This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/ZtZBjU0WYLzqgNFkzWWLjKRWDe4.roa File: ZtZBjU0WYLzqgNFkzWWLjKRWDe4.roa (raw, json) Hash identifier: Aa1FwsDclr77KnL36PHDkQS2BvAV7tYr/XQOCzDjAzU= Subject key identifier: 66:D6:41:8D:4D:16:60:BC:EA:80:D1:64:CD:65:8B:8C:A4:56:0D:EE Certificate issuer: /CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8 Certificate serial: 019B79EC360082DAB2C99829A954719D997A Authority key identifier: 56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/ZtZBjU0WYLzqgNFkzWWLjKRWDe4.roa Signing time: Thu 01 Jan 2026 14:18:01 +0000 ROA not before: Thu 01 Jan 2026 14:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 31.210.62.0/23 maxlen: 24 78.135.112.0/24 maxlen: 24 95.214.72.0/22 maxlen: 22 212.68.47.0/24 maxlen: 24 2a09:da80::/29 maxlen: 29 2a09:da80::/32 maxlen: 48 2a09:da81::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:36:00:82:da:b2:c9:98:29:a9:54:71:9d:99:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8 Validity Not Before: Jan 1 14:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66d6418d4d1660bcea80d164cd658b8ca4560dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bf:41:1c:eb:b4:36:e8:63:11:69:85:cc:48: 5d:b8:f3:5a:35:66:9e:e2:29:3a:9f:be:4a:e2:d0: c8:d5:71:88:a3:39:25:5c:23:e8:da:cc:68:75:31: 75:51:3f:b5:eb:35:69:4b:98:7e:eb:2f:5d:68:c2: c2:f5:31:cf:68:9c:fb:15:f5:8e:9c:da:a0:93:e5: 96:56:f2:03:aa:0d:40:db:d8:63:6a:04:22:a9:45: e2:e6:4b:a7:1f:59:10:ef:c2:b8:3a:16:53:11:d6: 39:e8:de:81:1e:a7:f0:ec:c7:ba:a4:57:b5:85:e6: f7:65:b2:02:39:9b:06:b0:84:7c:04:a6:6b:73:81: 40:b6:ee:64:b4:68:4f:06:67:df:04:f2:60:c5:d0: 8c:02:89:79:48:5c:a7:9e:29:28:70:2f:50:41:cf: f5:dc:65:01:11:f0:07:77:c7:62:97:ff:3b:04:54: c5:52:88:41:af:8f:0e:24:18:2e:ca:e5:c1:41:3f: 3b:ec:ed:d8:b6:80:fa:3c:df:f6:c1:19:33:5e:4d: 6a:df:1b:54:7c:3f:97:7a:9e:7a:ea:a2:1c:04:3f: ba:99:26:58:5a:b3:77:0d:d9:1d:78:f0:cc:04:42: 53:93:7a:7c:43:c6:30:de:6e:63:7b:0a:d8:c5:97: 4d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D6:41:8D:4D:16:60:BC:EA:80:D1:64:CD:65:8B:8C:A4:56:0D:EE X509v3 Authority Key Identifier: keyid:56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/ZtZBjU0WYLzqgNFkzWWLjKRWDe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.62.0/23 78.135.112.0/24 95.214.72.0/22 212.68.47.0/24 IPv6: 2a09:da80::/29 Signature Algorithm: sha256WithRSAEncryption 88:1f:37:95:95:03:8e:d5:42:2c:d5:ad:da:97:d8:c7:8d:13: 6b:8e:4d:a9:73:77:3d:56:6d:23:6c:57:6d:16:0f:99:33:7d: 