This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/ZDQgW-o1TB-Uk9C4CCWs9DdnTbc.roa File: ZDQgW-o1TB-Uk9C4CCWs9DdnTbc.roa (raw, json) Hash identifier: anbd/i67LETYBY+IMEc4joeg2/SQ0meV/I2hOxiNqSE= Subject key identifier: 64:34:20:5B:EA:35:4C:1F:94:93:D0:B8:08:25:AC:F4:37:67:4D:B7 Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA4A66EFDF1E5041E8498A597F0E496 Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/ZDQgW-o1TB-Uk9C4CCWs9DdnTbc.roa Signing time: Thu 01 Jan 2026 22:19:06 +0000 ROA not before: Thu 01 Jan 2026 22:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213478 IP address blocks: 62.122.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:a6:6e:fd:f1:e5:04:1e:84:98:a5:97:f0:e4:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6434205bea354c1f9493d0b80825acf437674db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c6:ca:99:9a:81:d4:70:8c:cb:10:d4:6d:e1: ab:e2:da:49:ff:f8:67:8a:c5:5d:db:de:7a:a8:fa: c2:11:f0:1d:e5:97:28:f2:69:1e:38:89:1e:9a:fa: 36:7e:0a:da:20:ef:15:f9:dc:84:11:76:07:15:c6: bb:a2:a2:68:bd:4b:b9:d2:65:5b:a0:6b:2b:a1:2a: 83:a3:78:f0:05:fb:bd:59:a9:d5:21:7a:3c:14:3e: af:d7:e5:b4:d0:bd:4f:28:a4:8d:6f:3c:4a:79:5d: db:28:8e:2a:f9:5c:5b:20:9c:69:41:de:01:bf:68: 25:5e:7c:94:d8:7e:d5:45:7a:69:f7:a0:ab:d8:e9: f0:02:1a:71:9a:bb:f9:16:b0:89:64:06:a1:8c:6f: b8:e8:46:99:9a:fd:d2:6a:30:2b:a4:5c:bd:e9:bb: 85:54:55:59:ff:92:43:b9:9b:5b:78:74:ad:53:cb: 37:60:48:cd:b5:23:02:8d:c7:fc:0b:0c:f7:16:cc: 81:65:d6:4c:aa:78:18:54:63:38:9f:fd:e2:2a:ab: ee:54:8d:a9:d5:83:02:5e:80:e6:99:7e:64:b4:0e: d6:9c:f8:52:ea:2d:48:8b:7c:1b:31:45:ca:44:4c: 29:ff:aa:d1:74:12:2e:b9:8b:58:d8:4a:62:c1:d7: 7b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:34:20:5B:EA:35:4C:1F:94:93:D0:B8:08:25:AC:F4:37:67:4D:B7 X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/ZDQgW-o1TB-Uk9C4CCWs9DdnTbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.122.184.0/24 Signature Algorithm: sha256WithRSAEncryption 40:24:63:bb:d7:dc:3c:89:9a:4a:cd:fd:5c:4d:f1:8b:0e:4e: 66:c7:94:d2:3c:a0:1d:2b:27:68:46:c5:a0:d3:ae:bb:1c:24: 37:ba:ec:03:cc:a0:df:e3:5e:f0:ef:68:b5:fa:21:69:89:7e: 64:f3:8e:24:1e:28:aa:3a:6b:24:41:8d:e3:b2:97:49:9a:c3: ee:f5:50:95:15:53:bc:a2:c4:87:5b:47:7a:42:c5:f2:07:cc: e7:8f:de:af:7f:db:09:17:14:e9:89:cd:ac:1f:7e:e5:b0:7e: 42:2a:c9:fb:e4:8c:cb:5f:22:c2:8d:39:f7:fb:ca:de:2b:ed: c2:b1:8c:ae:64:a6:3d:92:9e:86:58:28:14:c5:c2:05:86:c7: db:01:55:a5:02:79:e0:8b:e0:d4:2b:5d:10:a2:ef:d2:43:49: e0:32:b9:a1:9b:16:e4:45:62:d9:6d:e3:31:7e:e2:e9:72:72: fa:1d:e7:2a:e2:88:5b:2d:fb:dc:33:87:5b:ef:7d:0c:bf:d5: b0:5a:7d:4d:36:d1:42:54:f2:5b:19:60:c8:61:a6:a7:63:48: fb:e6:5f:96:c9:ca:40:11:4c:0d:66:01:06:ff:ee:6b:e1:be: fc:3f:fc:76:5f:8e:5e:67:3a:58:4b:0a:bd:6b:5e:d6:06:e3: 50:7d:81:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pKZu/fHlBB6EmKWX8OSWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDM0MjA1YmVhMzU0YzFmOTQ5M2QwYjgwODI1YWNmNDM3Njc0ZGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMbKmZqB1HCMyxDUbeGr4tpJ//hn isVd2956qPrCEfAd5Zco8mkeOIkemvo2fgraIO8V+dyEEXYHFca7oqJovUu50mVb oGsroSqDo3jwBfu9WanVIXo8FD6v1+W00L1PKKSNbzxKeV3bKI4q+VxbIJxpQd4B v2glXnyU2H7VRXpp96Cr2OnwAhpxmrv5FrCJZAahjG+46EaZmv3SajArpFy96buF VFVZ/5JDuZtbeHStU8s3YEjNtSMCjcf8Cwz3FsyBZdZMqngYVGM4n/3iKqvuVI2p 1YMCXoDmmX5ktA7WnPhS6i1Ii3wbMUXKREwp/6rRdBIuuYtY2Epiwdd7swIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGQ0IFvqNUwflJPQuAglrPQ3Z023MB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvWkRRZ1ctbzFUQi1VazlDNENDV3M5RGRuVGJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPnq4MA0G CSqGSIb3DQEBCwUAA4IBAQBAJGO719w8iZpKzf1cTfGLDk5mx5TSPKAdKydoRsWg 0667HCQ3uuwDzKDf417w72i1+iFpiX5k844kHiiqOmskQY3jspdJmsPu9VCVFVO8 osSHW0d6QsXyB8znj96vf9sJFxTpic2sH37lsH5CKsn75IzLXyLCjTn3+8reK+3C sYyuZKY9kp6GWCgUxcIFhsfbAVWlAnngi+DUK10Qou/SQ0ngMrmhmxbkRWLZbeMx fuLpcnL6Hecq4ohbLfvcM4db730Mv9WwWn1NNtFCVPJbGWDIYaanY0j75l+WycpA EUwNZgEG/+5r4b78P/x2X45eZzpYSwq9a17WBuNQfYH+ -----END CERTIFICATE-----Generated at Sun Jan 4 10:04:17 2026 by rpki-client