This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ZcY9sT6GjrCW7Vd8covRFUm4b8g.roa File: ZcY9sT6GjrCW7Vd8covRFUm4b8g.roa (raw, json) Hash identifier: sx5kHTc7iFM9FmLF28KStJFd8VYJJbpsebjuA7Xvdys= Subject key identifier: 65:C6:3D:B1:3E:86:8E:B0:96:ED:57:7C:72:8B:D1:15:49:B8:6F:C8 Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 019BB0EDD2B8F18020660D9385FCA969FE84 Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ZcY9sT6GjrCW7Vd8covRFUm4b8g.roa Signing time: Mon 12 Jan 2026 06:38:54 +0000 ROA not before: Mon 12 Jan 2026 06:38:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211059 IP address blocks: 5.10.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:ed:d2:b8:f1:80:20:66:0d:93:85:fc:a9:69:fe:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Jan 12 06:38:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65c63db13e868eb096ed577c728bd11549b86fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:24:dd:92:b4:5a:6e:98:df:40:52:94:90:1b: a3:c0:20:90:6e:ed:33:a1:5c:16:57:9b:87:30:b9: 71:3f:dc:8c:cc:4c:16:a9:5d:fc:07:35:82:17:d5: 35:ce:2c:47:88:00:b9:1c:25:8c:c8:6b:a7:02:bb: 1a:82:19:f7:12:ca:80:4e:18:f8:e1:80:ae:02:81: c8:d8:c5:48:79:33:2d:55:88:04:48:84:f9:20:51: 05:cd:0b:e4:a6:62:07:37:f9:1c:b8:30:97:cb:c7: 84:45:2d:94:96:7d:ee:99:a5:63:21:c2:fa:02:e9: 2c:70:ea:44:d7:8e:ba:0f:61:1a:71:2c:59:20:2e: 2b:18:a2:24:fe:23:77:4e:32:78:b0:b0:02:b2:9b: 7e:ee:3a:92:2b:f4:ac:a0:91:d5:ad:16:2e:32:1c: 14:0c:60:08:3b:01:b9:7c:52:53:61:ac:d2:ef:f8: 9b:6f:be:0c:2d:7f:61:d3:e9:a5:72:7e:3c:09:91: 12:71:65:65:57:84:5f:8c:0a:02:d1:70:d0:fb:5e: e6:68:c6:11:1f:fa:99:2a:47:8c:d3:75:fd:7b:7d: cc:4f:ff:6b:85:4b:a2:d7:73:56:9e:34:f3:52:93: 60:95:db:51:5b:7a:0d:3d:48:ef:c8:e7:10:38:cc: ff:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C6:3D:B1:3E:86:8E:B0:96:ED:57:7C:72:8B:D1:15:49:B8:6F:C8 X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ZcY9sT6GjrCW7Vd8covRFUm4b8g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.10.250.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:9d:98:cb:6a:14:9c:74:e3:cf:09:68:ff:90:4e:68:2a:33: af:7d:ef:0d:eb:c3:6a:c6:fe:c4:90:f1:85:5b:bd:f9:25:fb: 1c:15:84:c4:a5:ec:9b:6c:e2:ea:84:9c:f8:93:0a:9f:a4:f7: 62:ec:5f:2d:b1:e4:1d:31:af:38:41:96:59:a9:cb:e8:95:0f: a1:55:5b:16:86:af:e5:3e:ac:d8:43:a9:2d:97:2f:72:16:ec: cc:17:0a:95:c5:aa:36:4a:70:c1:4f:63:b6:62:d0:4a:1f:f9: 1f:a2:d6:89:4f:8b:ba:39:4c:65:b3:a9:b3:2c:95:69:5d:b0: e6:23:e8:8a:ab:4d:77:a4:de:e0:8f:29:65:73:d4:68:a9:da: dc:65:d1:c5:5a:b4:83:5e:20:56:22:d6:27:cc:c0:02:52:d7: 63:e6:c0:c0:01:56:de:08:42:b7:ac:e8:85:8b:d6:99:36:68: 93:d3:7c:ac:2d:f7:33:e4:e0:c3:d2:28:88:61:6d:a6:03:00: 35:7c:fc:46:88:fc:33:1b:ca:dd:d9:ca:fe:82:a4:2e:98:01: 03:f8:3b:5a:2e:9d:b8:4e:8b:c1:17:fe:37:62:bd:74:49:bb: 76:22:53:d6:c1:ad:55:8b:2d:60:f0:19:5d:c4:07:09:18:6a: d5:96:64:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuw7dK48YAgZg2Thfypaf6EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjYwMTEyMDYzODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWM2M2RiMTNlODY4ZWIwOTZlZDU3N2M3MjhiZDExNTQ5Yjg2ZmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSTdkrRabpjfQFKUkBujwCCQbu0z oVwWV5uHMLlxP9yMzEwWqV38BzWCF9U1zixHiAC5HCWMyGunArsaghn3EsqAThj4 4YCuAoHI2MVIeTMtVYgESIT5IFEFzQvkpmIHN/kcuDCXy8eERS2Uln3umaVjIcL6 AukscOpE1466D2EacSxZIC4rGKIk/iN3TjJ4sLACspt+7jqSK/SsoJHVrRYuMhwU DGAIOwG5fFJTYazS7/ibb74MLX9h0+mlcn48CZEScWVlV4RfjAoC0XDQ+17maMYR H/qZKkeM03X9e33MT/9rhUui13NWnjTzUpNgldtRW3oNPUjvyOcQOMz/aQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGXGPbE+ho6wlu1XfHKL0RVJuG/IMB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvWmNZOXNUNkdqckNXN1ZkOGNvdlJGVW00YjhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQr6MA0G CSqGSIb3DQEBCwUAA4IBAQA9nZjLahScdOPPCWj/kE5oKjOvfe8N68Nqxv7EkPGF W735JfscFYTEpeybbOLqhJz4kwqfpPdi7F8tseQdMa84QZZZqcvolQ+hVVsWhq/l PqzYQ6ktly9yFuzMFwqVxao2SnDBT2O2YtBKH/kfotaJT4u6OUxls6mzLJVpXbDm I+iKq013pN7gjyllc9RoqdrcZdHFWrSDXiBWItYnzMACUtdj5sDAAVbeCEK3rOiF i9aZNmiT03ysLfcz5ODD0iiIYW2mAwA1fPxGiPwzG8rd2cr+gqQumAED+DtaLp24 TovBF/43Yr10Sbt2IlPWwa1Viy1g8BldxAcJGGrVlmRt -----END CERTIFICATE-----Generated at Wed Jan 21 12:18:53 2026 by rpki-client