This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ZH8sPfzDbYkFd6eQH_X6s5skRDE.roa File: ZH8sPfzDbYkFd6eQH_X6s5skRDE.roa (raw, json) Hash identifier: RzFUXOdRM3/2NzJ4nYhXAuzU+hvov2xd7f8c/uK2cgI= Subject key identifier: 64:7F:2C:3D:FC:C3:6D:89:05:77:A7:90:1F:F5:FA:B3:9B:24:44:31 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797ED031A27BFED92CE71F20E82BE66F Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ZH8sPfzDbYkFd6eQH_X6s5skRDE.roa Signing time: Thu 01 Jan 2026 12:18:32 +0000 ROA not before: Thu 01 Jan 2026 12:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 141892 IP address blocks: 212.69.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d0:31:a2:7b:fe:d9:2c:e7:1f:20:e8:2b:e6:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=647f2c3dfcc36d890577a7901ff5fab39b244431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ea:59:dc:70:ca:6e:a4:0e:c6:d7:74:e9:d2: 69:da:fa:f2:3c:dc:d9:f2:70:5e:7c:00:b0:97:da: 51:b7:2a:5f:f9:87:29:d1:33:e7:29:b6:3d:9f:84: a7:65:f3:fb:c4:59:0e:28:a1:cc:52:1e:d2:03:1f: 91:51:df:94:c3:38:31:41:3a:8e:49:0b:e5:d8:53: 42:38:b2:6d:eb:9d:83:15:20:d5:c3:b5:d4:38:f6: 6e:dd:cf:13:b9:4f:a7:ed:d8:fb:fc:3b:8b:fc:ac: 6f:5d:53:3d:12:4c:2a:70:0c:31:af:1d:35:13:6a: 69:2c:73:b3:40:64:88:66:b4:f8:69:d4:5e:9a:b7: f5:9a:0f:0e:f6:d0:8d:7f:59:02:b2:8f:dd:71:84: be:94:24:57:bb:a4:f3:e0:5f:a8:4d:75:5c:25:63: 33:fb:e0:2d:4a:15:1d:00:12:56:e4:f9:b8:29:c8: ca:e9:15:ee:95:a8:62:92:fa:a3:df:54:6d:3e:ad: 73:cb:95:09:50:9c:6b:e2:c2:c0:42:74:14:6f:06: 4d:0c:af:72:f9:4c:f4:cd:bd:32:c7:f6:a0:e0:57: 2d:49:00:b4:dd:24:9f:2e:2d:5a:d2:10:2d:f9:d7: 42:81:2e:16:dd:07:f4:c1:38:8c:e8:8d:2b:54:32: 95:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7F:2C:3D:FC:C3:6D:89:05:77:A7:90:1F:F5:FA:B3:9B:24:44:31 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ZH8sPfzDbYkFd6eQH_X6s5skRDE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.69.6.0/24 Signature Algorithm: sha256WithRSAEncryption 02:d0:0b:81:de:de:c6:62:cc:24:87:0d:fc:54:2b:1e:c6:8a: 17:4a:2e:8c:f1:34:62:70:dd:9d:cb:7b:74:e3:61:3f:ea:c4: 5c:bb:8f:03:1f:bc:6b:df:e7:d5:a2:08:12:37:6d:e6:7f:54: fb:27:2b:77:cf:27:85:bd:f8:ea:a1:93:91:de:3a:65:9f:7c: fb:10:65:98:c8:ec:ce:da:e8:f7:02:00:4a:3e:65:41:36:04: aa:2c:b3:37:99:88:53:3c:f6:94:06:2d:fe:cc:bf:0b:72:0c: a9:34:18:8a:6c:b5:bc:93:a3:3b:f1:29:65:26:12:fb:d0:59: 0a:48:80:34:f1:ab:bc:39:77:c4:d4:b8:fe:ab:9c:08:0c:ca: dc:57:5c:2f:fc:a8:65:b1:db:77:96:3d:fb:d1:2a:f4:9e:e3: 2e:16:f4:4f:2c:95:bc:1e:77:58:ad:c0:cc:ff:2a:a4:df:3e: 2a:a2:13:f1:e5:55:60:98:5f:01:8b:c5:46:93:a2:09:a1:26: bd:f3:02:c7:5f:6d:de:9e:1a:1d:d0:93:5d:2a:13:bf:aa:b8: 0e:fe:69:9f:e5:7e:6c:48:31:92:2b:a9:ed:61:2f:7c:41:40: db:53:fb:2b:4f:a6:f2:e5:a0:0b:da:cd:3f:35:70:2e:b2:c4: ae:91:fb:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ftAxonv+2SznHyDoK+ZvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDdmMmMzZGZjYzM2ZDg5MDU3N2E3OTAxZmY1ZmFiMzliMjQ0NDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2upZ3HDKbqQOxtd06dJp2vryPNzZ 8nBefACwl9pRtypf+Ycp0TPnKbY9n4SnZfP7xFkOKKHMUh7SAx+RUd+UwzgxQTqO SQvl2FNCOLJt652DFSDVw7XUOPZu3c8TuU+n7dj7/DuL/KxvXVM9EkwqcAwxrx01 E2ppLHOzQGSIZrT4adRemrf1mg8O9tCNf1kCso/dcYS+lCRXu6Tz4F+oTXVcJWMz ++AtShUdABJW5Pm4KcjK6RXulahikvqj31RtPq1zy5UJUJxr4sLAQnQUbwZNDK9y +Uz0zb0yx/ag4FctSQC03SSfLi1a0hAt+ddCgS4W3Qf0wTiM6I0rVDKVPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGR/LD38w22JBXenkB/1+rObJEQxMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvWkg4c1BmekRiWWtGZDZlUUhfWDZzNXNrUkRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EUGMA0G CSqGSIb3DQEBCwUAA4IBAQAC0AuB3t7GYswkhw38VCsexooXSi6M8TRicN2dy3t0 42E/6sRcu48DH7xr3+fVoggSN23mf1T7Jyt3zyeFvfjqoZOR3jpln3z7EGWYyOzO 2uj3AgBKPmVBNgSqLLM3mYhTPPaUBi3+zL8LcgypNBiKbLW8k6M78SllJhL70FkK SIA08au8OXfE1Lj+q5wIDMrcV1wv/Khlsdt3lj370Sr0nuMuFvRPLJW8HndYrcDM /yqk3z4qohPx5VVgmF8Bi8VGk6IJoSa98wLHX23enhod0JNdKhO/qrgO/mmf5X5s SDGSK6ntYS98QUDbU/srT6by5aAL2s0/NXAussSukfti -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:07 2026 by rpki-client