This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/Zxga6O5B6uWj5ovSd6ojGTRvTQk.roa File: Zxga6O5B6uWj5ovSd6ojGTRvTQk.roa (raw, json) Hash identifier: B5IjyWOTGquDtIk33USdJO3jmFl66T5rjOlw+iwqVn8= Subject key identifier: 67:18:1A:E8:EE:41:EA:E5:A3:E6:8B:D2:77:AA:23:19:34:6F:4D:09 Certificate issuer: /CN=197fc930e4aa59b0303459f755698e8f998f471e Certificate serial: 019B7F8445C2EAEE368CB71442B4E8BFCE82 Authority key identifier: 19:7F:C9:30:E4:AA:59:B0:30:34:59:F7:55:69:8E:8F:99:8F:47:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/Zxga6O5B6uWj5ovSd6ojGTRvTQk.roa Signing time: Fri 02 Jan 2026 16:22:13 +0000 ROA not before: Fri 02 Jan 2026 16:22:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 138.200.0.0/20 maxlen: 24 138.200.0.0/21 maxlen: 21 138.200.8.0/22 maxlen: 22 138.200.12.0/23 maxlen: 23 138.200.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:45:c2:ea:ee:36:8c:b7:14:42:b4:e8:bf:ce:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=197fc930e4aa59b0303459f755698e8f998f471e Validity Not Before: Jan 2 16:22:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67181ae8ee41eae5a3e68bd277aa2319346f4d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5f:af:34:c5:49:e6:7d:d7:52:cb:88:57:40: 0a:f0:d3:f6:df:8a:9f:56:41:f3:d0:51:e5:40:db: 35:3e:b1:10:36:d2:29:1d:19:06:17:11:a7:95:f6: c8:a9:cd:39:45:74:95:91:ee:7c:e8:48:7d:31:98: 84:0b:78:a0:25:4a:43:ee:08:15:1c:60:6e:cd:62: fe:e9:93:0c:e1:8a:23:69:33:74:c7:85:fd:19:a8: 62:64:49:46:8f:ae:12:e5:49:f2:7c:22:75:be:81: 12:3c:6b:3f:e5:7f:d1:98:43:ca:48:57:3e:36:1e: c2:6c:e5:49:9e:f7:2f:db:d5:85:3c:f4:06:21:1d: c8:17:74:1e:2d:75:64:a0:e3:81:d8:21:c8:01:38: 5b:d5:d1:9b:12:0a:23:27:24:00:8b:a4:58:3e:37: 53:de:ec:a4:af:4b:38:c8:0f:59:05:6e:45:5d:ec: 51:98:9e:aa:c7:14:c1:0c:34:b9:80:3f:f2:06:36: 73:51:e6:c5:c7:79:4c:4a:cd:6a:c4:6c:9f:35:cc: 87:9e:24:4e:a0:d4:8e:eb:6a:4a:3c:43:f0:6a:dd: ca:1c:62:20:3b:77:58:a5:96:a9:d0:5a:f6:83:6c: 58:dc:db:06:fe:d7:1f:49:80:a0:84:70:66:03:ad: aa:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:18:1A:E8:EE:41:EA:E5:A3:E6:8B:D2:77:AA:23:19:34:6F:4D:09 X509v3 Authority Key Identifier: keyid:19:7F:C9:30:E4:AA:59:B0:30:34:59:F7:55:69:8E:8F:99:8F:47:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/Zxga6O5B6uWj5ovSd6ojGTRvTQk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.200.0.0/20 Signature Algorithm: sha256WithRSAEncryption bb:7e:fd:58:d6:99:70:cc:3f:2e:43:c5:48:ed:21:64:ee:4e: