This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/ZyCMXfbtNuXumIzCS12JtYABWa8.roa
File: ZyCMXfbtNuXumIzCS12JtYABWa8.roa (raw, json)
Hash identifier: FCS7VDdR2sOQaENYtuEq5+AVcoh+zteoO7fT7vMr+Ek=
Subject key identifier: 67:20:8C:5D:F6:ED:36:E5:EE:98:8C:C2:4B:5D:89:B5:80:01:59:AF
Certificate issuer: /CN=2c9e49962073f9efb66a4b303506da6341567450
Certificate serial: 019B7B358C75523112E1BD4266F51F1B758E
Authority key identifier: 2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/ZyCMXfbtNuXumIzCS12JtYABWa8.roa
Signing time: Thu 01 Jan 2026 20:17:45 +0000
ROA not before: Thu 01 Jan 2026 20:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213425
IP address blocks: 195.200.69.0/24 maxlen: 24
2a14:8180::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:8c:75:52:31:12:e1:bd:42:66:f5:1f:1b:75:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9e49962073f9efb66a4b303506da6341567450
Validity
Not Before: Jan 1 20:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67208c5df6ed36e5ee988cc24b5d89b5800159af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:87:e7:93:69:55:e0:29:94:e8:2f:e3:01:35:
91:05:2b:df:54:ff:03:75:97:5e:24:a7:60:39:9b:
a3:ae:23:7d:8b:c6:5d:1a:1d:7a:5d:2c:5c:f9:03:
c8:f5:35:73:fc:7c:f7:40:72:90:b9:45:64:9f:31:
40:4a:d5:c8:3a:ed:67:e0:0b:c1:c4:14:ad:35:4a:
bd:ad:f5:a7:5e:6b:fc:68:3d:37:8a:02:6c:9d:70:
59:e1:85:a2:e1:39:f2:45:c7:fb:7a:1c:f9:77:e1:
ab:69:c3:be:47:05:33:39:8d:2e:05:7f:e2:22:c5:
1c:86:2c:f9:9a:4f:7a:45:a2:69:4e:8a:72:53:df:
dd:e0:87:2d:20:bd:fe:13:41:82:e3:85:8d:c4:3f:
1e:6a:09:72:02:e7:57:b9:9c:b2:c4:48:cc:4e:d9:
a4:44:b1:75:87:ce:6e:5f:25:ef:73:03:6e:6e:ef:
97:36:f3:c8:15:d0:09:79:01:c0:e0:15:92:ad:ef:
6d:47:f4:6f:df:b3:e1:f0:5b:d3:bc:22:98:41:51:
dc:19:23:a4:a3:8c:a3:49:40:aa:fe:f5:f5:56:0a:
69:5c:9f:26:4a:f3:75:2f:bc:7c:6c:6b:78:94:9a:
de:2d:e7:2e:4e:ff:72:d5:ac:67:af:bc:24:25:5f:
62:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:20:8C:5D:F6:ED:36:E5:EE:98:8C:C2:4B:5D:89:B5:80:01:59:AF
X509v3 Authority Key Identifier:
keyid:2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/ZyCMXfbtNuXumIzCS12JtYABWa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.69.0/24
IPv6:
2a14:8180::/29
Signature Algorithm: sha256WithRSAEncryption
35:4a:2e:8d:9a:6b:3f:92:16:f1:bc:e9:f3:62:89:a1:27:7b:
6f:99:61:3f:be:bf:49:7c:fa:fc:54:8a:9c:cd:c0:95:3f:20:
d2:a3:a9:d3:3f:1b:db:0b:97:7a:06:6d:c6:26:e1:9f:53:f7:
