This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Z-8SwiKWBgvq8SM7-bXmaA0SMnc.roa File: Z-8SwiKWBgvq8SM7-bXmaA0SMnc.roa (raw, json) Hash identifier: Ttao/aknVsUzQYLX2SY+KF0r96AnmufUMs5KwnjhCts= Subject key identifier: 67:EF:12:C2:22:96:06:0B:EA:F1:23:3B:F9:B5:E6:68:0D:12:32:77 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E393680A426D08CE54B79AE49E64181 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Z-8SwiKWBgvq8SM7-bXmaA0SMnc.roa Signing time: Fri 02 Jan 2026 10:20:37 +0000 ROA not before: Fri 02 Jan 2026 10:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206092 IP address blocks: 163.5.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:36:80:a4:26:d0:8c:e5:4b:79:ae:49:e6:41:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67ef12c22296060beaf1233bf9b5e6680d123277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1e:76:b1:a0:b9:1d:59:be:da:3e:7f:f7:92: 26:dc:02:8e:98:00:7c:f6:8b:f8:01:3a:c6:31:02: 25:72:71:56:68:cc:7a:1a:e8:ac:8e:31:46:e9:44: e6:cb:55:b2:99:7f:c4:16:0d:db:f6:63:4b:21:32: 80:2a:37:24:74:78:4b:8c:28:82:55:ba:c1:d5:ad: 78:ee:3f:3e:e9:34:bb:01:4e:30:2f:22:e7:aa:81: e0:39:1a:26:ea:55:a4:57:b5:af:94:43:17:bc:c7: b0:13:97:68:8d:c2:9d:cc:db:79:98:46:d2:a4:b7: bc:60:d4:0c:68:ce:e8:2b:59:56:9e:9d:df:2a:4c: 8a:b6:17:34:1a:8b:d9:55:fc:cf:04:20:59:77:49: f7:3f:5a:3a:74:54:d5:c3:54:a3:73:bc:be:d1:f5: b0:ec:dc:a1:26:56:92:45:ff:a1:f9:2d:c7:3d:25: 89:25:53:44:25:13:df:a2:a8:f7:0f:af:68:84:be: c9:c5:fb:1b:98:53:18:6d:29:b4:3d:c3:dd:00:3c: 5e:79:8d:d8:eb:83:e4:30:62:6c:5f:0c:7f:68:15: be:e7:ca:df:dd:4e:49:7e:32:ee:50:71:bd:86:49: 4e:67:a2:4b:fd:cd:84:7b:67:b2:aa:7f:9f:97:ca: c0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:EF:12:C2:22:96:06:0B:EA:F1:23:3B:F9:B5:E6:68:0D:12:32:77 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Z-8SwiKWBgvq8SM7-bXmaA0SMnc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.241.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:35:ac:fb:cd:16:f2:6d:9b:40:78:7c:c9:9f:18:08:49:a5: a8:69:e7:6c:7b:94:e7:ec:c0:14:67:bd:6d:b6:4a:9b:cb:de: 75:07:d8:38:84:6f:dd:d1:07:bf:ae:d9:26:66:57:e0:3c:a4: e7:fb:0e:20:cf:93:57:4c:e3:f2:9a:c0:1f:dd:4e:16:f0:10: b5:79:08:4e:f2:94:e3:c0:4c:e7:fe:0a:81:2a:24:61:52:53: 56:c6:40:6b:19:42:5b:73:ff:fe:9b:a6:3a:ff:3d:eb:88:79: d3:8a:1d:1e:5c:89:8a:fd:7a:9b:15:c5:f6:be:2e:7b:fc:d3: 18:3f:d1:8b:68:24:57:98:f1:a5:d4:90:88:1b:6a:d1:71:c5: b5:22:3f:6d:dc:5a:a6:96:8b:91:b2:65:d9:30:98:04:97:61: d6:24:32:88:5d:b6:da:59:4e:78:e8:af:10:09:87:f7:5d:1b: 0f:0e:2a:d6:15:b4:79:67:2d:0e:00:18:47:a5:28:2d:18:8c: 16:20:e8:8a:49:fb:55:a1:df:e5:2a:77:2c:e1:af:1d:7e:bf: 2f:b2:48:f8:98:e5:d1:7a:2e:bf:67:31:1c:9d:df:8d:fc:1a: d6:fd:fc:44:2d:87:17:33:96:db:da:3a:37:b4:2c:bf:13:6e: d4:85:27:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OTaApCbQjOVLea5J5kGBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2VmMTJjMjIyOTYwNjBiZWFmMTIzM2JmOWI1ZTY2ODBkMTIzMjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyR52saC5HVm+2j5/95Im3AKOmAB8 9ov4ATrGMQIlcnFWaMx6GuisjjFG6UTmy1WymX/EFg3b9mNLITKAKjckdHhLjCiC VbrB1a147j8+6TS7AU4wLyLnqoHgORom6lWkV7WvlEMXvMewE5dojcKdzNt5mEbS pLe8YNQMaM7oK1lWnp3fKkyKthc0GovZVfzPBCBZd0n3P1o6dFTVw1Sjc7y+0fWw 7NyhJlaSRf+h+S3HPSWJJVNEJRPfoqj3D69ohL7JxfsbmFMYbSm0PcPdADxeeY3Y 64PkMGJsXwx/aBW+58rf3U5JfjLuUHG9hklOZ6JL/c2Ee2eyqn+fl8rA9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGfvEsIilgYL6vEjO/m15mgNEjJ3MB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvWi04U3dpS1dCZ3ZxOFNNNy1iWG1hQTBTTW5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowXxMA0G CSqGSIb3DQEBCwUAA4IBAQAcNaz7zRbybZtAeHzJnxgISaWoaedse5Tn7MAUZ71t tkqby951B9g4hG/d0Qe/rtkmZlfgPKTn+w4gz5NXTOPymsAf3U4W8BC1eQhO8pTj wEzn/gqBKiRhUlNWxkBrGUJbc//+m6Y6/z3riHnTih0eXImK/XqbFcX2vi57/NMY P9GLaCRXmPGl1JCIG2rRccW1Ij9t3FqmlouRsmXZMJgEl2HWJDKIXbbaWU546K8Q CYf3XRsPDirWFbR5Zy0OABhHpSgtGIwWIOiKSftVod/lKncs4a8dfr8vskj4mOXR ei6/ZzEcnd+N/BrW/fxELYcXM5bb2jo3tCy/E27UhSf6 -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:06 2026 by rpki-client