This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/zoysAnJ75pvxhA2S0m-6Zp0HLpE.roa File: zoysAnJ75pvxhA2S0m-6Zp0HLpE.roa (raw, json) Hash identifier: kFXM7sahaxaI4pXMltbaQts/ViuuZYbtivX7x0d9V2A= Subject key identifier: CE:8C:AC:02:72:7B:E6:9B:F1:84:0D:92:D2:6F:BA:66:9D:07:2E:91 Certificate issuer: /CN=2b195371b4cf70b88e773e1b807cb2391632385b Certificate serial: 019B7AC8B7227BFA317B7AD5EC01E1CC3406 Authority key identifier: 2B:19:53:71:B4:CF:70:B8:8E:77:3E:1B:80:7C:B2:39:16:32:38:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxlTcbTPcLiOdz4bgHyyORYyOFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/zoysAnJ75pvxhA2S0m-6Zp0HLpE.roa Signing time: Thu 01 Jan 2026 18:18:53 +0000 ROA not before: Thu 01 Jan 2026 18:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 130.149.0.0/16 maxlen: 16 141.23.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/KxlTcbTPcLiOdz4bgHyyORYyOFs.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/KxlTcbTPcLiOdz4bgHyyORYyOFs.mft rsync://rpki.ripe.net/repository/DEFAULT/KxlTcbTPcLiOdz4bgHyyORYyOFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:b7:22:7b:fa:31:7b:7a:d5:ec:01:e1:cc:34:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b195371b4cf70b88e773e1b807cb2391632385b Validity Not Before: Jan 1 18:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce8cac02727be69bf1840d92d26fba669d072e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bb:f9:3b:14:33:63:45:68:96:e7:e7:25:be: 0b:e0:e1:c8:4f:d8:b9:e3:c7:56:96:ac:cd:20:29: a8:fe:a5:b9:c8:ea:e8:3f:3a:c8:25:69:d1:26:23: ec:5b:8b:08:4c:5f:f6:8d:fd:77:d4:88:4c:52:11: 0a:8a:67:d5:44:39:0e:12:fd:cc:66:1f:f0:23:6a: 0f:b5:4c:d0:e9:86:fc:78:96:2e:1d:93:7b:28:9f: 6c:14:55:41:69:e9:8d:0e:6c:70:56:20:c4:2e:19: da:06:c4:be:df:ed:c5:41:32:ef:74:78:ab:79:5c: 6e:28:2f:48:7d:58:bb:6e:78:54:b4:97:ae:24:9f: 61:21:31:ca:b6:6a:fe:85:b2:c7:3e:db:76:69:31: 00:ce:01:1f:a6:56:b2:c8:d7:f9:28:5a:65:23:2d: a3:5b:20:6b:81:ae:df:e5:7d:62:3b:08:90:57:fc: c6:f8:3d:ca:28:54:4c:29:cc:be:39:05:d4:51:ee: f9:30:7a:79:6b:12:82:f3:d3:08:cb:93:b3:fa:03: 75:14:0b:9f:b3:e8:47:75:3f:2f:18:9a:15:ad:77: 4c:82:00:4a:c0:ba:e0:f7:f0:da:33:62:d8:a1:62: 35:27:fa:21:28:2c:0b:1b:24:68:a5:6d:eb:f7:5d: d9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8C:AC:02:72:7B:E6:9B:F1:84:0D:92:D2:6F:BA:66:9D:07:2E:91 X509v3 Authority Key Identifier: keyid:2B:19:53:71:B4:CF:70:B8:8E:77:3E:1B:80:7C:B2:39:16:32:38:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxlTcbTPcLiOdz4bgHyyORYyOFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/zoysAnJ75pvxhA2S0m-6Zp0HLpE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/KxlTcbTPcLiOdz4bgHyyORYyOFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.149.0.0/16 