This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/ZHstYNbQVIzP-2ZKbkxjW6QQ7Pg.roa File: ZHstYNbQVIzP-2ZKbkxjW6QQ7Pg.roa (raw, json) Hash identifier: aBB4tMnnzzveWdU2UASR4QZUEGs4H3Uqk6/JXeSUYhU= Subject key identifier: 64:7B:2D:60:D6:D0:54:8C:CF:FB:66:4A:6E:4C:63:5B:A4:10:EC:F8 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B2B58F30FD8545C615C9B12BAD556 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/ZHstYNbQVIzP-2ZKbkxjW6QQ7Pg.roa Signing time: Fri 02 Jan 2026 06:18:05 +0000 ROA not before: Fri 02 Jan 2026 06:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214812 IP address blocks: 79.124.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:2b:58:f3:0f:d8:54:5c:61:5c:9b:12:ba:d5:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=647b2d60d6d0548ccffb664a6e4c635ba410ecf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:eb:59:28:a5:b1:5d:a8:27:f2:25:a4:51:b2: c3:03:83:b5:d3:16:9f:34:de:58:a0:d5:91:5c:60: e5:a4:b4:20:a9:de:98:cd:3e:d1:bd:58:3f:ed:09: 17:43:e9:6c:c0:b4:f0:3a:24:56:86:ee:9c:6d:37: 28:5b:c1:04:d9:44:f4:f9:80:05:fa:3a:f1:ea:4e: 57:7d:cf:e4:33:fd:ae:96:18:f2:90:2c:3c:96:e2: 9e:9e:2f:79:6c:fc:3a:36:ef:e1:25:19:e0:c0:10: 7a:0e:f2:f5:97:d2:9d:aa:36:f9:64:07:f0:a2:1d: da:96:b3:55:70:49:88:8e:84:8d:06:36:1e:5a:12: 47:3f:98:71:ce:a6:f2:b9:73:91:ee:26:a5:fd:77: 75:f2:b4:ad:83:8c:76:c4:7a:78:5f:84:db:64:8e: ec:52:8b:cd:b7:bf:83:d3:70:07:46:8b:85:59:42: e3:e8:8c:0d:6f:bf:97:0a:55:22:f8:c1:03:86:54: d2:cd:41:70:6b:ad:94:4d:6d:2f:13:a6:a5:bd:da: ab:13:70:78:bd:df:24:8f:f0:4e:1d:58:84:88:0e: d8:83:28:32:24:c6:cb:62:fe:eb:1d:d2:de:14:7a: 23:12:48:b2:94:9a:60:f7:2d:a5:ca:a3:79:26:d8: ae:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7B:2D:60:D6:D0:54:8C:CF:FB:66:4A:6E:4C:63:5B:A4:10:EC:F8 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/ZHstYNbQVIzP-2ZKbkxjW6QQ7Pg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.124.82.0/24 Signature Algorithm: sha256WithRSAEncryption c7:dd:02:42:db:bf:8e:20:0a:39:56:5a:c4:0c:ff:fe:20:f6: 09:0f:74:c7:cb:ac:fe:d7:60:70:84:a4:55:e9:ec:7f:0f:0c: be:a3:cb:98:ff:0c:ef:d2:a3:ee:ad:1d:0c:2e:b2:a4:8e:59: eb:c3:3b:cb:4a:2f:96:37:01:2f:61:bc:4b:06:0a:d3:69:0f: d6:a1:48:9f:45:11:72:1b:63:e2:60:1a:61:0e:e3:de:cd:74: 71:be:87:92:bd:d5:11:a5:39:42:c7:a3:23:d5:6a:45:71:41: 68:01:19:2b:aa:3a:4f:39:dd:da:f1:ee:08:af:f0:97:36:96: 41:2e:cd:be:0c:db:1d:62:a7:5b:27:8f:e8:f6:1b:b4:df:c0: 87:3c:3e:df:b0:cd:f5:9b:82:0d:0e:cb:64:2c:ff:b3:08:01: 95:d1:ac:1f:f6:e6:ac:2a:48:4f:e1:2c:df:1e:7d:8a:b3:ba: 85:bb:7c:e9:f2:33:83:1a:10:1d:b4:57:ca:05:11:84:6f:0e: 70:cf:92:5f:4d:3f:b8:97:78:f1:69:9f:d8:33:c1:d7:fe:42: 63:ac:09:d3:ac:2d:a7:bb:e1:4e:88:94:98:c4:df:49:46:3c: 3f:66:27:af:45:b0:8a:55:14:cf:ad:8e:79:a1:82:2f:df:3d: 21:19:82:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WytY8w/YVFxhXJsSutVWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDdiMmQ2MGQ2ZDA1NDhjY2ZmYjY2NGE2ZTRjNjM1YmE0MTBlY2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3etZKKWxXagn8iWkUbLDA4O10xaf NN5YoNWRXGDlpLQgqd6YzT7RvVg/7QkXQ+lswLTwOiRWhu6cbTcoW8EE2UT0+YAF +jrx6k5Xfc/kM/2ulhjykCw8luKeni95bPw6Nu/hJRngwBB6DvL1l9Kdqjb5ZAfw oh3alrNVcEmIjoSNBjYeWhJHP5hxzqbyuXOR7ial/Xd18rStg4x2xHp4X4TbZI7s UovNt7+D03AHRouFWULj6IwNb7+XClUi+MEDhlTSzUFwa62UTW0vE6alvdqrE3B4 vd8kj/BOHViEiA7YgygyJMbLYv7rHdLeFHojEkiylJpg9y2lyqN5JtiutwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGR7LWDW0FSMz/tmSm5MY1ukEOz4MB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvWkhzdFlOYlFWSXpQLTJaS2JreGpXNlFRN1BnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT3xSMA0G CSqGSIb3DQEBCwUAA4IBAQDH3QJC27+OIAo5VlrEDP/+IPYJD3THy6z+12BwhKRV 6ex/Dwy+o8uY/wzv0qPurR0MLrKkjlnrwzvLSi+WNwEvYbxLBgrTaQ/WoUifRRFy G2PiYBphDuPezXRxvoeSvdURpTlCx6Mj1WpFcUFoARkrqjpPOd3a8e4Ir/CXNpZB Ls2+DNsdYqdbJ4/o9hu038CHPD7fsM31m4INDstkLP+zCAGV0awf9uasKkhP4Szf Hn2Ks7qFu3zp8jODGhAdtFfKBRGEbw5wz5JfTT+4l3jxaZ/YM8HX/kJjrAnTrC2n u+FOiJSYxN9JRjw/ZievRbCKVRTPrY55oYIv3z0hGYL2 -----END CERTIFICATE-----Generated at Fri Jan 23 18:47:55 2026 by rpki-client