This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/ZYcAG4aaKp4Pf1qOZOsOEwrDzjU.roa File: ZYcAG4aaKp4Pf1qOZOsOEwrDzjU.roa (raw, json) Hash identifier: EqnSEDx6yPM3NTrcSmZ0dpmsneWx1xHj/kgiZXGmcS0= Subject key identifier: 65:87:00:1B:86:9A:2A:9E:0F:7F:5A:8E:64:EB:0E:13:0A:C3:CE:35 Certificate issuer: /CN=31ff6a22937ef1640d83188dfcd7abb30fcc721e Certificate serial: 019B79113636CDF3207F92E7D68B0F40293B Authority key identifier: 31:FF:6A:22:93:7E:F1:64:0D:83:18:8D:FC:D7:AB:B3:0F:CC:72:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/ZYcAG4aaKp4Pf1qOZOsOEwrDzjU.roa Signing time: Thu 01 Jan 2026 10:18:49 +0000 ROA not before: Thu 01 Jan 2026 10:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200146 IP address blocks: 62.3.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:36:36:cd:f3:20:7f:92:e7:d6:8b:0f:40:29:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31ff6a22937ef1640d83188dfcd7abb30fcc721e Validity Not Before: Jan 1 10:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6587001b869a2a9e0f7f5a8e64eb0e130ac3ce35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:30:8b:bf:8c:e8:be:66:fe:13:8f:45:82:a1: 92:38:62:87:c9:42:0b:67:dc:d3:ee:0e:86:e8:81: 5f:ad:66:c4:a2:46:68:07:aa:8f:d3:c4:e9:71:f3: a5:83:bf:2e:85:95:8d:b5:3b:cf:d5:30:58:8f:d0: 83:a4:48:46:4c:9b:73:51:38:0c:42:b1:3d:19:1e: 46:64:58:63:b2:53:4d:3f:11:3e:89:13:29:4c:b9: c5:32:b7:51:6f:9b:59:51:65:13:f2:9a:ac:40:40: 7b:1c:d9:44:d5:de:d4:79:ea:3f:26:a1:48:49:6a: 70:0d:40:05:a4:f2:1c:32:8d:dc:7d:01:47:64:a9: 71:e8:0f:9f:6e:c5:8c:c5:22:4b:8a:f3:bd:25:20: e2:5e:04:92:3e:7f:6e:97:9f:38:73:39:55:a4:20: 2a:26:67:39:7b:c7:04:e9:a4:45:6f:14:87:74:9b: f2:b4:d9:fd:20:89:47:fd:03:79:df:b5:47:e4:b0: d6:bb:9f:62:f4:79:88:41:8f:27:4d:f5:fe:28:95: ad:cd:b0:a4:56:ea:31:91:8a:c1:8d:5e:ff:9a:90: 5c:31:9e:1a:6e:39:e9:74:76:df:37:19:2e:0f:01: f2:5c:f6:c5:ac:f5:ca:1c:c3:a5:6b:dd:2e:91:ea: c2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:87:00:1B:86:9A:2A:9E:0F:7F:5A:8E:64:EB:0E:13:0A:C3:CE:35 X509v3 Authority Key Identifier: keyid:31:FF:6A:22:93:7E:F1:64:0D:83:18:8D:FC:D7:AB:B3:0F:CC:72:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/ZYcAG4aaKp4Pf1qOZOsOEwrDzjU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.3.47.0/24 Signature Algorithm: sha256WithRSAEncryption 10:f4:e3:8f:41:96:2e:c1:4d:10:3b:f1:cf:01:25:87:0e:3a: 3d:b3:9d:c8:38:42:9a:f2:26:2b:22:0c:6a:66:fe:0f:1d:3d: