This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ZiibtofVUlIAVrG6aOPuytIypiw.roa File: ZiibtofVUlIAVrG6aOPuytIypiw.roa (raw, json) Hash identifier: vGZmFz2F7thBEhEVCPaxFWs/PA7r+KWGqAB+lohqfto= Subject key identifier: 66:28:9B:B6:87:D5:52:52:00:56:B1:BA:68:E3:EE:CA:D2:32:A6:2C Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E7819FF49A42504FBF04D3207D296 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ZiibtofVUlIAVrG6aOPuytIypiw.roa Signing time: Thu 01 Jan 2026 12:18:09 +0000 ROA not before: Thu 01 Jan 2026 12:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 393942 IP address blocks: 62.106.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:78:19:ff:49:a4:25:04:fb:f0:4d:32:07:d2:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66289bb687d552520056b1ba68e3eecad232a62c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8d:76:07:5b:2f:87:58:0f:c0:0d:7a:01:62: fa:cf:f6:46:57:c2:ae:e7:34:73:c6:52:49:48:94: d9:aa:1a:6d:04:7f:02:32:93:ee:34:1b:07:95:81: 06:32:b6:48:98:6b:15:71:b8:1d:5f:6b:a6:39:df: 7c:7f:4e:08:4a:69:06:9e:7a:38:ce:65:c4:a2:a7: 08:cc:18:76:7b:9c:ec:af:95:09:b4:3b:96:25:d0: 4c:52:62:17:90:ab:0a:bf:2b:96:3e:ae:b9:0c:09: bd:23:99:d0:cb:1b:9e:ee:13:e4:ac:66:47:6b:82: e0:70:40:00:bd:62:22:4a:05:38:55:db:2c:e7:76: d8:63:54:62:01:ba:d4:ca:26:59:23:3d:04:c0:18: f0:e6:d4:d1:a8:b2:f0:70:db:8f:03:40:19:5e:b6: b9:09:6f:3b:9a:2c:fd:07:19:af:4d:25:53:da:62: 0a:b5:03:f8:d6:c3:ed:dd:86:11:17:71:8d:b6:5a: b1:fc:eb:67:7b:c5:1e:67:6e:dd:fe:c9:3e:0c:19: ac:f7:53:c0:a5:87:f6:7d:19:1e:6a:22:78:6e:29: 9a:00:b5:e3:86:6d:5c:f9:e0:cc:d7:a0:9d:ac:82: a9:0e:19:ae:d9:f0:2e:be:4f:f3:30:6d:3c:b9:f1: 8c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:28:9B:B6:87:D5:52:52:00:56:B1:BA:68:E3:EE:CA:D2:32:A6:2C X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ZiibtofVUlIAVrG6aOPuytIypiw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.106.84.0/24 Signature Algorithm: sha256WithRSAEncryption 79:7d:1b:93:97:a0:d3:d6:7d:d0:ac:cd:33:ff:ff:5b:1b:48: 8f:92:f0:87:6f:da:48:19:aa:35:8f:ea:3d:8b:13:a7:b4:47: 0b:94:ea:76:b8:ed:0d:39:36:6e:d5:2b:86:f5:62:8e:f1:eb: 3d:d8:cd:91:bf:09:72:16:53:86:82:4a:95:8a:db:76:10:f2: c9:26:0b:ce:8a:a1:b4:d3:d3:61:4c:d7:51:45:29:95:e5:f8: db:09:20:37:0d:eb:15:47:56:af:b5:12:7a:48:c3:c2:0d:e5: 3d:e0:86:43:ea:66:96:29:bb:a9:61:38:8b:d2:88:20:76:07: 91:0b:12:f9:63:76:b4:fb:3f:77:13:63:65:6c:a9:9d:dd:2f: e1:7b:42:f1:d0:cf:cd:4b:c9:52:53:d7:95:a9:08:b9:35:1e: 15:76:0d:b0:e1:0e:f7:f5:82:c4:d8:d0:83:4f:ae:99:e8:46: ed:35:9e:41:fd:11:c2:c6:4e:a1:54:5d:0e:78:fb:60:e9:98: b6:0e:74:58:1f:12:c7:42:43:33:c6:11:aa:d8:97:44:fd:70: 74:d4:29:74:f2:e1:01:f8:58:f5:bb:bb:1d:ad:d3:41:65:f2: 91:0e:ac:4a:dc:9d:4d:12:e4:ea:fc:db:bd:73:38:5c:6d:65: 79:a1:a8:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fngZ/0mkJQT78E0yB9KWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjI4OWJiNjg3ZDU1MjUyMDA1NmIxYmE2OGUzZWVjYWQyMzJhNjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI12B1svh1gPwA16AWL6z/ZGV8Ku 5zRzxlJJSJTZqhptBH8CMpPuNBsHlYEGMrZImGsVcbgdX2umOd98f04ISmkGnno4 zmXEoqcIzBh2e5zsr5UJtDuWJdBMUmIXkKsKvyuWPq65DAm9I5nQyxue7hPkrGZH a4LgcEAAvWIiSgU4Vdss53bYY1RiAbrUyiZZIz0EwBjw5tTRqLLwcNuPA0AZXra5 CW87miz9BxmvTSVT2mIKtQP41sPt3YYRF3GNtlqx/Otne8UeZ27d/sk+DBms91PA pYf2fRkeaiJ4bimaALXjhm1c+eDM16CdrIKpDhmu2fAuvk/zMG08ufGM6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGYom7aH1VJSAFaxumjj7srSMqYsMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvWmlpYnRvZlZVbElBVnJHNmFPUHV5dEl5cGl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPmpUMA0G CSqGSIb3DQEBCwUAA4IBAQB5fRuTl6DT1n3QrM0z//9bG0iPkvCHb9pIGao1j+o9 ixOntEcLlOp2uO0NOTZu1SuG9WKO8es92M2RvwlyFlOGgkqVitt2EPLJJgvOiqG0 09NhTNdRRSmV5fjbCSA3DesVR1avtRJ6SMPCDeU94IZD6maWKbupYTiL0oggdgeR CxL5Y3a0+z93E2NlbKmd3S/he0Lx0M/NS8lSU9eVqQi5NR4Vdg2w4Q739YLE2NCD T66Z6EbtNZ5B/RHCxk6hVF0OePtg6Zi2DnRYHxLHQkMzxhGq2JdE/XB01Cl08uEB +Fj1u7sdrdNBZfKRDqxK3J1NEuTq/Nu9czhcbWV5oajY -----END CERTIFICATE-----Generated at Mon Jan 19 13:55:14 2026 by rpki-client