This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/Z1A_JqYmolj0JLCqzeQ5JvDZ3Oc.roa File: Z1A_JqYmolj0JLCqzeQ5JvDZ3Oc.roa (raw, json) Hash identifier: a1yzGj+j6ZJwqEY8Up8BtHz2I1PU+QCd41w+T8Yh8kU= Subject key identifier: 67:50:3F:26:A6:26:A2:58:F4:24:B0:AA:CD:E4:39:26:F0:D9:DC:E7 Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a Certificate serial: 019B7C12455041A102F4692406CA7781E84A Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/Z1A_JqYmolj0JLCqzeQ5JvDZ3Oc.roa Signing time: Fri 02 Jan 2026 00:18:50 +0000 ROA not before: Fri 02 Jan 2026 00:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 62.201.192.0/24 maxlen: 24 62.201.199.0/24 maxlen: 24 62.201.200.0/24 maxlen: 24 62.201.201.0/24 maxlen: 24 62.201.202.0/24 maxlen: 24 62.201.203.0/24 maxlen: 24 62.201.204.0/24 maxlen: 24 62.201.205.0/24 maxlen: 24 62.201.207.0/24 maxlen: 24 62.201.208.0/24 maxlen: 24 62.201.237.0/24 maxlen: 24 62.201.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:45:50:41:a1:02:f4:69:24:06:ca:77:81:e8:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a Validity Not Before: Jan 2 00:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67503f26a626a258f424b0aacde43926f0d9dce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f4:86:5b:1a:ca:72:2d:af:6a:54:2e:76:68: c1:d1:1a:ea:07:46:bb:f5:8e:b4:d0:a7:3d:53:6f: 74:05:af:65:31:87:58:11:17:60:ec:4b:0f:b2:ba: 8a:9d:f4:ea:d8:31:17:15:17:18:9d:c4:cc:8a:94: 61:3b:e4:86:16:c5:96:18:a7:d1:7a:c7:56:da:b4: 0e:32:ba:05:62:dc:3b:80:23:43:9d:20:fe:aa:bd: bb:88:de:47:42:9d:57:06:d0:24:a9:8f:04:e3:54: 10:12:e0:8c:26:1b:c7:98:f0:10:a5:94:73:ee:15: d4:69:f5:18:d3:c8:ec:d7:18:e1:d4:99:8d:5d:70: 43:50:82:a8:af:51:6b:82:88:4e:b1:03:fc:d7:22: c2:24:ef:59:0d:9e:03:b6:b2:3b:8f:6d:f2:60:0e: 25:cf:f7:6f:1a:c1:ad:c6:92:ba:d3:0d:7c:41:e0: f7:a7:73:b0:ff:91:d5:87:fe:c7:5a:7e:c8:d9:11: 32:a3:4e:a4:f4:23:a9:54:b4:92:84:44:db:99:dd: 69:56:d9:45:86:10:61:eb:ed:0b:54:87:b6:98:14: 35:6a:cc:66:d4:a9:42:e0:c0:3b:73:36:d6:6a:12: a4:8b:87:7f:38:75:cb:1e:41:df:de:f8:7d:5b:b2: 32:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:50:3F:26:A6:26:A2:58:F4:24:B0:AA:CD:E4:39:26:F0:D9:DC:E7 X509v3 Authority Key Identifier: keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/Z1A_JqYmolj0JLCqzeQ5JvDZ3Oc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.201.192.0/24 62.201.199.0-62.201.205.255 62.201.207.0-62.201.208.255 62.201.237.0/24 62.201.248.0/24 Signature Algorithm: sha256WithRSAEncryption