This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/zLQM5UGUZQZaDaXLLIq2Cs9lTG4.roa File: zLQM5UGUZQZaDaXLLIq2Cs9lTG4.roa (raw, json) Hash identifier: lEMGpphC2f316K3X8TeGMMDyruycSyCxjomy+Oc5l4k= Subject key identifier: CC:B4:0C:E5:41:94:65:06:5A:0D:A5:CB:2C:8A:B6:0A:CF:65:4C:6E Certificate issuer: /CN=6eae4bb0513980c87f9bac592952c095777ac12e Certificate serial: 019B7DCB47DD4992D22D8C80928A46924EC4 Authority key identifier: 6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/zLQM5UGUZQZaDaXLLIq2Cs9lTG4.roa Signing time: Fri 02 Jan 2026 08:20:32 +0000 ROA not before: Fri 02 Jan 2026 08:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 553 IP address blocks: 141.72.0.0/16 maxlen: 16 141.72.0.0/17 maxlen: 17 141.72.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:47:dd:49:92:d2:2d:8c:80:92:8a:46:92:4e:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eae4bb0513980c87f9bac592952c095777ac12e Validity Not Before: Jan 2 08:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ccb40ce5419465065a0da5cb2c8ab60acf654c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0d:4e:b9:79:aa:91:7b:e8:ab:08:26:50:8d: 6f:2e:9b:f3:4e:1e:f3:09:68:f0:41:3e:61:78:27: 6d:72:f0:22:d0:6d:88:51:e1:6a:ed:01:e7:29:42: 36:f1:0f:ad:4b:3a:4a:22:fb:d4:e3:41:8c:19:71: 96:f0:df:3b:6e:5c:1e:9c:f0:8c:5b:24:af:4a:39: 0f:d2:f8:4b:2e:39:e0:d2:a5:ff:b3:06:bc:82:46: d0:89:ac:5d:5b:d7:72:83:e0:39:b9:e4:24:33:07: 89:94:5c:95:6d:b1:66:d2:5f:3a:5c:13:d0:42:e1: 43:50:47:e6:1e:48:c0:43:4e:b6:c1:ea:cf:33:b8: 69:4d:ec:3d:35:26:d4:90:89:e6:4f:69:ce:1b:a3: 7b:6e:44:a0:7b:66:a6:1d:5b:66:7a:0a:d1:69:64: 4e:41:d8:a4:88:52:65:bf:58:2b:ac:05:d8:04:10: 37:b8:cc:45:f1:21:0d:91:42:42:9b:69:13:36:60: 5f:fa:6e:91:67:c2:5c:67:79:ab:c2:b5:e5:3e:fc: 8e:9c:c1:5c:f0:95:bc:d4:bd:77:84:58:78:87:17: 6c:4b:c4:44:4c:4b:26:80:ed:4f:58:37:0e:c1:c6: 0e:0c:a2:0f:b7:3d:a2:7a:e1:4d:cf:22:89:ee:8e: d9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B4:0C:E5:41:94:65:06:5A:0D:A5:CB:2C:8A:B6:0A:CF:65:4C:6E X509v3 Authority Key Identifier: keyid:6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/zLQM5UGUZQZaDaXLLIq2Cs9lTG4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.72.