This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/cZMZxMlWQ6IQod_2YSUy5v3mzKE.roa File: cZMZxMlWQ6IQod_2YSUy5v3mzKE.roa (raw, json) Hash identifier: 9SXryy4N+Me7/A7WtiV52N8BQ+YE/cR/4zGVs9tc7u4= Subject key identifier: 71:93:19:C4:C9:56:43:A2:10:A1:DF:F6:61:25:32:E6:FD:E6:CC:A1 Certificate issuer: /CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1 Certificate serial: 019B79ED04C74C1E2BE801BB199989823126 Authority key identifier: 20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/cZMZxMlWQ6IQod_2YSUy5v3mzKE.roa Signing time: Thu 01 Jan 2026 14:18:54 +0000 ROA not before: Thu 01 Jan 2026 14:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213479 IP address blocks: 62.113.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:04:c7:4c:1e:2b:e8:01:bb:19:99:89:82:31:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1 Validity Not Before: Jan 1 14:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=719319c4c95643a210a1dff6612532e6fde6cca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:87:52:dd:2e:c0:13:b3:12:9f:82:50:9a:2f: 5f:2e:57:47:83:72:11:19:b6:da:b2:96:11:0f:4a: 1f:b6:34:60:16:42:26:55:6a:bb:49:81:b9:7d:e0: 5a:dd:b5:c1:d5:48:c4:a9:82:f9:22:36:ed:f6:79: 66:02:1c:05:69:b2:9b:5b:91:b5:0e:64:f0:bf:40: d8:cb:e9:d3:5b:23:4f:49:9b:e1:85:c1:4a:03:e3: f3:a9:e2:ba:18:12:bc:98:92:95:99:43:51:4c:5e: 18:f1:a7:ca:fd:f0:a1:96:75:16:71:b4:bd:1b:68: 2f:9d:f0:30:4e:58:3b:70:b4:c0:41:6c:99:8d:d4: 49:1b:78:47:06:91:d6:62:7a:70:42:ad:dd:e3:06: fe:fa:ac:d9:20:39:95:a2:92:0f:27:45:34:bb:ac: 44:8b:da:09:bb:af:fc:85:a4:87:1a:78:be:6c:71: 0e:c2:7b:2e:fd:ae:ca:b1:21:1e:85:b5:d9:f8:1c: e7:b4:24:0c:60:7a:dd:fc:af:3a:14:5a:37:0d:cc: 3c:3c:f7:e4:1c:31:48:b9:14:f1:ff:f9:08:5a:62: 91:33:ff:82:11:d6:92:eb:99:b7:f8:58:22:e5:f2: fe:c7:7f:e3:21:fe:4d:f2:45:33:43:d7:5e:51:36: 2b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:93:19:C4:C9:56:43:A2:10:A1:DF:F6:61:25:32:E6:FD:E6:CC:A1 X509v3 Authority Key Identifier: keyid:20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/cZMZxMlWQ6IQod_2YSUy5v3mzKE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.113.58.0/24 Signature Algorithm: sha256WithRSAEncryption b1:14:a0:09:ef:61:f1:85:96:5b:63:41:af:9c:cc:f0:fa:fb: a1:8b:e1:61:e2:65:58:b8:a0:ef:b4:98:15:6d:6d:ca:13:5a: 1e:c4:a2:c4:ec:b4:5a:21:46:ee:a2:e5:ec:d7:72:91:14:2b: 73:f3:b2:ce:5b:7b:cc:5b:f9:e3:69:34:43:77:38:cc:fb:bf: 31:9b:43:6e:f6:54:0e:42:cc:9c:d3:27:af:8e:0b:07:a4:62: 0b:ce:e5:fa:8c:72:2f:cc:57:eb:5d:51:76:81:6f:ce:ba:bf: 63:e1:42:43:16:3e:a7:82:a2:7e:f9:00:ca:3d:e8:0a:35:cf: e9:87:0c:73:a7:ca:55:33:b2:3f:a7:6d:c2:c7:1c:81:aa:e9: 4b:75:5c:a9:bb:12:b7:45:b5:62:45:67:34:a2:f4:76:2c:77: f7:05:af:70:65:34:c4:95:21:0a:9d:6f:8e:cb:e5:23:2a:d4: 42:63:41:8c:f8:8c:fb:2a:89:4b:aa:c5:4d:b5:d3:fc:f1:bb: 41:05:e7:ce:bb:09:9c:78:57:a9:89:c3:d4:1c:15:87:18:7f: 21:72:48:65:56:1b:c0:1e:75:19:29:6a:57:8a:8e:dd:cb:44: 55:d0:d4:ab:ee:98:a7:89:da:55:05:f4:03:46:8c:4a:4d:d6: 00:b0:34:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57QTHTB4r6AG7GZmJgjEmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwY2EyZDRjYjNlNTZiNWQyOTk3MGE5N2ZjNjQ1ZWIyZmQ2 ODc2YTEwHhcNMjYwMTAxMTQxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTkzMTljNGM5NTY0M2EyMTBhMWRmZjY2MTI1MzJlNmZkZTZjY2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmodS3S7AE7MSn4JQmi9fLldHg3IR GbbaspYRD0oftjRgFkImVWq7SYG5feBa3bXB1UjEqYL5Ijbt9nlmAhwFabKbW5G1 DmTwv0DYy+nTWyNPSZvhhcFKA+PzqeK6GBK8mJKVmUNRTF4Y8afK/fChlnUWcbS9 G2gvnfAwTlg7cLTAQWyZjdRJG3hHBpHWYnpwQq3d4wb++qzZIDmVopIPJ0U0u6xE i9oJu6/8haSHGni+bHEOwnsu/a7KsSEehbXZ+BzntCQMYHrd/K86FFo3Dcw8PPfk HDFIuRTx//kIWmKRM/+CEdaS65m3+Fgi5fL+x3/jIf5N8kUzQ9deUTYrAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHGTGcTJVkOiEKHf9mElMub95syhMB8GA1UdIwQY MBaAFCDKLUyz5WtdKZcKl/xkXrL9aHahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yYzI4MTctMzcwMS00NzgzLThmYmQt ZWVjNDg4NWM0ZjhkLzEvY1pNWnhNbFdRNklRb2RfMllTVXk1djNtektFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8yYzI4MTctMzcwMS00NzgzLThmYmQtZWVjNDg4NWM0Zjhk LzEvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPnE6MA0G CSqGSIb3DQEBCwUAA4IBAQCxFKAJ72HxhZZbY0GvnMzw+vuhi+Fh4mVYuKDvtJgV bW3KE1oexKLE7LRaIUbuouXs13KRFCtz87LOW3vMW/njaTRDdzjM+78xm0Nu9lQO Qsyc0yevjgsHpGILzuX6jHIvzFfrXVF2gW/Our9j4UJDFj6ngqJ++QDKPegKNc/p hwxzp8pVM7I/p23CxxyBqulLdVypuxK3RbViRWc0ovR2LHf3Ba9wZTTElSEKnW+O y+UjKtRCY0GM+Iz7KolLqsVNtdP88btBBefOuwmceFepicPUHBWHGH8hckhlVhvA HnUZKWpXio7dy0RV0NSr7pinidpVBfQDRoxKTdYAsDT0 -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:31 2026 by rpki-client