This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/zKkJ8cE4zPKRxtqXHT19mxBaT9Q.roa File: zKkJ8cE4zPKRxtqXHT19mxBaT9Q.roa (raw, json) Hash identifier: uRT/X8Hvl3ZU07bilVhDl7B14HKulQ5Y0la+tuqFss4= Subject key identifier: CC:A9:09:F1:C1:38:CC:F2:91:C6:DA:97:1D:3D:7D:9B:10:5A:4F:D4 Certificate issuer: /CN=9af9d0d4befda09e999eabd0c8724e217364de10 Certificate serial: 019B7CEE0B7732F42278DCA642F9F6911E36 Authority key identifier: 9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/zKkJ8cE4zPKRxtqXHT19mxBaT9Q.roa Signing time: Fri 02 Jan 2026 04:18:53 +0000 ROA not before: Fri 02 Jan 2026 04:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13238 IP address blocks: 100.43.64.0/19 maxlen: 19 199.21.96.0/22 maxlen: 22 199.36.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:0b:77:32:f4:22:78:dc:a6:42:f9:f6:91:1e:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9af9d0d4befda09e999eabd0c8724e217364de10 Validity Not Before: Jan 2 04:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cca909f1c138ccf291c6da971d3d7d9b105a4fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:eb:bc:61:1e:13:1e:bf:ae:71:4c:c2:96:ff: 97:f0:6c:0b:8a:27:62:84:51:23:25:77:5b:52:2c: b4:01:85:59:43:4e:bb:f1:16:d1:cf:e7:53:fb:91: 31:5d:be:50:34:5a:92:70:1e:6e:20:68:0f:ca:2d: da:8e:e2:57:ac:b6:fa:04:c9:f4:6c:c7:56:f4:99: c8:f1:09:5d:c9:8b:ea:a1:25:4e:83:7d:38:8a:6e: 03:9c:f6:e6:95:41:8b:4f:c8:ea:a6:08:dd:3e:76: 0e:20:d3:ba:2b:d8:94:01:e5:f2:35:94:80:8e:9f: 43:16:03:47:27:c1:89:cf:be:c9:12:0a:3b:04:e2: f4:e5:15:ef:53:93:66:bb:db:b5:6e:ba:d6:12:34: 24:ba:83:5c:3f:dc:ca:2e:38:b5:87:05:ff:79:a3: 2a:0b:e9:0c:e4:bf:32:ae:d5:8c:ae:7e:ba:c2:cf: a0:95:2d:20:0d:b1:f9:d1:d5:2c:62:0b:37:9c:64: 41:c8:a7:9c:74:ba:4a:ba:99:cf:81:f3:72:e4:69: 53:f7:8c:95:55:d1:2c:9c:4c:ca:57:80:f3:51:bb: 1b:75:03:58:7e:d3:cb:b6:2d:02:78:c9:b3:9e:f2: 29:c1:a3:78:ae:aa:76:34:e4:2b:16:59:38:e7:1f: fe:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A9:09:F1:C1:38:CC:F2:91:C6:DA:97:1D:3D:7D:9B:10:5A:4F:D4 X509v3 Authority Key Identifier: keyid:9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/zKkJ8cE4zPKRxtqXHT19mxBaT9Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 100.43.64.0/19 199.21.96.0/22 199.36.240.0/22 Signature Algorithm: sha256WithRSAEncryption 92:60:3a:d6:13:f9:90:db:c8:2a:0a:d8:3b:a4:fc:a6:f1:cd: 0a:99:64:80:0a:3e:43:eb:bf:30:2e:c9:41:dd:83:73:08:41: