This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/ZW-BTJk2TvWox6Tuvq9T-7dcEOA.roa File: ZW-BTJk2TvWox6Tuvq9T-7dcEOA.roa (raw, json) Hash identifier: yW+5VTpkbQ7W1B2SHYsFwyjyj2q/DQTztYNH8ZNOMQg= Subject key identifier: 65:6F:81:4C:99:36:4E:F5:A8:C7:A4:EE:BE:AF:53:FB:B7:5C:10:E0 Certificate issuer: /CN=63b5072a0701221e1d291f02deb8cd5169e6ac32 Certificate serial: 019B7D5CECEC6834D995276AE6D33B1D4958 Authority key identifier: 63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/ZW-BTJk2TvWox6Tuvq9T-7dcEOA.roa Signing time: Fri 02 Jan 2026 06:20:00 +0000 ROA not before: Fri 02 Jan 2026 06:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215770 IP address blocks: 91.238.217.0/24 maxlen: 24 2a14:6280::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ec:ec:68:34:d9:95:27:6a:e6:d3:3b:1d:49:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63b5072a0701221e1d291f02deb8cd5169e6ac32 Validity Not Before: Jan 2 06:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=656f814c99364ef5a8c7a4eebeaf53fbb75c10e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:76:80:c6:58:b9:ee:ab:45:10:a7:2f:25:46: e6:77:9e:9e:7a:51:46:e5:47:64:24:0e:a6:1b:29: a0:5b:44:40:fc:00:af:c8:7a:20:74:4e:73:6a:73: dc:e0:80:88:6a:b1:91:a3:61:b1:84:de:ee:37:dd: e9:2e:44:56:f0:2f:49:0e:57:df:d7:41:ee:7f:55: 2a:f5:24:b2:36:5e:3a:6c:cb:b3:e5:85:ae:f3:a8: 1f:20:f3:39:12:18:dd:16:f4:db:6a:c8:c5:e9:2f: fe:3e:38:48:fe:1b:38:73:11:b1:25:e8:7d:f2:15: 2b:13:dc:e2:cf:98:a6:75:8b:1f:93:8d:cb:00:19: 26:ad:75:3e:79:1b:fb:de:69:de:06:11:8c:81:b3: 8a:6d:af:f8:dd:15:00:df:31:80:19:b8:0b:ed:e3: 7d:b5:16:db:90:88:b7:d1:a6:ac:aa:56:07:9c:fa: da:2d:71:75:a9:a6:58:7a:67:76:99:5b:1c:af:e2: f2:11:bf:d3:91:06:12:a4:69:d7:a1:03:cb:95:60: 3a:14:a3:d5:48:e7:2c:be:4e:db:b3:af:2f:62:37: 2e:5d:3f:19:0f:16:0d:98:23:9a:07:d7:82:db:59: 77:35:49:62:46:77:96:68:fc:c2:61:70:1e:05:4a: 92:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6F:81:4C:99:36:4E:F5:A8:C7:A4:EE:BE:AF:53:FB:B7:5C:10:E0 X509v3 Authority Key Identifier: keyid:63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/ZW-BTJk2TvWox6Tuvq9T-7dcEOA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.238.217.0/24 IPv6: 2a14:6280::/29 Signature Algorithm: sha256WithRSAEncryption 83:41:1b:07:76:f2:86:26:73:19:f4:a0:c2:83:3a:e9:87:dd: 06:cd:9d:0f:02:c1:6c:bf:15:c0:54:d6:ba:12:99:c5:9c:3d: 