141.23.0.0/16 Signature Algorithm: sha256WithRSAEncryption 41:ed:7b:10:0d:f3:81:59:8f:92:e9:80:20:01:bb:1d:c7:9f: 8b:3c:4a:39:cc:f4:c5:49:d7:90:c4:bf:31:1c:12:e0:65:76: 1a:8d:0a:61:4a:27:41:e7:d9:2b:6d:6e:45:7b:71:85:88:0a: 85:3b:40:a2:81:f9:3b:65:29:f3:d5:71:20:a9:d1:12:31:fd: b8:57:e8:23:c2:2d:09:7b:d4:72:44:20:e1:1a:0c:c6:7c:61: 1b:67:6f:cd:81:8b:ab:cd:84:eb:17:27:fc:25:8b:dd:0b:34: 0d:0b:f6:e2:29:a0:f2:9c:bb:8d:19:82:82:78:ff:05:20:df: f8:3e:ee:7e:bc:13:13:0e:a4:f2:4b:d8:7d:cd:01:d1:8a:35: 2d:32:f0:f5:71:17:45:63:fa:c3:58:86:5e:cf:2b:e7:27:c2: 6e:b8:5b:df:4d:1d:73:e4:79:d8:4f:d6:e4:17:ba:8c:3b:ec: f3:ee:16:93:c8:16:38:58:c9:e5:a6:1c:89:a6:62:77:be:90: bd:43:a2:b5:fd:a3:56:24:d7:78:97:12:2f:72:1a:85:e0:2d: 3c:5d:5d:8c:bb:f9:43:71:e9:b9:79:c5:5f:9f:45:c5:bc:71: f7:a6:16:eb:0d:b0:4a:e3:b5:f9:f4:b4:58:89:68:8e:18:08: 00:8d:5d:e9 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt6yLcie/oxe3rV7AHhzDQGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMTk1MzcxYjRjZjcwYjg4ZTc3M2UxYjgwN2NiMjM5MTYz MjM4NWIwHhcNMjYwMTAxMTgxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZThjYWMwMjcyN2JlNjliZjE4NDBkOTJkMjZmYmE2NjlkMDcyZTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7v5OxQzY0VolufnJb4L4OHIT9i5 48dWlqzNICmo/qW5yOroPzrIJWnRJiPsW4sITF/2jf131IhMUhEKimfVRDkOEv3M Zh/wI2oPtUzQ6Yb8eJYuHZN7KJ9sFFVBaemNDmxwViDELhnaBsS+3+3FQTLvdHir eVxuKC9IfVi7bnhUtJeuJJ9hITHKtmr+hbLHPtt2aTEAzgEfplayyNf5KFplIy2j WyBrga7f5X1iOwiQV/zG+D3KKFRMKcy+OQXUUe75MHp5axKC89MIy5Oz+gN1FAuf s+hHdT8vGJoVrXdMggBKwLrg9/DaM2LYoWI1J/ohKCwLGyRopW3r913ZjQIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFM6MrAJye+ab8YQNktJvumadBy6RMB8GA1UdIwQY MBaAFCsZU3G0z3C4jnc+G4B8sjkWMjhbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3hsVGNiVFBjTGlPZHo0YmdIeXlPUll5T0ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82NTQxYjQtNzQyNC00NzU4LWJkMzIt NWU0MDQxZDkzMDA4LzEvem95c0FuSjc1cHZ4aEEyUzBtLTZacDBITHBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS82NTQxYjQtNzQyNC00NzU4LWJkMzItNWU0MDQxZDkzMDA4 LzEvS3hsVGNiVFBjTGlPZHo0YmdIeXlPUll5T0ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAgpUDAwCN FzANBgkqhkiG9w0BAQsFAAOCAQEAQe17EA3zgVmPkumAIAG7HcefizxKOcz0xUnX kMS/MRwS4GV2Go0KYUonQefZK21uRXtxhYgKhTtAooH5O2Up89VxIKnREjH9uFfo I8ItCXvUckQg4RoMxnxhG2dvzYGLq82E6xcn/CWL3Qs0DQv24img8py7jRmCgnj/ BSDf+D7ufrwTEw6k8kvYfc0B0Yo1LTLw9XEXRWP6w1iGXs8r5yfCbrhb300dc+R5 2E/W5Be6jDvs8+4Wk8gWOFjJ5aYciaZid76QvUOitf2jViTXeJcSL3IaheAtPF1d jLv5Q3HpuXnFX59Fxbxx96YW6w2wSuO1+fS0WIlojhgIAI1d6Q== -----END CERTIFICATE-----Generated at Tue Jan 27 11:26:49 2026 by rpki-client