This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/zSjt2n8Du85SIQ2nFoqjP0LKqnM.roa File: zSjt2n8Du85SIQ2nFoqjP0LKqnM.roa (raw, json) Hash identifier: JgDetX79XvAiL2bru5KwKSmri65awsy3GneK31+NYx8= Subject key identifier: CD:28:ED:DA:7F:03:BB:CE:52:21:0D:A7:16:8A:A3:3F:42:CA:AA:73 Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b Certificate serial: 019B7910727BF49133E6ECDE416E887F1456 Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/zSjt2n8Du85SIQ2nFoqjP0LKqnM.roa Signing time: Thu 01 Jan 2026 10:17:59 +0000 ROA not before: Thu 01 Jan 2026 10:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58061 IP address blocks: 5.178.108.0/24 maxlen: 24 103.101.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:72:7b:f4:91:33:e6:ec:de:41:6e:88:7f:14:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b Validity Not Before: Jan 1 10:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd28edda7f03bbce52210da7168aa33f42caaa73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:74:73:86:92:90:6d:84:fc:3f:90:9e:b4:7e: 21:94:48:51:1a:3d:4c:37:26:35:1b:a5:6b:02:bf: a9:5b:d6:44:04:d3:a4:19:2f:db:c4:95:dd:48:72: 9c:29:bc:c1:03:19:4d:87:34:98:c0:5b:d7:ca:b5: 55:bd:a6:6e:d1:b9:c9:f2:ea:f8:e0:62:7a:fd:9f: 91:12:f3:48:2c:42:c5:fb:97:58:58:da:7c:32:7a: ee:e8:78:b9:1a:d2:48:80:0f:0b:d1:d1:77:6b:ab: 3c:d4:c3:0b:6d:a8:1e:77:b3:6e:77:2b:f0:e6:bd: df:83:ce:fb:7e:5a:1a:b9:44:da:ad:9f:37:aa:dc: 31:b3:86:a1:ba:ff:65:63:9f:20:f1:06:6e:1b:80: 86:f6:16:ac:64:9b:4f:70:44:04:a5:97:c8:08:78: 66:77:c4:14:3f:c8:ca:9c:41:a6:52:6d:83:63:3f: 9f:5a:3c:4b:79:9e:45:95:4e:61:48:58:18:b4:42: f2:f7:74:47:de:25:59:63:e6:38:bf:75:7b:d5:78: 08:cd:52:f4:9a:e1:70:eb:ab:d2:c1:54:f6:b5:8d: d9:61:90:80:9c:77:b6:17:52:e1:fc:52:d4:87:f9: b4:1e:e5:0c:10:6b:c0:ea:8c:2e:be:7c:8f:66:38: ec:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:28:ED:DA:7F:03:BB:CE:52:21:0D:A7:16:8A:A3:3F:42:CA:AA:73 X509v3 Authority Key Identifier: keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/zSjt2n8Du85SIQ2nFoqjP0LKqnM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.178.108.0/24 103.101.86.0/24 Signature Algorithm: sha256WithRSAEncryption 46:b9:e2:2c:d0:fc:11:b6:4f:74:bd:f4:c9:a3:e7:22:e0:34: ae:b6:a0:dd:47:08:9c:80:d3:4a:7a:48:44:58:d4:83:2d:d5: f1:04:8c:4c:26:0f:15:37:65:bc:2d:97:d6:7e:16:98:92:e2: 04:ac:dd:d7:91:22:c2:67:84:f0:9a:7d:0b:61:e7:31:d7:65: df:70:67:cf:fe:c9:f2:03:8a:45:fc:f1:fb:59:93:44:85:b8: a2:99:65:c7:d7:0d:c3:df:21:57:7d:63:2e:2d:c7:cc:ac:ba: 93:7c:09:42:55:97:17:77:c1:9b:25:bb:33:07:e8:53:0b:0d: 65:52:be:1c:bc:29:9d:45:ac:4d:d4:6c:0c:b3:ee:b3:a6:33: 53:b0:ce:69:37:37:f0:b1:f9:20:bf:21:55:6a:62:44:3a:a4: ef:21:54:a5:4b:ee:00:e5:24:3f:c6:37:1c:04:a3:19:b2:19: ea:86:5e:13:f6:ba:f6:ce:73:f1:ab:8c:8c:02:07:e7:1c:0e: c2:ba:ec:f2:18:cd:45:c8:74:0e:5f:9b:90:49:43:98:1c:e1: 43:4f:4e:27:ba:36:24:a5:6a:25:be:5f:08:21:8f:57:b5:03: cf:2b:55:0b:3e:8d:b6:0a:9a:7b:63:75:6d:e2:19:5c:f7:96: 7f:3b:31:6f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EHJ79JEz5uzeQW6IfxRWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5 M2U0NmIwHhcNMjYwMTAxMTAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDI4ZWRkYTdmMDNiYmNlNTIyMTBkYTcxNjhhYTMzZjQyY2FhYTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3RzhpKQbYT8P5CetH4hlEhRGj1M NyY1G6VrAr+pW9ZEBNOkGS/bxJXdSHKcKbzBAxlNhzSYwFvXyrVVvaZu0bnJ8ur4 4GJ6/Z+REvNILELF+5dYWNp8Mnru6Hi5GtJIgA8L0dF3a6s81MMLbaged7Nudyvw 5r3fg877floauUTarZ83qtwxs4ahuv9lY58g8QZuG4CG9hasZJtPcEQEpZfICHhm d8QUP8jKnEGmUm2DYz+fWjxLeZ5FlU5hSFgYtELy93RH3iVZY+Y4v3V71XgIzVL0 muFw66vSwVT2tY3ZYZCAnHe2F1Lh/FLUh/m0HuUMEGvA6owuvnyPZjjsbwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM0o7dp/A7vOUiENpxaKoz9CyqpzMB8GA1UdIwQY MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt Y2Q2MTUyMjYxYzZmLzEvelNqdDJuOER1ODVTSVEybkZvcWpQMExLcW5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbJsAwQA Z2VWMA0GCSqGSIb3DQEBCwUAA4IBAQBGueIs0PwRtk90vfTJo+ci4DSutqDdRwic gNNKekhEWNSDLdXxBIxMJg8VN2W8LZfWfhaYkuIErN3XkSLCZ4Twmn0LYecx12Xf cGfP/snyA4pF/PH7WZNEhbiimWXH1w3D3yFXfWMuLcfMrLqTfAlCVZcXd8GbJbsz B+hTCw1lUr4cvCmdRaxN1GwMs+6zpjNTsM5pNzfwsfkgvyFVamJEOqTvIVSlS+4A 5SQ/xjccBKMZshnqhl4T9rr2znPxq4yMAgfnHA7CuuzyGM1FyHQOX5uQSUOYHOFD T04nujYkpWolvl8IIY9XtQPPK1ULPo22Cpp7Y3Vt4hlc95Z/OzFv -----END CERTIFICATE-----Generated at Thu Jan 22 21:38:18 2026 by rpki-client