This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/zlCSnRuq7fXaqQjldkiFbWuXQxA.roa File: zlCSnRuq7fXaqQjldkiFbWuXQxA.roa (raw, json) Hash identifier: qa9yNfqriW76nUwB9t/osTdrCLM4tWgEY60WfaKBs+I= Subject key identifier: CE:50:92:9D:1B:AA:ED:F5:DA:A9:08:E5:76:48:85:6D:6B:97:43:10 Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Certificate serial: 019B797F0949E096BD42EEAF68EF47A50A59 Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/zlCSnRuq7fXaqQjldkiFbWuXQxA.roa Signing time: Thu 01 Jan 2026 12:18:47 +0000 ROA not before: Thu 01 Jan 2026 12:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 162.12.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:09:49:e0:96:bd:42:ee:af:68:ef:47:a5:0a:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Validity Not Before: Jan 1 12:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce50929d1baaedf5daa908e57648856d6b974310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:68:fe:c5:c4:3e:ff:ac:a5:0b:f0:af:2e:18: 9b:68:83:72:31:a6:62:90:68:2f:98:f2:1a:e1:3c: c1:3a:ba:32:fe:6d:3b:64:0a:a2:32:70:a6:61:f7: f0:ca:9b:ff:2f:03:90:96:e7:b2:be:83:ca:0d:b5: a3:f5:04:df:51:c0:81:dd:b2:e2:d0:0e:71:95:59: 9b:3c:55:a8:f2:a9:fe:21:22:36:72:15:ac:11:0c: fd:f2:1e:a6:e0:ce:27:73:a2:af:08:47:a5:71:92: 37:5c:f6:29:1c:a1:fc:3a:82:ce:c5:3c:50:c1:2d: 8e:19:42:49:80:ab:6a:47:6e:24:42:21:e2:65:a7: da:f5:13:d1:7a:bf:db:06:ce:2a:7e:76:fe:29:04: 0f:cd:f9:e5:f0:db:d6:0c:69:cd:fd:e1:ff:5e:f2: 13:71:f3:d4:d7:1e:8c:3b:63:74:63:d0:4d:6d:13: 21:67:48:73:55:f6:88:f3:24:1f:55:ee:b5:88:04: 1e:14:e6:23:15:49:ba:d2:11:6f:ad:5a:88:da:25: b6:dd:7e:36:0a:73:21:ff:23:53:b2:60:51:df:29: 29:46:e8:6a:0a:fd:c6:1d:63:97:99:9d:e7:fc:d4: df:c9:34:f2:18:8d:f6:62:0a:71:8d:87:23:3b:66: de:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:50:92:9D:1B:AA:ED:F5:DA:A9:08:E5:76:48:85:6D:6B:97:43:10 X509v3 Authority Key Identifier: keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/zlCSnRuq7fXaqQjldkiFbWuXQxA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.12.204.0/24 Signature Algorithm: sha256WithRSAEncryption 06:4c:be:a0:d4:bd:4a:37:dd:f1:0d:d0:52:5e:bd:a7:e6:52: 3c:9c:2e:52:d5:4d:81:bd:05:e7:98:4e:70:88:71:43:3c:1e: 29:8a:46:9a:5d:db:0f:45:c7:13:7e:55:ff:2c:ff:c2:37:70: 7d:cb:48:f8:78:c1:ab:a7:23:fa:68:ce:c9:38:96:a6:58:96: f9:25:6a:09:b8:06:f1:b8:0c:fc:39:02:67:24:d0:15:80:18: 82:68:e5:b9:7a:0a:22:c8:55:fc:a9:d7:a6:41:72:36:18:94: 06:ab:45:21:17:d3:9d:0d:79:dd:01:8c:c4:61:3e:b3:32:b1: 3e:af:88:59:11:25:86:ca:9b:7d:60:11:a4:81:a1:1d:44:52: 34:9e:26:e1:fb:85:96:a7:60:a6:3b:70:40:7e:26:56:aa:cc: be:c6:f1:fb:c8:fb:51:ec:db:85:69:d6:ee:e5:f1:7e:26:6c: 16:8b:a4:0a:bc:c0:35:3a:1a:d9:f8:3c:ea:11:07:02:f5:c0: 73:57:f3:a6:f9:63:7c:d5:b3:49:40:59:05:05:f2:03:20:7f: 63:80:90:17:82:1f:b1:3f:37:f8:56:ab:3f:08:08:71:7e:7f: ac:59:60:b7:dc:fb:d3:d9:25:d9:c1:8a:8f:73:82:62:07:1c: 40:05:3b:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fwlJ4Ja9Qu6vaO9HpQpZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNGZlZmZiNTc2ZTQxMWRlNTExODcxZGMxZTBiZDdhMjBl MmM0ZDcwHhcNMjYwMTAxMTIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTUwOTI5ZDFiYWFlZGY1ZGFhOTA4ZTU3NjQ4ODU2ZDZiOTc0MzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2j+xcQ+/6ylC/CvLhibaINyMaZi kGgvmPIa4TzBOroy/m07ZAqiMnCmYffwypv/LwOQlueyvoPKDbWj9QTfUcCB3bLi 0A5xlVmbPFWo8qn+ISI2chWsEQz98h6m4M4nc6KvCEelcZI3XPYpHKH8OoLOxTxQ wS2OGUJJgKtqR24kQiHiZafa9RPRer/bBs4qfnb+KQQPzfnl8NvWDGnN/eH/XvIT cfPU1x6MO2N0Y9BNbRMhZ0hzVfaI8yQfVe61iAQeFOYjFUm60hFvrVqI2iW23X42 CnMh/yNTsmBR3ykpRuhqCv3GHWOXmZ3n/NTfyTTyGI32YgpxjYcjO2beFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM5Qkp0bqu312qkI5XZIhW1rl0MQMB8GA1UdIwQY MBaAFEJP7/tXbkEd5RGHHcHgvXog4sTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjct ODMxZjdlNmY1Y2NkLzEvemxDU25SdXE3ZlhhcVFqbGRraUZiV3VYUXhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjctODMxZjdlNmY1Y2Nk LzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAogzMMA0G CSqGSIb3DQEBCwUAA4IBAQAGTL6g1L1KN93xDdBSXr2n5lI8nC5S1U2BvQXnmE5w iHFDPB4pikaaXdsPRccTflX/LP/CN3B9y0j4eMGrpyP6aM7JOJamWJb5JWoJuAbx uAz8OQJnJNAVgBiCaOW5egoiyFX8qdemQXI2GJQGq0UhF9OdDXndAYzEYT6zMrE+ r4hZESWGypt9YBGkgaEdRFI0nibh+4WWp2CmO3BAfiZWqsy+xvH7yPtR7NuFadbu 5fF+JmwWi6QKvMA1OhrZ+DzqEQcC9cBzV/Om+WN81bNJQFkFBfIDIH9jgJAXgh+x Pzf4Vqs/CAhxfn+sWWC33PvT2SXZwYqPc4JiBxxABTsE -----END CERTIFICATE-----Generated at Sun Jan 18 11:03:59 2026 by rpki-client