This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/znwOPYUIO45R8GUX2z4werIuXYc.roa File: znwOPYUIO45R8GUX2z4werIuXYc.roa (raw, json) Hash identifier: djo2WYmGgjAnHWXHkweLZQsTJ0zv8CcnVSaiehBnT1k= Subject key identifier: CE:7C:0E:3D:85:08:3B:8E:51:F0:65:17:DB:3E:30:7A:B2:2E:5D:87 Certificate issuer: /CN=627b305ba1babef4bfec68581e4039d41b5f71f2 Certificate serial: 019B7D5B989EF73C68E8D48C758390ED9359 Authority key identifier: 62:7B:30:5B:A1:BA:BE:F4:BF:EC:68:58:1E:40:39:D4:1B:5F:71:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnswW6G6vvS_7GhYHkA51BtfcfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/znwOPYUIO45R8GUX2z4werIuXYc.roa Signing time: Fri 02 Jan 2026 06:18:33 +0000 ROA not before: Fri 02 Jan 2026 06:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8224 IP address blocks: 159.253.96.0/21 maxlen: 21 185.79.52.0/22 maxlen: 22 195.72.192.0/19 maxlen: 19 2a01:2d8::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.mft rsync://rpki.ripe.net/repository/DEFAULT/YnswW6G6vvS_7GhYHkA51BtfcfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:98:9e:f7:3c:68:e8:d4:8c:75:83:90:ed:93:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=627b305ba1babef4bfec68581e4039d41b5f71f2 Validity Not Before: Jan 2 06:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce7c0e3d85083b8e51f06517db3e307ab22e5d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:29:28:a4:43:3b:49:5b:a8:93:a2:77:81:bd: 50:0b:6b:54:41:5e:e0:fa:f6:0c:54:88:3e:80:26: b7:2e:d4:61:99:77:bd:77:95:69:c4:16:ef:8a:d9: 2f:43:f7:5e:fd:b4:8a:d5:9e:ca:e2:72:78:ee:ee: 3c:a1:21:71:dc:43:b5:14:f4:40:7a:99:70:3d:44: 74:46:9e:0d:41:f1:00:7f:d5:77:6d:b8:b1:f6:02: 19:00:22:04:3a:be:8b:9f:c5:03:1e:38:af:71:fe: 91:b7:30:e5:97:d8:b7:0a:db:1e:d9:9c:22:4a:1b: 7d:f3:bc:ea:0b:aa:e6:09:83:76:90:e2:a9:d3:f7: a2:27:01:36:e7:63:af:65:88:fb:aa:0f:c1:13:20: 5c:bc:7e:55:66:0b:e1:a1:bc:f6:d1:28:74:58:d8: b5:e0:ff:42:db:a2:3a:d1:b7:0f:5b:4c:e0:b1:88: 73:ae:83:3d:e1:6b:69:51:c5:a6:f3:7a:76:b1:f2: 86:ca:f9:0d:bb:ec:6a:38:76:18:19:9b:db:89:ad: 5d:be:35:03:12:68:91:e3:19:53:b1:41:81:02:cc: 53:00:5b:2d:44:35:f5:90:50:52:bf:2a:0a:85:b4: 6c:e0:30:c7:56:86:c1:36:bf:77:ba:ef:5a:2f:ac: b2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:7C:0E:3D:85:08:3B:8E:51:F0:65:17:DB:3E:30:7A:B2:2E:5D:87 X509v3 Authority Key Identifier: keyid:62:7B:30:5B:A1:BA:BE:F4:BF:EC:68:58:1E:40:39:D4:1B:5F:71:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnswW6G6vvS_7GhYHkA51BtfcfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/znwOPYUIO45R8GUX2z4werIuXYc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.253.96.0/21 