6f:dc:1c:f1:8b:15:f8:4e:39:50:19:77:58:65:26:5e:95:01:
30:7b:5b:2a:de:79:b0:cd:5b:b8:bc:5d:2b:6e:30:bd:a1:8f:
22:9a:35:41:21:37:93:fc:62:84:0d:ea:81:e8:2a:a6:d0:64:
28:86:ff:27:b7:ff:e9:95:63:81:a9:77:8c:b8:2f:28:69:09:
90:8b:af:b4:41:db:03:8d:c3:fd:f8:d9:54:d9:83:c9:b4:e8:
07:86:1b:eb:f0:7c:47:b4:c4:68:f3:91:93:8d:d1:67:c6:db:
af:94:1a:a0:63:dd:f5:6d:7a:b1:a9:ee:2a:37:95:2a:5b:b1:
83:15:e8:c2:a1:a4:4d:fe:8e:15:b6:d1:ce:17:c9:ab:ef:ee:
8e:dd:8e:c4:ec:28:10:f1:d9:7a:93:e0:14:cb:ee:fb:5b:02:
80:13:24:f9:c6:de:f1:90:d9:a5:4f:61:00:df:6a:0c:5f:0f:
f1:ef:f5:a3:55:84:b3:42:75:da:0f:9d:ab:47:55:c8:e0:c6:
cb:56:c4:35
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZt7NYx1UjES4b1CZvUfG3WOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjOWU0OTk2MjA3M2Y5ZWZiNjZhNGIzMDM1MDZkYTYzNDE1
Njc0NTAwHhcNMjYwMTAxMjAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzIwOGM1ZGY2ZWQzNmU1ZWU5ODhjYzI0YjVkODliNTgwMDE1OWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4fnk2lV4CmU6C/jATWRBSvfVP8D
dZdeJKdgOZujriN9i8ZdGh16XSxc+QPI9TVz/Hz3QHKQuUVknzFAStXIOu1n4AvB
xBStNUq9rfWnXmv8aD03igJsnXBZ4YWi4TnyRcf7ehz5d+GracO+RwUzOY0uBX/i
IsUchiz5mk96RaJpTopyU9/d4IctIL3+E0GC44WNxD8eaglyAudXuZyyxEjMTtmk
RLF1h85uXyXvcwNubu+XNvPIFdAJeQHA4BWSre9tR/Rv37Ph8FvTvCKYQVHcGSOk
o4yjSUCq/vX1VgppXJ8mSvN1L7x8bGt4lJreLecuTv9y1axnr7wkJV9ivwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGcgjF327Tbl7piMwktdibWAAVmvMB8GA1UdIwQY
MBaAFCyeSZYgc/nvtmpLMDUG2mNBVnRQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEo1SmxpQnotZS0yYWtzd05RYmFZMEZXZEZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi83NzY1NTItZTBjMi00YjdjLTk4OTEt
MjFjZDI5MGMwM2YzLzEvWnlDTVhmYnROdVh1bUl6Q1MxMkp0WUFCV2E4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi83NzY1NTItZTBjMi00YjdjLTk4OTEtMjFjZDI5MGMwM2Yz
LzEvTEo1SmxpQnotZS0yYWtzd05RYmFZMEZXZEZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAw8hFMA0E
AgACMAcDBQMqFIGAMA0GCSqGSIb3DQEBCwUAA4IBAQA1Si6Nmms/khbxvOnzYomh
J3tvmWE/vr9JfPr8VIqczcCVPyDSo6nTPxvbC5d6Bm3GJuGfU/dv3BzxixX4TjlQ
GXdYZSZelQEwe1sq3nmwzVu4vF0rbjC9oY8imjVBITeT/GKEDeqB6Cqm0GQohv8n
t//plWOBqXeMuC8oaQmQi6+0QdsDjcP9+NlU2YPJtOgHhhvr8HxHtMRo85GTjdFn
xtuvlBqgY931bXqxqe4qN5UqW7GDFejCoaRN/o4VttHOF8mr7+6O3Y7E7CgQ8dl6
k+AUy+77WwKAEyT5xt7xkNmlT2EA32oMXw/x7/WjVYSzQnXaD52rR1XI4MbLVsQ1
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:54:48 2026 by rpki-client