This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/ZEbfYVuMCdzH4b6WO6WXTknX4_k.roa File: ZEbfYVuMCdzH4b6WO6WXTknX4_k.roa (raw, json) Hash identifier: BE+TIxMZBEV6pjZ0j/O/D8ufitkn7gqVulPNkIyXWbA= Subject key identifier: 64:46:DF:61:5B:8C:09:DC:C7:E1:BE:96:3B:A5:97:4E:49:D7:E3:F9 Certificate issuer: /CN=b039ab8298fa363ae837e530028969cc5cbf104e Certificate serial: 019B7CEDA6C390B7901E924F3C42A1EAD474 Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/ZEbfYVuMCdzH4b6WO6WXTknX4_k.roa Signing time: Fri 02 Jan 2026 04:18:28 +0000 ROA not before: Fri 02 Jan 2026 04:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214865 IP address blocks: 62.169.139.0/24 maxlen: 24 2a14:5140::/32 maxlen: 32 2a14:5140::/40 maxlen: 40 2a14:5140:100::/40 maxlen: 40 2a14:5140:200::/40 maxlen: 40 2a14:5140:300::/40 maxlen: 40 2a14:5140:400::/40 maxlen: 40 2a14:5140:500::/40 maxlen: 40 2a14:5140:600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:a6:c3:90:b7:90:1e:92:4f:3c:42:a1:ea:d4:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e Validity Not Before: Jan 2 04:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6446df615b8c09dcc7e1be963ba5974e49d7e3f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c2:5e:d6:0c:42:4d:39:bd:6d:6f:b7:e0:ce: e3:f7:f9:9d:d4:dc:02:9f:cd:c0:26:36:62:1f:a2: 5b:f2:f8:81:81:ab:e4:fc:da:bd:7c:31:6c:e7:af: 11:62:59:40:2d:17:61:ba:01:3e:5d:a9:a8:5c:41: 12:dd:f3:1f:e0:52:e5:d6:9a:c5:2e:f3:56:9b:c6: c5:d9:9e:b8:03:90:bf:93:66:af:82:7c:11:b9:d3: 5c:e7:76:a4:52:f7:ab:f2:75:76:05:3a:0a:c1:d6: 6b:ca:a5:ef:ea:6e:c7:9d:00:fa:65:5a:b9:ea:01: a1:02:0e:81:9b:ae:23:c6:9c:d0:2d:d0:8b:30:68: bb:fc:cc:75:6b:ce:97:47:66:03:b0:15:cb:df:15: fe:4d:dd:ee:90:b7:17:ea:e9:9f:fa:7c:9b:2c:65: c4:9c:95:71:a3:7d:32:61:5c:5d:f1:20:3a:68:8c: 87:53:be:59:b7:58:cd:ba:bf:0f:13:73:4c:5d:66: 05:ce:29:ef:60:19:2f:2e:5e:10:38:da:93:fd:f7: e3:5f:d0:6a:ff:49:60:53:fe:01:65:b3:f8:db:90: 76:83:68:f8:5d:33:9d:09:26:16:cd:9c:36:92:2f: e8:a1:92:a1:98:05:20:b9:5b:00:6a:83:e1:8b:a8: 84:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:46:DF:61:5B:8C:09:DC:C7:E1:BE:96:3B:A5:97:4E:49:D7:E3:F9 X509v3 Authority Key Identifier: keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/ZEbfYVuMCdzH4b6WO6WXTknX4_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.169.139.0/24 IPv6: 2a14:5140::/32 Signature Algorithm: sha256WithRSAEncryption 5b:5a:6e:c5:ee:58:95:5a:eb:ad:42:64:a1:42:95:89:95:a1: 