3c:2b:54:c4:07:cf:2d:87:fb:d3:1b:70:7e:14:f4:37:23:cd: da:c2:74:3e:90:17:dd:ac:75:72:bd:d6:fd:74:57:e3:61:26: 68:17:09:72:84:7f:73:e2:35:3d:56:4f:c9:b6:2a:44:55:43: 7b:5a:ed:89:17:e6:0f:ac:23:18:28:ad:7d:d4:f4:47:91:09: 77:1f:ee:71:8e:90:2e:8d:92:2f:5c:da:3d:19:40:fe:91:2a: e5:53:5a:d8:fb:45:62:f6:74:ee:f3:6f:4f:c4:e0:1e:0c:02: b1:61:1c:0d:5b:0a:c4:c7:95:32:1f:cd:b2:28:7d:1f:0f:62: 5e:fa:88:81:fd:4c:bc:ab:19:0f:1d:bb:50:ac:7f:d6:f5:19: 10:2e:5d:3c:b2:4d:41:75:f2:f9:2a:6f:08:30:06:ad:5a:d6: f7:a6:78:6e:56:d9:39:f4:af:30:80:be:1d:d9:04:a5:98:98: 2a:de:23:b3:95:08:ec:2f:58:fe:57:38:ea:50:bb:74:29:87: 96:24:a9:05:59:95:7e:7c:26:cf:f2:f6:c4:7f:57:65:2d:8a: a1:b9:99:c7 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt57DYAgtqyyZgpqVRxnZl6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NzNmYTY4NDI5NzNlZGY2MmQ1NzliNGVmZWMyZmE2NGZk YmY4YzgwHhcNMjYwMTAxMTQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmQ2NDE4ZDRkMTY2MGJjZWE4MGQxNjRjZDY1OGI4Y2E0NTYwZGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL9BHOu0NuhjEWmFzEhduPNaNWae 4ik6n75K4tDI1XGIozklXCPo2sxodTF1UT+16zVpS5h+6y9daMLC9THPaJz7FfWO nNqgk+WWVvIDqg1A29hjagQiqUXi5kunH1kQ78K4OhZTEdY56N6BHqfw7Me6pFe1 heb3ZbICOZsGsIR8BKZrc4FAtu5ktGhPBmffBPJgxdCMAol5SFynnikocC9QQc/1 3GUBEfAHd8dil/87BFTFUohBr48OJBguyuXBQT877O3YtoD6PN/2wRkzXk1q3xtU fD+Xep566qIcBD+6mSZYWrN3DdkdePDMBEJTk3p8Q8Yw3m5jewrYxZdNRQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFGbWQY1NFmC86oDRZM1li4ykVg3uMB8GA1UdIwQY MBaAFFZz+mhClz7fYtV5tO/sL6ZP2/jIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm5QNmFFS1hQdDlpMVhtMDctd3Zwa19iLU1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83OGU1ZWItYzJhZi00NDYyLWI4NTkt ODk4OTk2Yzg2MWRmLzEvWnRaQmpVMFdZTHpxZ05Ga3pXV0xqS1JXRGU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83OGU1ZWItYzJhZi00NDYyLWI4NTktODk4OTk2Yzg2MWRm LzEvVm5QNmFFS1hQdDlpMVhtMDctd3Zwa19iLU1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBH9I+AwQA TodwAwQCX9ZIAwQA1EQvMA0EAgACMAcDBQMqCdqAMA0GCSqGSIb3DQEBCwUAA4IB AQCIHzeVlQOO1UIs1a3al9jHjRNrjk2pc3c9Vm0jbFdtFg+ZM308K1TEB88th/vT G3B+FPQ3I83awnQ+kBfdrHVyvdb9dFfjYSZoFwlyhH9z4jU9Vk/JtipEVUN7Wu2J F+YPrCMYKK191PRHkQl3H+5xjpAujZIvXNo9GUD+kSrlU1rY+0Vi9nTu829PxOAe DAKxYRwNWwrEx5UyH82yKH0fD2Je+oiB/Uy8qxkPHbtQrH/W9RkQLl08sk1BdfL5 Km8IMAatWtb3pnhuVtk59K8wgL4d2QSlmJgq3iOzlQjsL1j+VzjqULt0KYeWJKkF WZV+fCbP8vbEf1dlLYqhuZnH -----END CERTIFICATE-----Generated at Sat Jan 3 04:53:47 2026 by rpki-client