:28:5c:be:06:10:48:3a:fd:bc:e4:46:be:5e:83:2c:ec:8e: 4e:f8:7d:86:e6:f4:d1:11:76:94:fa:11:f5:fe:d0:f1:68:1e: d1:52:ab:d7:c8:2f:f7:10:f3:df:77:a6:86:e9:f2:29:e8:3d: b5:e8:4d:31:ce:37:b6:bd:e9:70:69:0e:b0:8f:dd:7f:25:a4: c1:ea:44:f1:00:75:29:6c:07:d5:5f:a4:ef:d5:82:0e:9d:0f: c4:98:29:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N5iEJBZnMdQkYLm/0/L5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYWIyNDdjNjM2YWQzODliZjlmOGM1MDc0YzgyMjAyMzBl OGVkY2MwHhcNMjYwMTAyMTAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzEwMGVkNjBlNmQyZThiZGQxNDdjN2RmMmZhNGM4OTBkNTYyZjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6jTWUgUhOWafLS4eqYP7CBnbmJ1 6LVxvvZn5nRW1ZUkjPaGrou9I2YLzl93WQDLX88C2HIEIXwfxsX9kZu5SA7HqJfO d7mIE3LBb0qJLaaZl8D4rlm2xwYXH8jc2+73lwUZXaSyIPuPReKKjTVgY3HMVLuA 3DCR12a+0ch1XJwL1b0fSVP3cBWxkheJ3zPTvM8kqaZDx5JKCl6/DZVTU5l6xTTO H6IoPxnWF4jPfUBlVlHgtc6lw7MOTPBJaYzZW9ztfFJOc0r6NzU6A0sQ863E6AMG Rijh4bYFN44y5c3uBv+1ICvbs58AEYmyMMXvqXzjgVQPo69ZKkou3CsD+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGcQDtYObS6L3RR8ffL6TIkNVi8+MB8GA1UdIwQY MBaAFMGrJHxjatOJv5+MUHTIIgIw6O3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2Fza2ZHTnEwNG1fbjR4UWRNZ2lBakRvN2N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81NjY5MzgtZTJhOC00OGIzLTgxNmIt MjdiMTEzY2ZmNTNiLzEvWnhBTzFnNXRMb3ZkRkh4OTh2cE1pUTFXTHo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81NjY5MzgtZTJhOC00OGIzLTgxNmItMjdiMTEzY2ZmNTNi LzEvd2Fza2ZHTnEwNG1fbjR4UWRNZ2lBakRvN2N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJcvxMA0G CSqGSIb3DQEBCwUAA4IBAQAcRqBsuCCaDaoUQBzsKYw6zpJlAkFCkVob/bOheo5U 1cdtWRrvufRENxtwrI09bDZ4SbOVztW5cFW2UGDZfMtT2HANbcwOPmHwyAKKC01K qChvfwZhzfXd627E/7lC3Ge3T529gSVZN48L0Y8d18+OrVpQfapO3+VsMDP4moIl j5QmEC6RxXjUFx5xXMMaIiVei5rhAK7eX16JLrrstFdYwjMXKFy+BhBIOv285Ea+ XoMs7I5O+H2G5vTREXaU+hH1/tDxaB7RUqvXyC/3EPPfd6aG6fIp6D216E0xzje2 velwaQ6wj91/JaTB6kTxAHUpbAfVX6Tv1YIOnQ/EmCmy -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:10 2026 by rpki-client