This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/PAK2KvwTG30-jUzj7sYacw3L9ic.roa File: PAK2KvwTG30-jUzj7sYacw3L9ic.roa (raw, json) Hash identifier: Lb1okikdPiNmYkmLldNkAdsJr1dPWTMaZXm3lhpA5to= Subject key identifier: 3C:02:B6:2A:FC:13:1B:7D:3E:8D:4C:E3:EE:C6:1A:73:0D:CB:F6:27 Certificate issuer: /CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8 Certificate serial: 019B76EAEB4BD4A44C66989B3EC9830D1716 Authority key identifier: CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/PAK2KvwTG30-jUzj7sYacw3L9ic.roa Signing time: Thu 01 Jan 2026 00:17:45 +0000 ROA not before: Thu 01 Jan 2026 00:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47477 IP address blocks: 192.164.161.0/24 maxlen: 24 192.164.164.0/24 maxlen: 24 192.164.167.0/24 maxlen: 24 192.164.172.0/24 maxlen: 24 192.164.173.0/24 maxlen: 24 192.164.174.0/24 maxlen: 24 2a04:62c0::/32 maxlen: 32 2a04:62c1::/32 maxlen: 32 2a04:62c2:1::/48 maxlen: 48 2a04:62c2:2::/48 maxlen: 48 2a04:62c2:3::/48 maxlen: 48 2a04:62c2:4::/48 maxlen: 48 2a04:62c2:5::/48 maxlen: 48 2a04:62c2:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:eb:4b:d4:a4:4c:66:98:9b:3e:c9:83:0d:17:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8 Validity Not Before: Jan 1 00:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c02b62afc131b7d3e8d4ce3eec61a730dcbf627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4a:d7:0a:37:71:3f:51:7c:0e:6e:e6:db:3c: 8d:4e:9d:1d:d6:f2:75:69:62:17:7b:28:96:fd:6a: 8b:4d:c7:5e:10:c9:b6:29:12:00:4f:bf:16:f5:83: 83:c5:62:7d:93:da:ae:0e:5f:08:d6:ef:9c:33:ca: b9:7a:63:37:e3:5e:94:5f:ed:0d:4e:ab:41:ca:2c: 44:71:58:ad:e2:cd:ec:60:b2:4b:9d:dd:9a:7a:30: ae:8b:37:d1:ed:64:7f:70:eb:bc:51:00:1f:f5:88: d4:b9:8b:b8:61:65:be:06:92:a2:a2:12:5a:00:2d: 90:c4:d2:1b:6f:60:d1:ff:aa:34:42:ea:fd:b6:3b: 8d:5e:0d:be:69:99:01:00:3a:93:61:fe:1a:97:b1: e1:3b:82:e2:05:f0:44:e7:b6:cc:07:f4:24:60:68: 6a:9d:61:1f:cd:54:be:dc:c0:91:2c:1c:a0:c5:93: 9a:d0:9f:52:6b:4e:45:51:ff:da:ba:95:ef:4c:73: 40:9c:c2:0e:6d:47:19:50:68:88:8c:a0:4f:ed:9a: 41:5e:30:be:62:3f:e3:cd:16:bc:f7:13:6c:8f:a1: b5:5e:f1:01:c9:42:11:ba:08:d4:8c:64:7a:4e:9a: f4:6c:1b:52:9a:56:13:be:c2:14:fc:14:2a:89:65: 6f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:02:B6:2A:FC:13:1B:7D:3E:8D:4C:E3:EE:C6:1A:73:0D:CB:F6:27 X509v3 Authority Key Identifier: keyid:CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/PAK2KvwTG30-jUzj7sYacw3L9ic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.164.161.0/24 192.164.164.0/24 192.164.167.0/24 192.164.172.0-192.164.174.255 IPv6: 2a04:62c0::/31 2a04:62c2:1::-2a04:62c2:6:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 