This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/ZxrKMu5ZPIKEQ_SnJ5aRqb0zdYE.roa File: ZxrKMu5ZPIKEQ_SnJ5aRqb0zdYE.roa (raw, json) Hash identifier: DiIJsSuhcAdz+1FlA1JBD5Ze6UThcXCbBy3MPnBKwvk= Subject key identifier: 67:1A:CA:32:EE:59:3C:82:84:43:F4:A7:27:96:91:A9:BD:33:75:81 Certificate issuer: /CN=6eef3973d6e07681419bae867bd514545e7df5da Certificate serial: 019B78A2556B1E9925C2902A29A52D4EAB61 Authority key identifier: 6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/ZxrKMu5ZPIKEQ_SnJ5aRqb0zdYE.roa Signing time: Thu 01 Jan 2026 08:17:43 +0000 ROA not before: Thu 01 Jan 2026 08:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 2.58.100.0/24 maxlen: 24 2.58.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:55:6b:1e:99:25:c2:90:2a:29:a5:2d:4e:ab:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eef3973d6e07681419bae867bd514545e7df5da Validity Not Before: Jan 1 08:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=671aca32ee593c828443f4a7279691a9bd337581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:22:d5:7b:d0:4d:d3:26:83:ee:04:31:74:32: 64:a9:b6:7e:52:f3:09:11:38:2d:d2:aa:8d:2a:c4: b5:5a:a6:37:ad:77:bc:a9:8a:04:c2:fd:36:c9:4d: 98:d8:a3:f0:a5:1e:28:48:75:ad:3d:53:25:f9:23: 39:5f:fc:4d:de:46:23:64:8c:36:60:92:fd:90:56: 3f:5e:c9:19:a4:f5:45:6d:34:f7:43:09:e5:e9:19: bb:7f:56:d3:0a:b9:a6:1a:36:d3:e3:af:ca:06:ac: 38:84:e5:be:62:6f:60:08:a2:0d:e3:aa:89:78:02: 73:ec:f9:35:15:49:75:ad:68:fb:63:1a:22:e7:a5: f2:b0:88:8e:42:5f:7b:df:e0:c8:f0:d4:31:f0:f3: 5d:17:bf:59:33:ff:dd:cb:a6:cb:1c:43:18:02:08: 11:63:66:c3:13:ed:e6:ba:4a:72:82:f7:f0:05:ab: a9:5c:42:35:3f:b0:9f:92:70:f2:b2:18:77:67:b8: c8:9a:cb:d9:42:62:67:19:1d:00:d0:52:75:a0:72: ea:8d:d7:dd:98:f7:6f:57:6f:aa:5b:26:24:fd:9c: 03:4a:cc:94:af:93:74:58:c3:87:80:b0:c4:a4:1e: 5a:ad:de:14:2d:2b:f2:c6:6f:bf:0a:7e:24:a8:00: d1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1A:CA:32:EE:59:3C:82:84:43:F4:A7:27:96:91:A9:BD:33:75:81 X509v3 Authority Key Identifier: keyid:6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/ZxrKMu5ZPIKEQ_SnJ5aRqb0zdYE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.100.0/24 2.58.102.0/24 Signature Algorithm: sha256WithRSAEncryption 13:fd:01:f1:ae:f6:f9:da:ca:0e:bc:bb:92:e7:59:3c:d7:1d: e7:ae:db:3c:ff:07:7a:74:f7:35:93:81:83:f0:81:d6:8b:e0: cf:e9:d0:26:69:ea:45:1a:7d:0e:07:b7:d1:8c:be:27:17:e3: 