This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/ZT7cIfopY2icNRG5lkp_GApY3rE.roa File: ZT7cIfopY2icNRG5lkp_GApY3rE.roa (raw, json) Hash identifier: gKGo8E7JgzV3hVuTiWO3MJ9KqBj85ZmcBVlHFpHWLjk= Subject key identifier: 65:3E:DC:21:FA:29:63:68:9C:35:11:B9:96:4A:7F:18:0A:58:DE:B1 Certificate issuer: /CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5 Certificate serial: 019B7EA52AA50597EC2ED37352E2E5B88952 Authority key identifier: DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/ZT7cIfopY2icNRG5lkp_GApY3rE.roa Signing time: Fri 02 Jan 2026 12:18:32 +0000 ROA not before: Fri 02 Jan 2026 12:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206546 IP address blocks: 194.0.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:2a:a5:05:97:ec:2e:d3:73:52:e2:e5:b8:89:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5 Validity Not Before: Jan 2 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=653edc21fa2963689c3511b9964a7f180a58deb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:69:72:a2:c2:e2:47:ec:40:eb:28:30:41:c2: e8:3b:c7:11:41:09:8f:38:67:f4:b0:bf:bf:93:a9: 92:da:07:68:f7:e9:98:4a:0b:7e:4b:6c:e4:d2:d6: 26:1a:a4:bd:5e:f4:14:19:e1:72:31:94:cc:6b:3e: 50:09:5d:dd:d4:99:26:41:89:94:54:70:4d:42:dc: b7:16:cc:b2:e6:f1:27:86:02:4c:61:bb:f5:30:56: 96:fe:82:53:ec:04:62:11:a0:27:0b:32:44:82:41: 7f:a2:9e:93:08:64:41:3d:7e:ad:0b:47:73:32:93: f6:a5:90:f5:32:6f:9e:c3:3a:0b:5a:9d:a4:4e:3b: 49:ad:4c:52:1d:7c:92:a6:07:c0:80:08:1e:fa:7c: 0c:b4:38:36:71:5b:c0:f6:5b:a7:ff:54:43:94:75: a4:16:aa:3b:52:14:20:2a:76:d0:b3:2b:7a:a6:1d: 5b:2f:0f:23:7b:23:8f:5e:d6:3c:d1:f9:7c:a3:7c: 34:32:ff:9f:86:54:5c:f2:2e:cc:8e:f1:f9:b0:06: 07:bc:8f:4f:1e:dc:42:fd:6c:4f:cd:79:64:19:bd: 74:3b:4a:c0:cd:5d:f9:5e:df:47:70:a9:ea:25:cc: 84:3f:b9:0f:34:a6:1b:e4:51:15:c1:f4:e0:d0:b4: d7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3E:DC:21:FA:29:63:68:9C:35:11:B9:96:4A:7F:18:0A:58:DE:B1 X509v3 Authority Key Identifier: keyid:DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/ZT7cIfopY2icNRG5lkp_GApY3rE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.235.0/24 Signature Algorithm: sha256WithRSAEncryption a2:19:c8:47:b7:f2:f7:26:c5:4b:97:67:93:58:f5:a0:a3:ae: 6b:e3:44:5d:f5:0a:d1:3d:62:89:9a:23:e5:06:89:99:57:be: 9d:04:42:90:cc:5f:1d:65:1b:c6:03:12:14:d4:a0:87:2c:ba: 5d:96:05:c3:8b:9d:85:31:72:7d:e6:19:68:fa:18:c3:2d:3a: da:8e:1e:48:53:67:07:b0:36:af:1d:70:59:36:71:f5:39:5c: b7:aa:cd:89:2a:90:93:b2:ef:9c:af:97:9b:1f:af:09:5e:46: dd:0a:ea:fa:71:4b:d6:eb:ab:ea:1e:4d:d0:66:26:a6:38:3e: 73:4f:10:68:69:6b:fa:e5:cf:81:e9:68:02:33:f0:e7:b3:2c: a8:f9:02:2a:81:38:56:99:35:9d:18:94:ab:6c:d3:55:78:ae: 4a:8f:35:32:7b:e2:af:05:b3:f7:41:3b:3a:d3:af:0d:80:f2: 1f:9b:5d:aa:3c:d1:f1:7b:cf:0b:4a:e6:46:e9:e7:cd:8d:bf: fc:8c:35:fe:2a:7e:f3:3f:c3:3d:48:af:85:f4:28:04:a4:51: 74:3f:46:40:16:99:16:78:62:f3:66:21:de:ad:77:59:a8:66: 0b:59:4f:df:e5:3b:c9:37:05:80:36:31:62:6d:0b:4b:4c:e1: 66:1a:d5:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pSqlBZfsLtNzUuLluIlSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhODkwZDA1ZDVjODhiN2RlNmY1YmFhNGMxZDA4NWZlNzMw MWY1ZDUwHhcNMjYwMTAyMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTNlZGMyMWZhMjk2MzY4OWMzNTExYjk5NjRhN2YxODBhNThkZWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2lyosLiR+xA6ygwQcLoO8cRQQmP OGf0sL+/k6mS2gdo9+mYSgt+S2zk0tYmGqS9XvQUGeFyMZTMaz5QCV3d1JkmQYmU VHBNQty3Fsyy5vEnhgJMYbv1MFaW/oJT7ARiEaAnCzJEgkF/op6TCGRBPX6tC0dz MpP2pZD1Mm+ewzoLWp2kTjtJrUxSHXySpgfAgAge+nwMtDg2cVvA9lun/1RDlHWk Fqo7UhQgKnbQsyt6ph1bLw8jeyOPXtY80fl8o3w0Mv+fhlRc8i7MjvH5sAYHvI9P HtxC/WxPzXlkGb10O0rAzV35Xt9HcKnqJcyEP7kPNKYb5FEVwfTg0LTXmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGU+3CH6KWNonDURuZZKfxgKWN6xMB8GA1UdIwQY MBaAFNqJDQXVyIt95vW6pMHQhf5zAfXVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm9rTkJkWElpMzNtOWJxa3dkQ0Zfbk1COWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hNjc0MjAtYjFiNS00NDk1LTkxNzYt YjQ4MzZiYzE2NGExLzEvWlQ3Y0lmb3BZMmljTlJHNWxrcF9HQXBZM3JFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9hNjc0MjAtYjFiNS00NDk1LTkxNzYtYjQ4MzZiYzE2NGEx LzEvMm9rTkJkWElpMzNtOWJxa3dkQ0Zfbk1COWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgDrMA0G CSqGSIb3DQEBCwUAA4IBAQCiGchHt/L3JsVLl2eTWPWgo65r40Rd9QrRPWKJmiPl BomZV76dBEKQzF8dZRvGAxIU1KCHLLpdlgXDi52FMXJ95hlo+hjDLTrajh5IU2cH sDavHXBZNnH1OVy3qs2JKpCTsu+cr5ebH68JXkbdCur6cUvW66vqHk3QZiamOD5z TxBoaWv65c+B6WgCM/Dnsyyo+QIqgThWmTWdGJSrbNNVeK5KjzUye+KvBbP3QTs6 068NgPIfm12qPNHxe88LSuZG6efNjb/8jDX+Kn7zP8M9SK+F9CgEpFF0P0ZAFpkW eGLzZiHerXdZqGYLWU/f5TvJNwWANjFibQtLTOFmGtXt -----END CERTIFICATE-----Generated at Sat Jan 10 20:50:53 2026 by rpki-client