This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/zj200RuKdpZrL2yUewyZ-NgS1ew.roa File: zj200RuKdpZrL2yUewyZ-NgS1ew.roa (raw, json) Hash identifier: nKGrTTyUTBGBPOL1UXCT2DYIpDHj2/+MwhTA2bft4VQ= Subject key identifier: CE:3D:B4:D1:1B:8A:76:96:6B:2F:6C:94:7B:0C:99:F8:D8:12:D5:EC Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019B7EA6E753C9FE33F6A8B40A8874BB933B Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/zj200RuKdpZrL2yUewyZ-NgS1ew.roa Signing time: Fri 02 Jan 2026 12:20:26 +0000 ROA not before: Fri 02 Jan 2026 12:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 5.172.36.0/24 maxlen: 24 178.254.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:e7:53:c9:fe:33:f6:a8:b4:0a:88:74:bb:93:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Jan 2 12:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce3db4d11b8a76966b2f6c947b0c99f8d812d5ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:30:17:dd:72:b9:c3:76:92:a4:4e:3e:38:0e: 95:df:83:70:73:12:08:e3:e4:8d:8a:64:48:a1:1c: 21:7b:bc:38:fc:45:5a:c1:bc:f9:aa:df:43:0c:3c: 81:22:c7:df:55:be:38:05:48:43:7b:d8:8f:5e:22: a5:97:0d:f6:bb:9c:55:ed:e8:53:e2:f6:c8:43:d0: 9e:28:86:62:8e:c8:f4:d6:46:9b:ea:b0:66:09:93: ca:13:81:20:c8:88:71:b8:10:b5:5c:58:eb:f1:e5: 1e:04:ea:f9:93:2e:68:7b:f3:7a:13:8e:20:7c:e3: a0:fa:41:80:4b:7a:de:39:2b:df:f5:90:9e:56:d0: aa:8d:cc:d7:f8:97:26:13:e3:c0:07:5b:fa:65:a4: ad:db:2b:bb:a0:1f:f9:c6:67:e3:e4:37:88:af:71: 84:16:72:6a:cd:ff:4d:b2:29:6c:b2:60:0b:3e:e8: c0:0d:f9:77:26:18:62:68:c7:ba:58:a9:2a:0b:b5: 52:b9:02:24:22:0c:b1:74:50:28:32:9e:6c:bf:59: 5d:79:09:32:d8:67:56:55:33:2c:24:1b:05:e1:29: d2:4f:91:04:9b:cd:61:9b:78:be:df:53:78:16:0b: 67:02:e9:48:f0:7f:a5:50:9b:6e:cc:2d:00:ef:fd: 61:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3D:B4:D1:1B:8A:76:96:6B:2F:6C:94:7B:0C:99:F8:D8:12:D5:EC X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/zj200RuKdpZrL2yUewyZ-NgS1ew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.172.36.0/24 178.254.178.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:46:e3:a8:1f:7f:e2:de:19:ac:cf:55:7e:77:31:b0:53:29: 2b:d6:d9:11:14:ea:ab:65:e6:ce:65:4d:ab:2e:fa:b2:1e:70: 2d:60:4d:3b:85:dd:03:16:85:4a:a5:a3:c3:02:29:a2:54:96: 8f:c5:fa:34:bd:cc:8f:18:5b:c1:43:7e:f5:07:ba:50:73:95: 2f:12:a7:5e:bd:dc:26:a8:58:51:bf:3e:83:28:a6:73:0d:db: f7:09:62:3d:91:fc:1c:11:78:fa:87:75:36:27:43:d7:e6:a6: 8b:f2:ec:a8:f8:21:06:7f:41:32:2e:be:68:b6:1f:8c:99:20: 27:a0:a2:00:b0:30:d7:e6:f0:47:b0:4d:4e:57:cb:47:73:0e: da:a0:28:1a:5a:3f:55:c5:23:80:38:15:e4:47:42:55:e1:ec: 32:c1:b8:eb:54:66:7b:31:87:07:18:63:bb:a2:9f:92:70:ab: 80:5b:da:de:06:08:90:b9:73:1e:84:1a:40:68:63:19:25:5a: e3:e4:52:fc:c1:93:df:8b:80:96:e4:23:e1:34:7b:ff:7e:bc: eb:34:69:5b:a4:88:48:5e:97:86:d7:8c:d4:90:ab:d7:98:58: ad:00:13:d8:c3:d6:75:cf:f1:36:d6:1d:8e:21:e7:23:41:fb: 7e:c4:18:d1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pudTyf4z9qi0Coh0u5M7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjYwMTAyMTIyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTNkYjRkMTFiOGE3Njk2NmIyZjZjOTQ3YjBjOTlmOGQ4MTJkNWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDAX3XK5w3aSpE4+OA6V34NwcxII 4+SNimRIoRwhe7w4/EVawbz5qt9DDDyBIsffVb44BUhDe9iPXiKllw32u5xV7ehT 4vbIQ9CeKIZijsj01kab6rBmCZPKE4EgyIhxuBC1XFjr8eUeBOr5ky5oe/N6E44g fOOg+kGAS3reOSvf9ZCeVtCqjczX+JcmE+PAB1v6ZaSt2yu7oB/5xmfj5DeIr3GE FnJqzf9NsilssmALPujADfl3JhhiaMe6WKkqC7VSuQIkIgyxdFAoMp5sv1ldeQky 2GdWVTMsJBsF4SnST5EEm81hm3i+31N4FgtnAulI8H+lUJtuzC0A7/1hJQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM49tNEbinaWay9slHsMmfjYEtXsMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvemoyMDBSdUtkcFpyTDJ5VWV3eVotTmdTMWV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABawkAwQA sv6yMA0GCSqGSIb3DQEBCwUAA4IBAQA/RuOoH3/i3hmsz1V+dzGwUykr1tkRFOqr ZebOZU2rLvqyHnAtYE07hd0DFoVKpaPDAimiVJaPxfo0vcyPGFvBQ371B7pQc5Uv EqdevdwmqFhRvz6DKKZzDdv3CWI9kfwcEXj6h3U2J0PX5qaL8uyo+CEGf0EyLr5o th+MmSAnoKIAsDDX5vBHsE1OV8tHcw7aoCgaWj9VxSOAOBXkR0JV4ewywbjrVGZ7 MYcHGGO7op+ScKuAW9reBgiQuXMehBpAaGMZJVrj5FL8wZPfi4CW5CPhNHv/frzr NGlbpIhIXpeG14zUkKvXmFitABPYw9Z1z/E21h2OIecjQft+xBjR -----END CERTIFICATE-----Generated at Mon Jan 12 00:51:30 2026 by rpki-client