This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/zIYwuiuPmXeYqbFS9sD_rJHrTkk.roa File: zIYwuiuPmXeYqbFS9sD_rJHrTkk.roa (raw, json) Hash identifier: t6ZPIONZvfwNb5c7MxCgF8BbJhuy71Cr69Wqi2Mmcqk= Subject key identifier: CC:86:30:BA:2B:8F:99:77:98:A9:B1:52:F6:C0:FF:AC:91:EB:4E:49 Certificate issuer: /CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b Certificate serial: 019B7B353CDC77EC2B47E3552BAA8C4F6285 Authority key identifier: C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/zIYwuiuPmXeYqbFS9sD_rJHrTkk.roa Signing time: Thu 01 Jan 2026 20:17:25 +0000 ROA not before: Thu 01 Jan 2026 20:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198594 IP address blocks: 37.60.24.0/21 maxlen: 24 37.60.26.0/24 maxlen: 24 37.60.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:3c:dc:77:ec:2b:47:e3:55:2b:aa:8c:4f:62:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b Validity Not Before: Jan 1 20:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc8630ba2b8f997798a9b152f6c0ffac91eb4e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f1:a3:43:3b:e2:7f:71:6e:6d:43:6d:66:db: f0:42:e4:7f:fa:50:79:30:7a:44:e4:e5:8e:5c:37: 05:2d:20:ee:de:27:49:b0:09:eb:61:da:9a:b9:c8: 3c:27:29:ed:14:98:4b:f3:a1:28:36:98:e9:c2:f0: aa:a8:c9:82:f7:ee:3d:38:10:f1:93:60:98:7d:ae: 5b:fd:01:77:f3:82:38:a7:f7:c6:4a:dd:99:e3:ab: 2a:ed:3e:cf:05:ad:d3:64:8e:91:c8:9c:a9:97:2d: 91:1d:89:70:09:d4:d3:14:6d:4c:0e:26:34:3f:ef: b7:69:61:59:8d:b8:89:87:36:ea:47:ee:9a:45:82: 4f:86:80:37:3b:6b:41:4b:b5:82:64:51:be:0d:e8: 90:9a:c6:0d:c2:b2:de:06:c6:58:c6:69:3d:28:ed: ab:a4:4c:f4:3d:4b:06:f0:26:13:49:8b:96:90:87: a8:7c:ac:a8:e6:0a:71:bb:5e:3d:78:bd:04:af:5c: ef:51:b2:60:73:2c:b0:af:e5:16:6a:c7:19:98:6d: 6e:d8:36:70:46:e2:53:a7:0d:79:04:2a:d5:11:5e: 71:12:21:bd:74:69:d5:d5:e0:cc:b9:a7:5d:bb:17: 65:90:5e:31:3f:53:fb:b2:34:18:70:25:3f:cb:42: c0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:86:30:BA:2B:8F:99:77:98:A9:B1:52:F6:C0:FF:AC:91:EB:4E:49 X509v3 Authority Key Identifier: keyid:C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/zIYwuiuPmXeYqbFS9sD_rJHrTkk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.60.24.0/21 Signature Algorithm: sha256WithRSAEncryption a0:0c:fe:9b:3f:e6:bf:26:b0:c9:fa:1d:9e:5a:79:2f:73:2b: 34:2b:79:52:31:06:b6:57:4a:10:62:7e:bf:bb:66:b5:1e:ee: 99:29:30:8f:ea:1e:99:f3:2b:ca:f5:7d:92:0a:d1:e4:9c:f0: ac:bf:f6:8c:06:3b:82:e6:85:50:2e:46:ef:11:75:23:70:96: 1a:8f:f6:da:3d:ae:df:a9:cc:e1:6b:ff:1c:51:73:6f:7c:de: ee:2a:7c:e0:06:56:74:6f:78:e0:ca:19:fb:2d:db:66:4a:ee: cb:49:55:11:2d:9a:3c:fc:dd:7f:be:62:39:35:21:34:99:b1: 10:65:fb:2b:71:3e:d0:05:23:e1:ec:28:8f:e2:c8:ef:23:8c: fa:26:57:db:10:af:6a:c9:90:39:2f:d0:5f:c5:37:46:ec:27: 6d:e7:50:2f:07:4f:64:6c:5b:c1:fc:c9:ba:56:79:d2:d0:6b: 32:2d:b4:ad:d8:e6:e7:b7:d1:bd:48:fb:a3:da:66:ba:e5:5c: 63:ca:b6:f1:9d:08:81:1a:f0:57:45:ed:90:51:30:fc:84:a0: eb:44:97:5b:be:d6:c7:e6:e4:c1:d9:dc:55:90:53:7c:e3:50: e0:85:55:de:06:37:1e:1b:5d:65:9e:5c:44:fd:a7:52:40:f7: 2e:27:aa:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NTzcd+wrR+NVK6qMT2KFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZThkOTU5ZjFjOTU2NGEzM2YyOGZlNDRhYjYxNGI4ZjYy YjAwMWIwHhcNMjYwMTAxMjAxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzg2MzBiYTJiOGY5OTc3OThhOWIxNTJmNmMwZmZhYzkxZWI0ZTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfGjQzvif3FubUNtZtvwQuR/+lB5 MHpE5OWOXDcFLSDu3idJsAnrYdqaucg8JyntFJhL86EoNpjpwvCqqMmC9+49OBDx k2CYfa5b/QF384I4p/fGSt2Z46sq7T7PBa3TZI6RyJyply2RHYlwCdTTFG1MDiY0 P++3aWFZjbiJhzbqR+6aRYJPhoA3O2tBS7WCZFG+DeiQmsYNwrLeBsZYxmk9KO2r pEz0PUsG8CYTSYuWkIeofKyo5gpxu149eL0Er1zvUbJgcyywr+UWascZmG1u2DZw RuJTpw15BCrVEV5xEiG9dGnV1eDMuadduxdlkF4xP1P7sjQYcCU/y0LAMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMyGMLorj5l3mKmxUvbA/6yR605JMB8GA1UdIwQY MBaAFMfo2VnxyVZKM/KP5Eq2FLj2KwAbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveC1qWldmSEpWa296OG9fa1NyWVV1UFlyQUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yNGUzMjctNzY1OC00NjNjLTg5OTAt YjFjOWI3ODlhYWE5LzEveklZd3VpdVBtWGVZcWJGUzlzRF9ySkhyVGtrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8yNGUzMjctNzY1OC00NjNjLTg5OTAtYjFjOWI3ODlhYWE5 LzEveC1qWldmSEpWa296OG9fa1NyWVV1UFlyQUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJTwYMA0G CSqGSIb3DQEBCwUAA4IBAQCgDP6bP+a/JrDJ+h2eWnkvcys0K3lSMQa2V0oQYn6/ u2a1Hu6ZKTCP6h6Z8yvK9X2SCtHknPCsv/aMBjuC5oVQLkbvEXUjcJYaj/baPa7f qczha/8cUXNvfN7uKnzgBlZ0b3jgyhn7LdtmSu7LSVURLZo8/N1/vmI5NSE0mbEQ ZfsrcT7QBSPh7CiP4sjvI4z6JlfbEK9qyZA5L9BfxTdG7Cdt51AvB09kbFvB/Mm6 VnnS0GsyLbSt2Obnt9G9SPuj2ma65VxjyrbxnQiBGvBXRe2QUTD8hKDrRJdbvtbH 5uTB2dxVkFN841DghVXeBjceG11lnlxE/adSQPcuJ6ol -----END CERTIFICATE-----Generated at Tue Feb 10 03:12:19 2026 by rpki-client