This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/zTqbkSSoMJE_GhRq6-KVXnxqZys.roa File: zTqbkSSoMJE_GhRq6-KVXnxqZys.roa (raw, json) Hash identifier: cYPwmQNSFTiunu6ehxZGrenP+RZin6aQ8FQ6SlxAQFc= Subject key identifier: CD:3A:9B:91:24:A8:30:91:3F:1A:14:6A:EB:E2:95:5E:7C:6A:67:2B Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 019B7B36625A6EC1E5908DDB61FBE4F3266B Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/zTqbkSSoMJE_GhRq6-KVXnxqZys.roa Signing time: Thu 01 Jan 2026 20:18:40 +0000 ROA not before: Thu 01 Jan 2026 20:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395793 IP address blocks: 144.56.8.0/24 maxlen: 24 144.56.10.0/24 maxlen: 24 144.56.11.0/24 maxlen: 24 144.56.18.0/24 maxlen: 24 144.56.19.0/24 maxlen: 24 144.56.25.0/24 maxlen: 24 144.56.26.0/24 maxlen: 24 144.56.30.0/24 maxlen: 24 144.56.32.0/24 maxlen: 24 144.56.54.0/24 maxlen: 24 144.56.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:62:5a:6e:c1:e5:90:8d:db:61:fb:e4:f3:26:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Jan 1 20:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd3a9b9124a830913f1a146aebe2955e7c6a672b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c6:41:5d:ed:52:1c:3c:6d:b9:53:98:c8:46: 55:52:fd:10:d4:84:ed:ff:9c:79:cb:6f:67:34:40: 95:00:e0:d7:01:12:44:92:03:c8:4e:73:ad:0c:de: 5c:57:68:ce:c2:c3:d1:b6:52:40:02:18:f9:a8:a5: 8f:6b:3d:e9:46:15:1f:be:f3:7c:fd:fd:6f:a6:ab: 96:b1:2a:31:ad:fa:cd:74:45:1a:bf:45:5f:6b:e2: 5d:d4:61:73:be:cd:3a:d2:10:5f:d9:8f:ae:23:fb: 0d:26:79:6b:dd:11:61:e1:dd:59:b8:6d:b7:a3:9e: 29:cc:0c:b1:22:6c:f2:cc:90:d5:00:27:f8:f1:71: 18:f3:6b:a2:01:5d:e3:88:84:51:2b:30:e4:41:82: e9:12:7d:40:c2:60:6c:81:58:0e:92:55:c8:ab:98: 2b:6e:be:90:4a:b4:d1:99:81:23:48:1f:22:18:0d: 6a:d6:b2:1c:75:98:b7:5e:ec:e2:fa:5e:36:02:83: 47:88:8b:c2:4d:7d:51:f0:93:4b:43:87:09:31:0c: 7b:81:dc:f1:71:72:53:89:d0:6b:12:67:7e:f9:33: ba:71:1a:31:e1:e7:a1:40:3a:56:b8:5a:82:23:70: 4f:13:f9:2f:88:86:ea:12:ff:e8:0f:11:3f:95:4d: bd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:3A:9B:91:24:A8:30:91:3F:1A:14:6A:EB:E2:95:5E:7C:6A:67:2B X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/zTqbkSSoMJE_GhRq6-KVXnxqZys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.56.8.0/24 144.56.10.0/23 144.56.18.0/23 144.56.25.0-144.56.26.255 144.56.30.0/24 144.56.32.0/24 144.56.54.0/24 144.56.74.0/24 Signature Algorithm: sha256WithRSAEncryption 68:ff:f3:43:1a:c0:36:5c:38:3e:0a:75:3e:35:39:ca:b6:3f: bd:99:7c:db:c6:fb:ad:49:0f:6d:dd:c3:dd:ae:a5:0d:78:d6: 0d:9a:a4:66:cb:2a:86:59:0c:f2:85:d5:e8:62:ed:e4:b1:2e: 98:f2:fe:b8:0c:9e:a8:a8:be:7f:69:ec:67:32:e9:34:cc:cf: 1b:63:12:50:f2:b0:69:31:9d:a4:4e:07:79:3c:94:c9:14:ee: f1:d1:1c:b2:96:c0:04:ad:2b:58:4a:02:95:2c:fb:0a:c0:f4: d2:01:47:4f:57:21:7f:97:80:71:42:40:67:fc:ac:3d:c1:de: 1d:67:81:96:a0:f3:fb:2b:68:1f:43:0c:04:e2:3d:59:23:6f: dc:97:88:f3:99:fa:74:5a:68:84:42:2b:9b:f0:24:a2:a4:3c: 41:ca:cf:f9:21:1a:f1:d8:02:ba:fa:e7:43:8b:ae:57:5d:f0: e0:cc:13:b4:83:3a:c8:c2:7b:70:76:b9:6c:5b:ab:16:f5:67: f5:2a:0f:61:8a:cf:d1:85:eb:40:81:74:5e:3c:d9:57:82:07: 6f:a6:c6:1b:c3:fa:d6:cd:e2:57:b9:8a:cd:82:e1:6f:1a:d1: 85:4d:14:f0:f4:c5:19:7d:41:93:2b:59:ea:ca:9f:01:72:01: a7:8e:f8:a0 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZt7NmJabsHlkI3bYfvk8yZrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjYwMTAxMjAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDNhOWI5MTI0YTgzMDkxM2YxYTE0NmFlYmUyOTU1ZTdjNmE2NzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsZBXe1SHDxtuVOYyEZVUv0Q1ITt /5x5y29nNECVAODXARJEkgPITnOtDN5cV2jOwsPRtlJAAhj5qKWPaz3pRhUfvvN8 /f1vpquWsSoxrfrNdEUav0Vfa+Jd1GFzvs060hBf2Y+uI/sNJnlr3RFh4d1ZuG23 o54pzAyxImzyzJDVACf48XEY82uiAV3jiIRRKzDkQYLpEn1AwmBsgVgOklXIq5gr br6QSrTRmYEjSB8iGA1q1rIcdZi3Xuzi+l42AoNHiIvCTX1R8JNLQ4cJMQx7gdzx cXJTidBrEmd++TO6cRox4eehQDpWuFqCI3BPE/kviIbqEv/oDxE/lU29KQIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFM06m5EkqDCRPxoUauvilV58amcrMB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvelRxYmtTU29NSkVfR2hScTYtS1ZYbnhxWnlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAkDgIAwQB kDgKAwQBkDgSMAwDBACQOBkDBACQOBoDBACQOB4DBACQOCADBACQODYDBACQOEow DQYJKoZIhvcNAQELBQADggEBAGj/80MawDZcOD4KdT41Ocq2P72ZfNvG+61JD23d w92upQ141g2apGbLKoZZDPKF1ehi7eSxLpjy/rgMnqiovn9p7Gcy6TTMzxtjElDy sGkxnaROB3k8lMkU7vHRHLKWwAStK1hKApUs+wrA9NIBR09XIX+XgHFCQGf8rD3B 3h1ngZag8/sraB9DDATiPVkjb9yXiPOZ+nRaaIRCK5vwJKKkPEHKz/khGvHYArr6 50OLrldd8ODME7SDOsjCe3B2uWxbqxb1Z/UqD2GKz9GF60CBdF482VeCB2+mxhvD +tbN4le5is2C4W8a0YVNFPD0xRl9QZMrWerKnwFyAaeO+KA= -----END CERTIFICATE-----Generated at Sun Jan 18 04:10:32 2026 by rpki-client