This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/ZwXZKRjaeOt73sRGfTI2I9RNT-w.roa File: ZwXZKRjaeOt73sRGfTI2I9RNT-w.roa (raw, json) Hash identifier: 99LJa3HYx7jBCU5Ps3r+L9o48Mik2A5/XYAIXWsudwo= Subject key identifier: 67:05:D9:29:18:DA:78:EB:7B:DE:C4:46:7D:32:36:23:D4:4D:4F:EC Certificate issuer: /CN=7f2ba86df787888f6f8592a806a6ffea3046c07a Certificate serial: 019B7C80C6C986AAF77117FF89E4123B6477 Authority key identifier: 7F:2B:A8:6D:F7:87:88:8F:6F:85:92:A8:06:A6:FF:EA:30:46:C0:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyuobfeHiI9vhZKoBqb_6jBGwHo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/ZwXZKRjaeOt73sRGfTI2I9RNT-w.roa Signing time: Fri 02 Jan 2026 02:19:32 +0000 ROA not before: Fri 02 Jan 2026 02:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35311 IP address blocks: 87.242.0.0/18 maxlen: 18 88.132.0.0/19 maxlen: 19 88.132.32.0/19 maxlen: 19 88.132.64.0/21 maxlen: 21 88.132.72.0/21 maxlen: 21 88.132.80.0/21 maxlen: 21 88.132.88.0/21 maxlen: 21 88.132.96.0/19 maxlen: 19 88.132.128.0/19 maxlen: 19 88.132.160.0/19 maxlen: 19 88.132.192.0/20 maxlen: 20 185.145.204.0/22 maxlen: 22 2a02:808::/29 maxlen: 29 2a02:808::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/fyuobfeHiI9vhZKoBqb_6jBGwHo.crl rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/fyuobfeHiI9vhZKoBqb_6jBGwHo.mft rsync://rpki.ripe.net/repository/DEFAULT/fyuobfeHiI9vhZKoBqb_6jBGwHo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:c6:c9:86:aa:f7:71:17:ff:89:e4:12:3b:64:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f2ba86df787888f6f8592a806a6ffea3046c07a Validity Not Before: Jan 2 02:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6705d92918da78eb7bdec4467d323623d44d4fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:de:e3:c9:6a:98:28:7d:bd:0b:28:7c:8a:1f: 6e:12:1c:20:54:c8:4c:72:99:cb:48:7c:bc:8b:ae: 32:1e:81:d7:f0:4a:d0:dd:32:cc:fd:69:e7:ce:60: be:59:42:f9:5b:0b:d7:36:fb:e7:bf:dd:e7:eb:9c: 1f:00:b2:1f:a2:1a:46:bb:3e:53:8e:7f:46:2a:b2: 83:b2:9d:e7:fe:bc:79:f2:4b:7c:a3:2a:bf:52:ff: 87:ef:86:58:00:b5:cb:d4:e1:19:33:fa:ad:d3:c3: 24:2f:3f:ca:fa:6b:15:74:b6:08:b1:ab:87:84:9a: 2c:22:a0:be:3a:de:d2:1c:67:96:3d:fd:d5:d6:ab: 67:23:6c:6d:13:9d:40:2e:75:33:21:63:c1:fe:35: 0a:03:8d:a0:f1:0e:b0:e9:d2:3e:9f:2c:a0:c4:cb: a0:42:e4:c0:02:b2:f2:90:e3:57:83:a5:63:f8:7e: 71:f1:ae:88:f0:7a:df:ea:50:7a:12:39:22:ad:ee: b9:34:ae:95:7f:71:89:6c:ff:47:2f:2d:91:e2:4f: 7b:df:6b:11:23:b3:2c:14:91:5d:ed:4c:08:38:54: d8:43:3d:e8:ee:4e:64:66:bc:89:b6:0f:27:b5:21: 69:ea:0d:11:bf:c7:56:2f:f8:7b:d0:36:c7:22:34: a8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:05:D9:29:18:DA:78:EB:7B:DE:C4:46:7D:32:36:23:D4:4D:4F:EC X509v3 Authority Key Identifier: