This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/zkRoAk-heecQlcDd4NYa_uCW1tw.roa File: zkRoAk-heecQlcDd4NYa_uCW1tw.roa (raw, json) Hash identifier: MyMSVr8o6OsojK7lNBDhOIJstHWvuZ78LlSiWHryefQ= Subject key identifier: CE:44:68:02:4F:A1:79:E7:10:95:C0:DD:E0:D6:1A:FE:E0:96:D6:DC Certificate issuer: /CN=a53d8fea2298ff3542a6dc0890b108c922183635 Certificate serial: 019B7EA54E497BC072095B3BAE2772F3E82C Authority key identifier: A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/zkRoAk-heecQlcDd4NYa_uCW1tw.roa Signing time: Fri 02 Jan 2026 12:18:41 +0000 ROA not before: Fri 02 Jan 2026 12:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56814 IP address blocks: 5.11.60.0/23 maxlen: 23 5.11.62.0/23 maxlen: 23 193.163.3.0/24 maxlen: 24 193.243.172.0/23 maxlen: 23 194.110.52.0/23 maxlen: 23 2a09:6880::/29 maxlen: 29 2a09:6880::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:4e:49:7b:c0:72:09:5b:3b:ae:27:72:f3:e8:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53d8fea2298ff3542a6dc0890b108c922183635 Validity Not Before: Jan 2 12:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce4468024fa179e71095c0dde0d61afee096d6dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:64:fd:16:3f:f0:b6:5a:fd:c6:e0:f9:a9:11: 1f:c0:d8:a7:3d:34:ef:ce:44:c6:00:9c:b0:6f:c4: 04:1e:82:93:e9:a5:5c:53:78:3b:bc:8c:d2:31:a1: a5:a2:d4:5b:b4:03:c0:30:58:e7:96:fa:1f:32:dd: 07:f3:74:c5:cb:45:5d:3f:72:f4:b4:c9:76:79:8a: c8:4f:f9:86:12:ee:ee:bd:45:a1:be:1a:ce:26:42: 47:de:cb:86:91:50:9f:42:7d:03:b6:95:77:02:8c: 42:aa:3b:24:83:45:fb:be:0d:87:b5:ec:16:b3:60: a3:e0:52:17:6b:c9:80:d4:9f:a5:35:82:06:f7:03: f2:9e:5f:e3:26:72:7b:09:13:13:67:3b:ac:a8:4a: a1:15:72:da:00:f0:7b:70:6f:ae:9b:00:d6:a4:48: 8c:d3:87:71:05:df:88:a7:cb:a0:b4:bc:b7:3f:e3: 89:14:7d:20:1e:6f:43:87:63:c8:05:a0:d6:8d:f1: 07:ac:e3:54:b9:06:76:88:72:d0:ce:28:c4:6a:90: cd:29:e6:76:2e:95:45:8b:6c:45:d6:f4:c5:92:1c: cd:45:e2:5b:9c:cb:5d:08:91:3a:a2:eb:b4:f1:88: 4c:73:dd:23:b6:44:f5:dc:7c:3d:ee:d6:78:98:ae: 4b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:44:68:02:4F:A1:79:E7:10:95:C0:DD:E0:D6:1A:FE:E0:96:D6:DC X509v3 Authority Key Identifier: keyid:A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/zkRoAk-heecQlcDd4NYa_uCW1tw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.11.60.0/22 193.163.3.0/24 193.243.172.0/23 194.110.52.0/23 IPv6: 2a09:6880::/29 Signature Algorithm: sha256WithRSAEncryption 67:d2:ba:dd:d6:23:ab:5c:d1:f0:56:ed:46:ca:88:51:31:68: