This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/zkOZlou0wZ6me2DfEVkQRqyFe8k.roa File: zkOZlou0wZ6me2DfEVkQRqyFe8k.roa (raw, json) Hash identifier: pU85jXVjO3BbHeMnI95HpijaHL/9kMqJ0g5Ywj9M28E= Subject key identifier: CE:43:99:96:8B:B4:C1:9E:A6:7B:60:DF:11:59:10:46:AC:85:7B:C9 Certificate issuer: /CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1 Certificate serial: 019B7CED3D1B03E5A8B481C73CEB887B9694 Authority key identifier: 26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/zkOZlou0wZ6me2DfEVkQRqyFe8k.roa Signing time: Fri 02 Jan 2026 04:18:00 +0000 ROA not before: Fri 02 Jan 2026 04:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51906 IP address blocks: 31.204.112.0/20 maxlen: 24 37.130.128.0/20 maxlen: 24 79.171.56.0/21 maxlen: 24 91.106.0.0/20 maxlen: 24 146.66.224.0/21 maxlen: 24 176.241.160.0/20 maxlen: 24 185.2.120.0/22 maxlen: 24 2a00:7380::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:3d:1b:03:e5:a8:b4:81:c7:3c:eb:88:7b:96:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1 Validity Not Before: Jan 2 04:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce4399968bb4c19ea67b60df11591046ac857bc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ca:9e:3a:2d:63:23:c1:69:fd:01:cb:b1:e6: 47:60:51:c3:c6:a7:42:69:be:52:42:7f:76:d0:9a: 0d:40:82:9d:6d:ce:46:45:a6:73:04:06:55:08:ed: c5:e4:90:e1:fa:d1:6c:e9:09:19:09:35:04:06:5c: e1:1b:43:d5:cf:af:ed:aa:3b:1b:59:7e:ec:5f:2c: 08:c7:32:99:8c:0e:56:3f:13:9c:e3:85:41:42:a7: b6:1e:e6:03:ad:d4:0e:7a:35:69:f5:0a:38:39:ef: 00:ae:91:39:23:fb:58:c2:d2:cd:09:5e:fd:3f:df: 5d:2b:a7:88:be:5d:97:0a:94:2f:39:6b:d1:b3:f6: a4:1f:b7:83:44:b2:c1:a6:1f:32:8c:3d:bc:01:0c: f7:77:db:af:85:ad:d4:bc:8c:dd:cf:d0:96:a8:26: 0b:aa:cb:b3:ec:db:bd:b3:7e:0b:2f:fe:44:0b:08: 6f:05:cb:45:52:cf:a6:f2:39:ed:d5:29:04:ee:65: 2a:7f:90:a1:1b:5a:ac:a1:be:32:75:93:87:6e:5f: 4e:99:b7:11:69:94:fa:7e:08:b2:6f:44:59:03:5c: 63:ae:e5:c7:22:c6:cc:a4:ff:a3:d1:09:e2:fe:b5: 8e:25:b0:40:a6:6a:13:1c:d7:8c:95:87:6d:98:9c: 1c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:43:99:96:8B:B4:C1:9E:A6:7B:60:DF:11:59:10:46:AC:85:7B:C9 X509v3 Authority Key Identifier: keyid:26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/zkOZlou0wZ6me2DfEVkQRqyFe8k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.204.112.0/20 37.130.128.0/20 79.171.56.0/21 91.106.0.0/20 146.66.224.0/21 176.241.160.0/20 185.2.120.0/22 IPv6: 2a00:7380::/32 Signature Algorithm: sha256WithRSAEncryption 6e:6a:29:1f:49:e5:ef:f7:dc:56:a1:62:e0:f6:4c:6e:af:cb: 