This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Zkydnsvqb78qa_G48avFSKm6vJE.roa File: Zkydnsvqb78qa_G48avFSKm6vJE.roa (raw, json) Hash identifier: wJxBD55OAxvO9h7vJbwOi8K4a0keVyFvY5dK9PumSn0= Subject key identifier: 66:4C:9D:9E:CB:EA:6F:BF:2A:6B:F1:B8:F1:AB:C5:48:A9:BA:BC:91 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B3597F0B5740BB7C9C57213E81C8E1A Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Zkydnsvqb78qa_G48avFSKm6vJE.roa Signing time: Thu 01 Jan 2026 20:17:48 +0000 ROA not before: Thu 01 Jan 2026 20:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212593 IP address blocks: 217.156.24.0/24 maxlen: 24 217.156.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:97:f0:b5:74:0b:b7:c9:c5:72:13:e8:1c:8e:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=664c9d9ecbea6fbf2a6bf1b8f1abc548a9babc91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:05:a8:1a:af:aa:88:47:73:1f:3d:7d:3f:3c: b8:9b:de:29:10:cb:c4:4d:86:ea:b3:6d:fc:84:bb: b4:a4:a3:23:d1:58:14:b8:f7:48:f2:57:57:a6:ad: 28:48:36:69:cf:1b:28:31:8e:46:cf:2f:5e:ee:05: c8:f2:a2:91:a9:c8:23:9a:33:aa:ad:9c:39:fa:36: cb:09:a3:91:3e:bc:84:2e:10:15:b0:27:9b:fd:50: 30:ec:f0:33:de:9f:bb:45:16:14:1a:dc:0b:c5:2a: c5:cf:93:e3:43:91:7e:8c:23:ab:f4:83:18:7b:e1: 1e:cd:fd:b4:de:19:10:b5:f5:86:c5:41:a8:9e:f7: bd:0c:ac:04:4f:f6:e7:4a:09:70:64:0c:29:aa:cc: 5a:3b:2a:13:78:f4:34:ef:7e:82:aa:11:05:78:34: 45:ea:76:9b:1a:9c:5c:46:73:27:33:24:73:f5:72: 20:e2:e0:56:73:7a:5e:08:ee:d3:40:4a:01:f3:f4: fd:26:00:46:c8:dd:32:e7:df:07:09:02:87:44:ee: 08:15:ff:10:10:a6:47:48:08:87:32:e1:24:12:fb: d5:fb:15:83:37:fa:4f:4d:4a:4c:49:e9:59:4d:b9: bd:b6:52:e0:05:75:18:00:1d:70:27:0f:5d:a8:df: 14:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:4C:9D:9E:CB:EA:6F:BF:2A:6B:F1:B8:F1:AB:C5:48:A9:BA:BC:91 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Zkydnsvqb78qa_G48avFSKm6vJE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.156.24.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:f8:99:9f:6f:2d:bf:b7:3e:51:50:37:29:56:62:36:98:a1: c0:87:66:98:13:69:54:5b:2f:e1:40:d7:b4:1b:ab:71:1d:43: 69:20:9a:2d:ca:31:80:65:bf:4c:07:2a:04:13:ed:f9:72:42: ee:b5:d6:da:2a:5d:a3:66:9c:5b:18:80:59:00:af:a1:93:01: 82:cc:3f:27:06:64:f5:08:26:e2:e6:0d:37:64:78:20:87:dc: bb:f4:ed:77:25:31:29:fb:af:c9:a9:4b:f5:53:0b:ba:f3:e1: 93:09:4a:05:c3:2c:b1:98:1a:3d:49:ca:82:82:5e:67:3f:3c: 1a:19:d1:fe:ed:6f:3c:46:8d:2d:19:99:ee:9c:73:c5:b2:fd: 93:83:88:23:cc:42:5a:fb:fe:4f:c5:88:5a:29:fa:09:23:f4: c6:f6:93:d8:a3:bd:58:02:64:cf:41:fd:43:e5:38:60:c2:93: 49:1a:9b:4b:71:6c:9e:e3:99:e5:3c:63:e7:1f:4c:70:1a:1b: e7:db:99:37:ff:56:52:5c:f5:2c:fb:91:aa:b2:f4:19:ff:08: d6:3b:d1:26:3d:70:fb:6f:f3:fb:ab:2e:6a:42:55:21:45:e7: 4d:71:22:05:06:a0:39:ae:84:8c:51:7b:20:47:cb:ed:35:7f: b8:34:47:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NZfwtXQLt8nFchPoHI4aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjRjOWQ5ZWNiZWE2ZmJmMmE2YmYxYjhmMWFiYzU0OGE5YmFiYzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwWoGq+qiEdzHz19Pzy4m94pEMvE TYbqs238hLu0pKMj0VgUuPdI8ldXpq0oSDZpzxsoMY5Gzy9e7gXI8qKRqcgjmjOq rZw5+jbLCaORPryELhAVsCeb/VAw7PAz3p+7RRYUGtwLxSrFz5PjQ5F+jCOr9IMY e+Eezf203hkQtfWGxUGonve9DKwET/bnSglwZAwpqsxaOyoTePQ0736CqhEFeDRF 6nabGpxcRnMnMyRz9XIg4uBWc3peCO7TQEoB8/T9JgBGyN0y598HCQKHRO4IFf8Q EKZHSAiHMuEkEvvV+xWDN/pPTUpMSelZTbm9tlLgBXUYAB1wJw9dqN8UCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGZMnZ7L6m+/KmvxuPGrxUipuryRMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvWmt5ZG5zdnFiNzhxYV9HNDhhdkZTS202dkpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2ZwYMA0G CSqGSIb3DQEBCwUAA4IBAQBa+Jmfby2/tz5RUDcpVmI2mKHAh2aYE2lUWy/hQNe0 G6txHUNpIJotyjGAZb9MByoEE+35ckLutdbaKl2jZpxbGIBZAK+hkwGCzD8nBmT1 CCbi5g03ZHggh9y79O13JTEp+6/JqUv1Uwu68+GTCUoFwyyxmBo9ScqCgl5nPzwa GdH+7W88Ro0tGZnunHPFsv2Tg4gjzEJa+/5PxYhaKfoJI/TG9pPYo71YAmTPQf1D 5ThgwpNJGptLcWye45nlPGPnH0xwGhvn25k3/1ZSXPUs+5GqsvQZ/wjWO9EmPXD7 b/P7qy5qQlUhRedNcSIFBqA5roSMUXsgR8vtNX+4NEeY -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:41 2026 by rpki-client