f7:ef:0d:63:45:8b:ec:56:f1:20:49:87:9d:5c:a8:02:53:f6: a3:51:e0:bc:fa:ca:ae:07:b9:41:7b:3a:c7:32:ba:2a:3d:38: fe:b4:9f:2a:92:0c:99:f0:09:43:46:28:3b:14:c8:f4:fa:68: 6b:32:26:04:84:87:33:37:76:c3:66:37:91:e7:64:85:59:8d: 13:5f:c3:6c:2f:bc:96:f6:9f:78:5c:11:a5:13:7b:e4:d0:58: 17:8c:b8:be:d9:b9:d7:65:78:eb:ef:a5:96:b7:03:09:5e:f1: fb:90:31:c1:16:ce:e1:61:42:af:92:11:d2:4a:79:6e:91:01: 67:1c:9e:af:26:e6:2b:7f:05:cc:73:4e:7a:b1:ba:ff:ad:cf: 0b:72:95:99:05:89:d5:f3:1a:9a:9c:b1:c1:6b:47:18:e3:f5: 98:15:0d:6e:46:8e:a1:4c:1c:0d:26:45:66:fe:dd:0c:a6:d3: f5:ef:b7:d6:aa:db:b3:af:cf:dc:bb:35:34:15:a4:fc:5d:f7: a3:12:ce:21:63:1d:8b:e8:a0:0d:fe:a5:a7:25:4f:ba:9b:be: 87:51:77:3f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87gt3MvQieNymQvn2kR42MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZjlkMGQ0YmVmZGEwOWU5OTllYWJkMGM4NzI0ZTIxNzM2 NGRlMTAwHhcNMjYwMTAyMDQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2E5MDlmMWMxMzhjY2YyOTFjNmRhOTcxZDNkN2Q5YjEwNWE0ZmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uu8YR4THr+ucUzClv+X8GwLiidi hFEjJXdbUiy0AYVZQ0678RbRz+dT+5ExXb5QNFqScB5uIGgPyi3ajuJXrLb6BMn0 bMdW9JnI8QldyYvqoSVOg304im4DnPbmlUGLT8jqpgjdPnYOINO6K9iUAeXyNZSA jp9DFgNHJ8GJz77JEgo7BOL05RXvU5Nmu9u1brrWEjQkuoNcP9zKLji1hwX/eaMq C+kM5L8yrtWMrn66ws+glS0gDbH50dUsYgs3nGRByKecdLpKupnPgfNy5GlT94yV VdEsnEzKV4DzUbsbdQNYftPLti0CeMmznvIpwaN4rqp2NOQrFlk45x/+gwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMypCfHBOMzykcbalx09fZsQWk/UMB8GA1UdIwQY MBaAFJr50NS+/aCemZ6r0MhyTiFzZN4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXZuUTFMNzlvSjZabnF2UXlISk9JWE5rM2hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wMWQ5ZmUtZTE0YS00MGE0LTg0NTgt MjY3MDFiMTYyZmMzLzEvektrSjhjRTR6UEtSeHRxWEhUMTlteEJhVDlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wMWQ5ZmUtZTE0YS00MGE0LTg0NTgtMjY3MDFiMTYyZmMz LzEvbXZuUTFMNzlvSjZabnF2UXlISk9JWE5rM2hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFZCtAAwQC xxVgAwQCxyTwMA0GCSqGSIb3DQEBCwUAA4IBAQCSYDrWE/mQ28gqCtg7pPym8c0K mWSACj5D678wLslB3YNzCEH37w1jRYvsVvEgSYedXKgCU/ajUeC8+squB7lBezrH MroqPTj+tJ8qkgyZ8AlDRig7FMj0+mhrMiYEhIczN3bDZjeR52SFWY0TX8NsL7yW 9p94XBGlE3vk0FgXjLi+2bnXZXjr76WWtwMJXvH7kDHBFs7hYUKvkhHSSnlukQFn HJ6vJuYrfwXMc056sbr/rc8LcpWZBYnV8xqanLHBa0cY4/WYFQ1uRo6hTBwNJkVm /t0MptP177fWqtuzr8/cuzU0FaT8XfejEs4hYx2L6KAN/qWnJU+6m76HUXc/ -----END CERTIFICATE-----Generated at Sat Jan 10 06:59:43 2026 by rpki-client