2f:0b:61:a4:5c:da:a8:ba:1b:3b:72:eb:c3:37:53:40:24:f0: 88:b7:73:22:3f:bc:19:2d:0b:d0:fc:52:32:c7:bc:8c:76:e3: 9d:50:e6:53:2b:85:2f:84:61:f5:3c:ac:7a:c5:b8:fb:2b:c5: 21:2f:d6:74:8a:e2:d1:15:c7:31:a1:7a:27:84:63:1e:c7:e4: f3:a4:a6:81:55:37:f9:39:56:e0:24:f9:67:2d:64:e3:91:d3: 34:f7:8e:70:3e:c6:e7:6a:a3:b5:76:d2:30:c6:8b:6d:10:1f: 46:c3:63:9b:f4:89:41:d2:3f:53:fd:1c:b3:b8:22:f5:14:10: 04:06:61:a4:24:c0:92:08:a9:fa:8a:24:36:4e:83:af:0a:25: 44:58:56:ca:ac:b6:4d:a6:f2:d7:d6:d9:64:c6:20:7b:5a:16: 09:98:d9:53:a3:59:b1:5d:73:d6:09:0f:02:f2:8c:23:52:e7: e2:70:a7:6d:4f:e3:d8:86:a4:03:dd:f2:8f:a5:4f:1a:41:64: 64:ff:70:e6:26:83:ba:3a:a5:60:d9:58:36:3e:7c:14:cf:cc: 76:8a:f6:bc:27:3d:b2:95:c7:a0:f1:04:da:32:e3:87:cd:61: 52:f0:80:9c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87abDkLeQHpJPPEKh6tR0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMzlhYjgyOThmYTM2M2FlODM3ZTUzMDAyODk2OWNjNWNi ZjEwNGUwHhcNMjYwMTAyMDQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDQ2ZGY2MTViOGMwOWRjYzdlMWJlOTYzYmE1OTc0ZTQ5ZDdlM2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8Je1gxCTTm9bW+34M7j9/md1NwC n83AJjZiH6Jb8viBgavk/Nq9fDFs568RYllALRdhugE+XamoXEES3fMf4FLl1prF LvNWm8bF2Z64A5C/k2avgnwRudNc53akUver8nV2BToKwdZryqXv6m7HnQD6ZVq5 6gGhAg6Bm64jxpzQLdCLMGi7/Mx1a86XR2YDsBXL3xX+Td3ukLcX6umf+nybLGXE nJVxo30yYVxd8SA6aIyHU75Zt1jNur8PE3NMXWYFzinvYBkvLl4QONqT/ffjX9Bq /0lgU/4BZbP425B2g2j4XTOdCSYWzZw2ki/ooZKhmAUguVsAaoPhi6iEkQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGRG32FbjAncx+G+ljull05J1+P5MB8GA1UdIwQY MBaAFLA5q4KY+jY66DflMAKJacxcvxBOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0RtcmdwajZOanJvTi1Vd0FvbHB6RnlfRUU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZmQ3MmYtZWY3Ny00NTM3LTg5ZTkt OWZiZDk2M2E1MTNjLzEvWkViZllWdU1DZHpINGI2V082V1hUa25YNF9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81ZmQ3MmYtZWY3Ny00NTM3LTg5ZTktOWZiZDk2M2E1MTNj LzEvc0RtcmdwajZOanJvTi1Vd0FvbHB6RnlfRUU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAPqmLMA0E AgACMAcDBQAqFFFAMA0GCSqGSIb3DQEBCwUAA4IBAQBbWm7F7liVWuutQmShQpWJ laEvC2GkXNqouhs7cuvDN1NAJPCIt3MiP7wZLQvQ/FIyx7yMduOdUOZTK4UvhGH1 PKx6xbj7K8UhL9Z0iuLRFccxoXonhGMex+TzpKaBVTf5OVbgJPlnLWTjkdM0945w PsbnaqO1dtIwxottEB9Gw2Ob9IlB0j9T/RyzuCL1FBAEBmGkJMCSCKn6iiQ2ToOv CiVEWFbKrLZNpvLX1tlkxiB7WhYJmNlTo1mxXXPWCQ8C8owjUuficKdtT+PYhqQD 3fKPpU8aQWRk/3DmJoO6OqVg2Vg2PnwUz8x2iva8Jz2ylceg8QTaMuOHzWFS8ICc -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:49 2026 by rpki-client