This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jzAen_T1n2JdIsJ7PdKMJ7TE9cY.roa File: jzAen_T1n2JdIsJ7PdKMJ7TE9cY.roa (raw, json) Hash identifier: VrZ1VNDFrqsvLWzTpuEZdn1BV+nNfy1c3fvnZ2J0LBA= Subject key identifier: 8F:30:1E:9F:F4:F5:9F:62:5D:22:C2:7B:3D:D2:8C:27:B4:C4:F5:C6 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E392A797D208EE2B39C19FA0DE33881 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jzAen_T1n2JdIsJ7PdKMJ7TE9cY.roa Signing time: Fri 02 Jan 2026 10:20:34 +0000 ROA not before: Fri 02 Jan 2026 10:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136557 IP address blocks: 163.5.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2a:79:7d:20:8e:e2:b3:9c:19:fa:0d:e3:38:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f301e9ff4f59f625d22c27b3dd28c27b4c4f5c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:da:8d:2c:d2:9f:5e:76:93:a4:e8:af:20:16: 97:74:40:28:ac:1c:14:85:82:ce:24:bb:a2:40:ca: f1:6d:aa:68:d0:fd:d5:58:a1:01:fb:26:0c:35:15: 65:53:34:52:8d:c0:42:f2:91:92:63:01:23:23:b9: e7:cc:93:4a:70:7c:47:35:0e:c7:19:e2:88:5e:71: 4f:b6:39:4a:09:5c:7f:bc:bb:d1:a7:b7:6f:4d:30: a3:bb:32:fa:2d:96:83:fa:7b:f9:33:fd:42:96:cd: 37:2c:7b:29:d8:66:dc:58:c9:39:d3:77:ba:cf:cd: 0a:3b:31:cf:b9:8b:da:14:a1:65:09:26:d6:3f:d6: 40:81:7e:74:69:fc:a0:67:4c:bc:2e:05:90:cf:1a: de:6f:52:1e:70:b1:a7:15:99:cf:26:f5:05:7e:d5: cd:d8:f4:12:14:a5:fe:8b:f7:6a:0f:02:5a:38:1d: 9a:0f:1e:85:76:f5:69:be:83:d0:54:f8:25:f7:f3: b0:13:61:79:aa:a3:ba:7a:7e:08:f5:fc:69:d7:72: 63:43:e1:53:bf:b4:92:6c:c6:f2:f0:cf:ea:27:be: c3:d6:ac:64:5e:ad:d2:5f:0f:57:97:0f:c4:65:86: 98:62:64:9c:16:e1:3e:8b:55:22:9a:6f:34:38:32: 35:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:30:1E:9F:F4:F5:9F:62:5D:22:C2:7B:3D:D2:8C:27:B4:C4:F5:C6 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jzAen_T1n2JdIsJ7PdKMJ7TE9cY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.56.0/24 Signature Algorithm: sha256WithRSAEncryption 42:9f:3b:95:b4:a2:bc:b3:97:69:fc:6d:89:82:91:77:e7:79: ac:7d:8f:9a:29:3a:be:48:20:a7:b4:31:8b:db:c1:b5:a5:4e: 16:7b:dd:09:8f:a7:7b:d2:6e:84:9e:18:da:58:ed:6f:dd:57: 90:46:60:20:68:b0:bb:92:64:8b:25:58:48:82:19:e8:30:23: a8:29:aa:20:aa:29:11:42:5f:3b:0d:fc:94:3a:10:a2:34:cd: 0a:8f:d4:bc:ee:51:df:d8:db:82:3a:8d:83:d9:2f:c1:56:61: aa:5d:d0:4c:af:49:20:73:73:62:75:21:ed:30:5b:e3:de:81: d7:db:1d:cf:eb:99:3a:4b:3b:13:b2:e0:90:c2:01:55:10:2a: 44:bd:4b:61:02:97:ee:67:71:85:01:8f:d3:f0:88:cf:f0:50: 9c:71:05:b4:ec:bd:9a:dc:bc:e7:a2:d3:fd:f0:e1:94:a1:2f: da:aa:64:8b:07:db:85:fb:01:d0:41:15:49:f3:ed:f0:b2:b0: 49:b3:7e:ea:11:cd:de:7b:cb:7b:ea:64:52:c3:25:cf:19:bd: 3c:39:8e:9c:4c:47:d3:ef:4b:81:e0:57:15:e0:6a:4b:d9:e3: 86:ca:d0:85:8b:18:5d:4e:02:d9:71:e5:05:72:e7:17:80:cd: 35:ca:5a:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OSp5fSCO4rOcGfoN4ziBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjMwMWU5ZmY0ZjU5ZjYyNWQyMmMyN2IzZGQyOGMyN2I0YzRmNWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dqNLNKfXnaTpOivIBaXdEAorBwU hYLOJLuiQMrxbapo0P3VWKEB+yYMNRVlUzRSjcBC8pGSYwEjI7nnzJNKcHxHNQ7H GeKIXnFPtjlKCVx/vLvRp7dvTTCjuzL6LZaD+nv5M/1Cls03LHsp2GbcWMk503e6 z80KOzHPuYvaFKFlCSbWP9ZAgX50afygZ0y8LgWQzxreb1IecLGnFZnPJvUFftXN 2PQSFKX+i/dqDwJaOB2aDx6FdvVpvoPQVPgl9/OwE2F5qqO6en4I9fxp13JjQ+FT v7SSbMby8M/qJ77D1qxkXq3SXw9Xlw/EZYaYYmScFuE+i1Uimm80ODI1TwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI8wHp/09Z9iXSLCez3SjCe0xPXGMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvanpBZW5fVDFuMkpkSXNKN1BkS01KN1RFOWNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowU4MA0G CSqGSIb3DQEBCwUAA4IBAQBCnzuVtKK8s5dp/G2JgpF353msfY+aKTq+SCCntDGL 28G1pU4We90Jj6d70m6EnhjaWO1v3VeQRmAgaLC7kmSLJVhIghnoMCOoKaogqikR Ql87DfyUOhCiNM0Kj9S87lHf2NuCOo2D2S/BVmGqXdBMr0kgc3NidSHtMFvj3oHX 2x3P65k6SzsTsuCQwgFVECpEvUthApfuZ3GFAY/T8IjP8FCccQW07L2a3LznotP9 8OGUoS/aqmSLB9uF+wHQQRVJ8+3wsrBJs37qEc3ee8t76mRSwyXPGb08OY6cTEfT 70uB4FcV4GpL2eOGytCFixhdTgLZceUFcucXgM01ylpr -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:20 2026 by rpki-client