6c:ca:f9:5b:a8:c6:57:c5:33:cd:4b:9f:c3:f5:ac:19:56:5f: d1:2d:5d:0f:64:c7:66:19:d5:88:19:b3:34:b5:6a:72:4b:e5: 14:7f:8d:b9:0f:2c:bb:15:18:08:a3:9a:77:ba:39:85:35:bf: 65:61:67:c6:6a:13:33:3d:a3:7e:2e:de:12:68:34:e8:f1:2e: 3a:52:31:10:19:16:c7:3c:a4:c3:fd:af:7c:76:f4:53:7f:22: 29:c1:94:e4:84:7d:06:10:33:85:b6:30:9b:fe:b8:5c:f5:34: c5:a7:d6:c0:0f:ce:80:5f:4b:2c:d0:3c:fb:31:29:40:7f:73: b4:6d:59:0d:37:da:bd:57:90:8b:28:89:46:cd:83:4c:f4:d2: cf:e8:de:b7:ce:16:d4:ee:d9:b5:42:d9:c1:3b:12:99:b8:07: cc:c1:70:0f:1e:3f:11:79:17:8e:11:dd:38:c2:87:f9:b2:d9: 8a:40:0c:d4:17:f2:09:b8:03:7f:ea:06:c7:15:21:ff:f2:0f: 8c:1e:9a:20:38:d9:71:29:7c:c1:8b:34:b9:04:8f:ab:76:5d: 48:05:70:ed:e9:ad:5f:c4:f8:d8:a4:32:fd:d8:62:3b:c9:1f: ae:ba:8a:95:25:d3:31:62:1a:d3:ca:30:8d:8c:d1:e0:f7:88: 6d:a5:39:4a -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgISAZt26utL1KRMZpibPsmDDRcWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMWQ3ZmYwMTZmZmY1ZDAzOWE5Njg5YTQzYzkzZTg0ZmU0 NWRiYzgwHhcNMjYwMTAxMDAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzAyYjYyYWZjMTMxYjdkM2U4ZDRjZTNlZWM2MWE3MzBkY2JmNjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0rXCjdxP1F8Dm7m2zyNTp0d1vJ1 aWIXeyiW/WqLTcdeEMm2KRIAT78W9YODxWJ9k9quDl8I1u+cM8q5emM3416UX+0N TqtByixEcVit4s3sYLJLnd2aejCuizfR7WR/cOu8UQAf9YjUuYu4YWW+BpKiohJa AC2QxNIbb2DR/6o0Qur9tjuNXg2+aZkBADqTYf4al7HhO4LiBfBE57bMB/QkYGhq nWEfzVS+3MCRLBygxZOa0J9Sa05FUf/aupXvTHNAnMIObUcZUGiIjKBP7ZpBXjC+ Yj/jzRa89xNsj6G1XvEByUIRugjUjGR6Tpr0bBtSmlYTvsIU/BQqiWVvSwIDAQAB o4ICRjCCAkIwHQYDVR0OBBYEFDwCtir8Ext9Po1M4+7GGnMNy/YnMB8GA1UdIwQY MBaAFM8df/AW//XQOalomkPJPoT+RdvIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvengxXzhCYl85ZEE1cVdpYVE4ay1oUDVGMjhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9jZTY5ZjAtYjZlMS00YmE2LWI5ZTAt NGViMjY5NWE4NjhkLzEvUEFLMkt2d1RHMzAtalV6ajdzWWFjdzNMOWljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9jZTY5ZjAtYjZlMS00YmE2LWI5ZTAtNGViMjY5NWE4Njhk LzEvengxXzhCYl85ZEE1cVdpYVE4ay1oUDVGMjhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFwGCCsGAQUFBwEHAQH/BE0wSzAmBAIAATAgAwQAwKShAwQA wKSkAwQAwKSnMAwDBALApKwDBADApK4wIQQCAAIwGwMFASoEYsAwEgMHACoEYsIA AQMHACoEYsIABjANBgkqhkiG9w0BAQsFAAOCAQEAbMr5W6jGV8UzzUufw/WsGVZf 0S1dD2THZhnViBmzNLVqckvlFH+NuQ8suxUYCKOad7o5hTW/ZWFnxmoTMz2jfi7e Emg06PEuOlIxEBkWxzykw/2vfHb0U38iKcGU5IR9BhAzhbYwm/64XPU0xafWwA/O gF9LLNA8+zEpQH9ztG1ZDTfavVeQiyiJRs2DTPTSz+jet84W1O7ZtULZwTsSmbgH zMFwDx4/EXkXjhHdOMKH+bLZikAM1BfyCbgDf+oGxxUh//IPjB6aIDjZcSl8wYs0 uQSPq3ZdSAVw7emtX8T42KQy/dhiO8kfrrqKlSXTMWIa08owjYzR4PeIbaU5Sg== -----END CERTIFICATE-----Generated at Tue Feb 10 06:25:29 2026 by rpki-client