This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/Z9fUWXb8OIPHR8i0P4DDBbavjsM.roa File: Z9fUWXb8OIPHR8i0P4DDBbavjsM.roa (raw, json) Hash identifier: YYmhifcK+2gNYjzHbIMtaIo+1gijW4PRQWGsmCHjKJg= Subject key identifier: 67:D7:D4:59:76:FC:38:83:C7:47:C8:B4:3F:80:C3:05:B6:AF:8E:C3 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 019B7BA358BAD419B0041FFE19B0CE93DD0B Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/Z9fUWXb8OIPHR8i0P4DDBbavjsM.roa Signing time: Thu 01 Jan 2026 22:17:41 +0000 ROA not before: Thu 01 Jan 2026 22:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204170 IP address blocks: 161.8.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 10:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:58:ba:d4:19:b0:04:1f:fe:19:b0:ce:93:dd:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Jan 1 22:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67d7d45976fc3883c747c8b43f80c305b6af8ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:eb:d1:47:fa:cb:74:89:50:5b:b3:1f:c9:19: 74:ed:8f:8a:58:84:b3:3b:44:41:26:45:b4:08:fc: bb:2a:63:fc:de:13:96:fc:fd:02:3e:18:75:e9:08: fa:70:02:61:d4:aa:41:52:c4:3f:39:c0:26:8c:1c: 93:9c:c6:ed:13:0c:55:da:75:48:c9:ee:5a:93:af: 47:84:3d:2d:64:86:48:98:0d:5d:02:a7:24:af:fe: 4d:de:60:e0:b9:b6:bc:c6:9c:fa:10:1a:90:40:56: ea:95:60:f4:92:1e:95:df:8d:71:32:74:c7:6e:2e: 2c:3a:e3:db:66:10:fd:c6:0d:47:21:b0:f2:5a:b8: e5:3f:bb:7e:64:77:59:67:1c:ea:7f:9b:0c:41:a5: b3:3d:6e:13:0c:9c:54:6c:e2:79:38:ca:72:e1:a4: 0e:99:8b:a1:bd:74:fe:47:c3:0a:b3:08:4d:bf:3f: 47:b1:9d:fd:b6:5f:8b:79:9f:b7:ba:90:0f:a3:90: ce:f2:02:8d:ba:90:3c:f7:8e:16:8c:fd:8d:a2:1b: 0e:56:8c:5f:0c:0a:1e:f8:5c:c3:64:17:d3:4c:6f: 15:87:61:4a:e3:9d:4f:c0:b4:c5:28:8e:98:4c:01: 44:17:dc:9e:be:b4:38:52:bc:5e:21:55:4a:ca:b5: dd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D7:D4:59:76:FC:38:83:C7:47:C8:B4:3F:80:C3:05:B6:AF:8E:C3 X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/Z9fUWXb8OIPHR8i0P4DDBbavjsM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.8.64.0/18 Signature Algorithm: sha256WithRSAEncryption 65:94:dc:79:7c:59:92:3d:07:ff:37:36:0f:60:4b:10:b6:22: cf:2a:21:a9:45:18:a6:28:3c:79:fb:62:36:ff:02:ed:6c:9f: 3d:f7:26:f4:a9:dc:70:21:ba:1e:19:c8:3c:08:a5:b1:b7:ec: 92:ff:06:2a:9e:03:59:8f:9c:7a:2e:63:1c:75:09:2a:92:6e: c2:c7:f8:d2:54:72:d6:73:62:6b:9e:b6:96:e4:5b:2b:8d:4c: 54:5d:e9:2e:65:06:a0:6d:ed:e7:0b:34:88:bb:da:0a:71:44: e6:0d:70:3d:8b:9b:23:99:18:77:40:51:03:59:73:2a:75:30: 5b:d3:79:71:86:55:75:ae:db:4c:b6:e7:a7:47:18:4a:35:ca: 2e:85:15:2e:db:38:c2:2c:b1:6a:16:ed:ac:d1:87:29:e8:d5: 9a:06:ef:ba:43:07:78:e9:99:74:23:69:48:85:91:79:90:18: 19:4a:28:a6:bd:96:0b:9e:94:1e:af:98:d8:c9:d3:6c:ce:4b: e0:51:3a:27:61:13:e0:b0:fb:ce:b2:e2:ca:b0:3f:cc:ad:f0: 8e:2f:6e:39:5a:c3:1d:39:d1:4e:f8:c2:b9:4c:e7:af:85:b8: 15:c1:08:6e:b4:8f:5e:5c:9e:1e:b6:dd:e6:2e:b3:fa:94:e7: 6c:23:7b:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o1i61BmwBB/+GbDOk90LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjYwMTAxMjIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2Q3ZDQ1OTc2ZmMzODgzYzc0N2M4YjQzZjgwYzMwNWI2YWY4ZWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuvRR/rLdIlQW7MfyRl07Y+KWISz O0RBJkW0CPy7KmP83hOW/P0CPhh16Qj6cAJh1KpBUsQ/OcAmjByTnMbtEwxV2nVI ye5ak69HhD0tZIZImA1dAqckr/5N3mDguba8xpz6EBqQQFbqlWD0kh6V341xMnTH bi4sOuPbZhD9xg1HIbDyWrjlP7t+ZHdZZxzqf5sMQaWzPW4TDJxUbOJ5OMpy4aQO mYuhvXT+R8MKswhNvz9HsZ39tl+LeZ+3upAPo5DO8gKNupA8944WjP2NohsOVoxf DAoe+FzDZBfTTG8Vh2FK451PwLTFKI6YTAFEF9yevrQ4UrxeIVVKyrXdoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGfX1Fl2/DiDx0fItD+AwwW2r47DMB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvWjlmVVdYYjhPSVBIUjhpMFA0RERCYmF2anNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGoQhAMA0G CSqGSIb3DQEBCwUAA4IBAQBllNx5fFmSPQf/NzYPYEsQtiLPKiGpRRimKDx5+2I2 /wLtbJ899yb0qdxwIboeGcg8CKWxt+yS/wYqngNZj5x6LmMcdQkqkm7Cx/jSVHLW c2JrnraW5FsrjUxUXekuZQagbe3nCzSIu9oKcUTmDXA9i5sjmRh3QFEDWXMqdTBb 03lxhlV1rttMtuenRxhKNcouhRUu2zjCLLFqFu2s0Ycp6NWaBu+6Qwd46Zl0I2lI hZF5kBgZSiimvZYLnpQer5jYydNszkvgUTonYRPgsPvOsuLKsD/MrfCOL245WsMd OdFO+MK5TOevhbgVwQhutI9eXJ4ett3mLrP6lOdsI3t9 -----END CERTIFICATE-----Generated at Mon Jan 12 16:07:00 2026 by rpki-client