This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ziRxt-QrUjoFhgBS0vnvMnZEbrc.roa File: ziRxt-QrUjoFhgBS0vnvMnZEbrc.roa (raw, json) Hash identifier: 4EJped0hIHU230UBo2AUMygk1A6ip6xYt4f4LUsz5qQ= Subject key identifier: CE:24:71:B7:E4:2B:52:3A:05:86:00:52:D2:F9:EF:32:76:44:6E:B7 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019C2432D14263A4712489F33B293F3DF46A Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ziRxt-QrUjoFhgBS0vnvMnZEbrc.roa Signing time: Tue 03 Feb 2026 15:50:36 +0000 ROA not before: Tue 03 Feb 2026 15:50:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48014 IP address blocks: 80.76.51.0/24 maxlen: 24 87.121.162.0/24 maxlen: 24 93.123.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:24:32:d1:42:63:a4:71:24:89:f3:3b:29:3f:3d:f4:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Feb 3 15:50:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce2471b7e42b523a05860052d2f9ef3276446eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0e:e6:c1:3c:8d:e6:e8:c3:11:5e:b4:8f:31: 3c:a3:33:c7:e1:fb:70:5c:fc:09:c9:e9:4f:be:97: 20:14:41:32:b4:f7:a3:ff:43:87:fe:a8:77:eb:87: c1:ee:d5:bf:a6:e3:03:81:fc:11:fc:31:f9:b7:7d: 55:f1:fe:ab:ce:ad:cf:1e:76:68:ab:29:50:64:9a: 7b:1c:0d:65:84:13:9f:93:d8:4b:1f:e5:3b:d4:72: 83:e8:5a:47:ae:3c:d6:85:78:0a:f1:cc:9d:df:5f: 34:ac:2b:71:a6:65:b2:fa:49:4d:74:ea:85:7e:e3: af:e0:cc:13:f2:a0:f5:01:86:ac:94:66:75:b0:8a: 14:53:0d:a9:31:0c:c8:9a:25:49:ad:16:bc:d8:e3: da:a2:b8:0c:23:be:ff:45:67:2d:0f:0d:5a:05:cf: ad:cc:53:7f:cb:85:0f:26:b8:6d:af:d2:3c:10:5e: d7:a0:ca:14:d1:f8:e1:2f:54:fb:7c:fa:94:55:fa: 5c:db:b8:ce:6d:79:c8:e7:58:8c:c0:f5:fa:86:43: ea:dc:a0:41:75:83:16:44:b9:65:f9:d6:c0:16:9c: 0d:06:fc:2b:a0:3e:35:cf:47:16:8e:65:73:45:e7: 28:f9:4c:f4:18:a4:e2:eb:e0:92:7b:68:f5:7a:b8: 08:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:24:71:B7:E4:2B:52:3A:05:86:00:52:D2:F9:EF:32:76:44:6E:B7 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ziRxt-QrUjoFhgBS0vnvMnZEbrc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.76.51.0/24 87.121.162.0/24 93.123.46.0/24 Signature Algorithm: sha256WithRSAEncryption 11:8d:24:1f:43:91:65:9b:42:ff:36:6c:b0:1a:35:e0:47:1f: 0f:ac:e8:71:79:ee:6f:1e:9d:33:8a:00:21:cb:00:ee:82:b3: bf:68:bb:bf:8e:0f:9f:82:90:dd:8b:15:0e:50:f6:5d:67:17: f5:f2:c6:ed:0e:9e:41:f2:d8:cf:39:79:27:c8:ef:7e:6e:53: 85:f9:8d:b3:e9:13:38:f9:2c:8b:b5:50:f8:56:92:9e:a0:0c: 04:b8:e6:c9:e3:05:4f:ab:82:4e:2d:56:0f:f4:a7:58:40:67: 38:64:75:01:f8:60:be:a8:56:a6:42:97:e3:b4:ac:b6:6a:21: f5:39:1e:93:ad:4b:81:2d:9e:c5:e4:47:58:12:91:4e:9f:e0: 6a:14:9e:30:d8:80:bd:f6:a7:3d:f8:f2:fc:f2:86:9d:1f:96: 8c:8a:1e:88:61:3d:43:6b:27:4f:f8:83:7a:f0:fd:2d:d5:04: 89:4d:ba:60:fc:1a:16:ba:31:aa:f0:12:33:6e:2d:80:83:b1: 78:6a:6d:c5:0f:d3:11:a0:aa:35:53:e1:e5:30:82:5d:b1:3b: 7a:91:93:86:70:d5:fd:bc:fa:9a:77:57:cc:8a:71:43:57:99: b5:6a:e5:de:91:6f:69:59:e7:3c:d5:17:39:30:71:9b:40:17: d0:26:a4:28 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZwkMtFCY6RxJInzOyk/PfRqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMjAzMTU1MDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTI0NzFiN2U0MmI1MjNhMDU4NjAwNTJkMmY5ZWYzMjc2NDQ2ZWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg7mwTyN5ujDEV60jzE8ozPH4ftw XPwJyelPvpcgFEEytPej/0OH/qh364fB7tW/puMDgfwR/DH5t31V8f6rzq3PHnZo qylQZJp7HA1lhBOfk9hLH+U71HKD6FpHrjzWhXgK8cyd3180rCtxpmWy+klNdOqF fuOv4MwT8qD1AYaslGZ1sIoUUw2pMQzImiVJrRa82OPaorgMI77/RWctDw1aBc+t zFN/y4UPJrhtr9I8EF7XoMoU0fjhL1T7fPqUVfpc27jObXnI51iMwPX6hkPq3KBB dYMWRLll+dbAFpwNBvwroD41z0cWjmVzReco+Uz0GKTi6+CSe2j1ergIwQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFM4kcbfkK1I6BYYAUtL57zJ2RG63MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvemlSeHQtUXJVam9GaGdCUzB2bnZNblpFYnJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUEwzAwQA V3miAwQAXXsuMA0GCSqGSIb3DQEBCwUAA4IBAQARjSQfQ5Flm0L/NmywGjXgRx8P rOhxee5vHp0zigAhywDugrO/aLu/jg+fgpDdixUOUPZdZxf18sbtDp5B8tjPOXkn yO9+blOF+Y2z6RM4+SyLtVD4VpKeoAwEuObJ4wVPq4JOLVYP9KdYQGc4ZHUB+GC+ qFamQpfjtKy2aiH1OR6TrUuBLZ7F5EdYEpFOn+BqFJ4w2IC99qc9+PL88oadH5aM ih6IYT1DaydP+IN68P0t1QSJTbpg/BoWujGq8BIzbi2Ag7F4am3FD9MRoKo1U+Hl MIJdsTt6kZOGcNX9vPqad1fMinFDV5m1auXekW9pWec81Rc5MHGbQBfQJqQo -----END CERTIFICATE-----Generated at Thu Feb 5 15:32:54 2026 by rpki-client