This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/zvCrVq4GpGUBE37m7ZM3q3DEvk8.roa File: zvCrVq4GpGUBE37m7ZM3q3DEvk8.roa (raw, json) Hash identifier: SgQbm5oNK1zxo7/T57EeuLpvE8Aw7Jxw0oduPoj3Mi8= Subject key identifier: CE:F0:AB:56:AE:06:A4:65:01:13:7E:E6:ED:93:37:AB:70:C4:BE:4F Certificate issuer: /CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982 Certificate serial: 019B76EB1E607528044D9C132A6EAEA96250 Authority key identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/zvCrVq4GpGUBE37m7ZM3q3DEvk8.roa Signing time: Thu 01 Jan 2026 00:17:58 +0000 ROA not before: Thu 01 Jan 2026 00:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15566 IP address blocks: 62.77.128.0/22 maxlen: 22 62.77.128.0/24 maxlen: 24 62.77.129.0/24 maxlen: 24 62.77.130.0/24 maxlen: 24 62.77.131.0/24 maxlen: 24 2a02:2950::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1e:60:75:28:04:4d:9c:13:2a:6e:ae:a9:62:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982 Validity Not Before: Jan 1 00:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cef0ab56ae06a46501137ee6ed9337ab70c4be4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5d:90:17:d2:42:5b:1a:82:e3:b5:44:c4:f1: 25:55:42:f2:66:05:81:82:ad:a8:05:53:6c:3f:75: e3:f3:c0:d0:33:8e:40:d0:8f:91:bb:81:f9:f3:21: d2:1c:13:17:ac:46:3d:bc:03:48:1e:41:3f:d7:f4: 04:d2:21:49:e8:23:3e:4a:68:c1:0a:73:b2:cd:c4: a1:a3:76:0f:e5:ae:a4:a8:db:ef:17:48:1c:68:6f: b9:83:ad:9b:cf:f4:20:38:49:05:73:af:cd:83:28: 41:71:52:da:e0:cb:ec:c4:c7:e7:6a:60:19:63:79: 51:45:19:a0:29:b4:d6:1c:68:40:00:12:62:84:03: 85:05:1d:13:76:66:b9:bd:de:41:56:12:0d:e2:e4: d5:b9:fa:c3:2f:6b:ce:f7:8d:04:5a:33:6d:09:59: ad:42:b2:bb:41:73:74:27:55:67:05:e9:95:82:90: bb:c8:ac:cf:68:11:4e:97:bc:9d:f8:93:e4:1d:15: 42:3c:f4:84:ea:96:e6:a9:78:1d:25:9d:83:6c:34: d3:7e:5f:88:81:a7:d4:c4:0d:07:93:7d:1b:d5:6d: 80:23:2b:62:a7:3e:e0:5e:95:cc:17:8a:61:57:08: a3:dc:9b:9c:39:85:ee:e8:c8:1e:10:73:a4:c1:5a: bd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F0:AB:56:AE:06:A4:65:01:13:7E:E6:ED:93:37:AB:70:C4:BE:4F X509v3 Authority Key Identifier: keyid:D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/zvCrVq4GpGUBE37m7ZM3q3DEvk8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.77.128.0/22 IPv6: 2a02:2950::/32 Signature Algorithm: sha256WithRSAEncryption 18:b8:e1:e9:6d:68:25:5d:21:0e:2c:29:c0:25:9a:69:f2:05: f7:33:3f:cf:09:73:76:27:25:52:72:b5:a0:a7:d8:30:be:f8: