This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/zrNuRSDkOgaF-KxvQ8ikOlaPVQ8.roa File: zrNuRSDkOgaF-KxvQ8ikOlaPVQ8.roa (raw, json) Hash identifier: DWHX759MBY5oSohs6eXDS/mq7ExmCSn3ePXPS3bnmPw= Subject key identifier: CE:B3:6E:45:20:E4:3A:06:85:F8:AC:6F:43:C8:A4:3A:56:8F:55:0F Certificate issuer: /CN=7135e3894634482b08317775c79657e9b8312d4d Certificate serial: 019B7AC82D57D65D7506D5C1DFDF91A20FF3 Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/zrNuRSDkOgaF-KxvQ8ikOlaPVQ8.roa Signing time: Thu 01 Jan 2026 18:18:17 +0000 ROA not before: Thu 01 Jan 2026 18:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41354 IP address blocks: 137.22.160.0/19 maxlen: 19 149.106.160.0/19 maxlen: 19 185.20.128.0/22 maxlen: 22 185.127.192.0/23 maxlen: 23 185.127.194.0/23 maxlen: 23 185.179.120.0/22 maxlen: 22 185.207.68.0/22 maxlen: 22 212.82.64.0/19 maxlen: 19 2a04:1700::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:2d:57:d6:5d:75:06:d5:c1:df:df:91:a2:0f:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d Validity Not Before: Jan 1 18:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ceb36e4520e43a0685f8ac6f43c8a43a568f550f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:29:74:c9:82:a2:0c:df:81:23:cc:61:b1:f9: 17:3d:f3:8a:aa:75:59:a7:7f:52:5f:d6:8e:29:ce: ac:32:87:9e:fb:61:a8:6a:03:86:39:ec:34:ed:2c: 9f:53:e8:02:a3:b1:6c:30:7a:aa:9c:77:b7:e0:8f: 44:7e:ac:ab:76:50:7a:63:74:da:74:39:2b:bc:04: ce:88:4e:b9:4f:94:c9:90:ab:19:33:bd:32:5f:92: 66:ea:e3:8b:f6:90:eb:ce:f0:b4:ae:69:ae:15:27: cd:d9:e9:b1:57:a5:d6:b7:d4:0e:21:89:5c:6b:cf: dc:93:af:5e:cf:26:15:7c:22:4d:b3:37:55:24:61: 9a:da:15:c6:b9:43:9d:9b:4f:e9:28:47:83:2b:ab: a2:4c:f5:23:ba:c7:00:88:81:e2:76:00:12:44:05: 60:0a:0c:5a:c5:6f:f4:87:b2:9b:50:2b:8c:fa:c5: 95:b8:d5:7b:ec:06:ba:f3:8f:95:c6:15:82:66:dd: c5:a5:54:59:7b:9c:ca:ae:2a:41:04:ff:16:ae:57: 1a:96:1a:0b:8f:2a:15:f7:80:3b:83:f9:72:20:91: 98:e2:da:c8:aa:07:2d:46:59:1c:c5:51:b9:5f:7a: 43:5b:88:a6:75:34:9d:92:00:15:68:7a:98:ea:ed: 07:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B3:6E:45:20:E4:3A:06:85:F8:AC:6F:43:C8:A4:3A:56:8F:55:0F X509v3 Authority Key Identifier: keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/zrNuRSDkOgaF-KxvQ8ikOlaPVQ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 137.22.160.0/19 149.106.160.0/19 185.20.128.0/22 185.127.192.0/22 185.179.120.0/22 185.207.68.0/22 212.82.64.0/19 IPv6: 2a04:1700::/29 Signature Algorithm: sha256WithRSAEncryption 1e:24:bd:1b:a1:dc:1c:ad:12:2e:6d:38:d9:5c:64:1a:8d:cb: