This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/zXusYRLYwRAORttXPdckzwtPX9Q.roa File: zXusYRLYwRAORttXPdckzwtPX9Q.roa (raw, json) Hash identifier: LkaDbBqRpuuwa6zvdZYDfMixg8ARuKEupKYuwmwFLy4= Subject key identifier: CD:7B:AC:61:12:D8:C1:10:0E:46:DB:57:3D:D7:24:CF:0B:4F:5F:D4 Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Certificate serial: 019B7E38D3D94E5CAF59AF2C35E31EF15838 Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/zXusYRLYwRAORttXPdckzwtPX9Q.roa Signing time: Fri 02 Jan 2026 10:20:12 +0000 ROA not before: Fri 02 Jan 2026 10:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39855 IP address blocks: 62.68.66.0/24 maxlen: 24 84.54.35.0/24 maxlen: 24 178.212.142.0/24 maxlen: 24 185.65.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d3:d9:4e:5c:af:59:af:2c:35:e3:1e:f1:58:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Validity Not Before: Jan 2 10:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd7bac6112d8c1100e46db573dd724cf0b4f5fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:22:8c:38:06:cc:a1:5f:8f:26:c0:6f:9c:bd: e0:b5:37:d9:8b:a0:0d:ce:2f:bb:6e:71:9b:3e:c8: 5a:0d:f0:65:d9:7a:4b:c3:9e:29:ec:ec:1e:34:2a: 20:ee:d5:5f:f2:9a:ba:86:ea:e7:db:90:7c:3c:05: 3d:1e:1d:de:ac:b8:6e:37:ae:b5:3f:8a:1d:0c:14: 52:06:87:87:ea:70:77:1e:f6:c4:3f:87:60:6a:52: a7:07:91:1c:0c:cd:b3:dc:28:ca:2a:86:00:62:42: e0:c1:b3:7d:83:3c:56:56:c3:03:96:f5:45:ee:7a: 86:48:8f:e0:b9:cc:b8:e5:df:cc:13:58:7e:c4:d2: 94:2c:0e:88:d1:26:9e:4a:1c:6b:d4:b7:ab:0e:96: 6c:92:73:40:41:09:fd:44:75:46:0c:3a:c6:3c:db: 80:70:48:ff:0d:04:2b:5c:ce:1d:d9:af:30:a7:21: 0f:c3:3d:eb:0f:3b:5c:44:00:a8:aa:4a:3b:9e:d4: 4f:7f:7d:c0:f3:5b:ad:85:09:30:fa:36:6e:bf:9f: 6d:4e:85:cb:f4:11:29:77:25:e7:e9:06:51:e8:36: 78:84:96:d3:97:42:ea:e5:8a:12:d8:2c:62:2c:80: 12:76:ce:44:c7:4c:1b:14:80:9f:db:c0:cb:91:88: 25:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:7B:AC:61:12:D8:C1:10:0E:46:DB:57:3D:D7:24:CF:0B:4F:5F:D4 X509v3 Authority Key Identifier: keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/zXusYRLYwRAORttXPdckzwtPX9Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.68.66.0/24 84.54.35.0/24 178.212.142.0/24 185.65.70.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:2a:39:bb:53:52:8e:33:e9:6a:fe:3c:3a:46:bd:4f:a6:b3: ab:84:f4:69:df:37:93:e2:f1:72:20:b4:a3:b2:3c:c9:27:88: 57:b2:78:b1:a4:70:f6:c8:7f:1f:b0:a8:f8:95:ef:21:c4:46: 45:40:09:5a:bc:47:03:1e:5e:32:be:f7:3a:7d:f3:ee:50:5a: 33:f3:5b:91:1d:89:53:b6:f8:e9:e4:b4:2a:e6:ef:44:48:80: 47:bb:53:f5:6e:44:bb:8a:ba:b7:46:fd:50:23:af:5a:8a:e6: d8:a6:41:fd:1c:65:1e:f6:5e:1e:86:dd:09:67:d7:4e:6b:79: 46:f0:77:62:9e:d8:8c:d0:f0:fe:2b:77:28:62:15:7c:a1:75: 41:37:1b:cd:5e:ee:23:ab:a5:b9:b8:c5:a1:98:53:2c:9e:7b: 69:7c:75:b8:87:45:86:69:f3:58:f1:7a:ea:df:1c:e4:bb:4a: a5:ed:4e:5a:eb:19:8b:73:6d:5a:9c:30:ac:4f:bc:34:9d:13: d3:50:5e:3e:8c:6b:8b:ef:a0:8b:9e:9b:88:35:66:53:8e:ae: 78:48:c8:7c:ec:ba:c6:64:26:00:fe:5b:14:45:5a:33:63:43: 6a:87:56:3d:21:ea:0d:bc:61:fd:c6:c5:70:a5:39:80:a5:cd: 0e:de:0c:37 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+ONPZTlyvWa8sNeMe8Vg4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh ZGFlNzUwHhcNMjYwMTAyMTAyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDdiYWM2MTEyZDhjMTEwMGU0NmRiNTczZGQ3MjRjZjBiNGY1ZmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryKMOAbMoV+PJsBvnL3gtTfZi6AN zi+7bnGbPshaDfBl2XpLw54p7OweNCog7tVf8pq6hurn25B8PAU9Hh3erLhuN661 P4odDBRSBoeH6nB3HvbEP4dgalKnB5EcDM2z3CjKKoYAYkLgwbN9gzxWVsMDlvVF 7nqGSI/gucy45d/ME1h+xNKULA6I0SaeShxr1LerDpZsknNAQQn9RHVGDDrGPNuA cEj/DQQrXM4d2a8wpyEPwz3rDztcRACoqko7ntRPf33A81uthQkw+jZuv59tToXL 9BEpdyXn6QZR6DZ4hJbTl0Lq5YoS2CxiLIASds5Ex0wbFICf28DLkYgl6wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFM17rGES2MEQDkbbVz3XJM8LT1/UMB8GA1UdIwQY MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt YmM2Nzk0ZTk1ZTVhLzEvelh1c1lSTFl3UkFPUnR0WFBkY2t6d3RQWDlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAPkRCAwQA VDYjAwQAstSOAwQAuUFGMA0GCSqGSIb3DQEBCwUAA4IBAQCeKjm7U1KOM+lq/jw6 Rr1PprOrhPRp3zeT4vFyILSjsjzJJ4hXsnixpHD2yH8fsKj4le8hxEZFQAlavEcD Hl4yvvc6ffPuUFoz81uRHYlTtvjp5LQq5u9ESIBHu1P1bkS7irq3Rv1QI69aiubY pkH9HGUe9l4eht0JZ9dOa3lG8HdintiM0PD+K3coYhV8oXVBNxvNXu4jq6W5uMWh mFMsnntpfHW4h0WGafNY8Xrq3xzku0ql7U5a6xmLc21anDCsT7w0nRPTUF4+jGuL 76CLnpuINWZTjq54SMh87LrGZCYA/lsURVozY0Nqh1Y9IeoNvGH9xsVwpTmApc0O 3gw3 -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:51 2026 by rpki-client