da:15:2c:df:34:5f:83:86:ea:46:13:ca:68:fb:08:8c:34:89: c7:ee:4f:a4:bb:4f:79:df:ba:59:b9:d6:f7:67:ff:33:cd:44: 3c:8d:6e:1d:f9:7f:83:a9:14:bd:33:3f:f0:b8:30:f4:ae:ce: 72:74:e2:2a:d4:cd:e9:cd:a9:da:3c:b9:af:c8:18:8a:71:b5: e6:70:d8:47:b4:8a:aa:5d:b0:b6:1f:80:a1:c0:28:c6:6b:85: e2:54:c6:b5:ea:39:3a:0e:e1:87:1d:75:98:24:6b:04:09:27: 93:57:63:ad:55:2a:f1:c9:11:49:9d:fd:28:f7:e1:3e:ad:49: 20:1e:ff:e8:aa:5e:43:24:f8:50:35:2e:e9:7f:30:5e:bd:17: 3f:f3:34:52:a7:7f:41:5b:95:64:24:91:0f:68:e8:a5:a2:a9: 9d:c2:e4:69:13:c3:12:cb:75:91:16:e1:e8:99:6b:db:ec:52: 7a:e7:d4:f8:45:fd:be:7e:cf:0a:36:e2:ab:51:c3:d7:df:ba: 45:8c:b7:16:74:35:2c:57:46:d4:83:f9:fb:e1:45:71:68:4e: 60:2c:8d:18 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt26x5gdSgETZwTKm6uqWJQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NGYyMzhjNWM3NGViOWE3NWE0NmUyYmM2NzQxMWU4ZGMy MmQ5ODIwHhcNMjYwMTAxMDAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWYwYWI1NmFlMDZhNDY1MDExMzdlZTZlZDkzMzdhYjcwYzRiZTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv12QF9JCWxqC47VExPElVULyZgWB gq2oBVNsP3Xj88DQM45A0I+Ru4H58yHSHBMXrEY9vANIHkE/1/QE0iFJ6CM+SmjB CnOyzcSho3YP5a6kqNvvF0gcaG+5g62bz/QgOEkFc6/NgyhBcVLa4MvsxMfnamAZ Y3lRRRmgKbTWHGhAABJihAOFBR0Tdma5vd5BVhIN4uTVufrDL2vO940EWjNtCVmt QrK7QXN0J1VnBemVgpC7yKzPaBFOl7yd+JPkHRVCPPSE6pbmqXgdJZ2DbDTTfl+I gafUxA0Hk30b1W2AIytipz7gXpXMF4phVwij3JucOYXu6MgeEHOkwVq95wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFM7wq1auBqRlARN+5u2TN6twxL5PMB8GA1UdIwQY MBaAFNlPI4xcdOuadaRuK8Z0EejcItmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlU4ampGeDA2NXAxcEc0cnhuUVI2TndpMllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kOWQ5YjYtYzNiZS00YzVkLWFkZWEt NGJjODRjNzlmYzU4LzEvenZDclZxNEdwR1VCRTM3bTdaTTNxM0RFdms4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9kOWQ5YjYtYzNiZS00YzVkLWFkZWEtNGJjODRjNzlmYzU4 LzEvMlU4ampGeDA2NXAxcEc0cnhuUVI2TndpMllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCPk2AMA0E AgACMAcDBQAqAilQMA0GCSqGSIb3DQEBCwUAA4IBAQAYuOHpbWglXSEOLCnAJZpp 8gX3Mz/PCXN2JyVScrWgp9gwvvjaFSzfNF+DhupGE8po+wiMNInH7k+ku09537pZ udb3Z/8zzUQ8jW4d+X+DqRS9Mz/wuDD0rs5ydOIq1M3pzanaPLmvyBiKcbXmcNhH tIqqXbC2H4ChwCjGa4XiVMa16jk6DuGHHXWYJGsECSeTV2OtVSrxyRFJnf0o9+E+ rUkgHv/oql5DJPhQNS7pfzBevRc/8zRSp39BW5VkJJEPaOiloqmdwuRpE8MSy3WR FuHomWvb7FJ659T4Rf2+fs8KNuKrUcPX37pFjLcWdDUsV0bUg/n74UVxaE5gLI0Y -----END CERTIFICATE-----Generated at Tue Feb 10 06:51:16 2026 by rpki-client