This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/ZAwG4slSo_crrpDyRxFQR5KzVSg.roa File: ZAwG4slSo_crrpDyRxFQR5KzVSg.roa (raw, json) Hash identifier: /umphik0flgGmW1X9Vcc9LyWPZGDY2w5rPPzdD1TwmI= Subject key identifier: 64:0C:06:E2:C9:52:A3:F7:2B:AE:90:F2:47:11:50:47:92:B3:55:28 Certificate issuer: /CN=4b8d822165e7f01f722c973967f7554605240802 Certificate serial: 019B76EB5AE36D926B4B4C8B7B97FC40B6B4 Authority key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/ZAwG4slSo_crrpDyRxFQR5KzVSg.roa Signing time: Thu 01 Jan 2026 00:18:14 +0000 ROA not before: Thu 01 Jan 2026 00:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 167.94.170.0/23 maxlen: 23 167.94.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:5a:e3:6d:92:6b:4b:4c:8b:7b:97:fc:40:b6:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b8d822165e7f01f722c973967f7554605240802 Validity Not Before: Jan 1 00:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=640c06e2c952a3f72bae90f24711504792b35528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3e:3b:11:be:34:eb:d2:b1:4c:11:36:f7:aa: 58:73:a7:41:59:9f:09:c4:eb:c4:d6:23:bd:f8:41: 48:eb:dd:af:76:68:e6:3e:cf:b1:7e:7e:6a:c0:0a: fc:ef:43:f6:5f:56:9a:75:a5:e3:1d:53:b1:2a:01: c4:b9:77:b2:b9:05:87:a1:87:0c:06:2a:8b:7f:16: 80:ef:d6:a4:9b:f2:d5:16:05:7d:d2:da:19:e2:35: d4:6b:5b:95:46:b6:ae:18:cf:e5:2e:5e:57:10:d9: d4:a5:dd:af:ab:e6:f1:63:8a:e7:d1:b6:5b:4e:76: ab:83:e7:63:28:3b:76:bc:fd:bc:5c:d9:1c:ec:23: 66:5b:41:f4:b4:03:20:fc:0e:88:4e:61:a6:96:a8: 9c:5e:e9:b2:fd:50:10:2c:e5:17:2e:10:08:cd:3d: 10:e0:54:2e:dd:60:6b:0c:59:20:ed:5c:d7:3c:62: 7b:e7:e9:34:9c:1b:a1:fc:0f:69:3d:53:8e:5a:32: 19:e4:83:02:9d:75:7d:1d:f6:61:49:a4:6c:07:17: 0b:bd:29:fe:5b:19:91:cc:47:96:1d:7e:d6:d0:63: 7b:74:58:6a:68:10:c2:95:7c:ea:20:8a:72:e2:b6: d0:85:0f:2e:4f:c1:f8:4d:5a:be:6d:61:17:d7:56: 23:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:0C:06:E2:C9:52:A3:F7:2B:AE:90:F2:47:11:50:47:92:B3:55:28 X509v3 Authority Key Identifier: keyid:4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/ZAwG4slSo_crrpDyRxFQR5KzVSg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.94.170.0-167.94.173.255 Signature Algorithm: sha256WithRSAEncryption 3b:d6:8b:8e:e2:4f:10:ce:32:0e:07:0f:0c:7f:30:70:77:cc: 40:d4:dd:db:02:c4:3a:56:7a:1d:dc:ea:d0:08:43:5f:fa:52: 3a:db:1d:e6:16:54:ff:4f:49:08:b7:34:2d:f7:c1:07:71:9e: 