185.79.52.0/22 195.72.192.0/19 IPv6: 2a01:2d8::/29 Signature Algorithm: sha256WithRSAEncryption 73:21:f5:4a:66:09:3a:df:ce:02:45:98:2d:9b:06:e8:03:40: 90:45:cd:25:36:cc:a1:31:dd:11:84:fb:83:81:8c:c1:91:1a: 24:4c:d7:2c:43:c7:a8:6b:7f:20:8c:75:c5:54:f6:d5:13:0c: 69:33:8c:51:6f:87:f0:5c:24:98:a2:28:86:fd:f9:a8:31:c5: 15:5e:0d:d8:e4:34:c2:cc:8d:35:1f:3a:3e:a2:43:52:09:89: e5:d3:7f:51:65:6b:29:cb:be:49:68:ae:e8:ad:6e:c7:40:5c: d6:0c:ac:b3:37:21:dc:d0:ee:42:b7:1b:68:59:48:f9:f2:ba: 4f:90:fd:85:64:b8:db:37:18:6c:0d:30:25:04:d2:12:db:2e: 48:16:25:0d:06:2b:00:56:a7:82:ce:ed:da:7f:21:96:c9:b4: 3c:f2:3b:24:aa:18:b1:ac:8b:f3:0f:aa:66:5d:2f:a4:22:b0: 8b:e6:87:52:0c:e6:86:8f:f6:21:40:9e:10:0c:d8:1d:13:74: de:b8:91:0d:e6:55:67:bc:54:91:3d:29:25:85:5b:5f:db:c2: 93:ef:57:c1:03:69:54:26:6f:e3:7a:42:91:14:1c:6a:ed:05: db:0d:59:1d:86:4a:31:d3:8f:d3:2d:59:1a:c3:d5:e1:93:4d: 1e:56:8c:76 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9W5ie9zxo6NSMdYOQ7ZNZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyN2IzMDViYTFiYWJlZjRiZmVjNjg1ODFlNDAzOWQ0MWI1 ZjcxZjIwHhcNMjYwMTAyMDYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTdjMGUzZDg1MDgzYjhlNTFmMDY1MTdkYjNlMzA3YWIyMmU1ZDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ikopEM7SVuok6J3gb1QC2tUQV7g +vYMVIg+gCa3LtRhmXe9d5VpxBbvitkvQ/de/bSK1Z7K4nJ47u48oSFx3EO1FPRA eplwPUR0Rp4NQfEAf9V3bbix9gIZACIEOr6Ln8UDHjivcf6RtzDll9i3Ctse2Zwi Sht987zqC6rmCYN2kOKp0/eiJwE252OvZYj7qg/BEyBcvH5VZgvhobz20Sh0WNi1 4P9C26I60bcPW0zgsYhzroM94WtpUcWm83p2sfKGyvkNu+xqOHYYGZvbia1dvjUD EmiR4xlTsUGBAsxTAFstRDX1kFBSvyoKhbRs4DDHVobBNr93uu9aL6yy8wIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFM58Dj2FCDuOUfBlF9s+MHqyLl2HMB8GA1UdIwQY MBaAFGJ7MFuhur70v+xoWB5AOdQbX3HyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW5zd1c2RzZ2dlNfN0doWUhrQTUxQnRmY2ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8wNjAyZDQtNTVhNS00ZjQ5LThjZmUt YmVlN2ExODM5NzEwLzEvem53T1BZVUlPNDVSOEdVWDJ6NHdlckl1WFljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8wNjAyZDQtNTVhNS00ZjQ5LThjZmUtYmVlN2ExODM5NzEw LzEvWW5zd1c2RzZ2dlNfN0doWUhrQTUxQnRmY2ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDn/1gAwQC uU80AwQFw0jAMA0EAgACMAcDBQMqAQLYMA0GCSqGSIb3DQEBCwUAA4IBAQBzIfVK Zgk6384CRZgtmwboA0CQRc0lNsyhMd0RhPuDgYzBkRokTNcsQ8eoa38gjHXFVPbV EwxpM4xRb4fwXCSYoiiG/fmoMcUVXg3Y5DTCzI01Hzo+okNSCYnl039RZWspy75J aK7orW7HQFzWDKyzNyHc0O5CtxtoWUj58rpPkP2FZLjbNxhsDTAlBNIS2y5IFiUN BisAVqeCzu3afyGWybQ88jskqhixrIvzD6pmXS+kIrCL5odSDOaGj/YhQJ4QDNgd E3TeuJEN5lVnvFSRPSklhVtf28KT71fBA2lUJm/jekKRFBxq7QXbDVkdhkox04/T LVkaw9Xhk00eVox2 -----END CERTIFICATE-----Generated at Tue Feb 10 01:13:50 2026 by rpki-client