This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z7YKoT2uZ4toIphTGHeS29211HY.roa
File: Z7YKoT2uZ4toIphTGHeS29211HY.roa (raw, json)
Hash identifier: IVtzdq6W6e4HPrHbXyquHCQIRite7QNBD3zP/ThGue4=
Subject key identifier: 67:B6:0A:A1:3D:AE:67:8B:68:22:98:53:18:77:92:DB:DD:B5:D4:76
Certificate issuer: /CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Certificate serial: 019B76EB110ECF6E0DAF4EB07EAFB0306AD6
Authority key identifier: 67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z7YKoT2uZ4toIphTGHeS29211HY.roa
Signing time: Thu 01 Jan 2026 00:17:55 +0000
ROA not before: Thu 01 Jan 2026 00:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 553
IP address blocks: 141.62.0.0/16 maxlen: 17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Feb 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:11:0e:cf:6e:0d:af:4e:b0:7e:af:b0:30:6a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Validity
Not Before: Jan 1 00:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67b60aa13dae678b68229853187792dbddb5d476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c1:b4:92:8b:3c:58:c6:e7:30:da:18:62:94:
49:56:8a:3c:65:e3:e4:c6:6b:70:19:8c:50:5d:f1:
0e:14:18:83:bd:ce:0c:88:a6:0c:3f:8c:c9:6c:36:
ca:81:ec:15:34:96:7e:c0:35:2e:22:11:84:33:64:
8f:a0:1e:25:69:59:19:ea:a8:09:96:b6:93:1a:3c:
e7:8d:46:87:db:02:10:da:33:e7:10:ce:34:db:a7:
80:55:56:1b:56:ff:01:1e:4a:5d:28:bb:08:18:90:
77:31:44:aa:0f:ed:8f:39:d9:97:01:83:cc:79:e7:
d9:e0:31:fd:f2:bd:f9:7e:cf:02:9f:ed:ef:d5:c3:
57:10:cb:99:62:bf:74:42:71:63:49:6a:41:ae:4b:
17:65:e0:17:4e:fb:48:70:3b:b7:21:af:a4:49:0e:
41:15:66:04:f1:30:90:61:e2:b0:ee:7d:97:54:21:
23:57:87:a4:49:29:d0:58:0f:17:04:a1:90:21:b3:
2b:e3:3f:16:b7:6b:f2:db:48:41:cc:63:12:08:5b:
40:1d:10:38:b0:ef:a3:d0:c9:d6:76:bd:6e:4c:81:
a3:4e:77:06:b6:0e:94:1e:dc:ec:f8:80:78:47:85:
9f:b9:c4:2f:4c:4d:fb:84:49:be:63:67:d7:a5:ad:
97:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B6:0A:A1:3D:AE:67:8B:68:22:98:53:18:77:92:DB:DD:B5:D4:76
X509v3 Authority Key Identifier:
keyid:67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z7YKoT2uZ4toIphTGHeS29211HY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.62.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c9:1f:f9:6d:6f:e9:19:bb:5d:ee:90:97:36:45:ff:53:6f:b5:
08:2a:34:3f:e6:83:48:0e:68:e5:f0:31:40:23:f8:be:c5:a8:
75:67:f5:b1:cd:e5:86:1a:b5:7b:7b:49:b4:73:9b:1f:27:7c:
30:cd:c0:e4:af:5f:17:44:48:30:cf:1c:35:1b:73:c2:a9:ea:
f0:fa:8f:10:21:0f:04:8d:9d:9b:dc:de:25:cf:71:f4:65:35:
2d:52:b3:4c:eb:df:2a:03:d1:b8:7b:b0:69:2d:05:b5:13:66:
32:14:26:cd:1a:fe:88:05:5f:4f:35:a5:ba:9e:fe:dd:bf:2a:
5b:8b:76:79:a4:17:c5:58:4a:4a:0c:1c:84:3d:26:ce:7a:96:
11:7f:e8:f5:38:b2:3e:b7:ce:c9:21:38:47:46:ce:c5:ed:51:
74:f1:8c:26:4b:95:8e:a1:06:e7:c6:e4:96:00:51:ef:d7:61:
2f:77:20:eb:77:e8:52:a7:e6:d1:39:d2:71:d3:fe:8f:35:c8:
42:ad:67:d9:b5:03:ce:b1:04:a4:a7:3b:a1:d3:59:51:96:e6:
2c:84:4d:fa:c1:af:f2:e7:28:28:79:33:9c:95:67:59:ca:8f:
b0:5b:0e:38:a8:47:3f:2f:36:aa:e1:56:4d:3c:84:bd:8f:56:
c6:c9:b3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:03:05 2026 by rpki-client