This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/zXIsfH_Pa5jSNX6yQyXZtUc8scs.roa File: zXIsfH_Pa5jSNX6yQyXZtUc8scs.roa (raw, json) Hash identifier: i/P4c06e2ra2sLZfA/FbWL5pY4bEtjGz0gTkGbKY8bs= Subject key identifier: CD:72:2C:7C:7F:CF:6B:98:D2:35:7E:B2:43:25:D9:B5:47:3C:B1:CB Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Certificate serial: 019B7D5CF91FD11BBF49A1F07A5825F388FD Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/zXIsfH_Pa5jSNX6yQyXZtUc8scs.roa Signing time: Fri 02 Jan 2026 06:20:03 +0000 ROA not before: Fri 02 Jan 2026 06:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203 IP address blocks: 157.25.130.0/23 maxlen: 23 157.25.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f9:1f:d1:1b:bf:49:a1:f0:7a:58:25:f3:88:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Validity Not Before: Jan 2 06:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd722c7c7fcf6b98d2357eb24325d9b5473cb1cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:81:aa:6c:84:51:b7:d4:2d:a0:87:ef:76:c8: 0e:1b:e6:65:e9:05:3b:5f:f8:8a:1a:c5:9f:bb:1b: 6c:be:f7:d5:72:ba:4c:88:b9:69:91:cc:c9:57:d1: 79:ce:2a:4d:f5:bd:1a:81:ff:9f:32:96:9f:f9:95: 59:82:d7:f7:8f:11:dc:a5:4c:c1:50:b8:30:7d:be: d0:7b:f9:d2:77:88:6c:f2:5c:af:22:bf:f7:58:be: 69:80:69:aa:8e:34:73:0a:85:f3:09:00:cd:31:d9: 53:87:73:1a:fd:71:9c:d1:0a:9b:65:6e:0d:9e:59: 23:83:4a:e8:fc:ec:16:d4:44:42:66:dd:0a:a3:13: f0:d4:9e:5e:c9:cf:4c:d4:9a:cf:c2:7e:8a:13:40: 5b:b4:7c:15:97:43:18:02:0f:2e:dd:1f:69:24:33: 0d:19:46:ee:04:29:89:77:07:79:74:b3:56:0e:33: 69:95:63:31:b9:0f:62:5b:af:b4:0a:2d:0f:57:32: 51:81:eb:92:06:85:de:34:21:9b:41:54:6a:3e:da: b7:26:ac:27:e7:b8:85:4f:6d:23:68:25:e3:91:ba: e2:3d:b6:c2:20:af:78:86:19:68:27:83:90:db:5c: bf:3f:8c:c4:a5:51:42:95:38:69:f4:a5:e9:e0:3e: 01:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:72:2C:7C:7F:CF:6B:98:D2:35:7E:B2:43:25:D9:B5:47:3C:B1:CB X509v3 Authority Key Identifier: keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/zXIsfH_Pa5jSNX6yQyXZtUc8scs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.25.130.0/23 157.25.174.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:c6:45:0e:a0:10:e1:59:78:e0:ec:47:9d:9c:78:ce:e0:01: b1:b5:db:8a:aa:d2:f9:96:f8:43:81:44:a4:df:86:4b:ec:90: 47:70:4c:6d:55:b4:1d:f6:fc:07:5c:8a:c9:54:fb:c5:91:11: a2:78:49:5d:f1:83:ce:e2:f8:de:41:e6:d6:2a:89:f9:b0:5d: 03:a9:59:f9:52:fb:9a:c5:57:19:c2:6b:51:51:3c:87:fd:1b: 57:8e:bf:d5:f5:73:48:2c:09:8a:2f:25:95:58:0a:e3:f2:41: 42:9d:b2:48:d7:8a:b8:81:58:4f:48:5d:ce:f1:81:a1:58:f2: 0d:82:ed:36:6a:ea:bc:6e:67:8c:0e:12:05:4a:44:81:a7:2f: c4:f7:aa:c5:a4:d5:7a:6a:84:41:59:57:7c:01:8d:a0:3f:ae: 07:b2:bc:1a:6d:a0:bb:2b:4e:e9:d0:ee:76:5b:15:8f:4f:b0: 6e:17:0c:9a:49:1b:68:4a:25:4d:29:77:2a:ed:9c:75:01:86: b3:e2:cb:71:eb:a3:14:a3:da:51:93:d0:99:dd:bf:49:3e:3d: 06:5d:4d:c9:b1:84:f4:14:ee:7a:8b:d1:40:83:79:85:cd:91: 1b:ed:ce:14:05:e1:16:5b:b2:69:41:c1:fb:df:7e:c8:e2:25: 3d:37:14:6e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XPkf0Ru/SaHwelgl84j9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj ZWY5MzMwHhcNMjYwMTAyMDYyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDcyMmM3YzdmY2Y2Yjk4ZDIzNTdlYjI0MzI1ZDliNTQ3M2NiMWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4GqbIRRt9QtoIfvdsgOG+Zl6QU7 X/iKGsWfuxtsvvfVcrpMiLlpkczJV9F5zipN9b0agf+fMpaf+ZVZgtf3jxHcpUzB ULgwfb7Qe/nSd4hs8lyvIr/3WL5pgGmqjjRzCoXzCQDNMdlTh3Ma/XGc0QqbZW4N nlkjg0ro/OwW1ERCZt0KoxPw1J5eyc9M1JrPwn6KE0BbtHwVl0MYAg8u3R9pJDMN GUbuBCmJdwd5dLNWDjNplWMxuQ9iW6+0Ci0PVzJRgeuSBoXeNCGbQVRqPtq3Jqwn 57iFT20jaCXjkbriPbbCIK94hhloJ4OQ21y/P4zEpVFClThp9KXp4D4BBQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM1yLHx/z2uY0jV+skMl2bVHPLHLMB8GA1UdIwQY MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt OTFlMzE4NGJiMGFiLzEvelhJc2ZIX1BhNWpTTlg2eVF5WFp0VWM4c2NzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBnRmCAwQB nRmuMA0GCSqGSIb3DQEBCwUAA4IBAQA8xkUOoBDhWXjg7EednHjO4AGxtduKqtL5 lvhDgUSk34ZL7JBHcExtVbQd9vwHXIrJVPvFkRGieEld8YPO4vjeQebWKon5sF0D qVn5UvuaxVcZwmtRUTyH/RtXjr/V9XNILAmKLyWVWArj8kFCnbJI14q4gVhPSF3O 8YGhWPINgu02auq8bmeMDhIFSkSBpy/E96rFpNV6aoRBWVd8AY2gP64HsrwabaC7 K07p0O52WxWPT7BuFwyaSRtoSiVNKXcq7Zx1AYaz4stx66MUo9pRk9CZ3b9JPj0G XU3JsYT0FO56i9FAg3mFzZEb7c4UBeEWW7JpQcH7337I4iU9NxRu -----END CERTIFICATE-----Generated at Thu Jan 22 09:48:30 2026 by rpki-client