f4:7c:d8:9e:56:d1:a1:7d:5a:48:28:1b:29:33:43:07:87:1e: d7:bb:ae:76:4d:0c:8c:e5:ad:81:05:f1:80:7b:0a:33:f2:e0: f8:0a:96:8e:ef:2b:20:c9:9f:94:cf:64:20:e1:02:18:77:d0: 96:7f:e0:5c:05:e0:ee:aa:94:dd:7f:5d:fd:9c:f9:0c:08:d0: be:c7:25:25:98:3c:a3:c8:3b:1b:71:ad:ac:11:55:dc:7d:5b: 6c:d4:3a:a9:9c:71:e8:9e:40:1d:6c:18:be:a1:68:44:9e:6d: 81:10:4e:d5:84:33:f4:f5:1b:99:d0:b9:25:c9:0c:85:b8:58: 45:b9:fb:38:18:8e:65:33:dc:77:bc:ce:4e:1c:33:a0:f8:8e: 4b:71:14:c6:5f:e1:7b:17:30:ef:c4:dd:aa:94:ef:01:fd:f4: e0:21:d4:6d:83:7c:93:17:87:75:57:4e:18:81:51:ad:ee:bc: ab:06:9c:9b:6b:98:fd:c9:67:f9:65:c7:f8:c8:24:69:5a:38: 64:0a:55:b5:49:4d:64:af:7a:79:34:33:cd:bd:1e:00:68:25: e1:17:71:32:47:e0:7e:b8:6e:5c:e6:c5:29:b5:f0:52:33:15: 76:58:66:f1 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt+pU5Je8ByCVs7ridy8+gsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1M2Q4ZmVhMjI5OGZmMzU0MmE2ZGMwODkwYjEwOGM5MjIx ODM2MzUwHhcNMjYwMTAyMTIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTQ0NjgwMjRmYTE3OWU3MTA5NWMwZGRlMGQ2MWFmZWUwOTZkNmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2T9Fj/wtlr9xuD5qREfwNinPTTv zkTGAJywb8QEHoKT6aVcU3g7vIzSMaGlotRbtAPAMFjnlvofMt0H83TFy0VdP3L0 tMl2eYrIT/mGEu7uvUWhvhrOJkJH3suGkVCfQn0DtpV3AoxCqjskg0X7vg2HtewW s2Cj4FIXa8mA1J+lNYIG9wPynl/jJnJ7CRMTZzusqEqhFXLaAPB7cG+umwDWpEiM 04dxBd+Ip8ugtLy3P+OJFH0gHm9Dh2PIBaDWjfEHrONUuQZ2iHLQzijEapDNKeZ2 LpVFi2xF1vTFkhzNReJbnMtdCJE6ouu08YhMc90jtkT13Hw97tZ4mK5LgwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFM5EaAJPoXnnEJXA3eDWGv7gltbcMB8GA1UdIwQY MBaAFKU9j+oimP81QqbcCJCxCMkiGDY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFQyUDZpS1lfelZDcHR3SWtMRUl5U0lZTmpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9iYTNiYTMtOTUxZS00MjgwLWFmOTgt Y2Q4MjQyNzhjY2U4LzEvemtSb0FrLWhlZWNRbGNEZDROWWFfdUNXMXR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9iYTNiYTMtOTUxZS00MjgwLWFmOTgtY2Q4MjQyNzhjY2U4 LzEvcFQyUDZpS1lfelZDcHR3SWtMRUl5U0lZTmpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCBQs8AwQA waMDAwQBwfOsAwQBwm40MA0EAgACMAcDBQMqCWiAMA0GCSqGSIb3DQEBCwUAA4IB AQBn0rrd1iOrXNHwVu1GyohRMWj0fNieVtGhfVpIKBspM0MHhx7Xu652TQyM5a2B BfGAewoz8uD4CpaO7ysgyZ+Uz2Qg4QIYd9CWf+BcBeDuqpTdf139nPkMCNC+xyUl mDyjyDsbca2sEVXcfVts1DqpnHHonkAdbBi+oWhEnm2BEE7VhDP09RuZ0LklyQyF uFhFufs4GI5lM9x3vM5OHDOg+I5LcRTGX+F7FzDvxN2qlO8B/fTgIdRtg3yTF4d1 V04YgVGt7ryrBpyba5j9yWf5Zcf4yCRpWjhkClW1SU1kr3p5NDPNvR4AaCXhF3Ey R+B+uG5c5sUptfBSMxV2WGbx -----END CERTIFICATE-----Generated at Tue Feb 10 06:06:54 2026 by rpki-client