This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ZQlaFWMQCgAcPabK6mTBTjQ2IJw.roa File: ZQlaFWMQCgAcPabK6mTBTjQ2IJw.roa (raw, json) Hash identifier: ucM3NjRsgstMASAi+QcIMApg7HelzidJ5g1y41234cs= Subject key identifier: 65:09:5A:15:63:10:0A:00:1C:3D:A6:CA:EA:64:C1:4E:34:36:20:9C Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84E9C7964DC887641B0E43B39E96F4 Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ZQlaFWMQCgAcPabK6mTBTjQ2IJw.roa Signing time: Fri 02 Jan 2026 16:22:55 +0000 ROA not before: Fri 02 Jan 2026 16:22:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203084 IP address blocks: 5.180.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:e9:c7:96:4d:c8:87:64:1b:0e:43:b3:9e:96:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65095a1563100a001c3da6caea64c14e3436209c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:99:6b:18:b3:91:fb:34:e7:e2:2e:27:e6:e3: b0:e0:22:5a:c5:95:62:e8:37:0e:5d:31:0e:6c:9d: ae:66:8a:c2:55:b9:7c:12:ad:02:0d:88:51:3d:e8: df:8a:91:40:7b:be:30:62:2c:99:22:10:8b:d7:60: 51:7a:4a:fa:78:f9:28:ea:56:5b:53:6c:a6:af:8e: 90:9b:c1:db:0f:f6:fa:2a:88:0d:d5:42:23:cf:ec: 61:29:b7:d7:44:d2:53:1e:e1:d3:32:02:a9:a4:e2: c6:7c:c7:ef:54:86:3a:25:cf:df:44:44:7b:a1:fd: 26:8c:eb:15:2e:fc:43:49:22:b2:fb:19:32:fb:d2: 39:66:0b:f5:82:36:7d:0f:7e:60:fc:ea:22:ae:1b: 3e:7e:37:ef:30:1d:5e:9e:ec:68:f1:ce:2a:d2:45: 35:3e:72:4c:e0:92:df:34:c2:62:68:ca:63:d9:83: f9:5e:62:c1:82:a2:15:85:82:1e:76:e0:4e:0a:be: d8:88:ee:95:e4:96:76:90:97:15:30:ff:24:ab:da: 3f:03:ae:d6:d8:90:67:65:5d:32:bb:2c:21:94:25: 24:48:e2:27:e3:e2:eb:30:90:fe:90:c8:5c:24:01: 69:4f:f5:42:b1:e1:7b:fd:2f:29:71:37:cc:d5:73: 81:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:09:5A:15:63:10:0A:00:1C:3D:A6:CA:EA:64:C1:4E:34:36:20:9C X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ZQlaFWMQCgAcPabK6mTBTjQ2IJw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.122.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:0d:ef:de:c8:09:74:57:2e:9d:27:51:d4:be:50:52:33:7e: 04:ff:d8:68:8c:84:6c:d5:7e:e6:ec:4f:5d:87:6c:dd:cc:b5: f5:08:4c:01:a6:fa:db:d4:79:83:ef:fe:4c:e8:2f:97:37:13: 03:66:79:de:71:c8:e7:a2:a8:e9:6d:10:d7:a6:72:7c:40:01: 47:46:fa:6f:5d:c3:dc:65:21:49:0a:a1:f0:8a:98:98:27:57: ff:70:74:c7:ec:0b:98:eb:18:be:29:2d:e1:e9:5c:e6:b1:37: 30:1e:b1:12:84:cb:02:66:66:f6:81:c9:a3:5b:78:ad:7a:38: 4f:9a:2b:17:e4:83:43:91:7a:34:50:2e:93:6d:7a:b7:b0:8c: 71:5f:bf:86:99:c7:aa:32:b8:d2:1b:73:cb:22:dc:8b:dd:ad: 81:91:7e:a8:55:cb:e4:43:da:60:0d:a5:4c:93:1c:b7:e1:2d: 1a:29:b9:2c:5b:a9:05:43:40:12:77:96:96:bf:2c:16:6a:04: e3:c8:9e:e4:8d:d4:50:16:de:90:fc:9b:a6:3f:a9:48:bd:0f: f3:2e:eb:2f:57:72:0c:97:be:b2:ec:d8:7a:dd:8f:7a:a5:17: 0e:56:c8:03:85:89:46:4f:af:8d:7f:73:ea:6e:f7:a9:b3:6f: 54:b1:ac:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hOnHlk3Ih2QbDkOznpb0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTA5NWExNTYzMTAwYTAwMWMzZGE2Y2FlYTY0YzE0ZTM0MzYyMDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5lrGLOR+zTn4i4n5uOw4CJaxZVi 6DcOXTEObJ2uZorCVbl8Eq0CDYhRPejfipFAe74wYiyZIhCL12BRekr6ePko6lZb U2ymr46Qm8HbD/b6KogN1UIjz+xhKbfXRNJTHuHTMgKppOLGfMfvVIY6Jc/fRER7 of0mjOsVLvxDSSKy+xky+9I5Zgv1gjZ9D35g/Ooirhs+fjfvMB1enuxo8c4q0kU1 PnJM4JLfNMJiaMpj2YP5XmLBgqIVhYIeduBOCr7YiO6V5JZ2kJcVMP8kq9o/A67W 2JBnZV0yuywhlCUkSOIn4+LrMJD+kMhcJAFpT/VCseF7/S8pcTfM1XOBFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGUJWhVjEAoAHD2myupkwU40NiCcMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvWlFsYUZXTVFDZ0FjUGFiSzZtVEJUalEySUp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbR6MA0G CSqGSIb3DQEBCwUAA4IBAQAqDe/eyAl0Vy6dJ1HUvlBSM34E/9hojIRs1X7m7E9d h2zdzLX1CEwBpvrb1HmD7/5M6C+XNxMDZnneccjnoqjpbRDXpnJ8QAFHRvpvXcPc ZSFJCqHwipiYJ1f/cHTH7AuY6xi+KS3h6VzmsTcwHrEShMsCZmb2gcmjW3itejhP misX5INDkXo0UC6TbXq3sIxxX7+GmceqMrjSG3PLItyL3a2BkX6oVcvkQ9pgDaVM kxy34S0aKbksW6kFQ0ASd5aWvywWagTjyJ7kjdRQFt6Q/JumP6lIvQ/zLusvV3IM l76y7Nh63Y96pRcOVsgDhYlGT6+Nf3Pqbveps29UsayI -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:59 2026 by rpki-client