36:4e:2c:30:b6:9a:dd:ac:4b:5d:a9:81:08:51:26:b1:31:e1: 9d:80:87:fc:e4:eb:31:e6:a4:e1:da:5e:c8:a5:a4:1c:7f:b1: 8a:c8:fe:82:83:16:78:56:65:cb:3e:ff:c7:da:8e:b5:76:dc: 09:5b:c1:fe:d1:85:6b:07:15:19:90:c2:99:55:4f:85:bc:2f: e1:b0:8f:a8:af:8b:d2:6b:5d:4c:2c:c9:9c:2d:bd:55:9b:ef: f6:0e:48:71:f4:c7:0c:3c:3b:88:99:b8:d3:5b:74:51:76:2d: eb:ca:d5:6d:a1:f4:dc:91:5b:f4:ff:9a:1f:9c:43:e6:a2:2d: eb:63:6e:f6:5d:dc:57:55:55:53:75:ef:aa:ab:4f:8d:f6:f8: 8f:d7:bc:d1:d3:eb:95:e3:b5:f3:ac:a7:12:cc:97:f8:36:24: 49:67:07:96:5e:cd:fc:aa:80:43:de:53:f0:9a:af:47:95:44: d5:96:11:b8:38:56:b6:63:35:57:f8:10:48:8c:23:33:fa:f5: 5f:d5:55:9b:97:39:db:8d:66:1a:60:f7:05:9d:9c:20:ff:a5: c9:77:98:c1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XOzsaDTZlSdq5tM7HUlYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzYjUwNzJhMDcwMTIyMWUxZDI5MWYwMmRlYjhjZDUxNjll NmFjMzIwHhcNMjYwMTAyMDYyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTZmODE0Yzk5MzY0ZWY1YThjN2E0ZWViZWFmNTNmYmI3NWMxMGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3naAxli57qtFEKcvJUbmd56eelFG 5UdkJA6mGymgW0RA/ACvyHogdE5zanPc4ICIarGRo2GxhN7uN93pLkRW8C9JDlff 10Huf1Uq9SSyNl46bMuz5YWu86gfIPM5EhjdFvTbasjF6S/+PjhI/hs4cxGxJeh9 8hUrE9ziz5imdYsfk43LABkmrXU+eRv73mneBhGMgbOKba/43RUA3zGAGbgL7eN9 tRbbkIi30aasqlYHnPraLXF1qaZYemd2mVscr+LyEb/TkQYSpGnXoQPLlWA6FKPV SOcsvk7bs68vYjcuXT8ZDxYNmCOaB9eC21l3NUliRneWaPzCYXAeBUqSrwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGVvgUyZNk71qMek7r6vU/u3XBDgMB8GA1UdIwQY MBaAFGO1ByoHASIeHSkfAt64zVFp5qwyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTdVSEtnY0JJaDRkS1I4QzNyak5VV25tckRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mYzhjYjQtY2U4NC00M2U0LWFhMmEt ZjM5MWRjMTE3ZmU5LzEvWlctQlRKazJUdldveDZUdXZxOVQtN2RjRU9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9mYzhjYjQtY2U4NC00M2U0LWFhMmEtZjM5MWRjMTE3ZmU5 LzEvWTdVSEtnY0JJaDRkS1I4QzNyak5VV25tckRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW+7ZMA0E AgACMAcDBQMqFGKAMA0GCSqGSIb3DQEBCwUAA4IBAQCDQRsHdvKGJnMZ9KDCgzrp h90GzZ0PAsFsvxXAVNa6EpnFnD02TiwwtprdrEtdqYEIUSaxMeGdgIf85Osx5qTh 2l7IpaQcf7GKyP6CgxZ4VmXLPv/H2o61dtwJW8H+0YVrBxUZkMKZVU+FvC/hsI+o r4vSa11MLMmcLb1Vm+/2Dkhx9McMPDuImbjTW3RRdi3rytVtofTckVv0/5ofnEPm oi3rY272XdxXVVVTde+qq0+N9viP17zR0+uV47XzrKcSzJf4NiRJZweWXs38qoBD 3lPwmq9HlUTVlhG4OFa2YzVX+BBIjCMz+vVf1VWblznbjWYaYPcFnZwg/6XJd5jB -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:05 2026 by rpki-client