This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/ZVmzCRGm6Ac5itIuDxSJvmt1oKM.roa File: ZVmzCRGm6Ac5itIuDxSJvmt1oKM.roa (raw, json) Hash identifier: vz5MSkdppxEecAJ47gQzG2qHkIp9VneH0S1nTYp4M1Y= Subject key identifier: 65:59:B3:09:11:A6:E8:07:39:8A:D2:2E:0F:14:89:BE:6B:75:A0:A3 Certificate issuer: /CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a Certificate serial: 019B783557390FF1045B7C8CA279D2478D2F Authority key identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/ZVmzCRGm6Ac5itIuDxSJvmt1oKM.roa Signing time: Thu 01 Jan 2026 06:18:40 +0000 ROA not before: Thu 01 Jan 2026 06:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 212.60.8.0/24 maxlen: 24 212.60.9.0/24 maxlen: 24 212.60.10.0/24 maxlen: 24 212.60.11.0/24 maxlen: 24 2a09:800:2000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 00:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:57:39:0f:f1:04:5b:7c:8c:a2:79:d2:47:8d:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a Validity Not Before: Jan 1 06:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6559b30911a6e807398ad22e0f1489be6b75a0a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9f:c9:05:26:12:b9:47:7c:ae:8b:3c:89:ee: 69:23:c2:ca:9b:3d:5b:f6:82:35:bb:28:2f:14:91: 21:ab:1b:7c:80:20:93:99:62:b5:8a:41:04:12:73: 9a:01:89:32:62:24:ec:06:80:d6:20:d2:18:22:23: ca:f5:3d:52:c6:9d:63:13:f6:0c:3b:02:ea:91:74: 75:e8:2d:ce:70:b9:05:15:81:76:5c:a4:c7:fc:68: b2:3f:e8:b5:b8:c0:4f:e8:63:16:16:df:3b:4f:17: 5b:b8:18:8a:2d:de:89:84:24:3f:3b:52:1f:05:83: ad:a8:b3:0d:9a:7e:25:76:8a:85:83:9d:b6:fc:22: e9:0e:f5:f6:1e:a1:2d:bd:68:18:3c:0e:88:a9:04: b0:89:05:79:e3:a0:35:f1:0a:a7:0d:1a:eb:75:52: b7:08:49:40:0c:1b:bc:ab:25:df:01:00:52:c2:96: a5:5c:63:d1:38:97:0f:09:11:b0:ff:99:a0:91:ec: 7a:49:d9:2d:d5:d5:60:d6:b1:17:3a:27:f8:af:a9: e6:78:17:b0:74:75:ad:c2:ab:b2:c3:16:0f:0e:8c: 30:65:13:ac:55:e7:69:49:e4:58:66:24:87:3e:86: 1b:5c:9f:85:aa:ce:63:58:7a:51:72:7a:bd:fe:fd: ac:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:59:B3:09:11:A6:E8:07:39:8A:D2:2E:0F:14:89:BE:6B:75:A0:A3 X509v3 Authority Key Identifier: keyid:A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/ZVmzCRGm6Ac5itIuDxSJvmt1oKM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.60.8.0/22 IPv6: 2a09:800:2000::/35 Signature Algorithm: sha256WithRSAEncryption 7b:b0:62:14:fe:ac:26:0a:c5:d5:bb:40:21:b3:a0:03:2b:fa: 89:cd:f2:1c:d8:51:fb:24:e0:30:09:fb:c6:0c:96:ef:9a:a5: 