This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/z1pPJZC8Roz_T1vYXRSuU68ZbDY.roa File: z1pPJZC8Roz_T1vYXRSuU68ZbDY.roa (raw, json) Hash identifier: Ik8wDoOA/hP2fuwOOe52fFTNigs6I260PwuQ5V1pnfM= Subject key identifier: CF:5A:4F:25:90:BC:46:8C:FF:4F:5B:D8:5D:14:AE:53:AF:19:6C:36 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14B8E159DA58C1911B2FDE814604CD Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/z1pPJZC8Roz_T1vYXRSuU68ZbDY.roa Signing time: Fri 02 Jan 2026 14:20:23 +0000 ROA not before: Fri 02 Jan 2026 14:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60068 IP address blocks: 62.93.164.0/22 maxlen: 24 62.93.176.0/22 maxlen: 24 84.20.4.0/22 maxlen: 24 84.20.16.0/22 maxlen: 24 84.20.24.0/22 maxlen: 24 135.196.228.0/23 maxlen: 24 135.196.232.0/23 maxlen: 24 135.196.238.0/23 maxlen: 24 213.139.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 22:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:b8:e1:59:da:58:c1:91:1b:2f:de:81:46:04:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf5a4f2590bc468cff4f5bd85d14ae53af196c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9c:9b:0e:bd:be:1f:fe:4d:58:a1:d5:48:29: 01:10:3d:6b:1c:86:b4:b4:12:3c:db:25:a5:17:2e: 3b:10:05:51:65:5e:c8:0a:8f:c5:c2:19:aa:49:ea: ed:b8:0e:15:41:04:11:e0:19:2b:ff:9a:8c:44:a2: 80:76:71:05:19:36:81:5e:8d:c6:68:c7:48:23:82: d6:53:41:60:24:eb:fe:72:c4:df:b1:31:dc:12:d2: fd:55:fb:46:4f:b1:4d:18:46:09:2e:b2:ac:ac:ed: 97:77:a0:0b:70:fe:62:5f:b5:fa:9a:3b:c3:dc:b9: 70:e4:f5:7e:f8:94:50:ed:07:59:3e:60:02:c3:92: 53:12:58:96:91:c6:fe:3c:ae:d1:b1:7d:d5:a7:1c: 0d:a4:a8:e6:87:30:51:d7:d8:f8:e3:e7:8a:74:7e: e7:49:43:95:03:95:31:f2:de:d5:23:58:81:f8:da: a6:ac:6b:d8:07:12:e1:00:b0:ae:df:1d:04:02:8d: 7b:5f:24:40:29:0a:6b:c1:80:51:ba:67:06:02:cb: 92:0f:45:88:10:7c:c5:43:b0:f0:13:8e:bb:54:b1: 5f:a5:19:15:95:cc:af:25:93:6a:f4:58:43:fe:36: bb:51:6d:36:01:02:55:e6:7d:b1:3c:75:5b:01:b0: dd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5A:4F:25:90:BC:46:8C:FF:4F:5B:D8:5D:14:AE:53:AF:19:6C:36 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/z1pPJZC8Roz_T1vYXRSuU68ZbDY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.93.164.0/22 62.93.176.0/22 84.20.4.0/22 84.20.16.0/22 84.20.24.0/22 135.196.228.0/23 135.196.232.0/23 135.196.238.0/23 213.139.8.0/22 Signature Algorithm: sha256WithRSAEncryption 56:eb:bf:df:85:f1:0b:70:9f:67:b2:c2:17:dd:13:e0:14:3e: 97:aa:c8:2c:27:a9:0c:91:cf:31:fd:8c:21:ff:83:42:c0:12: 4f:32:7c:1d:3e:d9:6c:71:1c:36:34:fb:4b:4c:fc:8d:2c:13: b4:db:8e:25:de:1f:d9:3a:a3:7b:96:01:a2:15:4a:b9:4e:05: 43:65:50:44:66:fe:f6:83:cb:37:2d:c8:8a:f0:c7:22:e6:fa: 6e:fa:41:44:15:68:6c:49:de:35:d7:f3:7d:85:f1:08:4f:fb: 76:6f:f0:a2:bc:71:4a:37:aa:83:45:80:7e:1c:29:bf:e4:9a: 5f:1a:81:0e:6a:86:17:4d:01:63:18:e1:85:88:cd:51:2e:f3: 04:48:2a:84:71:11:0c:a5:5c:41:75:37:07:1c:6c:f7:98:d5: db:ff:2f:ad:2f:d6:75:26:89:f1:43:4d:71:01:92:18:f5:20: 4e:56:38:cc:5f:4c:c8:9f:6d:b3:8f:9c:a4:a2:f2:93:c1:01: 42:a2:f4:4c:32:f7:84:29:1f:bc:ea:d7:92:27:6b:27:86:aa: 49:d5:3a:b4:f1:24:bf:06:99:f3:b8:f2:47:2a:79:01:87:5e: 3b:0c:6a:bf:97:df:ba:44:f8:e6:8a:02:7b:ce:f6:0a:ff:e6: 04:f2:3d:73 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt/FLjhWdpYwZEbL96BRgTNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjVhNGYyNTkwYmM0NjhjZmY0ZjViZDg1ZDE0YWU1M2FmMTk2YzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypybDr2+H/5NWKHVSCkBED1rHIa0 tBI82yWlFy47EAVRZV7ICo/FwhmqSertuA4VQQQR4Bkr/5qMRKKAdnEFGTaBXo3G aMdII4LWU0FgJOv+csTfsTHcEtL9VftGT7FNGEYJLrKsrO2Xd6ALcP5iX7X6mjvD 3Llw5PV++JRQ7QdZPmACw5JTEliWkcb+PK7RsX3VpxwNpKjmhzBR19j44+eKdH7n SUOVA5Ux8t7VI1iB+NqmrGvYBxLhALCu3x0EAo17XyRAKQprwYBRumcGAsuSD0WI EHzFQ7DwE467VLFfpRkVlcyvJZNq9FhD/ja7UW02AQJV5n2xPHVbAbDdsQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFM9aTyWQvEaM/09b2F0UrlOvGWw2MB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvejFwUEpaQzhSb3pfVDF2WVhSU3VVNjhaYkRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQCPl2kAwQC Pl2wAwQCVBQEAwQCVBQQAwQCVBQYAwQBh8TkAwQBh8ToAwQBh8TuAwQC1YsIMA0G CSqGSIb3DQEBCwUAA4IBAQBW67/fhfELcJ9nssIX3RPgFD6XqsgsJ6kMkc8x/Ywh /4NCwBJPMnwdPtlscRw2NPtLTPyNLBO0244l3h/ZOqN7lgGiFUq5TgVDZVBEZv72 g8s3LciK8Mci5vpu+kFEFWhsSd411/N9hfEIT/t2b/CivHFKN6qDRYB+HCm/5Jpf GoEOaoYXTQFjGOGFiM1RLvMESCqEcREMpVxBdTcHHGz3mNXb/y+tL9Z1JonxQ01x AZIY9SBOVjjMX0zIn22zj5ykovKTwQFCovRMMveEKR+86teSJ2snhqpJ1Tq08SS/ BpnzuPJHKnkBh147DGq/l9+6RPjmigJ7zvYK/+YE8j1z -----END CERTIFICATE-----Generated at Wed Jan 21 07:24:30 2026 by rpki-client