b5:89:4e:32:4d:d3:ff:ca:e8:d8:12:f5:a4:8a:00:c5:50:54: d6:ba:88:12:85:9e:d7:d5:6a:70:5b:e3:97:f8:e0:18:20:08: 2d:1e:cc:ee:ba:2f:dd:4d:63:e7:e3:c5:69:51:d3:4c:9b:e0: 60:2f:1a:6d:32:fd:25:c4:1a:d9:64:cc:41:42:1c:f9:50:39: f2:7d:ef:d5:6d:c5:22:c0:65:92:c6:d3:91:93:3e:50:01:f6: 6b:16:bc:31:5c:95:26:d2:6e:45:54:58:01:ae:6b:4e:87:61: cc:9c:2b:ef:74:26:88:63:1d:e1:2d:22:da:58:af:64:23:b4: 77:57:8b:10:64:b1:c7:3d:2e:20:2e:d0:44:0a:0f:a0:59:86: c3:c8:2f:67:9c:77:4e:40:77:b6:5d:bf:13:37:ae:d0:99:d8: b7:35:1b:fe:ae:09:30:db:bb:13:d1:2f:67:65:50:99:d7:df: d1:ca:88:db:86:58:6b:d4:dc:70:ff:48:59:9b:e1:56:8b:ac: a9:30:f5:5f:3b:7f:f3:14:20:46:7a:37:b7:3b:6c:93:32:b2: 59:97:31:a9:67:b0:0f:1c:95:b1:4d:b7:5e:ee:9d:92:c9:a4: 8d:29:2a:76 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt6yC1X1l11BtXB39+Rog/zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMzVlMzg5NDYzNDQ4MmIwODMxNzc3NWM3OTY1N2U5Yjgz MTJkNGQwHhcNMjYwMTAxMTgxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWIzNmU0NTIwZTQzYTA2ODVmOGFjNmY0M2M4YTQzYTU2OGY1NTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyl0yYKiDN+BI8xhsfkXPfOKqnVZ p39SX9aOKc6sMoee+2GoagOGOew07SyfU+gCo7FsMHqqnHe34I9EfqyrdlB6Y3Ta dDkrvATOiE65T5TJkKsZM70yX5Jm6uOL9pDrzvC0rmmuFSfN2emxV6XWt9QOIYlc a8/ck69ezyYVfCJNszdVJGGa2hXGuUOdm0/pKEeDK6uiTPUjuscAiIHidgASRAVg CgxaxW/0h7KbUCuM+sWVuNV77Aa684+VxhWCZt3FpVRZe5zKripBBP8WrlcalhoL jyoV94A7g/lyIJGY4trIqgctRlkcxVG5X3pDW4imdTSdkgAVaHqY6u0HrQIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFM6zbkUg5DoGhfisb0PIpDpWj1UPMB8GA1UdIwQY MBaAFHE144lGNEgrCDF3dceWV+m4MS1NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1RYamlVWTBTQ3NJTVhkMXg1Wlg2Ymd4TFUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xY2I5ZmMtNmIzMy00MmQ1LTk0MjMt NzllY2Q4YTliNmQ2LzEvenJOdVJTRGtPZ2FGLUt4dlE4aWtPbGFQVlE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8xY2I5ZmMtNmIzMy00MmQ1LTk0MjMtNzllY2Q4YTliNmQ2 LzEvY1RYamlVWTBTQ3NJTVhkMXg1Wlg2Ymd4TFUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQFiRagAwQF lWqgAwQCuRSAAwQCuX/AAwQCubN4AwQCuc9EAwQF1FJAMA0EAgACMAcDBQMqBBcA MA0GCSqGSIb3DQEBCwUAA4IBAQAeJL0bodwcrRIubTjZXGQajcu1iU4yTdP/yujY EvWkigDFUFTWuogShZ7X1WpwW+OX+OAYIAgtHszuui/dTWPn48VpUdNMm+BgLxpt Mv0lxBrZZMxBQhz5UDnyfe/VbcUiwGWSxtORkz5QAfZrFrwxXJUm0m5FVFgBrmtO h2HMnCvvdCaIYx3hLSLaWK9kI7R3V4sQZLHHPS4gLtBECg+gWYbDyC9nnHdOQHe2 Xb8TN67Qmdi3NRv+rgkw27sT0S9nZVCZ19/Ryojbhlhr1Nxw/0hZm+FWi6ypMPVf O3/zFCBGeje3O2yTMrJZlzGpZ7APHJWxTbde7p2SyaSNKSp2 -----END CERTIFICATE-----Generated at Mon Jan 26 06:03:01 2026 by rpki-client