This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/ZjZpopADEszQ-pk8iJcM4buK_Vk.roa File: ZjZpopADEszQ-pk8iJcM4buK_Vk.roa (raw, json) Hash identifier: kT/wMhqwMSPuX9SvpMfdYohIGO0Je1OedjWoKvA8CNs= Subject key identifier: 66:36:69:A2:90:03:12:CC:D0:FA:99:3C:88:97:0C:E1:BB:8A:FD:59 Certificate issuer: /CN=d1c4913094a21268c73a67653a3738d73e5c59a7 Certificate serial: 019B78A36C99CBF3A2350DDEE8172FD6FD86 Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/ZjZpopADEszQ-pk8iJcM4buK_Vk.roa Signing time: Thu 01 Jan 2026 08:18:54 +0000 ROA not before: Thu 01 Jan 2026 08:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39120 IP address blocks: 185.112.60.0/24 maxlen: 24 185.112.61.0/24 maxlen: 24 185.112.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:6c:99:cb:f3:a2:35:0d:de:e8:17:2f:d6:fd:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7 Validity Not Before: Jan 1 08:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=663669a2900312ccd0fa993c88970ce1bb8afd59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b9:d4:b1:7e:d1:f2:bd:ac:89:4f:d9:1d:4e: a1:1b:ad:05:1e:03:86:96:37:e8:cc:d9:d8:58:51: 78:f6:42:58:a3:da:fe:09:b5:73:c7:ed:0e:de:e0: dc:b6:ce:26:18:3c:60:43:3d:01:7f:80:61:c7:9c: b8:19:bc:d7:68:7b:3a:38:9d:f7:6b:d9:7b:b8:6e: 9b:52:83:a9:8b:47:35:2e:de:bb:ad:a6:03:f6:14: 2b:46:a0:f6:76:60:2b:b5:bd:0e:74:1b:48:65:46: dc:00:5e:fb:b9:d6:0d:d3:58:8b:66:8b:b3:30:0d: ac:d6:60:31:55:25:43:40:1c:ac:81:b8:db:5c:09: e6:31:59:06:a5:1d:03:a3:ee:4d:db:99:ea:71:0b: 6e:81:66:c1:1c:5f:6a:08:66:8e:a2:fa:b0:f1:88: ed:fc:76:6a:39:46:e6:29:aa:97:64:ad:57:71:b3: ec:b7:d9:e0:db:fc:09:fa:03:b9:a7:bf:cc:ff:e6: d1:e6:42:e4:b7:29:12:c7:d6:fe:90:97:2c:99:a0: 84:67:bd:56:e8:07:91:98:15:7a:c1:d7:b3:74:e7: 86:81:62:9a:42:79:fb:03:ab:62:92:d0:70:43:34: 60:21:f3:33:ed:99:84:90:77:bc:65:ea:86:01:e3: 7e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:36:69:A2:90:03:12:CC:D0:FA:99:3C:88:97:0C:E1:BB:8A:FD:59 X509v3 Authority Key Identifier: keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/ZjZpopADEszQ-pk8iJcM4buK_Vk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.112.60.0-185.112.62.255 Signature Algorithm: sha256WithRSAEncryption 17:18:19:d9:58:48:ee:f7:99:39:cb:e1:88:fb:7e:0f:25:71: 1f:23:65:cb:2b:41:53:c1:77:4e:60:1f:8f:03:67:e4:74:f4: c0:fc:11:72:6c:fa:1a:1b:59:d1:1c:f7:31:b7:4e:b7:19:52: 38:3d:a0:4b:a2:69:29:62:cf:8d:8f:7c:24:ca:d9:2e:57:4d: d4:e6:1e:44:76:a3:2f:75:4c:d9:a6:e4:43:c5:35:c9:77:1f: 35:4b:ec:a6:03:65:d9:55:eb:0d:55:db:6b:d6:44:de:4f:48: 6e:8d:de:24:d3:fa:f6:0d:37:91:d6:2c:95:66:c4:8f:3f:89: 70:2e:c4:14:18:ba:76:02:cf:c9:46:7e:a3:29:da:a6:a7:ab: d3:78:03:de:3e:5a:3a:07:b6:ab:9f:33:81:52:b4:f5:26:b4: 75:4c:bf:d2:e1:5d:37:11:56:ce:64:9e:ff:13:6c:1e:aa:66: 34:07:49:0e:01:19:eb:63:15:a0:c6:c4:d6:30:37:50:ef:fd: 56:d2:8e:62:6e:74:04:ce:53:f0:ca:41:e7:db:19:c8:81:e7: c6:6f:1b:59:11:78:e4:47:c8:fa:54:62:b7:fa:3f:33:11:7d: 1d:62:be:f8:9c:6d:31:9a:77:af:5a:e8:b9:f4:bb:73:26:3d: c1:86:be:d0 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4o2yZy/OiNQ3e6Bcv1v2GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYzQ5MTMwOTRhMjEyNjhjNzNhNjc2NTNhMzczOGQ3M2U1 YzU5YTcwHhcNMjYwMTAxMDgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjM2NjlhMjkwMDMxMmNjZDBmYTk5M2M4ODk3MGNlMWJiOGFmZDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbnUsX7R8r2siU/ZHU6hG60FHgOG ljfozNnYWFF49kJYo9r+CbVzx+0O3uDcts4mGDxgQz0Bf4Bhx5y4GbzXaHs6OJ33 a9l7uG6bUoOpi0c1Lt67raYD9hQrRqD2dmArtb0OdBtIZUbcAF77udYN01iLZouz MA2s1mAxVSVDQBysgbjbXAnmMVkGpR0Do+5N25nqcQtugWbBHF9qCGaOovqw8Yjt /HZqOUbmKaqXZK1XcbPst9ng2/wJ+gO5p7/M/+bR5kLktykSx9b+kJcsmaCEZ71W 6AeRmBV6wdezdOeGgWKaQnn7A6tiktBwQzRgIfMz7ZmEkHe8ZeqGAeN+ywIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGY2aaKQAxLM0PqZPIiXDOG7iv1ZMB8GA1UdIwQY MBaAFNHEkTCUohJoxzpnZTo3ONc+XFmnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGNTUk1KU2lFbWpIT21kbE9qYzQxejVjV2FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iZDRlNWMtNDE0Ny00MTMxLTg3NTAt MzNhODJhYjVmNTEzLzEvWmpacG9wQURFc3pRLXBrOGlKY000YnVLX1ZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9iZDRlNWMtNDE0Ny00MTMxLTg3NTAtMzNhODJhYjVmNTEz LzEvMGNTUk1KU2lFbWpIT21kbE9qYzQxejVjV2FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK5cDwD BAC5cD4wDQYJKoZIhvcNAQELBQADggEBABcYGdlYSO73mTnL4Yj7fg8lcR8jZcsr QVPBd05gH48DZ+R09MD8EXJs+hobWdEc9zG3TrcZUjg9oEuiaSliz42PfCTK2S5X TdTmHkR2oy91TNmm5EPFNcl3HzVL7KYDZdlV6w1V22vWRN5PSG6N3iTT+vYNN5HW LJVmxI8/iXAuxBQYunYCz8lGfqMp2qanq9N4A94+WjoHtqufM4FStPUmtHVMv9Lh XTcRVs5knv8TbB6qZjQHSQ4BGetjFaDGxNYwN1Dv/VbSjmJudATOU/DKQefbGciB 58ZvG1kReORHyPpUYrf6PzMRfR1ivvicbTGad69a6Ln0u3MmPcGGvtA= -----END CERTIFICATE-----Generated at Tue Feb 10 03:07:16 2026 by rpki-client