db:7a:c8:5c:6b:22:24:65:6e:eb:a0:fe:6f:bd:05:5c:10:78: f1:9d:2a:fa:94:73:22:71:4e:1b:a8:56:ec:c5:1d:09:f9:98: 88:d5:f5:b7:65:11:f3:cb:6a:cb:aa:ab:9b:78:4f:65:cb:29: a8:3c:21:f4:5a:3e:89:ba:61:e6:db:2b:2c:42:0c:08:fd:cb: 7d:ec:83:47:7a:58:f4:43:38:0a:9d:96:7d:cc:2a:a0:fc:b3: 0f:88:d1:86:d8:77:55:12:6d:55:41:00:5e:6d:e8:e8:bc:40: ac:5d:de:f4:e9:59:7d:cf:eb:a2:0e:54:6f:e5:f4:5e:10:0d: f6:21:93:5c:bd:88:8a:b4:d1:05:27:ea:73:52:e9:15:73:1f: b0:f8:b1:d5:29:03:f3:22:a6:9a:fa:c9:fa:15:7a:28:bd:13: a7:62:fc:b5:6a:19:31:c1:ea:4d:72:5f:5e:97:6f:90:c7:61: 20:ec:93:49:2a:d8:55:1b:8c:37:f7:5b:5f:3a:c4:69:9e:0c: ad:cb:62:d9:f8:2a:ef:83:84:5c:fa:58:01:f2:58:20:4c:ba: ea:fb:ae:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ETY2zfMgf5Ln1osPQCk7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZmY2YTIyOTM3ZWYxNjQwZDgzMTg4ZGZjZDdhYmIzMGZj YzcyMWUwHhcNMjYwMTAxMTAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTg3MDAxYjg2OWEyYTllMGY3ZjVhOGU2NGViMGUxMzBhYzNjZTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzCLv4zovmb+E49FgqGSOGKHyUIL Z9zT7g6G6IFfrWbEokZoB6qP08TpcfOlg78uhZWNtTvP1TBYj9CDpEhGTJtzUTgM QrE9GR5GZFhjslNNPxE+iRMpTLnFMrdRb5tZUWUT8pqsQEB7HNlE1d7Ueeo/JqFI SWpwDUAFpPIcMo3cfQFHZKlx6A+fbsWMxSJLivO9JSDiXgSSPn9ul584czlVpCAq Jmc5e8cE6aRFbxSHdJvytNn9IIlH/QN537VH5LDWu59i9HmIQY8nTfX+KJWtzbCk VuoxkYrBjV7/mpBcMZ4abjnpdHbfNxkuDwHyXPbFrPXKHMOla90ukerCUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGWHABuGmiqeD39ajmTrDhMKw841MB8GA1UdIwQY MBaAFDH/aiKTfvFkDYMYjfzXq7MPzHIeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWY5cUlwTi04V1FOZ3hpTl9OZXJzd19NY2g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8zMzY4OWYtOGU0OC00YmYzLTg5ZjUt Yzc2ZjdiNmIwZWI2LzEvWlljQUc0YWFLcDRQZjFxT1pPc09Fd3JEempVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8zMzY4OWYtOGU0OC00YmYzLTg5ZjUtYzc2ZjdiNmIwZWI2 LzEvTWY5cUlwTi04V1FOZ3hpTl9OZXJzd19NY2g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgMvMA0G CSqGSIb3DQEBCwUAA4IBAQAQ9OOPQZYuwU0QO/HPASWHDjo9s53IOEKa8iYrIgxq Zv4PHT3beshcayIkZW7roP5vvQVcEHjxnSr6lHMicU4bqFbsxR0J+ZiI1fW3ZRHz y2rLqqubeE9lyymoPCH0Wj6JumHm2yssQgwI/ct97INHelj0QzgKnZZ9zCqg/LMP iNGG2HdVEm1VQQBebejovECsXd706Vl9z+uiDlRv5fReEA32IZNcvYiKtNEFJ+pz UukVcx+w+LHVKQPzIqaa+sn6FXoovROnYvy1ahkxwepNcl9el2+Qx2Eg7JNJKthV G4w391tfOsRpngyty2LZ+Crvg4Rc+lgB8lggTLrq+64X -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:25 2026 by rpki-client