This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/Z_L2k8DCyYPXTdYIoY3nfdijg64.roa File: Z_L2k8DCyYPXTdYIoY3nfdijg64.roa (raw, json) Hash identifier: ivL6lpqNY3Dw4m+rwt+54sqsIUCex6KJIoQEKHYKmZk= Subject key identifier: 67:F2:F6:93:C0:C2:C9:83:D7:4D:D6:08:A1:8D:E7:7D:D8:A3:83:AE Certificate issuer: /CN=06c44b821ab5db542cc536c1f88b84baf0621654 Certificate serial: 019B7FF14908B70DEB2EE4C4DAE2807ED044 Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/Z_L2k8DCyYPXTdYIoY3nfdijg64.roa Signing time: Fri 02 Jan 2026 18:21:17 +0000 ROA not before: Fri 02 Jan 2026 18:21:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 185.128.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:49:08:b7:0d:eb:2e:e4:c4:da:e2:80:7e:d0:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654 Validity Not Before: Jan 2 18:21:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67f2f693c0c2c983d74dd608a18de77dd8a383ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:67:e4:28:83:d1:49:db:d6:d8:a0:94:db:9f: fc:02:2a:56:90:a1:b3:0f:56:62:86:da:ac:74:c2: 4b:2b:94:7f:8e:79:55:7d:78:f5:0b:dd:8d:00:e0: b0:fa:c2:20:cf:b6:69:dd:73:f9:23:83:7b:4b:e6: 59:a9:e4:26:3e:74:75:bd:25:3e:7f:bd:d4:17:36: 3c:96:93:06:d7:c7:95:32:9b:08:b1:56:25:3a:69: 33:d3:56:70:e5:56:91:19:95:c2:ac:9d:82:07:2c: 78:78:72:1d:a6:92:c3:89:6f:33:c4:22:33:99:01: 7c:58:94:6d:ff:c3:99:08:93:51:a3:7a:3a:96:06: 67:a8:d0:97:b6:2d:e3:cf:a6:86:1f:b8:a0:0d:64: d0:cb:8d:6d:a8:5c:71:b8:0a:16:ca:36:83:f2:1f: a1:94:91:a9:09:74:5b:20:03:93:1b:cd:d1:8d:67: 54:c1:d6:58:a0:74:9b:5f:c2:1a:51:39:01:73:b3: a0:25:7d:35:62:f4:ab:ad:83:cb:49:9a:57:51:58: 5f:a9:ef:67:62:c4:f5:d9:c0:d2:31:96:d1:3a:00: fb:e9:a7:0f:c9:db:9f:00:8a:af:f4:24:2a:62:e2: 5c:0c:1a:b6:97:91:90:79:14:6f:ed:40:cc:ad:ea: ac:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F2:F6:93:C0:C2:C9:83:D7:4D:D6:08:A1:8D:E7:7D:D8:A3:83:AE X509v3 Authority Key Identifier: keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/Z_L2k8DCyYPXTdYIoY3nfdijg64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.128.39.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:3a:28:02:d8:dd:a1:aa:92:27:0c:cc:98:cf:83:80:19:c1: e0:2f:d8:44:83:49:cd:93:94:a3:83:6c:f9:dc:0c:1e:09:ea: ec:64:62:2b:60:23:71:18:c5:cd:fc:d2:7a:62:85:be:dd:6b: 2c:95:c3:49:3d:d0:b9:80:9f:18:d2:d9:8b:58:6b:b1:55:c9: 39:2f:ea:d0:c1:d3:b9:a4:94:b5:a6:5a:85:05:6f:85:85:1b: f8:db:fa:07:2b:ec:1e:b1:00:7b:9d:fc:fc:f7:c9:33:8f:1b: 7c:4c:0b:8f:07:3a:47:c0:c9:0e:16:d8:11:a1:51:56:bc:e4: 0e:5d:16:87:4f:bf:df:23:3a:12:65:af:7f:80:8e:ed:a2:cb: a5:8e:38:a5:1e:77:7c:a8:e1:8e:1f:42:d3:ac:88:36:6c:bc: e9:2b:7f:92:e7:b0:fb:c7:8d:19:2e:eb:89:d8:e0:4d:57:be: 67:2f:79:3f:ee:55:bb:e5:ae:89:4f:e1:a0:e7:1d:d9:98:4d: 45:9e:44:8b:63:e4:0c:41:02:7c:ef:12:51:e9:01:92:f0:91: 1e:78:f4:dc:15:8a:34:b2:a8:8e:fe:f9:7d:04:c3:b4:5e:53: 2e:d9:9a:ab:f5:5b:07:2d:53:fe:6f:09:ba:18:c1:4f:00:e8: e8:f1:4a:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8UkItw3rLuTE2uKAftBEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YzQ0YjgyMWFiNWRiNTQyY2M1MzZjMWY4OGI4NGJhZjA2 MjE2NTQwHhcNMjYwMTAyMTgyMTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2YyZjY5M2MwYzJjOTgzZDc0ZGQ2MDhhMThkZTc3ZGQ4YTM4M2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2fkKIPRSdvW2KCU25/8AipWkKGz D1ZihtqsdMJLK5R/jnlVfXj1C92NAOCw+sIgz7Zp3XP5I4N7S+ZZqeQmPnR1vSU+ f73UFzY8lpMG18eVMpsIsVYlOmkz01Zw5VaRGZXCrJ2CByx4eHIdppLDiW8zxCIz mQF8WJRt/8OZCJNRo3o6lgZnqNCXti3jz6aGH7igDWTQy41tqFxxuAoWyjaD8h+h lJGpCXRbIAOTG83RjWdUwdZYoHSbX8IaUTkBc7OgJX01YvSrrYPLSZpXUVhfqe9n YsT12cDSMZbROgD76acPydufAIqv9CQqYuJcDBq2l5GQeRRv7UDMreqs5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGfy9pPAwsmD103WCKGN533Yo4OuMB8GA1UdIwQY MBaAFAbES4IatdtULMU2wfiLhLrwYhZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83OWNlZjgtNDNhMS00MDg5LTgwOWYt ZGM5ODQyNjU1NjdkLzEvWl9MMms4REN5WVBYVGRZSW9ZM25mZGlqZzY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi83OWNlZjgtNDNhMS00MDg5LTgwOWYtZGM5ODQyNjU1Njdk LzEvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYAnMA0G CSqGSIb3DQEBCwUAA4IBAQBsOigC2N2hqpInDMyYz4OAGcHgL9hEg0nNk5Sjg2z5 3AweCersZGIrYCNxGMXN/NJ6YoW+3WsslcNJPdC5gJ8Y0tmLWGuxVck5L+rQwdO5 pJS1plqFBW+FhRv42/oHK+wesQB7nfz898kzjxt8TAuPBzpHwMkOFtgRoVFWvOQO XRaHT7/fIzoSZa9/gI7tosuljjilHnd8qOGOH0LTrIg2bLzpK3+S57D7x40ZLuuJ 2OBNV75nL3k/7lW75a6JT+Gg5x3ZmE1FnkSLY+QMQQJ87xJR6QGS8JEeePTcFYo0 sqiO/vl9BMO0XlMu2Zqr9VsHLVP+bwm6GMFPAOjo8UrP -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:55 2026 by rpki-client