This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Zn3Hrxj8sP2dvKsJvj3SqnF5n2Q.roa File: Zn3Hrxj8sP2dvKsJvj3SqnF5n2Q.roa (raw, json) Hash identifier: xJG2FyHalGG3e8F/2uVKMcFhqOnIZL9NSycneVZDM/s= Subject key identifier: 66:7D:C7:AF:18:FC:B0:FD:9D:BC:AB:09:BE:3D:D2:AA:71:79:9F:64 Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019BEEAB202FAD6D4E0B3F647A658227BE77 Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Zn3Hrxj8sP2dvKsJvj3SqnF5n2Q.roa Signing time: Sat 24 Jan 2026 06:22:30 +0000 ROA not before: Sat 24 Jan 2026 06:22:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50340 IP address blocks: 212.192.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ee:ab:20:2f:ad:6d:4e:0b:3f:64:7a:65:82:27:be:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 24 06:22:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=667dc7af18fcb0fd9dbcab09be3dd2aa71799f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2f:eb:dd:ba:e8:2c:54:e5:d7:df:fd:e4:22: 67:c1:85:4d:76:ef:46:f1:2c:1f:4a:89:a5:79:eb: 76:d2:ea:bd:e7:e9:57:60:ee:54:8c:ca:08:64:ab: 05:dc:da:a8:b7:68:5b:ec:65:60:3c:bc:42:15:f9: b5:1b:e0:e1:87:b5:ae:2e:c2:ee:a7:5d:0d:c7:34: 03:03:c6:77:e0:ea:e4:d2:2a:aa:f8:ff:4f:88:cf: c1:7b:d4:f8:f5:2f:67:26:3f:26:0b:11:2b:3e:a5: 8c:90:6a:7a:5e:76:83:14:23:4d:5f:25:f6:84:59: bb:41:15:d9:c6:b5:83:a5:6a:7a:8f:7a:bb:0d:73: 20:23:2e:fd:e6:ef:aa:6f:21:ec:44:16:39:68:85: e5:36:75:ce:13:d3:0d:64:97:17:2d:76:57:6c:cd: 40:85:77:e8:ea:0c:b6:ac:6b:f2:28:16:5d:1b:7a: 03:a0:6f:f3:98:c9:74:8e:48:af:d6:fd:22:8c:a7: 67:5e:4a:b9:4e:9c:05:52:dc:e8:a2:eb:86:94:34: d0:22:73:9e:06:3b:b3:ec:a9:1c:e2:b3:e6:b2:63: 85:f4:08:34:f6:bb:f4:9b:d6:fe:07:bc:ae:c6:be: db:e8:a9:01:59:c2:ab:b4:34:c1:47:2b:00:7f:60: ef:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7D:C7:AF:18:FC:B0:FD:9D:BC:AB:09:BE:3D:D2:AA:71:79:9F:64 X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Zn3Hrxj8sP2dvKsJvj3SqnF5n2Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.192.62.0/24 Signature Algorithm: sha256WithRSAEncryption 55:54:1a:a0:68:29:2e:5c:68:92:c4:51:9f:d6:ff:5b:72:94: 95:30:f2:d9:d6:d4:05:88:cb:34:7c:a9:8c:de:03:7a:88:de: fe:c9:41:29:db:f6:ba:98:50:7b:73:96:09:65:dc:80:b7:f9: d5:62:ac:44:94:73:0d:27:80:11:96:cd:ae:54:31:fa:94:e3: a6:37:96:b1:b8:09:6d:ae:3c:53:b2:1d:da:95:0f:27:eb:4c: 41:69:9e:6c:5b:7e:69:28:ef:f1:da:ee:8e:cc:15:d5:84:93: be:8f:ee:36:a2:6b:d0:3a:a8:29:eb:52:c1:8d:41:ce:c0:8d: af:6e:62:89:79:78:90:6c:b7:61:38:26:9a:25:97:cf:13:7c: 78:4d:95:53:4c:e0:04:83:8b:b2:ce:f0:ee:2a:fb:43:d8:6b: 26:60:60:47:09:13:57:9e:da:4b:08:04:f7:7c:c7:7f:34:7e: e4:8e:98:ca:85:12:0f:4a:09:ba:82:c2:03:84:e8:84:4b:ea: ba:e8:fe:82:4a:90:b7:d9:f7:b0:47:9d:88:df:ac:fc:5a:9e: e3:ef:a9:b3:01:86:00:15:6c:4f:e4:4a:a3:0b:06:e6:4a:5b: e2:fa:26:30:f5:83:7f:ac:6b:07:bf:f2:2e:87:f1:b7:c6:83: 81:50:49:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvuqyAvrW1OCz9kemWCJ753MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTI0MDYyMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjdkYzdhZjE4ZmNiMGZkOWRiY2FiMDliZTNkZDJhYTcxNzk5ZjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC/r3broLFTl19/95CJnwYVNdu9G 8SwfSomleet20uq95+lXYO5UjMoIZKsF3Nqot2hb7GVgPLxCFfm1G+Dhh7WuLsLu p10NxzQDA8Z34Ork0iqq+P9PiM/Be9T49S9nJj8mCxErPqWMkGp6XnaDFCNNXyX2 hFm7QRXZxrWDpWp6j3q7DXMgIy795u+qbyHsRBY5aIXlNnXOE9MNZJcXLXZXbM1A hXfo6gy2rGvyKBZdG3oDoG/zmMl0jkiv1v0ijKdnXkq5TpwFUtzoouuGlDTQInOe Bjuz7Kkc4rPmsmOF9Ag09rv0m9b+B7yuxr7b6KkBWcKrtDTBRysAf2DvYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGZ9x68Y/LD9nbyrCb490qpxeZ9kMB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvWm4zSHJ4ajhzUDJkdktzSnZqM1NxbkY1bjJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1MA+MA0G CSqGSIb3DQEBCwUAA4IBAQBVVBqgaCkuXGiSxFGf1v9bcpSVMPLZ1tQFiMs0fKmM 3gN6iN7+yUEp2/a6mFB7c5YJZdyAt/nVYqxElHMNJ4ARls2uVDH6lOOmN5axuAlt rjxTsh3alQ8n60xBaZ5sW35pKO/x2u6OzBXVhJO+j+42omvQOqgp61LBjUHOwI2v bmKJeXiQbLdhOCaaJZfPE3x4TZVTTOAEg4uyzvDuKvtD2GsmYGBHCRNXntpLCAT3 fMd/NH7kjpjKhRIPSgm6gsIDhOiES+q66P6CSpC32fewR52I36z8Wp7j76mzAYYA FWxP5EqjCwbmSlvi+iYw9YN/rGsHv/Iuh/G3xoOBUEk7 -----END CERTIFICATE-----Generated at Sun Jan 25 21:16:02 2026 by rpki-client