This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/ZGPQKEDVE9F1MV2KWCts_BoufGk.roa
File: ZGPQKEDVE9F1MV2KWCts_BoufGk.roa (raw, json)
Hash identifier: epehMPMwEjYywMBrhnF1PZ/wa0g0S9LNY7+R460jN/I=
Subject key identifier: 64:63:D0:28:40:D5:13:D1:75:31:5D:8A:58:2B:6C:FC:1A:2E:7C:69
Certificate issuer: /CN=460d3149fc50ca9797f50fde9e02a083134c5019
Certificate serial: 019B791022123577856631BF8A30719432D4
Authority key identifier: 46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/ZGPQKEDVE9F1MV2KWCts_BoufGk.roa
Signing time: Thu 01 Jan 2026 10:17:39 +0000
ROA not before: Thu 01 Jan 2026 10:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203909
IP address blocks: 193.228.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:22:12:35:77:85:66:31:bf:8a:30:71:94:32:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=460d3149fc50ca9797f50fde9e02a083134c5019
Validity
Not Before: Jan 1 10:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6463d02840d513d175315d8a582b6cfc1a2e7c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:07:f5:19:6a:07:de:1c:7e:2d:0c:46:8c:3f:
1e:cf:95:3f:d6:32:f3:7f:53:03:27:a5:65:52:f5:
b1:57:31:3f:66:bd:2b:16:6f:e8:56:55:02:18:19:
56:ef:dd:26:4b:b0:6f:cc:45:0a:e7:be:52:e1:c1:
3d:1f:2c:50:09:7c:44:96:bf:17:9f:b7:bf:3c:37:
51:22:44:02:39:b8:07:17:41:36:26:ee:10:ae:b2:
76:5e:c7:a8:82:ed:1f:68:4e:63:30:c0:87:20:d3:
0a:f8:9c:c6:cd:ad:7a:9f:33:24:41:85:59:bd:3e:
e2:f7:70:a3:e9:37:84:55:e2:a0:8e:2f:af:4b:87:
02:83:81:df:2e:ba:16:99:a1:90:bd:bc:be:61:ec:
e7:81:2a:40:b6:f0:3f:64:73:fb:97:d3:1c:04:19:
44:d5:fe:f4:35:d6:3d:a5:9a:bf:d8:91:fd:a5:44:
7d:97:9e:4e:63:3e:d1:8e:93:30:fd:55:42:05:a2:
d6:59:d0:dd:4a:7f:23:19:ff:77:b1:1e:20:87:0a:
41:d2:15:24:ce:7c:db:f7:0a:9f:a4:b7:e1:97:d0:
e6:1c:ad:92:45:11:50:4f:17:84:46:1f:d3:de:23:
01:ad:16:70:2f:e6:e1:a4:33:2e:ba:e2:41:25:25:
06:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:63:D0:28:40:D5:13:D1:75:31:5D:8A:58:2B:6C:FC:1A:2E:7C:69
X509v3 Authority Key Identifier:
keyid:46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/ZGPQKEDVE9F1MV2KWCts_BoufGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.143.0/24
Signature Algorithm: sha256WithRSAEncryption
61:a5:5f:2d:a1:6a:e7:ee:c6:57:66:c6:ec:d5:71:90:92:d6:
7f:a0:dd:69:a4:66:27:c6:85:91:70:d6:75:1e:09:13:6a:6c:
e2:d9:34:56:7e:46:d1:29:a5:5d:b3:21:69:7b:b1:c8:81:08:
e1:11:85:cc:e8:c4:ab:88:83:c0:90:89:61:c6:3b:e9:9e:dd:
82:a5:e2:f3:09:3b:fc:c5:bb:d5:5f:73:8b:8a:b7:2b:7a:70:
9a:fe:7e:09:95:ee:fa:9a:9b:2c:67:59:e0:6d:27:2d:e0:25:
e4:dd:71:5e:59:3c:86:8c:ed:be:1f:fc:a5:33:ec:66:59:20:
b9:49:2a:ee:cc:ab:a4:42:5f:92:76:2b:5d:37:e5:ad:71:af:
e7:1e:e2:8a:2f:ea:25:82:c3:31:9a:53:96:84:68:b3:5d:1c:
13:99:51:6b:ea:75:9f:6f:63:ac:4b:8b:8f:9b:23:c4:ff:c3:
a2:48:9f:73:90:ab:6d:77:5a:f2:99:b0:ec:44:61:f3:bf:00:
35:1d:ff:bb:6c:52:7b:cf:81:94:99:e5:cf:d2:d4:0f:de:16:
4b:97:53:e3:5e:d3:9a:29:a0:88:c1:1c:d8:81:3b:8e:03:32:
43:7a:69:49:25:60:dd:54:dd:18:51:60:12:26:b9:cc:12:61:
b9:f3:ce:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5ECISNXeFZjG/ijBxlDLUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MGQzMTQ5ZmM1MGNhOTc5N2Y1MGZkZTllMDJhMDgzMTM0
YzUwMTkwHhcNMjYwMTAxMTAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDYzZDAyODQwZDUxM2QxNzUzMTVkOGE1ODJiNmNmYzFhMmU3YzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wf1GWoH3hx+LQxGjD8ez5U/1jLz
f1MDJ6VlUvWxVzE/Zr0rFm/oVlUCGBlW790mS7BvzEUK575S4cE9HyxQCXxElr8X
n7e/PDdRIkQCObgHF0E2Ju4QrrJ2Xseogu0faE5jMMCHINMK+JzGza16nzMkQYVZ
vT7i93Cj6TeEVeKgji+vS4cCg4HfLroWmaGQvby+YezngSpAtvA/ZHP7l9McBBlE
1f70NdY9pZq/2JH9pUR9l55OYz7RjpMw/VVCBaLWWdDdSn8jGf93sR4ghwpB0hUk
znzb9wqfpLfhl9DmHK2SRRFQTxeERh/T3iMBrRZwL+bhpDMuuuJBJSUGfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGRj0ChA1RPRdTFdilgrbPwaLnxpMB8GA1UdIwQY
MBaAFEYNMUn8UMqXl/UP3p4CoIMTTFAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmcweFNmeFF5cGVYOVFfZW5nS2dneE5NVUJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wMTYyNDYtMzc2Yy00NzI1LTgwYWUt
NzViZDk0NmE3MzU1LzEvWkdQUUtFRFZFOUYxTVYyS1dDdHNfQm91ZkdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wMTYyNDYtMzc2Yy00NzI1LTgwYWUtNzViZDk0NmE3MzU1
LzEvUmcweFNmeFF5cGVYOVFfZW5nS2dneE5NVUJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweSPMA0G
CSqGSIb3DQEBCwUAA4IBAQBhpV8toWrn7sZXZsbs1XGQktZ/oN1ppGYnxoWRcNZ1
HgkTamzi2TRWfkbRKaVdsyFpe7HIgQjhEYXM6MSriIPAkIlhxjvpnt2CpeLzCTv8
xbvVX3OLircrenCa/n4Jle76mpssZ1ngbSct4CXk3XFeWTyGjO2+H/ylM+xmWSC5
SSruzKukQl+SditdN+Wtca/nHuKKL+olgsMxmlOWhGizXRwTmVFr6nWfb2OsS4uP
myPE/8OiSJ9zkKttd1rymbDsRGHzvwA1Hf+7bFJ7z4GUmeXP0tQP3hZLl1PjXtOa
KaCIwRzYgTuOAzJDemlJJWDdVN0YUWASJrnMEmG5887r
-----END CERTIFICATE-----
Generated at Wed Jan 21 03:40:00 2026 by rpki-client