25:61:74:f7:3d:55:1d:d3:18:20:55:e1:6b:56:bb:ba:fc:36: 90:cc:25:2e:f3:f1:82:c0:ea:c0:9d:30:a4:1d:6b:d6:73:db: 85:f1:ca:49:1b:80:88:b5:d0:ca:33:66:cb:41:97:4c:b7:3d: 97:12:ba:fe:19:13:f7:76:c0:99:e2:aa:77:16:c2:de:c1:76: 07:67:45:c1:33:ab:c2:55:9b:b9:b8:65:b1:2e:05:ea:e4:fe: 7a:11:04:9c:bf:b3:f8:3d:04:f7:99:41:2c:2f:aa:e3:68:80: d7:8b:10:0f:a9:54:a8:d8:e3:8a:e0:d2:1b:8a:8a:31:2e:fd: b7:6d:5b:fe:88:7f:be:51:72:32:be:b3:b0:9d:d5:f7:09:7d: 0c:5c:76:5a:b4:9e:4b:32:50:ca:39:c7:64:a0:b7:59:32:d5: b1:dc:d3:62:e6:b6:4f:8e:22:41:df:41:00:31:4b:93:23:d4: 03:15:9d:bd:26:42:25:8d:7a:2f:46:c6:11:c1:66:c2:e6:df: ca:e0:68:11 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4olVrHpklwpAqKaUtTqthMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlZWYzOTczZDZlMDc2ODE0MTliYWU4NjdiZDUxNDU0NWU3 ZGY1ZGEwHhcNMjYwMTAxMDgxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzFhY2EzMmVlNTkzYzgyODQ0M2Y0YTcyNzk2OTFhOWJkMzM3NTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iLVe9BN0yaD7gQxdDJkqbZ+UvMJ ETgt0qqNKsS1WqY3rXe8qYoEwv02yU2Y2KPwpR4oSHWtPVMl+SM5X/xN3kYjZIw2 YJL9kFY/XskZpPVFbTT3Qwnl6Rm7f1bTCrmmGjbT46/KBqw4hOW+Ym9gCKIN46qJ eAJz7Pk1FUl1rWj7Yxoi56XysIiOQl973+DI8NQx8PNdF79ZM//dy6bLHEMYAggR Y2bDE+3mukpygvfwBaupXEI1P7CfknDyshh3Z7jImsvZQmJnGR0A0FJ1oHLqjdfd mPdvV2+qWyYk/ZwDSsyUr5N0WMOHgLDEpB5ard4ULSvyxm+/Cn4kqADR2QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGcayjLuWTyChEP0pyeWkam9M3WBMB8GA1UdIwQY MBaAFG7vOXPW4HaBQZuuhnvVFFReffXaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnU4NWM5Ymdkb0ZCbTY2R2U5VVVWRjU5OWRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8wODc1MTMtZDJkNi00M2M2LTliNzkt MjJmMGFhYTgxMzI3LzEvWnhyS011NVpQSUtFUV9Tbko1YVJxYjB6ZFlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8wODc1MTMtZDJkNi00M2M2LTliNzktMjJmMGFhYTgxMzI3 LzEvYnU4NWM5Ymdkb0ZCbTY2R2U5VVVWRjU5OWRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAjpkAwQA AjpmMA0GCSqGSIb3DQEBCwUAA4IBAQAT/QHxrvb52soOvLuS51k81x3nrts8/wd6 dPc1k4GD8IHWi+DP6dAmaepFGn0OB7fRjL4nF+MlYXT3PVUd0xggVeFrVru6/DaQ zCUu8/GCwOrAnTCkHWvWc9uF8cpJG4CItdDKM2bLQZdMtz2XErr+GRP3dsCZ4qp3 FsLewXYHZ0XBM6vCVZu5uGWxLgXq5P56EQScv7P4PQT3mUEsL6rjaIDXixAPqVSo 2OOK4NIbiooxLv23bVv+iH++UXIyvrOwndX3CX0MXHZatJ5LMlDKOcdkoLdZMtWx 3NNi5rZPjiJB30EAMUuTI9QDFZ29JkIljXovRsYRwWbC5t/K4GgR -----END CERTIFICATE-----Generated at Mon Jan 19 11:49:09 2026 by rpki-client