4f:44:68:d0:9f:53:04:e8:56:ac:fd:cc:47:0f:1c:43:1b:88: 98:fa:60:c2:ad:fb:cf:ed:b5:2f:7a:7c:de:79:f2:82:17:a8: ef:db:d4:b8:68:ca:1f:7c:55:97:7b:d1:22:19:4f:fd:35:c3: 22:dc:4b:db:72:f8:77:c1:c0:89:cc:7c:51:6c:35:bd:dc:58: 37:0c:fa:04:39:74:9a:18:61:76:7e:94:59:3b:c1:8a:fe:61: 5d:e8:38:d0:ff:db:2e:81:b1:d9:c1:44:33:09:8a:36:a8:cc: 57:0f:d4:59:20:14:de:3e:f7:35:ba:af:5d:79:e9:7e:6f:a3: ee:81:47:74:19:f3:99:8a:b1:83:46:0e:43:9a:ae:95:af:7d: 23:4a:d9:88:d2:12:71:9c:3c:7d:5b:1e:6c:a9:25:3b:15:7b: ca:56:e7:d2:e1:30:37:1d:13:44:7d:f3:0e:ce:be:f2:be:e2: 06:e0:4e:71:8c:45:0b:83:52:32:5a:1e:f5:07:20:9c:61:b0: 52:59:49:e0:1a:40:ca:46:c8:95:bb:5a:8d:3c:0d:7f:83:e3: e0:9d:7e:db -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt4NVc5D/EEW3yMonnSR40vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYTJkNjM3Y2IwYWNjZjg3MjFmNDNlMjY2Y2UyMTNmOGVk ZGQyNmEwHhcNMjYwMTAxMDYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTU5YjMwOTExYTZlODA3Mzk4YWQyMmUwZjE0ODliZTZiNzVhMGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5J/JBSYSuUd8ros8ie5pI8LKmz1b 9oI1uygvFJEhqxt8gCCTmWK1ikEEEnOaAYkyYiTsBoDWINIYIiPK9T1Sxp1jE/YM OwLqkXR16C3OcLkFFYF2XKTH/GiyP+i1uMBP6GMWFt87TxdbuBiKLd6JhCQ/O1If BYOtqLMNmn4ldoqFg522/CLpDvX2HqEtvWgYPA6IqQSwiQV546A18QqnDRrrdVK3 CElADBu8qyXfAQBSwpalXGPROJcPCRGw/5mgkex6Sdkt1dVg1rEXOif4r6nmeBew dHWtwquywxYPDowwZROsVedpSeRYZiSHPoYbXJ+Fqs5jWHpRcnq9/v2sOQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFGVZswkRpugHOYrSLg8Uib5rdaCjMB8GA1UdIwQY MBaAFKGi1jfLCsz4ch9D4mbOIT+O3dJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2FMV044c0t6UGh5SDBQaVpzNGhQNDdkMG1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9lZGJmNDQtMzczMi00NGZmLWE5NDQt ZTIxOTc0YTI5NGJhLzEvWlZtekNSR202QWM1aXRJdUR4U0p2bXQxb0tNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9lZGJmNDQtMzczMi00NGZmLWE5NDQtZTIxOTc0YTI5NGJh LzEvb2FMV044c0t6UGh5SDBQaVpzNGhQNDdkMG1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQC1DwIMA4E AgACMAgDBgUqCQgAIDANBgkqhkiG9w0BAQsFAAOCAQEAe7BiFP6sJgrF1btAIbOg Ayv6ic3yHNhR+yTgMAn7xgyW75qlT0Ro0J9TBOhWrP3MRw8cQxuImPpgwq37z+21 L3p83nnygheo79vUuGjKH3xVl3vRIhlP/TXDItxL23L4d8HAicx8UWw1vdxYNwz6 BDl0mhhhdn6UWTvBiv5hXeg40P/bLoGx2cFEMwmKNqjMVw/UWSAU3j73NbqvXXnp fm+j7oFHdBnzmYqxg0YOQ5qula99I0rZiNIScZw8fVsebKklOxV7ylbn0uEwNx0T RH3zDs6+8r7iBuBOcYxFC4NSMloe9QcgnGGwUllJ4BpAykbIlbtajTwNf4Pj4J1+ 2w== -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:26 2026 by rpki-client