0c:f0:f6:2b:05:50:ec:69:7d:29:b0:a8:f9:9b:56:9b:ae:b1: 87:64:98:48:e8:aa:b8:5c:3a:8b:e9:b0:31:39:a5:ba:e1:a3: ae:64:ab:ab:0c:17:b1:a2:e5:ad:1f:9b:d9:2e:25:d5:7f:bd: b7:b0:74:d8:88:6a:63:c2:45:3f:98:af:9a:80:7a:05:4b:ca: 5c:69:31:7b:db:18:1c:77:51:f5:e5:a6:b2:2e:35:30:57:6a: 05:bd:d1:94:78:ad:42:f8:7e:7c:c2:9e:d4:c2:61:2d:f3:b8: 51:79:bc:c5:14:c4:73:a8:21:fa:ff:42:00:dc:d5:e2:14:df: cc:94:20:81:ec:9f:79:6b:13:b4:9d:9e:96:e9:31:2b:ec:3d: a0:7a:19:b7:a7:6f:d7:fe:0f:47:18:ed:d7:0a:2f:53:cf:5d: 37:35:8e:34:88:ea:d8:93:f0:cc:ca:fb:d9:a3:fc:53:d5:71: 0a:df:c6:a0:78:51:f3:10:44:8f:01:7c:44:d6:3a:d3:6f:37: 1a:74:58:8f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt261rjbZJrS0yLe5f8QLa0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOGQ4MjIxNjVlN2YwMWY3MjJjOTczOTY3Zjc1NTQ2MDUy NDA4MDIwHhcNMjYwMTAxMDAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDBjMDZlMmM5NTJhM2Y3MmJhZTkwZjI0NzExNTA0NzkyYjM1NTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj47Eb4069KxTBE296pYc6dBWZ8J xOvE1iO9+EFI692vdmjmPs+xfn5qwAr870P2X1aadaXjHVOxKgHEuXeyuQWHoYcM BiqLfxaA79akm/LVFgV90toZ4jXUa1uVRrauGM/lLl5XENnUpd2vq+bxY4rn0bZb Tnarg+djKDt2vP28XNkc7CNmW0H0tAMg/A6ITmGmlqicXumy/VAQLOUXLhAIzT0Q 4FQu3WBrDFkg7VzXPGJ75+k0nBuh/A9pPVOOWjIZ5IMCnXV9HfZhSaRsBxcLvSn+ WxmRzEeWHX7W0GN7dFhqaBDClXzqIIpy4rbQhQ8uT8H4TVq+bWEX11YjKQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGQMBuLJUqP3K66Q8kcRUEeSs1UoMB8GA1UdIwQY MBaAFEuNgiFl5/AfciyXOWf3VUYFJAgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzQyQ0lXWG44Qjl5TEpjNVpfZFZSZ1VrQ0FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zMmU3NzYtOGYzNi00ZDE2LTk1NmEt NWFmOTU4Y2VhZjZlLzEvWkF3RzRzbFNvX2NycnBEeVJ4RlFSNUt6VlNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8zMmU3NzYtOGYzNi00ZDE2LTk1NmEtNWFmOTU4Y2VhZjZl LzEvUzQyQ0lXWG44Qjl5TEpjNVpfZFZSZ1VrQ0FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGnXqoD BAGnXqwwDQYJKoZIhvcNAQELBQADggEBADvWi47iTxDOMg4HDwx/MHB3zEDU3dsC xDpWeh3c6tAIQ1/6UjrbHeYWVP9PSQi3NC33wQdxngzw9isFUOxpfSmwqPmbVpuu sYdkmEjoqrhcOovpsDE5pbrho65kq6sMF7Gi5a0fm9kuJdV/vbewdNiIamPCRT+Y r5qAegVLylxpMXvbGBx3UfXlprIuNTBXagW90ZR4rUL4fnzCntTCYS3zuFF5vMUU xHOoIfr/QgDc1eIU38yUIIHsn3lrE7SdnpbpMSvsPaB6Gbenb9f+D0cY7dcKL1PP XTc1jjSI6tiT8MzK+9mj/FPVcQrfxqB4UfMQRI8BfETWOtNvNxp0WI8= -----END CERTIFICATE-----Generated at Sat Jan 10 22:07:05 2026 by rpki-client