This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/ZVzgmg8PNrXQsVKOx9_CSmQahtg.roa File: ZVzgmg8PNrXQsVKOx9_CSmQahtg.roa (raw, json) Hash identifier: BHGDW/+IDMtJk2UEAihZYue4lahmvlWX5Zbyw1itKuM= Subject key identifier: 65:5C:E0:9A:0F:0F:36:B5:D0:B1:52:8E:C7:DF:C2:4A:64:1A:86:D8 Certificate issuer: /CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d Certificate serial: 019B7C12C9253D8D9F3CC80E840FEF15317A Authority key identifier: 6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/ZVzgmg8PNrXQsVKOx9_CSmQahtg.roa Signing time: Fri 02 Jan 2026 00:19:24 +0000 ROA not before: Fri 02 Jan 2026 00:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210045 IP address blocks: 217.28.133.0/24 maxlen: 24 2a12:2140::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:c9:25:3d:8d:9f:3c:c8:0e:84:0f:ef:15:31:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d Validity Not Before: Jan 2 00:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=655ce09a0f0f36b5d0b1528ec7dfc24a641a86d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:aa:94:76:35:25:fc:61:29:50:19:b3:06:d1: b0:f3:1a:be:fa:a6:30:6b:8f:4a:8f:ac:06:8e:27: fc:c8:23:5b:bc:6c:0e:a4:e4:b2:cc:00:aa:44:ad: e1:c7:ad:65:a7:4a:4b:3c:6d:dc:ad:3a:f3:70:62: cf:71:be:bd:18:15:c2:3e:cf:7c:1f:18:ed:6a:3b: 95:6a:83:e9:93:27:2c:69:77:ec:a1:3b:75:5e:cb: 17:f9:c1:af:80:d6:36:9a:19:7d:8d:dd:9b:57:21: cf:b2:6d:de:ce:88:23:33:be:9a:15:5c:ca:73:58: 45:39:70:fd:3b:dd:a8:d4:a0:87:f1:b4:16:4f:91: db:e8:71:32:e3:1b:a1:1f:84:ac:3c:4d:fc:25:21: 9f:30:61:44:00:81:33:a2:3c:98:d6:d8:02:a9:6c: 47:fd:1e:55:21:89:b9:18:4e:b0:dc:72:de:32:de: 7f:cd:d0:40:1c:0d:75:18:a9:84:89:17:0d:0f:95: bc:ae:26:6a:2b:b1:ff:02:95:97:78:41:19:54:df: 0b:c1:49:cb:2c:fd:5f:d5:c7:68:ec:6a:da:40:4a: ff:ea:a1:59:7a:7f:1b:83:9d:c9:75:64:71:97:5d: 04:d7:68:2f:29:ba:46:b6:da:db:19:77:de:a4:42: 8b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5C:E0:9A:0F:0F:36:B5:D0:B1:52:8E:C7:DF:C2:4A:64:1A:86:D8 X509v3 Authority Key Identifier: keyid:6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/ZVzgmg8PNrXQsVKOx9_CSmQahtg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.28.133.0/24 IPv6: 2a12:2140::/29 Signature Algorithm: sha256WithRSAEncryption b4:01:a2:ba:38:37:13:90:4c:8d:11:bc:ee:16:e0:77:07:cf: 22:62:16:97:1d:c8:c3:65:a0:ff:f2:e1:77:a4:be:1d:1f:e6: a1:74:3d:79:24:0a:c2:69:01:3d:0b:3d:e9:cb:d5:50:ee:53: fa:61:29:7d:13:cc:6d:ac:71:72:3f:91:42:a2:f7:e8:37:fd: e4:30:4d:4f:e3:6b:4b:27:44:52:49:62:93:73:dd:c1:54:cf: e4:99:76:07:15:00:96:24:9c:b6:a3:b2:5c:db:f1:f3:7b:2a: be:2c:ab:b7:e5:44:cd:2a:c6:fe:e6:00:93:3b:e0:c9:d4:56: 6c:23:95:9d:2c:40:79:9c:d3:0c:cc:89:f6:8f:cf:fd:2e:57: 4a:87:f2:d7:2c:af:92:15:86:0a:98:00:88:c6:eb:e7:a6:7d: e8:3a:7f:c0:d6:3e:21:54:a6:91:74:f4:3f:bf:e1:24:1b:c6: d0:49:c0:95:1f:8f:10:32:4a:71:13:ae:b8:af:8e:65:05:8a: 67:c2:72:d8:8b:04:0e:0c:c3:82:a7:5d:70:a1:ca:67:83:2a: fa:88:1f:a6:83:90:45:8a:f3:e7:40:c4:78:06:61:89:e2:e7: 24:77:89:91:7f:71:67:bb:2e:cb:64:ae:6e:bd:e7:bf:3f:7e: 8d:ab:de:38 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8EsklPY2fPMgOhA/vFTF6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZGM2OTRmMGMzMjU1ZDVkNTU3M2YxMzI4ZTUzNjU0Y2Zi MjJjNGQwHhcNMjYwMTAyMDAxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTVjZTA5YTBmMGYzNmI1ZDBiMTUyOGVjN2RmYzI0YTY0MWE4NmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/KqUdjUl/GEpUBmzBtGw8xq++qYw a49Kj6wGjif8yCNbvGwOpOSyzACqRK3hx61lp0pLPG3crTrzcGLPcb69GBXCPs98 HxjtajuVaoPpkycsaXfsoTt1XssX+cGvgNY2mhl9jd2bVyHPsm3ezogjM76aFVzK c1hFOXD9O92o1KCH8bQWT5Hb6HEy4xuhH4SsPE38JSGfMGFEAIEzojyY1tgCqWxH /R5VIYm5GE6w3HLeMt5/zdBAHA11GKmEiRcND5W8riZqK7H/ApWXeEEZVN8LwUnL LP1f1cdo7GraQEr/6qFZen8bg53JdWRxl10E12gvKbpGttrbGXfepEKL2QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGVc4JoPDza10LFSjsffwkpkGobYMB8GA1UdIwQY MBaAFGzcaU8MMlXV1Vc/EyjlNlTPsixNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk54cFR3d3lWZFhWVno4VEtPVTJWTS15TEUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kNzRjYjItZjBmYy00ZjJjLWJlMDEt NTM2ZTFmMGM0ZmY5LzEvWlZ6Z21nOFBOclhRc1ZLT3g5X0NTbVFhaHRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9kNzRjYjItZjBmYy00ZjJjLWJlMDEtNTM2ZTFmMGM0ZmY5 LzEvYk54cFR3d3lWZFhWVno4VEtPVTJWTS15TEUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA2RyFMA0E AgACMAcDBQMqEiFAMA0GCSqGSIb3DQEBCwUAA4IBAQC0AaK6ODcTkEyNEbzuFuB3 B88iYhaXHcjDZaD/8uF3pL4dH+ahdD15JArCaQE9Cz3py9VQ7lP6YSl9E8xtrHFy P5FCovfoN/3kME1P42tLJ0RSSWKTc93BVM/kmXYHFQCWJJy2o7Jc2/Hzeyq+LKu3 5UTNKsb+5gCTO+DJ1FZsI5WdLEB5nNMMzIn2j8/9LldKh/LXLK+SFYYKmACIxuvn pn3oOn/A1j4hVKaRdPQ/v+EkG8bQScCVH48QMkpxE664r45lBYpnwnLYiwQODMOC p11wocpngyr6iB+mg5BFivPnQMR4BmGJ4uckd4mRf3Fnuy7LZK5uvee/P36Nq944 -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:20 2026 by rpki-client