This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/zNk-M0VG943BmxksL9suzBVm4vQ.roa File: zNk-M0VG943BmxksL9suzBVm4vQ.roa (raw, json) Hash identifier: UUWX1bpaoMZzwXQx5EXEi0bI53+v8tYUcjIfVRmZCYY= Subject key identifier: CC:D9:3E:33:45:46:F7:8D:C1:9B:19:2C:2F:DB:2E:CC:15:66:E2:F4 Certificate issuer: /CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6 Certificate serial: 019B7BA4EABD4D9FD21E87B18E49C989FDCD Authority key identifier: D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/zNk-M0VG943BmxksL9suzBVm4vQ.roa Signing time: Thu 01 Jan 2026 22:19:24 +0000 ROA not before: Thu 01 Jan 2026 22:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 139.123.232.0/24 maxlen: 24 193.24.65.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ea:bd:4d:9f:d2:1e:87:b1:8e:49:c9:89:fd:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6 Validity Not Before: Jan 1 22:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ccd93e334546f78dc19b192c2fdb2ecc1566e2f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e2:53:f3:27:6f:8d:28:e5:30:97:95:6c:e7: 77:76:f9:9a:91:f2:9a:0c:c9:ca:af:f4:b6:8d:95: ea:e5:75:f5:2d:6f:b1:05:cf:cb:e5:c6:cb:97:ae: f7:49:1d:f6:ed:ea:b5:86:65:ce:89:6b:9d:c7:e0: 6c:f4:d4:8a:a2:a9:33:d7:71:6c:bb:ef:9e:d7:3e: c8:3f:de:b6:1b:cf:58:fd:6a:75:bf:e9:cc:c6:a1: e5:9c:93:8a:5c:cf:86:26:d9:d5:8f:43:40:25:62: 45:60:c2:4e:7d:94:ef:aa:17:35:d0:44:5a:76:11: 2f:87:95:da:14:7f:69:9e:b9:72:60:24:21:16:2b: 9d:52:d8:e3:03:80:4f:0e:76:fc:e5:44:1d:65:87: 91:3c:33:37:eb:99:7d:ae:dd:53:38:24:3f:60:b3: 47:b5:de:a0:d7:ce:10:8c:63:c6:88:a7:b4:30:9a: f6:78:18:7b:2d:5a:10:c5:5d:ea:94:6e:41:33:ac: 4b:ac:b4:10:8b:7d:7b:91:19:be:66:c1:c3:a7:19: 22:bf:69:ed:2f:a7:35:6e:3e:b7:2a:14:bb:5d:d0: 3b:7b:1e:5a:1f:42:9b:87:ba:90:4e:a3:19:9b:11: 25:1f:25:1d:a1:46:b5:26:dd:1c:a7:eb:ef:22:c3: 44:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D9:3E:33:45:46:F7:8D:C1:9B:19:2C:2F:DB:2E:CC:15:66:E2:F4 X509v3 Authority Key Identifier: keyid:D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/zNk-M0VG943BmxksL9suzBVm4vQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.123.232.0/24 193.24.65.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:4f:9e:4d:5f:1d:01:34:ef:6a:60:56:29:65:5e:03:da:13: d6:14:ea:10:9b:68:56:35:74:d3:f0:f0:e4:73:61:9c:ae:16: 63:cf:16:3d:b8:69:52:c7:e2:c3:32:c3:10:e7:bb:0f:6c:84: 8b:19:66:04:c7:78:f4:7a:0d:61:cc:07:66:5c:ce:db:aa:05: 33:af:b8:fe:eb:f4:71:41:a6:a5:b0:ea:11:6c:0b:3d:4e:8b: ec:6d:5c:25:de:c6:7e:95:27:52:ba:51:43:1d:fa:33:77:dd: 27:a3:f4:09:c4:f0:4b:c4:92:d7:da:1c:46:06:a5:21:37:ad: 8b:e2:c1:bf:7e:95:d4:95:6d:76:17:bd:b7:28:dd:dc:bd:61: 6e:3b:77:1b:82:f5:3d:f3:be:ce:51:f1:d2:15:2d:45:ce:18: 86:57:4c:82:cc:62:4a:0c:9b:f0:c9:52:1c:35:e5:35:f4:7c: 6f:dc:3f:fe:9c:3e:5e:67:83:b6:f4:a9:9e:59:6f:51:0e:8f: 75:b5:1b:90:ac:56:77:64:bc:bb:64:c2:15:71:ae:66:4b:41: 6c:87:46:55:d8:e7:14:99:93:3f:4f:50:2d:42:9b:6d:dc:03: e3:62:be:9a:fe:e6:77:b3:8c:a5:8d:e1:f2:4a:f5:75:90:e1: 0a:ea:3f:2a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pOq9TZ/SHoexjknJif3NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4NzcyYWFjMWI2MmI4N2Q2YjAxZDU3YTFhMDBhNmE3MmI4 YTdkYTYwHhcNMjYwMTAxMjIxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2Q5M2UzMzQ1NDZmNzhkYzE5YjE5MmMyZmRiMmVjYzE1NjZlMmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+JT8ydvjSjlMJeVbOd3dvmakfKa DMnKr/S2jZXq5XX1LW+xBc/L5cbLl673SR327eq1hmXOiWudx+Bs9NSKoqkz13Fs u++e1z7IP962G89Y/Wp1v+nMxqHlnJOKXM+GJtnVj0NAJWJFYMJOfZTvqhc10ERa dhEvh5XaFH9pnrlyYCQhFiudUtjjA4BPDnb85UQdZYeRPDM365l9rt1TOCQ/YLNH td6g184QjGPGiKe0MJr2eBh7LVoQxV3qlG5BM6xLrLQQi317kRm+ZsHDpxkiv2nt L6c1bj63KhS7XdA7ex5aH0Kbh7qQTqMZmxElHyUdoUa1Jt0cp+vvIsNEHwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMzZPjNFRveNwZsZLC/bLswVZuL0MB8GA1UdIwQY MBaAFNh3KqwbYrh9awHVehoApqcrin2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkhjcXJCdGl1SDFyQWRWNkdnQ21weXVLZmFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82MTZhNTgtNTM0Mi00MzJjLWE5YzUt MzMzYmVlY2ZmNmY0LzEvek5rLU0wVkc5NDNCbXhrc0w5c3V6QlZtNHZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My82MTZhNTgtNTM0Mi00MzJjLWE5YzUtMzMzYmVlY2ZmNmY0 LzEvMkhjcXJCdGl1SDFyQWRWNkdnQ21weXVLZmFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAi3voAwQA wRhBMA0GCSqGSIb3DQEBCwUAA4IBAQBOT55NXx0BNO9qYFYpZV4D2hPWFOoQm2hW NXTT8PDkc2GcrhZjzxY9uGlSx+LDMsMQ57sPbISLGWYEx3j0eg1hzAdmXM7bqgUz r7j+6/RxQaalsOoRbAs9TovsbVwl3sZ+lSdSulFDHfozd90no/QJxPBLxJLX2hxG BqUhN62L4sG/fpXUlW12F723KN3cvWFuO3cbgvU9877OUfHSFS1FzhiGV0yCzGJK DJvwyVIcNeU19Hxv3D/+nD5eZ4O29KmeWW9RDo91tRuQrFZ3ZLy7ZMIVca5mS0Fs h0ZV2OcUmZM/T1AtQptt3APjYr6a/uZ3s4yljeHySvV1kOEK6j8q -----END CERTIFICATE-----Generated at Sat Jan 3 04:53:48 2026 by rpki-client