This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/ZtxFGpkGLfCvEDe7e_u0LHXKUjk.roa
File: ZtxFGpkGLfCvEDe7e_u0LHXKUjk.roa (raw, json)
Hash identifier: s0+YXn6JExjbv7EOFAv3PA9qoMA8evHuktHkrwfwuYE=
Subject key identifier: 66:DC:45:1A:99:06:2D:F0:AF:10:37:BB:7B:FB:B4:2C:75:CA:52:39
Certificate issuer: /CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Certificate serial: 019B77C74D886D20FC7AD487295D7415F4AF
Authority key identifier: 72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/ZtxFGpkGLfCvEDe7e_u0LHXKUjk.roa
Signing time: Thu 01 Jan 2026 04:18:28 +0000
ROA not before: Thu 01 Jan 2026 04:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198949
IP address blocks: 176.97.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Jan 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:4d:88:6d:20:fc:7a:d4:87:29:5d:74:15:f4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Validity
Not Before: Jan 1 04:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66dc451a99062df0af1037bb7bfbb42c75ca5239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:e1:68:53:e0:65:ad:73:ea:d8:c8:98:52:
9c:4b:ef:53:9a:72:e6:1d:8f:b3:6a:6d:81:65:fe:
43:e4:00:08:c6:8f:ce:ad:5e:b5:d8:8d:e0:c3:90:
7a:46:fb:42:53:34:56:72:18:d6:25:9a:a7:08:0a:
6e:e3:52:1c:f6:d8:7e:96:33:b4:f3:89:3e:34:85:
69:3d:b1:5f:f9:97:a0:71:9d:99:90:4a:84:d2:67:
e1:1e:77:ed:62:63:e8:be:a7:79:54:88:ba:d8:ae:
30:6d:3d:53:ae:80:38:cb:8c:c2:a7:b1:b0:5d:de:
1f:78:ed:57:a9:0b:f6:59:c7:dd:42:ac:0c:9c:c9:
5a:55:43:e3:29:bc:14:4f:a1:be:a6:6d:6b:e6:f4:
49:3a:2f:1d:7e:4a:b5:fc:19:e4:bc:ee:a7:4a:af:
ab:e2:8d:10:c2:96:e1:09:76:5d:68:78:eb:fb:e9:
af:db:56:49:d7:a8:22:1c:b8:0e:64:b1:8c:72:bf:
0a:b8:57:d7:93:c5:7f:0c:9a:1e:15:d2:5a:75:6d:
32:b0:29:79:37:9a:63:ed:b5:b5:f1:ad:79:b9:1b:
b2:4d:6d:24:a9:ef:3c:25:a2:a5:9c:33:75:06:9a:
4a:68:94:50:d9:82:c3:8b:b5:78:7d:67:62:ad:ea:
08:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DC:45:1A:99:06:2D:F0:AF:10:37:BB:7B:FB:B4:2C:75:CA:52:39
X509v3 Authority Key Identifier:
keyid:72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/ZtxFGpkGLfCvEDe7e_u0LHXKUjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.159.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:0a:1e:ce:c4:74:1f:6a:90:52:22:06:c3:a7:bc:9b:8c:6f:
ec:74:da:37:0c:09:fa:16:f0:89:fc:a0:fc:77:32:c4:26:5f:
7d:97:5b:50:db:fb:e1:c0:8e:f1:e9:ed:4b:76:42:df:65:94:
5f:39:35:e0:f5:53:0b:af:a4:75:c1:b5:57:9c:0f:cd:b3:9c:
05:a1:70:15:a1:4b:85:6c:ba:e4:ad:bf:97:74:f7:1c:9b:3d:
86:b5:a6:a5:58:17:c8:b0:0d:6d:94:3c:25:20:7c:11:b3:25:
5d:41:a5:86:72:52:25:74:ea:56:c4:c2:5d:58:29:00:b9:94:
01:19:65:e9:da:c0:77:3d:43:35:c6:18:29:30:08:e9:05:f1:
d6:fd:9d:7d:66:9d:13:00:09:87:9f:81:9a:4f:80:eb:36:59:
a0:16:e3:43:5e:84:ef:43:38:33:5c:6b:fb:d6:01:fe:ae:bd:
14:ba:3b:08:37:6a:33:2f:d7:fd:32:79:66:ed:b9:1f:a3:7d:
ff:e1:c6:05:46:69:51:4a:92:8c:86:96:b7:b1:38:3e:64:6b:
86:f2:6d:e6:18:9c:88:e6:b0:e0:12:cf:c2:5d:96:47:04:0e:
23:e8:2c:74:9c:f9:e6:db:15:b0:ef:bf:8a:16:3f:6f:b5:42:
c4:4f:d7:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3x02IbSD8etSHKV10FfSvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyODA3NWE0ZmJkYWFiNDJjNWJhMTkzM2M3MDJmYjZhNzg0
MTAyMmEwHhcNMjYwMTAxMDQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmRjNDUxYTk5MDYyZGYwYWYxMDM3YmI3YmZiYjQyYzc1Y2E1MjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt33haFPgZa1z6tjImFKcS+9TmnLm
HY+zam2BZf5D5AAIxo/OrV612I3gw5B6RvtCUzRWchjWJZqnCApu41Ic9th+ljO0
84k+NIVpPbFf+ZegcZ2ZkEqE0mfhHnftYmPovqd5VIi62K4wbT1TroA4y4zCp7Gw
Xd4feO1XqQv2WcfdQqwMnMlaVUPjKbwUT6G+pm1r5vRJOi8dfkq1/BnkvO6nSq+r
4o0QwpbhCXZdaHjr++mv21ZJ16giHLgOZLGMcr8KuFfXk8V/DJoeFdJadW0ysCl5
N5pj7bW18a15uRuyTW0kqe88JaKlnDN1BppKaJRQ2YLDi7V4fWdireoICQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGbcRRqZBi3wrxA3u3v7tCx1ylI5MB8GA1UdIwQY
MBaAFHKAdaT72qtCxboZM8cC+2p4QQIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY29CMXBQdmFxMExGdWhrenh3TDdhbmhCQWlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9iNzUwOTEtM2FhNC00MDMyLWEzOTQt
ZWNkMjhhMjVmZWVmLzEvWnR4Rkdwa0dMZkN2RURlN2VfdTBMSFhLVWprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9iNzUwOTEtM2FhNC00MDMyLWEzOTQtZWNkMjhhMjVmZWVm
LzEvY29CMXBQdmFxMExGdWhrenh3TDdhbmhCQWlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGGfMA0G
CSqGSIb3DQEBCwUAA4IBAQBaCh7OxHQfapBSIgbDp7ybjG/sdNo3DAn6FvCJ/KD8
dzLEJl99l1tQ2/vhwI7x6e1LdkLfZZRfOTXg9VMLr6R1wbVXnA/Ns5wFoXAVoUuF
bLrkrb+XdPccmz2GtaalWBfIsA1tlDwlIHwRsyVdQaWGclIldOpWxMJdWCkAuZQB
GWXp2sB3PUM1xhgpMAjpBfHW/Z19Zp0TAAmHn4GaT4DrNlmgFuNDXoTvQzgzXGv7
1gH+rr0UujsIN2ozL9f9Mnlm7bkfo33/4cYFRmlRSpKMhpa3sTg+ZGuG8m3mGJyI
5rDgEs/CXZZHBA4j6Cx0nPnm2xWw77+KFj9vtULET9es
-----END CERTIFICATE-----
Generated at Wed Jan 7 22:33:32 2026 by rpki-client