38:11:4f:e4:61:1e:6e:55:13:51:88:33:ac:28:c6:96:35:d3: dd:88:cb:2d:bf:7f:f3:6b:90:db:ba:f9:99:f0:be:35:e7:b8: 9e:12:12:1c:c4:ff:2f:64:e9:e0:d2:c7:3b:38:98:5a:5a:6f: bd:cb:04:83:df:a2:dc:b8:8b:4d:55:aa:a6:78:5f:ad:88:d4: 5a:64:b8:b0:27:15:72:cc:90:22:95:19:5f:dd:34:57:c6:9c: c3:0d:88:21:64:ec:6c:62:1b:45:05:85:b4:17:cc:5b:6d:6b: 13:15:da:c2:22:25:71:57:57:2e:94:64:59:01:cb:a4:9d:77: da:ce:f2:6d:ea:80:62:b6:d6:4c:d8:8e:9a:21:16:69:ba:d7: 65:e3:a8:42:da:e8:ad:c9:bf:2e:ca:42:87:28:f5:35:df:e6: a2:d9:c2:34:a3:00:9e:0c:88:71:b0:a7:09:36:e6:8f:51:e6: 5c:b4:08:42:29:d6:9a:5b:01:17:a2:b1:d8:88:eb:da:70:15: 93:eb:b6:ab:b3:4b:75:48:7d:ec:6e:a3:22:30:18:4e:83:6a: a4:2f:02:38:ff:7d:57:f9:d6:6a:0a:c3:fe:b1:0d:93:99:0c: 94:9f:2c:51 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt87T0bA+WotIHHPOuIe5aUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2ODhlZjM3M2Y4ZjAwZTAxYzI1Y2Y5MjRiNGYyZThlYzZh MjE5ZDEwHhcNMjYwMTAyMDQxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTQzOTk5NjhiYjRjMTllYTY3YjYwZGYxMTU5MTA0NmFjODU3YmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcqeOi1jI8Fp/QHLseZHYFHDxqdC ab5SQn920JoNQIKdbc5GRaZzBAZVCO3F5JDh+tFs6QkZCTUEBlzhG0PVz6/tqjsb WX7sXywIxzKZjA5WPxOc44VBQqe2HuYDrdQOejVp9Qo4Oe8ArpE5I/tYwtLNCV79 P99dK6eIvl2XCpQvOWvRs/akH7eDRLLBph8yjD28AQz3d9uvha3UvIzdz9CWqCYL qsuz7Nu9s34LL/5ECwhvBctFUs+m8jnt1SkE7mUqf5ChG1qsob4ydZOHbl9OmbcR aZT6fgiyb0RZA1xjruXHIsbMpP+j0Qni/rWOJbBApmoTHNeMlYdtmJwcNwIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFM5DmZaLtMGepntg3xFZEEashXvJMB8GA1UdIwQY MBaAFCaI7zc/jwDgHCXPkktPLo7GohnRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm9qdk56LVBBT0FjSmMtU1MwOHVqc2FpR2RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNmYzMzktODQ1NS00ZGI0LWE2NTAt N2Y3OGEzYmFhN2MxLzEvemtPWmxvdTB3WjZtZTJEZkVWa1FScXlGZThrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mNmYzMzktODQ1NS00ZGI0LWE2NTAtN2Y3OGEzYmFhN2Mx LzEvSm9qdk56LVBBT0FjSmMtU1MwOHVqc2FpR2RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQEH8xwAwQE JYKAAwQDT6s4AwQEW2oAAwQDkkLgAwQEsPGgAwQCuQJ4MA0EAgACMAcDBQAqAHOA MA0GCSqGSIb3DQEBCwUAA4IBAQBuaikfSeXv99xWoWLg9kxur8s4EU/kYR5uVRNR iDOsKMaWNdPdiMstv3/za5DbuvmZ8L4157ieEhIcxP8vZOng0sc7OJhaWm+9ywSD 36LcuItNVaqmeF+tiNRaZLiwJxVyzJAilRlf3TRXxpzDDYghZOxsYhtFBYW0F8xb bWsTFdrCIiVxV1culGRZAcuknXfazvJt6oBittZM2I6aIRZputdl46hC2uityb8u ykKHKPU13+ai2cI0owCeDIhxsKcJNuaPUeZctAhCKdaaWwEXorHYiOvacBWT67ar s0t1SH3sbqMiMBhOg2qkLwI4/31X+dZqCsP+sQ2TmQyUnyxR -----END CERTIFICATE-----Generated at Mon Jan 26 21:18:51 2026 by rpki-client