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6c:05:1b:6b:0b:7d:1d:12:ba:c8:5e:11:7a:9a:16:17:e7:ce: b8:ec:68:58:f1:b2:c9:37:f0:e0:bf:21:e2:b0:42:37:de:cd: 69:56:ab:e0:1d:3e:d3:17:07:b1:a5:af:1b:8c:1c:af:ed:1c: 92:4f:1f:e8:2f:31:13:b3:48:61:10:e0:ea:98:7f:d8:33:5b: 88:12:5a:58:ff:48:03:47:ac:3e:fe:74:e4:c2:9c:a8:01:9f: bd:13:4e:18:ae:7f:20:87:c7:e7:b7:15:19:11:36:0e:f7:83: 77:e8:ef:6f:48:80:0b:13:57:dc:38:07:51:5d:b1:38:4f:8a: d2:db:8d:d5:8f:c3:50:f4:6f:fd:39:2a:e1:e1:d3:18:5c:4d: f4:4d:e9:bb:b2:68:7f:3b:76:f6:a7:f5:5f:2c:bb:78:14:63: 99:4c:0d:c0:f4:91:32:5d:36:7f:b6:e8:5f:68:e6:22:66:4b: 6b:a2:58:19:41:3b:22:de:75:0a:85:1d:9b:10:80:48:92:c3: ab:91:ec:51:13:2c:39:58:62:e6:1b:35:00:dc:26:9e:72:c2: 49:5a:e3:c5:ad:22:90:1c:d3:5e:f4:77:a6:7f:14:99:b3:8d: 6f:52:d7:8f:c0:7b:b4:3c:2a:ac:59:d7:4a:35:0b:6c:2a:d4: de:bc:5e:40 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt9y0fdSZLSLYyAkopGkk7EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWU0YmIwNTEzOTgwYzg3ZjliYWM1OTI5NTJjMDk1Nzc3 YWMxMmUwHhcNMjYwMTAyMDgyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2I0MGNlNTQxOTQ2NTA2NWEwZGE1Y2IyYzhhYjYwYWNmNjU0YzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0A1OuXmqkXvoqwgmUI1vLpvzTh7z CWjwQT5heCdtcvAi0G2IUeFq7QHnKUI28Q+tSzpKIvvU40GMGXGW8N87blwenPCM WySvSjkP0vhLLjng0qX/swa8gkbQiaxdW9dyg+A5ueQkMweJlFyVbbFm0l86XBPQ QuFDUEfmHkjAQ062werPM7hpTew9NSbUkInmT2nOG6N7bkSge2amHVtmegrRaWRO QdikiFJlv1grrAXYBBA3uMxF8SENkUJCm2kTNmBf+m6RZ8JcZ3mrwrXlPvyOnMFc 8JW81L13hFh4hxdsS8RETEsmgO1PWDcOwcYODKIPtz2ieuFNzyKJ7o7ZUQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFMy0DOVBlGUGWg2lyyyKtgrPZUxuMB8GA1UdIwQY MBaAFG6uS7BROYDIf5usWSlSwJV3esEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnE1THNGRTVnTWhfbTZ4WktWTEFsWGQ2d1M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zYTcyYmEtMWRjYS00MGQ5LWE4YWQt NGNlNjIzMWYyYWQ5LzEvekxRTTVVR1VaUVphRGFYTExJcTJDczlsVEc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8zYTcyYmEtMWRjYS00MGQ5LWE4YWQtNGNlNjIzMWYyYWQ5 LzEvYnE1THNGRTVnTWhfbTZ4WktWTEFsWGQ2d1M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjUgwDQYJ KoZIhvcNAQELBQADggEBAGwFG2sLfR0SusheEXqaFhfnzrjsaFjxssk38OC/IeKw QjfezWlWq+AdPtMXB7GlrxuMHK/tHJJPH+gvMROzSGEQ4OqYf9gzW4gSWlj/SANH rD7+dOTCnKgBn70TThiufyCHx+e3FRkRNg73g3fo729IgAsTV9w4B1FdsThPitLb jdWPw1D0b/05KuHh0xhcTfRN6buyaH87dvan9V8su3gUY5lMDcD0kTJdNn+26F9o 5iJmS2uiWBlBOyLedQqFHZsQgEiSw6uR7FETLDlYYuYbNQDcJp5ywkla48WtIpAc 0170d6Z/FJmzjW9S14/Ae7Q8KqxZ10o1C2wq1N68XkA= -----END CERTIFICATE-----Generated at Mon Feb 2 07:58:57 2026 by rpki-client