This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/z-ch1vMdQIr7uyyhM6RzLPCAEf4.roa File: z-ch1vMdQIr7uyyhM6RzLPCAEf4.roa (raw, json) Hash identifier: b4/otDI2s6zAcOPIgbmVSNUQ37PSQCEjogRy9G6SBZ0= Subject key identifier: CF:E7:21:D6:F3:1D:40:8A:FB:BB:2C:A1:33:A4:73:2C:F0:80:11:FE Certificate issuer: /CN=5906325e34418a57ce566efc0c3e8b38a0efa5db Certificate serial: 019B7910D23F1CD078296B9A4AA94E5251E2 Authority key identifier: 59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/z-ch1vMdQIr7uyyhM6RzLPCAEf4.roa Signing time: Thu 01 Jan 2026 10:18:24 +0000 ROA not before: Thu 01 Jan 2026 10:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 155.55.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.crl rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d2:3f:1c:d0:78:29:6b:9a:4a:a9:4e:52:51:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5906325e34418a57ce566efc0c3e8b38a0efa5db Validity Not Before: Jan 1 10:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfe721d6f31d408afbbb2ca133a4732cf08011fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:f9:4c:20:da:bf:57:86:4a:1f:b4:0a:78:9d: 89:5a:69:fe:69:7c:ae:09:d8:32:74:09:32:54:c0: fc:60:ea:35:c9:93:db:ad:d1:89:39:71:1f:7c:37: 4a:32:aa:56:be:48:e5:68:39:cd:7d:e7:f0:a8:ac: 19:2b:33:91:e1:33:69:5e:46:10:46:6a:cd:71:39: 18:e5:93:cc:17:ac:98:68:61:85:b2:1f:e5:fb:8e: 90:b6:5a:31:cd:88:b6:35:a8:08:f2:8a:b9:b3:f0: 89:b9:b1:91:7e:07:65:fe:45:1f:e6:c0:40:0e:3a: 56:ae:4a:35:1c:eb:56:30:25:00:c0:40:13:78:f8: 45:1e:5b:6a:49:2d:e1:fa:ec:ec:f4:c6:c5:86:69: ef:d1:4c:c5:86:bd:6a:a3:c5:2a:55:e3:a5:7f:42: f5:a8:f6:2b:36:b9:b3:06:dd:7b:84:bb:96:d4:70: ba:fa:6f:37:0f:0e:52:12:fe:38:28:a1:1e:bf:17: 79:35:43:1d:84:6d:79:cc:38:b8:9d:b0:7d:c6:e1: bf:ae:65:7a:27:0c:00:ff:ef:b1:87:75:94:44:42: ad:4f:36:17:f7:9d:a6:00:45:32:8a:4d:b6:94:0d: 2e:6f:38:cb:a8:f3:62:82:83:36:9f:4b:78:cf:fb: 5d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E7:21:D6:F3:1D:40:8A:FB:BB:2C:A1:33:A4:73:2C:F0:80:11:FE X509v3 Authority Key Identifier: keyid:59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/z-ch1vMdQIr7uyyhM6RzLPCAEf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.55.196.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:6a:4c:ee:9f:31:33:a4:ea:d0:e0:ae:e7:be:ef:5c:82:3b: bf:e1:9b:9d:98:f4:71:87:07:7c:ed:1e:da:96:65:de:b0:cc: 2e:46:1c:fc:1e:ba:20:5e:3d:71:0f:eb:96:b4:97:ac:93:09: 4c:2a:5f:a0:2f:4b:63:9d:9a:f7:2e:ee:df:45:bd:f5:74:14: 37:07:78:eb:6a:b5:ae:1d:f1:51:fe:81:d8:9f:fe:89:62:56: 35:0c:79:cd:68:7c:8d:cb:08:27:79:05:12:3d:5f:1b:cb:61: 72:48:5e:54:18:99:3a:1f:b9:cb:c4:a6:47:ee:82:c2:a3:c5: 59:2e:0d:c3:d1:77:53:58:b6:59:e2:72:05:11:27:c6:ca:05: cc:37:30:e3:be:e1:a5:99:ca:c3:7d:ae:cd:6d:59:3f:97:f5: 81:5d:37:b2:3e:a3:8f:46:f0:f6:d4:d8:9c:8c:69:1f:5f:01: c1:54:f6:ef:5e:19:3d:10:a0:ef:7f:a4:41:eb:73:cc:f2:42: 8c:da:67:57:b4:63:28:4b:e3:d4:f9:c0:b7:57:09:57:13:14: 66:af:8c:59:a8:02:ae:b4:bd:f7:f1:ae:1d:02:14:50:ec:55: f3:fa:6a:2a:97:14:32:95:74:00:16:a5:c6:91:4b:89:09:55: 1e:3b:3d:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ENI/HNB4KWuaSqlOUlHiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MDYzMjVlMzQ0MThhNTdjZTU2NmVmYzBjM2U4YjM4YTBl ZmE1ZGIwHhcNMjYwMTAxMTAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmU3MjFkNmYzMWQ0MDhhZmJiYjJjYTEzM2E0NzMyY2YwODAxMWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9/lMINq/V4ZKH7QKeJ2JWmn+aXyu CdgydAkyVMD8YOo1yZPbrdGJOXEffDdKMqpWvkjlaDnNfefwqKwZKzOR4TNpXkYQ RmrNcTkY5ZPMF6yYaGGFsh/l+46QtloxzYi2NagI8oq5s/CJubGRfgdl/kUf5sBA DjpWrko1HOtWMCUAwEATePhFHltqSS3h+uzs9MbFhmnv0UzFhr1qo8UqVeOlf0L1 qPYrNrmzBt17hLuW1HC6+m83Dw5SEv44KKEevxd5NUMdhG15zDi4nbB9xuG/rmV6 JwwA/++xh3WUREKtTzYX952mAEUyik22lA0ubzjLqPNigoM2n0t4z/tdsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM/nIdbzHUCK+7ssoTOkcyzwgBH+MB8GA1UdIwQY MBaAFFkGMl40QYpXzlZu/Aw+izig76XbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1FZeVhqUkJpbGZPVm03OERENkxPS0R2cGRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9hNDYzNDktMWJjMC00YTBiLWI2N2Yt YjIxN2E2OGNlYWY0LzEvei1jaDF2TWRRSXI3dXl5aE02UnpMUENBRWY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9hNDYzNDktMWJjMC00YTBiLWI2N2YtYjIxN2E2OGNlYWY0 LzEvV1FZeVhqUkJpbGZPVm03OERENkxPS0R2cGRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmzfEMA0G CSqGSIb3DQEBCwUAA4IBAQCNakzunzEzpOrQ4K7nvu9cgju/4ZudmPRxhwd87R7a lmXesMwuRhz8HrogXj1xD+uWtJeskwlMKl+gL0tjnZr3Lu7fRb31dBQ3B3jrarWu HfFR/oHYn/6JYlY1DHnNaHyNywgneQUSPV8by2FySF5UGJk6H7nLxKZH7oLCo8VZ Lg3D0XdTWLZZ4nIFESfGygXMNzDjvuGlmcrDfa7NbVk/l/WBXTeyPqOPRvD21Nic jGkfXwHBVPbvXhk9EKDvf6RB63PM8kKM2mdXtGMoS+PU+cC3VwlXExRmr4xZqAKu tL338a4dAhRQ7FXz+moqlxQylXQAFqXGkUuJCVUeOz2H -----END CERTIFICATE-----Generated at Fri Jan 9 06:21:09 2026 by rpki-client