This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ZQk20fDq3WrAGrG0flElpg1y7Co.roa File: ZQk20fDq3WrAGrG0flElpg1y7Co.roa (raw, json) Hash identifier: qFLZUP7gS+YKJMe+tCMhFWYmYpw2AyXDFI1cgDj9lP4= Subject key identifier: 65:09:36:D1:F0:EA:DD:6A:C0:1A:B1:B4:7E:51:25:A6:0D:72:EC:2A Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C12FADF1447CFB47A8710383DE60A3C Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ZQk20fDq3WrAGrG0flElpg1y7Co.roa Signing time: Fri 02 Jan 2026 00:19:37 +0000 ROA not before: Fri 02 Jan 2026 00:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57370 IP address blocks: 193.5.224.0/20 maxlen: 24 193.247.166.0/23 maxlen: 25 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:fa:df:14:47:cf:b4:7a:87:10:38:3d:e6:0a:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=650936d1f0eadd6ac01ab1b47e5125a60d72ec2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a2:c4:7e:09:fd:05:8b:99:fa:6a:ca:23:15: bb:77:ec:5e:43:45:91:1a:a6:a3:bc:56:9a:7d:4f: d2:94:fe:19:89:04:48:b3:df:03:da:79:d9:69:70: 45:ae:21:ac:0a:49:f2:b2:fd:96:09:03:a6:a1:70: d3:59:d9:54:8a:46:ae:8d:d8:6c:dc:4f:f9:15:cf: 49:61:b3:69:b3:8f:d6:87:31:0c:03:25:1b:71:53: c5:d7:ef:1d:f5:d7:8e:00:0e:5a:1a:a4:74:7e:d7: 82:bb:07:71:7a:cf:86:bb:eb:ed:17:4d:07:b6:31: 42:4d:20:ca:b3:9c:6b:89:3c:11:5b:37:d8:d4:68: 57:3b:9e:99:90:c3:08:bf:1c:70:52:56:ae:e6:fd: e6:06:a5:d9:30:90:90:e2:c1:84:60:a0:f8:4e:c8: 47:35:d0:80:3c:aa:8d:8a:f0:20:5e:39:79:a9:44: 86:2e:f4:d2:ef:9b:9a:8c:f4:1e:49:f0:7f:13:3b: 0b:45:eb:95:33:14:59:13:7d:3e:24:cd:e7:63:b8: 59:bb:54:e3:b6:b0:e6:48:a6:7d:8c:7f:24:0a:09: 1e:d3:17:40:e5:c3:63:08:ba:dd:bb:62:20:9b:a0: fa:00:ab:9b:61:22:d8:aa:be:68:1f:f2:f0:d9:ad: ee:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:09:36:D1:F0:EA:DD:6A:C0:1A:B1:B4:7E:51:25:A6:0D:72:EC:2A X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ZQk20fDq3WrAGrG0flElpg1y7Co.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.224.0/20 193.247.166.0/23 Signature Algorithm: sha256WithRSAEncryption 75:71:84:7e:bf:e2:77:d8:c6:3b:31:20:28:df:58:33:64:86: a0:81:be:b6:ea:b8:91:98:7d:0f:86:e8:b2:53:af:b5:53:53: 90:21:6c:7c:92:ca:27:a2:3d:75:ab:ec:f6:ca:02:d7:b0:d8: d8:ed:1b:74:32:08:3d:f7:c2:47:54:88:a6:f6:43:28:c3:33: 95:31:05:01:4d:b6:11:95:80:fd:e2:fa:93:64:34:55:27:40: 0b:10:d7:1c:c5:87:2a:b1:c3:26:91:d2:d2:3d:d0:8c:53:61: aa:01:0d:53:0d:75:56:1d:bf:e8:aa:b6:c6:4f:48:4d:ad:db: af:c1:4d:0d:0d:a4:0d:a5:a7:63:65:7b:5e:6a:83:dc:fb:2f: 65:ff:61:ae:b3:b3:22:bc:fd:62:15:1f:bc:89:ec:02:06:80: 69:20:c6:b7:43:17:0f:5c:bb:d9:54:1c:04:0f:08:bf:77:32: 76:b4:12:e6:5d:4e:f8:10:07:85:ef:79:a7:5e:0c:d3:63:88: 9d:48:a7:9a:e8:0b:dc:73:53:7a:15:17:1e:11:e1:a3:ea:6c: ec:75:f6:79:ac:21:93:df:40:93:32:cb:34:21:f3:ef:97:a5: 1c:c3:1d:3e:7c:db:b0:04:77:33:7e:69:7b:83:0b:8f:dd:40: bb:a5:6f:43 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EvrfFEfPtHqHEDg95go8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTA5MzZkMWYwZWFkZDZhYzAxYWIxYjQ3ZTUxMjVhNjBkNzJlYzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqLEfgn9BYuZ+mrKIxW7d+xeQ0WR GqajvFaafU/SlP4ZiQRIs98D2nnZaXBFriGsCknysv2WCQOmoXDTWdlUikaujdhs 3E/5Fc9JYbNps4/WhzEMAyUbcVPF1+8d9deOAA5aGqR0fteCuwdxes+Gu+vtF00H tjFCTSDKs5xriTwRWzfY1GhXO56ZkMMIvxxwUlau5v3mBqXZMJCQ4sGEYKD4TshH NdCAPKqNivAgXjl5qUSGLvTS75uajPQeSfB/EzsLReuVMxRZE30+JM3nY7hZu1Tj trDmSKZ9jH8kCgke0xdA5cNjCLrdu2Igm6D6AKubYSLYqr5oH/Lw2a3ugQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGUJNtHw6t1qwBqxtH5RJaYNcuwqMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvWlFrMjBmRHEzV3JBR3JHMGZsRWxwZzF5N0NvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEwQXgAwQB wfemMA0GCSqGSIb3DQEBCwUAA4IBAQB1cYR+v+J32MY7MSAo31gzZIaggb626riR mH0PhuiyU6+1U1OQIWx8ksonoj11q+z2ygLXsNjY7Rt0Mgg998JHVIim9kMowzOV MQUBTbYRlYD94vqTZDRVJ0ALENccxYcqscMmkdLSPdCMU2GqAQ1TDXVWHb/oqrbG T0hNrduvwU0NDaQNpadjZXteaoPc+y9l/2Gus7MivP1iFR+8iewCBoBpIMa3QxcP XLvZVBwEDwi/dzJ2tBLmXU74EAeF73mnXgzTY4idSKea6Avcc1N6FRceEeGj6mzs dfZ5rCGT30CTMss0IfPvl6Ucwx0+fNuwBHczfml7gwuP3UC7pW9D -----END CERTIFICATE-----Generated at Mon Jan 26 17:45:31 2026 by rpki-client