d5:60:99:d3:5b:af:32:0c:72:fb:8d:c2:29:53:be:22:de:38: 6a:04:d5:5d:2f:17:bb:8a:6c:fd:68:8c:4d:07:bf:74:3a:6d: 19:25:e7:46:91:3e:a9:c6:79:11:26:a4:be:22:2f:21:c4:77: 04:07:56:e9:53:3e:e4:41:6a:e7:7a:d2:e6:b9:9d:f0:8f:a1: 23:16:1a:bb:df:60:23:e3:1d:2a:9f:29:af:1f:28:f3:1f:1f: 93:76:32:94:61:af:6e:55:bc:88:d8:c0:4d:88:b5:cd:19:85: 4f:1d:f8:04:65:c6:8e:a4:7b:4d:ce:c9:8e:cf:9d:1e:69:f7: 43:01:73:93:5e:06:de:d0:6f:49:4d:48:35:36:6a:0b:a8:32: 37:1f:e0:17:53:ed:6f:26:5b:e6:16:91:bb:65:ae:b7:74:8f: a6:ae:fd:2e:41:87:20:19:95:6f:44:02:31:1b:f0:70:19:57: 79:01:0e:19:84:8e:40:42:ef:e5:b1:f5:eb:6c:eb:9d:91:e0: 53:c6:c9:4c:63:ac:70:ad:19:31:e3:b3:a2:35:c1:53:b4:84: f9:2d:08:fc:02:97:4f:7a:42:70:f3:c4:b7:64:88:9c:b4:2e: db:75:94:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hEXC6u42jLcUQrTov86CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5N2ZjOTMwZTRhYTU5YjAzMDM0NTlmNzU1Njk4ZThmOTk4 ZjQ3MWUwHhcNMjYwMTAyMTYyMjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzE4MWFlOGVlNDFlYWU1YTNlNjhiZDI3N2FhMjMxOTM0NmY0ZDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2F+vNMVJ5n3XUsuIV0AK8NP234qf VkHz0FHlQNs1PrEQNtIpHRkGFxGnlfbIqc05RXSVke586Eh9MZiEC3igJUpD7ggV HGBuzWL+6ZMM4YojaTN0x4X9GahiZElGj64S5UnyfCJ1voESPGs/5X/RmEPKSFc+ Nh7CbOVJnvcv29WFPPQGIR3IF3QeLXVkoOOB2CHIAThb1dGbEgojJyQAi6RYPjdT 3uykr0s4yA9ZBW5FXexRmJ6qxxTBDDS5gD/yBjZzUebFx3lMSs1qxGyfNcyHniRO oNSO62pKPEPwat3KHGIgO3dYpZap0Fr2g2xY3NsG/tcfSYCghHBmA62qGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGcYGujuQerlo+aL0neqIxk0b00JMB8GA1UdIwQY MBaAFBl/yTDkqlmwMDRZ91Vpjo+Zj0ceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1hfSk1PU3FXYkF3TkZuM1ZXbU9qNW1QUng0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yZWEwZTktMjdmNy00ZDcxLWE5MDAt MjdiZTA5MTE4YzYxLzEvWnhnYTZPNUI2dVdqNW92U2Q2b2pHVFJ2VFFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yZWEwZTktMjdmNy00ZDcxLWE5MDAtMjdiZTA5MTE4YzYx LzEvR1hfSk1PU3FXYkF3TkZuM1ZXbU9qNW1QUng0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEisgAMA0G CSqGSIb3DQEBCwUAA4IBAQC7fv1Y1plwzD8uQ8VI7SFk7k7VYJnTW68yDHL7jcIp U74i3jhqBNVdLxe7imz9aIxNB790Om0ZJedGkT6pxnkRJqS+Ii8hxHcEB1bpUz7k QWrnetLmuZ3wj6EjFhq732Aj4x0qnymvHyjzHx+TdjKUYa9uVbyI2MBNiLXNGYVP HfgEZcaOpHtNzsmOz50eafdDAXOTXgbe0G9JTUg1NmoLqDI3H+AXU+1vJlvmFpG7 Za63dI+mrv0uQYcgGZVvRAIxG/BwGVd5AQ4ZhI5AQu/lsfXrbOudkeBTxslMY6xw rRkx47OiNcFTtIT5LQj8ApdPekJw88S3ZIictC7bdZRS -----END CERTIFICATE-----Generated at Sat Jan 3 04:59:30 2026 by rpki-client