This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/zcAeP7CyuYSzvCr5z4QkpSpd_Fo.roa File: zcAeP7CyuYSzvCr5z4QkpSpd_Fo.roa (raw, json) Hash identifier: BZtxwPUla4tLZ+cA+wlMKxMd59rsmlSfQPWZuQ9tMPs= Subject key identifier: CD:C0:1E:3F:B0:B2:B9:84:B3:BC:2A:F9:CF:84:24:A5:2A:5D:FC:5A Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019B797F331113C7A7CBCB86D275AC51C8E6 Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/zcAeP7CyuYSzvCr5z4QkpSpd_Fo.roa Signing time: Thu 01 Jan 2026 12:18:57 +0000 ROA not before: Thu 01 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198412 IP address blocks: 176.124.112.0/23 maxlen: 24 176.124.112.0/24 maxlen: 24 176.124.113.0/24 maxlen: 24 185.187.152.0/24 maxlen: 24 185.187.153.0/24 maxlen: 24 2a05:b0c0::/48 maxlen: 48 2a05:b0c1::/48 maxlen: 48 2a05:b0c4:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:33:11:13:c7:a7:cb:cb:86:d2:75:ac:51:c8:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Jan 1 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cdc01e3fb0b2b984b3bc2af9cf8424a52a5dfc5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:08:16:1b:ca:ed:a9:6b:47:6d:17:3f:2a:78: 68:00:c1:ae:c0:32:29:8c:4b:e6:f7:cd:62:e5:49: e7:24:79:08:50:74:37:b5:10:87:69:34:39:04:a7: 3a:9b:62:0f:0b:c0:9b:fd:a0:ad:65:8a:09:be:2f: db:90:24:df:5f:de:5d:22:26:5a:21:c0:16:59:f7: 92:0f:e8:e3:94:b9:1c:1d:66:20:dc:e5:5e:4a:73: a0:2c:57:3d:22:5e:42:a9:3a:fa:fe:4d:e3:b0:c9: 59:e8:21:9a:6b:18:2b:d7:a5:61:ed:7d:68:2f:0f: c2:c2:69:d5:0c:ad:22:20:bb:08:39:09:af:37:28: 7c:8a:17:29:cc:b3:66:f4:66:7a:8a:43:b0:45:2b: 64:57:e6:66:1b:75:9b:1c:26:e0:34:2f:e3:2a:65: 62:8f:56:7d:ac:64:87:63:31:54:61:49:4f:2a:e4: 16:4c:48:bb:ec:7e:4c:5f:63:68:24:ad:c2:71:ef: 69:19:35:4b:c0:3d:5e:d7:4c:4b:63:48:ee:ba:f4: 20:98:d4:3a:94:96:77:c5:44:0b:9f:be:a7:6a:fe: 14:c8:a2:08:bf:f2:03:86:07:ff:db:55:12:0e:c4: 99:80:b6:37:dd:10:0b:c2:da:43:b4:b3:b5:1a:6b: 76:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C0:1E:3F:B0:B2:B9:84:B3:BC:2A:F9:CF:84:24:A5:2A:5D:FC:5A X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/zcAeP7CyuYSzvCr5z4QkpSpd_Fo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.124.112.0/23 185.187.152.0/23 IPv6: 2a05:b0c0::/48 2a05:b0c1::/48 2a05:b0c4:1::/48 Signature Algorithm: sha256WithRSAEncryption 05:20:41:56:98:f0:a8:75:ef:38:09:13:c7:61:2c:28:d8:ba: 40:4e:e5:ec:14:1a:c8:bb:4f:39:cb:7f:c2:8b:10:57:8f:01: 8f:ce:f9:54:22:c0:25:d5:93:a1:35:4e:f7:3e:0e:c4:db:c6: c7:35:bb:63:4a:3d:a0:e7:50:c1:a2:cd:a8:71:19:b5:aa:43: f7:5f:64:15:4b:e5:0d:5d:59:80:1e:ff:f4:fc:e5:da:0f:98: 14:72:33:38:17:5f:3e:3e:7b:f0:e2:1a:c2:97:d0:7f:d6:39: fc:7b:9e:8e:11:81:64:02:3f:8a:b6:d6:11:e7:a7:23:e0:65: b2:ec:95:20:22:0e:ae:7a:36:51:ff:05:93:45:fb:3c:58:81: 61:cc:56:f2:fe:5e:d3:08:00:b0:2e:7e:90:41:a9:62:29:f8: 60:56:5f:1a:2c:65:90:73:19:5a:02:3b:c5:32:da:f8:f3:4a: e5:99:b3:89:f8:17:71:fb:05:fb:e8:d3:d8:bf:a6:89:f3:23: 7f:9b:ec:79:6d:69:c1:84:a8:67:a8:bb:bf:6b:9e:68:ba:8e: ad:22:2a:bb:60:fd:88:df:6d:1a:96:f8:59:d0:00:60:03:47: e5:4d:6e:32:ee:2e:a3:a6:79:97:c8:61:cf:a8:8c:07:4d:56: 5e:9f:a0:02 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt5fzMRE8eny8uG0nWsUcjmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjYwMTAxMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGMwMWUzZmIwYjJiOTg0YjNiYzJhZjljZjg0MjRhNTJhNWRmYzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AgWG8rtqWtHbRc/KnhoAMGuwDIp jEvm981i5UnnJHkIUHQ3tRCHaTQ5BKc6m2IPC8Cb/aCtZYoJvi/bkCTfX95dIiZa IcAWWfeSD+jjlLkcHWYg3OVeSnOgLFc9Il5CqTr6/k3jsMlZ6CGaaxgr16Vh7X1o Lw/CwmnVDK0iILsIOQmvNyh8ihcpzLNm9GZ6ikOwRStkV+ZmG3WbHCbgNC/jKmVi j1Z9rGSHYzFUYUlPKuQWTEi77H5MX2NoJK3Cce9pGTVLwD1e10xLY0juuvQgmNQ6 lJZ3xUQLn76nav4UyKIIv/IDhgf/21USDsSZgLY33RALwtpDtLO1Gmt2dwIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFM3AHj+wsrmEs7wq+c+EJKUqXfxaMB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvemNBZVA3Q3l1WVN6dkNyNXo0UWtwU3BkX0ZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzASBAIAATAMAwQBsHxwAwQB ubuYMCEEAgACMBsDBwAqBbDAAAADBwAqBbDBAAADBwAqBbDEAAEwDQYJKoZIhvcN AQELBQADggEBAAUgQVaY8Kh17zgJE8dhLCjYukBO5ewUGsi7TznLf8KLEFePAY/O +VQiwCXVk6E1Tvc+DsTbxsc1u2NKPaDnUMGizahxGbWqQ/dfZBVL5Q1dWYAe//T8 5doPmBRyMzgXXz4+e/DiGsKX0H/WOfx7no4RgWQCP4q21hHnpyPgZbLslSAiDq56 NlH/BZNF+zxYgWHMVvL+XtMIALAufpBBqWIp+GBWXxosZZBzGVoCO8Uy2vjzSuWZ s4n4F3H7Bfvo09i/ponzI3+b7HltacGEqGeou79rnmi6jq0iKrtg/YjfbRqW+FnQ AGADR+VNbjLuLqOmeZfIYc+ojAdNVl6foAI= -----END CERTIFICATE-----Generated at Mon Jan 19 20:36:06 2026 by rpki-client