This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ZxMC0urxAYVkjFUmaokFfdBJMl8.roa File: ZxMC0urxAYVkjFUmaokFfdBJMl8.roa (raw, json) Hash identifier: RdlSLE3hK6JrxxCaU2kB+cKrehYWKUqekWprQX661zA= Subject key identifier: 67:13:02:D2:EA:F1:01:85:64:8C:55:26:6A:89:05:7D:D0:49:32:5F Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B35FF3CB7446C7EF968C71CA080DF2D Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ZxMC0urxAYVkjFUmaokFfdBJMl8.roa Signing time: Thu 01 Jan 2026 20:18:14 +0000 ROA not before: Thu 01 Jan 2026 20:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47122 IP address blocks: 62.233.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:ff:3c:b7:44:6c:7e:f9:68:c7:1c:a0:80:df:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=671302d2eaf10185648c55266a89057dd049325f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fe:8c:c0:af:9e:e6:9f:a5:dc:55:c8:38:0e: ef:2f:0b:4f:e8:31:d5:49:25:7e:a0:52:35:13:5a: e2:70:f2:12:0c:a3:83:1a:f8:99:eb:b5:11:14:35: b1:e8:a6:ac:47:9c:0b:c5:30:da:cf:61:5d:86:14: 98:53:9a:8c:64:70:94:90:c5:04:d0:4c:86:92:64: 89:89:73:d8:20:3d:20:2d:16:f0:dd:48:13:3b:5c: 33:f9:ab:36:52:3d:97:54:ca:a4:e0:5b:44:08:98: 40:9f:17:2c:b7:7d:6e:02:50:8c:e9:c4:96:fb:69: f8:5d:ee:a9:17:9c:c8:d6:1d:45:2a:bd:26:da:c9: d9:95:90:9d:7d:ab:2c:40:75:26:77:8d:4e:88:de: 58:7e:de:20:11:bb:5f:a9:2e:b0:ca:57:f8:bd:58: 44:c8:17:45:d5:26:10:81:86:a9:01:6d:32:fb:c0: 01:10:e4:4a:d3:74:59:c8:86:b3:1f:d8:60:c6:4e: 7d:5e:35:a0:94:19:fe:0f:e4:e4:4c:31:31:fc:24: 56:3a:eb:5d:cd:02:d8:5e:c8:ca:a9:79:42:30:52: 95:1c:b3:59:20:68:ca:52:b3:b0:fc:04:fe:19:22: 54:f6:51:6e:01:d2:74:dd:42:5f:cb:25:fb:1f:2a: 94:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:13:02:D2:EA:F1:01:85:64:8C:55:26:6A:89:05:7D:D0:49:32:5F X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ZxMC0urxAYVkjFUmaokFfdBJMl8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.233.46.0/24 Signature Algorithm: sha256WithRSAEncryption 17:4d:96:84:77:d1:68:8b:f4:10:50:ef:3b:83:a7:3b:0b:c6: cb:3f:01:a0:f1:09:49:31:a5:b1:ea:52:70:5e:6c:2e:12:e6: 38:14:8c:b2:6c:aa:c9:20:3d:b4:11:77:97:91:1c:c3:3a:4c: 6a:44:0f:7d:2d:f1:5b:a5:6c:5a:ea:f6:e6:6d:7b:4c:9a:1e: 4a:3d:92:1b:08:a1:96:05:87:9d:0c:fc:6c:dc:d8:ac:bb:34: 93:b3:f8:0c:0e:da:9c:a6:25:5f:00:25:d3:67:2d:4b:90:91: ce:8a:28:3f:01:8b:82:ce:57:c1:d1:91:99:ef:a9:57:b4:8f: b0:f1:bf:51:7b:9a:70:1b:fb:32:0e:5b:9c:2a:a8:14:27:1c: b4:c3:ed:16:61:46:50:2c:d9:f9:5f:5c:61:e3:fd:1f:7e:2a: 3e:53:3d:fb:c1:53:d2:7c:8c:fc:c2:b6:dc:17:ec:33:99:4a: 5c:22:fe:0c:8b:02:53:ec:b9:41:09:69:02:75:2f:43:6b:06: 61:74:65:93:ea:60:aa:1f:28:58:dc:0f:b2:76:45:21:0a:34: ef:13:9a:a6:9d:d6:5c:15:d8:6f:d9:72:7e:4e:38:83:52:01: a2:2f:f8:fe:2d:de:55:07:ae:80:f4:a7:62:b4:03:59:7a:0a: cd:03:67:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nf88t0RsfvloxxyggN8tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzEzMDJkMmVhZjEwMTg1NjQ4YzU1MjY2YTg5MDU3ZGQwNDkzMjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf6MwK+e5p+l3FXIOA7vLwtP6DHV SSV+oFI1E1ricPISDKODGviZ67URFDWx6KasR5wLxTDaz2FdhhSYU5qMZHCUkMUE 0EyGkmSJiXPYID0gLRbw3UgTO1wz+as2Uj2XVMqk4FtECJhAnxcst31uAlCM6cSW +2n4Xe6pF5zI1h1FKr0m2snZlZCdfassQHUmd41OiN5Yft4gEbtfqS6wylf4vVhE yBdF1SYQgYapAW0y+8ABEORK03RZyIazH9hgxk59XjWglBn+D+TkTDEx/CRWOutd zQLYXsjKqXlCMFKVHLNZIGjKUrOw/AT+GSJU9lFuAdJ03UJfyyX7HyqUxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGcTAtLq8QGFZIxVJmqJBX3QSTJfMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvWnhNQzB1cnhBWVZrakZVbWFva0ZmZEJKTWw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPukuMA0G CSqGSIb3DQEBCwUAA4IBAQAXTZaEd9Foi/QQUO87g6c7C8bLPwGg8QlJMaWx6lJw XmwuEuY4FIyybKrJID20EXeXkRzDOkxqRA99LfFbpWxa6vbmbXtMmh5KPZIbCKGW BYedDPxs3NisuzSTs/gMDtqcpiVfACXTZy1LkJHOiig/AYuCzlfB0ZGZ76lXtI+w 8b9Re5pwG/syDlucKqgUJxy0w+0WYUZQLNn5X1xh4/0ffio+Uz37wVPSfIz8wrbc F+wzmUpcIv4MiwJT7LlBCWkCdS9DawZhdGWT6mCqHyhY3A+ydkUhCjTvE5qmndZc Fdhv2XJ+TjiDUgGiL/j+Ld5VB66A9KditANZegrNA2fP -----END CERTIFICATE-----Generated at Thu Jan 15 13:20:10 2026 by rpki-client