a0:0d:4f:35:0f:7c:73:b6:9d:82:e5:dd:89:d4:c5:c9:e6:24: 44:0b:b2:cd:d6:b2:c0:f2:7c:54:b8:8c:d2:32:5e:18:48:1c: c3:93:d8:28:9e:f9:8b:f1:2f:4b:d3:58:b6:e1:e6:e2:45:4c: 37:a4:9a:bd:35:ef:2c:59:a0:06:e4:23:00:9f:f5:bf:0a:53: e3:9c:cf:f0:2c:5a:40:84:2d:29:44:09:23:fb:0a:43:8b:0c: 54:c1:d9:32:aa:5a:c4:89:9d:65:73:e6:50:49:77:7d:b2:10: 21:78:b6:90:92:9a:bf:45:ea:36:a6:07:67:33:9c:d5:c2:df: d3:3e:9b:77:c2:28:4c:5a:d9:89:87:35:d2:38:53:c9:e0:e7: fa:64:d1:b2:ca:9f:5a:51:a6:7c:48:36:40:8b:96:95:92:a9: 60:2e:50:b6:46:bb:1e:9b:13:62:74:99:ad:51:de:3b:d5:9b: ad:96:7a:eb:1e:4a:3c:63:a9:05:7f:cd:3b:c3:7f:10:f4:fc: 1b:d3:bc:87:4c:e8:6f:cc:bf:7e:07:bb:34:f5:d4:92:f1:e7: 6a:fd:e2:63:c9:93:15:84:db:24:70:5c:b1:38:1c:26:31:a2: 1e:d7:6f:56:2c:f0:41:5f:a4:3d:f5:a0:e6:13:8b:e9:03:b9: fa:5d:b0:c9 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt8EkVQQaEC9GkkBsp3gehKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OTJmZWRmNTljNjBkMzI1NGUzN2E5YzhlY2RlMTFjOWJh MTI4MmEwHhcNMjYwMTAyMDAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzUwM2YyNmE2MjZhMjU4ZjQyNGIwYWFjZGU0MzkyNmYwZDlkY2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/SGWxrKci2valQudmjB0RrqB0a7 9Y600Kc9U290Ba9lMYdYERdg7EsPsrqKnfTq2DEXFRcYncTMipRhO+SGFsWWGKfR esdW2rQOMroFYtw7gCNDnSD+qr27iN5HQp1XBtAkqY8E41QQEuCMJhvHmPAQpZRz 7hXUafUY08js1xjh1JmNXXBDUIKor1FrgohOsQP81yLCJO9ZDZ4DtrI7j23yYA4l z/dvGsGtxpK60w18QeD3p3Ow/5HVh/7HWn7I2REyo06k9COpVLSShETbmd1pVtlF hhBh6+0LVIe2mBQ1asxm1KlC4MA7czbWahKki4d/OHXLHkHf3vh9W7IyjQIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFGdQPyamJqJY9CSwqs3kOSbw2dznMB8GA1UdIwQY MBaAFDaS/t9Zxg0yVON6nI7N4RyboSgqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnBMLTMxbkdEVEpVNDNxY2pzM2hISnVoS0NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEt ZTdiZTVlMzBhZDJkLzEvWjFBX0pxWW1vbGowSkxDcXplUTVKdkRaM09jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEtZTdiZTVlMzBhZDJk LzEvTnBMLTMxbkdEVEpVNDNxY2pzM2hISnVoS0NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQAPsnAMAwD BAA+yccDBAE+ycwwDAMEAD7JzwMEAD7J0AMEAD7J7QMEAD7J+DANBgkqhkiG9w0B AQsFAAOCAQEAoA1PNQ98c7adguXdidTFyeYkRAuyzdaywPJ8VLiM0jJeGEgcw5PY KJ75i/EvS9NYtuHm4kVMN6SavTXvLFmgBuQjAJ/1vwpT45zP8CxaQIQtKUQJI/sK Q4sMVMHZMqpaxImdZXPmUEl3fbIQIXi2kJKav0XqNqYHZzOc1cLf0z6bd8IoTFrZ iYc10jhTyeDn+mTRssqfWlGmfEg2QIuWlZKpYC5Qtka7HpsTYnSZrVHeO9WbrZZ6 6x5KPGOpBX/NO8N/EPT8G9O8h0zob8y/fge7NPXUkvHnav3iY8mTFYTbJHBcsTgc JjGiHtdvVizwQV+kPfWg5hOL6QO5+l2wyQ== -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:46 2026 by rpki-client