This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/ZcwqCFu-ugccIfT-C61LOqP6Rms.roa
File: ZcwqCFu-ugccIfT-C61LOqP6Rms.roa (raw, json)
Hash identifier: zUv7VdLIHUw6+UwEQbFc7BcKwkxW2AOANbLeMf0i6t0=
Subject key identifier: 65:CC:2A:08:5B:BE:BA:07:1C:21:F4:FE:0B:AD:4B:3A:A3:FA:46:6B
Certificate issuer: /CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Certificate serial: 019B7DCA71D2683BCD94F1A07FBDAD460E66
Authority key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/ZcwqCFu-ugccIfT-C61LOqP6Rms.roa
Signing time: Fri 02 Jan 2026 08:19:38 +0000
ROA not before: Fri 02 Jan 2026 08:19:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 62.146.255.0/24 maxlen: 24
145.63.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:71:d2:68:3b:cd:94:f1:a0:7f:bd:ad:46:0e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Validity
Not Before: Jan 2 08:19:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65cc2a085bbeba071c21f4fe0bad4b3aa3fa466b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:24:99:43:2f:a8:29:0b:ee:43:d9:e8:5f:ae:
62:f0:d1:d2:46:f6:b2:82:dc:db:c3:17:9e:32:f1:
77:4f:de:3d:f2:cd:f2:da:a9:e7:89:69:31:7e:dd:
b0:da:4a:11:a7:00:f1:0a:9b:5c:75:5d:cf:94:2c:
66:64:b8:5e:34:ed:45:ca:88:83:3a:84:84:47:8a:
7d:dd:b7:1e:56:54:44:f0:6d:1f:44:79:8b:89:e3:
2f:99:aa:fd:91:f8:31:48:0c:91:a4:29:79:73:20:
90:ff:f5:0d:db:37:9c:c7:ef:c9:a5:c9:45:a8:26:
9b:f3:bc:e3:59:1d:91:33:4a:40:08:4c:fd:61:bb:
57:f3:fd:6e:ff:7f:60:56:17:aa:73:49:76:cf:eb:
81:bc:a2:87:c2:ee:32:75:2d:d9:25:27:04:7f:b1:
e6:4b:dc:5e:e9:9e:0f:75:52:22:50:0f:c1:69:06:
02:d5:f9:84:e8:74:32:53:ce:e2:b9:4c:a8:b4:af:
16:a2:19:ce:91:6a:6e:28:df:0e:72:19:ab:b6:3d:
52:cd:d2:d3:d5:47:7a:5b:bd:49:02:34:8a:73:2a:
67:07:4f:d2:bd:8f:33:97:74:98:a8:44:68:e2:51:
47:17:2d:85:a4:fd:12:cc:9f:a4:87:a7:c6:2a:82:
34:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CC:2A:08:5B:BE:BA:07:1C:21:F4:FE:0B:AD:4B:3A:A3:FA:46:6B
X509v3 Authority Key Identifier:
keyid:61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/ZcwqCFu-ugccIfT-C61LOqP6Rms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.146.255.0/24
145.63.64.0/24
Signature Algorithm: sha256WithRSAEncryption
35:d8:74:bc:a3:05:35:61:14:86:62:d7:79:7b:09:e2:c1:ee:
b2:d6:c7:b8:1a:48:8b:12:3f:31:96:67:36:4d:3b:59:28:41:
ca:5a:77:62:39:b4:be:bf:1b:1b:80:50:e0:bd:5f:2c:e9:6a:
5f:13:56:3a:c3:8b:24:bd:5a:55:5e:b9:92:67:60:e5:33:ac:
3a:65:05:ac:17:31:28:2a:19:9d:2c:22:02:9f:2e:56:fb:8b:
71:0e:96:40:01:6d:10:68:7c:43:0c:1d:b0:95:b8:5a:79:3e:
93:07:83:90:11:08:6a:da:78:73:2e:1a:70:df:d9:3b:76:7e:
29:fa:de:f9:b0:21:37:3d:dd:20:ee:3e:70:a6:9e:f2:9d:62:
de:f5:e0:dc:a7:9a:4f:88:e7:35:67:91:9f:5a:a7:49:de:cd:
4a:41:5a:11:e9:16:77:f1:9b:ec:d7:34:7d:7f:ae:4d:e1:24:
e6:bf:d2:d3:9c:20:08:18:e8:e2:d8:a2:8a:60:1c:61:83:32:
7b:22:13:02:b4:a1:af:9f:74:46:fb:a3:92:5d:3c:32:5b:53:
1f:aa:91:79:58:6a:ed:41:f5:b4:e2:a6:d7:4d:a6:3b:60:18:
d7:36:3e:fd:91:51:f2:4b:ba:c9:f8:5c:44:f9:08:2e:34:9b:
e6:5d:80:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 11:04:15 2026 by rpki-client