keyid:7F:2B:A8:6D:F7:87:88:8F:6F:85:92:A8:06:A6:FF:EA:30:46:C0:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyuobfeHiI9vhZKoBqb_6jBGwHo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/ZwXZKRjaeOt73sRGfTI2I9RNT-w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/fyuobfeHiI9vhZKoBqb_6jBGwHo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.242.0.0/18 88.132.0.0-88.132.207.255 185.145.204.0/22 IPv6: 2a02:808::/29 Signature Algorithm: sha256WithRSAEncryption b4:22:89:2d:65:b8:f0:bd:c1:3c:97:a6:ce:f8:a2:42:c4:de: 21:59:36:b1:97:1a:2e:16:5b:44:92:0d:a1:03:bb:9e:ee:13: 57:e0:fe:11:2f:fd:89:b6:bd:39:c7:eb:74:0c:22:43:f8:17: 08:1d:ca:38:d7:50:9a:95:e9:1d:7e:b9:b7:84:96:16:88:4b: 05:0e:bf:b1:49:d6:b7:46:ee:d3:fe:62:b6:bc:ea:89:eb:8c: d8:bf:fa:5d:d3:40:16:81:9c:e3:0c:cc:2f:bb:19:f0:42:9a: 86:5f:bb:95:ab:24:d0:a8:b7:30:69:d9:a7:df:c2:cd:2f:42: 2e:f9:4b:61:f9:6f:2e:35:df:bc:39:8a:a0:0f:25:e2:c1:3a: c0:21:73:d3:cb:16:33:b2:c7:d3:1a:15:c3:49:72:3f:5c:64: 9f:9f:69:87:7a:7d:e0:7b:ac:02:cc:76:f6:4d:cf:f6:ba:5d: 71:0e:d2:71:57:c8:bc:11:45:d0:11:32:d6:ee:b4:23:3c:7f: 3a:c3:52:5c:2e:9b:b8:ee:6c:6a:9c:d0:87:e8:78:51:88:7e: 33:c6:80:15:7d:fa:ea:1a:e2:bc:3e:9f:f1:f0:92:30:02:e2: 1f:3d:57:2e:0d:d8:45:de:74:99:4c:69:d6:40:44:58:04:60: d9:05:c8:c7 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt8gMbJhqr3cRf/ieQSO2R3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMmJhODZkZjc4Nzg4OGY2Zjg1OTJhODA2YTZmZmVhMzA0 NmMwN2EwHhcNMjYwMTAyMDIxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzA1ZDkyOTE4ZGE3OGViN2JkZWM0NDY3ZDMyMzYyM2Q0NGQ0ZmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2N7jyWqYKH29Cyh8ih9uEhwgVMhM cpnLSHy8i64yHoHX8ErQ3TLM/WnnzmC+WUL5WwvXNvvnv93n65wfALIfohpGuz5T jn9GKrKDsp3n/rx58kt8oyq/Uv+H74ZYALXL1OEZM/qt08MkLz/K+msVdLYIsauH hJosIqC+Ot7SHGeWPf3V1qtnI2xtE51ALnUzIWPB/jUKA42g8Q6w6dI+nyygxMug QuTAArLykONXg6Vj+H5x8a6I8Hrf6lB6Ejkire65NK6Vf3GJbP9HLy2R4k9732sR I7MsFJFd7UwIOFTYQz3o7k5kZryJtg8ntSFp6g0Rv8dWL/h70DbHIjSoHwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFGcF2SkY2njre97ERn0yNiPUTU/sMB8GA1UdIwQY MBaAFH8rqG33h4iPb4WSqAam/+owRsB6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnl1b2JmZUhpSTl2aFpLb0JxYl82akJHd0hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC81ZTY3ODYtNjM3Ny00MjI0LWJhMDYt ZGM0NzY5ZWZmMWY1LzEvWndYWktSamFlT3Q3M3NSR2ZUSTJJOVJOVC13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC81ZTY3ODYtNjM3Ny00MjI0LWJhMDYtZGM0NzY5ZWZmMWY1 LzEvZnl1b2JmZUhpSTl2aFpLb0JxYl82akJHd0hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAfBAIAATAZAwQGV/IAMAsD AwJYhAMEBFiEwAMEArmRzDANBAIAAjAHAwUDKgIICDANBgkqhkiG9w0BAQsFAAOC AQEAtCKJLWW48L3BPJemzviiQsTeIVk2sZcaLhZbRJINoQO7nu4TV+D+ES/9iba9 OcfrdAwiQ/gXCB3KONdQmpXpHX65t4SWFohLBQ6/sUnWt0bu0/5itrzqieuM2L/6 XdNAFoGc4wzML7sZ8EKahl+7lask0Ki3MGnZp9/CzS9CLvlLYflvLjXfvDmKoA8l 4sE6wCFz08sWM7LH0xoVw0lyP1xkn59ph3p94HusAsx29k3P9rpdcQ7ScVfIvBFF 0BEy1u60Izx/OsNSXC6buO5sapzQh+h4UYh+M8aAFX366hrivD6f8fCSMALiHz1X Lg3YRd50mUxp1kBEWARg2QXIxw== -----END CERTIFICATE-----Generated at Mon Jan 12 02:27:57 2026 by rpki-client