This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/zSbJ_zmLsvnYD4Tj3NdHFOYhGs0.roa File: zSbJ_zmLsvnYD4Tj3NdHFOYhGs0.roa (raw, json) Hash identifier: DJQ4yfm4mN/el8pVTO9ZIBKqMkmNeH54/xwSWHyykMo= Subject key identifier: CD:26:C9:FF:39:8B:B2:F9:D8:0F:84:E3:DC:D7:47:14:E6:21:1A:CD Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019B77C72AF6FAC944DA6ECF181375A10C47 Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/zSbJ_zmLsvnYD4Tj3NdHFOYhGs0.roa Signing time: Thu 01 Jan 2026 04:18:19 +0000 ROA not before: Thu 01 Jan 2026 04:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53363 IP address blocks: 91.194.11.0/24 maxlen: 24 146.19.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:2a:f6:fa:c9:44:da:6e:cf:18:13:75:a1:0c:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Jan 1 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd26c9ff398bb2f9d80f84e3dcd74714e6211acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:03:78:14:5b:94:73:61:ba:42:ac:e8:95:1f: a1:eb:10:71:1d:d1:48:2d:66:ee:48:41:84:c5:a7: fd:f0:93:61:43:b2:b5:ae:7d:b4:d6:aa:e1:71:f4: a5:2f:47:6f:53:08:e0:78:d0:14:f4:cf:9b:ba:03: 54:2d:0c:8f:b4:54:ad:2e:2f:4f:8e:19:90:b1:84: 1c:00:9f:73:1e:42:54:ad:34:8a:9b:dd:f7:9e:a9: 36:a3:1b:cf:94:bf:10:e7:9c:69:11:de:2d:94:55: 0d:6f:0f:98:00:af:c3:4f:39:ca:22:b6:65:8a:41: c3:5e:c3:3e:e5:71:5a:db:73:e4:7d:f2:3e:dd:f1: 51:b7:8f:43:5a:3b:e6:fc:12:29:3d:4e:d7:48:4d: 85:0e:a8:88:9c:8e:31:b2:a9:d8:ef:df:ee:19:bd: fd:c7:9a:28:1f:89:6e:c6:83:d7:83:26:d1:02:40: 2a:34:b9:8e:d2:d9:ca:fd:2e:9f:08:41:1e:02:40: ff:28:98:9a:5f:1d:fe:1a:8e:83:a0:e3:c3:86:eb: 04:51:f6:d0:59:70:79:a7:02:2f:a6:b7:17:1a:20: a4:83:e7:32:22:c1:fb:f2:3a:84:78:8b:3b:f1:3a: 69:69:db:02:c7:d8:9d:19:a9:3c:b7:45:5a:e7:a8: 31:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:26:C9:FF:39:8B:B2:F9:D8:0F:84:E3:DC:D7:47:14:E6:21:1A:CD X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/zSbJ_zmLsvnYD4Tj3NdHFOYhGs0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.11.0/24 146.19.106.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:4b:d7:44:a8:c8:03:12:50:be:9c:66:03:cb:94:69:2c:d9: 43:cd:d1:d8:56:fc:59:fe:ac:26:b0:ef:a6:91:f6:de:2c:e7: 0a:9d:8b:cc:54:bf:4f:48:78:17:c9:63:e8:1f:3f:7f:01:bc: 04:67:f4:e0:87:81:43:46:ba:83:75:96:ab:27:11:91:1e:0c: 05:ca:ad:31:8b:40:c6:b5:67:f0:d1:06:35:5f:4b:8f:d7:b7: eb:fb:20:54:61:f7:18:40:3b:42:7c:ce:76:fe:b9:32:d3:6f: cc:de:f0:8e:35:e7:34:ef:b1:42:2a:aa:43:37:0b:53:4b:23: 09:29:96:f1:1a:6f:9a:ae:48:b5:a4:d6:12:5f:4e:75:9e:9d: 21:37:cf:e0:cb:f1:1d:9e:91:95:96:cf:e3:46:cf:de:5b:7d: 78:47:9d:aa:2e:bd:03:da:81:5d:3b:28:9e:6b:5b:dd:ee:d3: d5:60:3a:da:30:97:70:c4:d4:cc:39:71:fa:12:4c:03:6d:81: 63:ea:ea:70:6b:04:54:2d:f3:9e:0b:ea:1b:6c:6d:c9:09:c2: bd:68:df:ae:3b:e5:ef:7a:76:58:43:88:80:65:fc:96:42:01: 95:fe:90:25:47:ac:d2:c6:87:1a:ec:47:86:32:f4:29:bb:12: 6d:7c:28:7a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xyr2+slE2m7PGBN1oQxHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjYwMTAxMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDI2YzlmZjM5OGJiMmY5ZDgwZjg0ZTNkY2Q3NDcxNGU2MjExYWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwN4FFuUc2G6QqzolR+h6xBxHdFI LWbuSEGExaf98JNhQ7K1rn201qrhcfSlL0dvUwjgeNAU9M+bugNULQyPtFStLi9P jhmQsYQcAJ9zHkJUrTSKm933nqk2oxvPlL8Q55xpEd4tlFUNbw+YAK/DTznKIrZl ikHDXsM+5XFa23PkffI+3fFRt49DWjvm/BIpPU7XSE2FDqiInI4xsqnY79/uGb39 x5ooH4luxoPXgybRAkAqNLmO0tnK/S6fCEEeAkD/KJiaXx3+Go6DoOPDhusEUfbQ WXB5pwIvprcXGiCkg+cyIsH78jqEeIs78TppadsCx9idGak8t0Va56gxNwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM0myf85i7L52A+E49zXRxTmIRrNMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvelNiSl96bUxzdm5ZRDRUajNOZEhGT1loR3MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8ILAwQA khNqMA0GCSqGSIb3DQEBCwUAA4IBAQAcS9dEqMgDElC+nGYDy5RpLNlDzdHYVvxZ /qwmsO+mkfbeLOcKnYvMVL9PSHgXyWPoHz9/AbwEZ/Tgh4FDRrqDdZarJxGRHgwF yq0xi0DGtWfw0QY1X0uP17fr+yBUYfcYQDtCfM52/rky02/M3vCONec077FCKqpD NwtTSyMJKZbxGm+arki1pNYSX051np0hN8/gy/EdnpGVls/jRs/eW314R52qLr0D 2oFdOyiea1vd7tPVYDraMJdwxNTMOXH6EkwDbYFj6upwawRULfOeC+obbG3JCcK9 aN+uO+XvenZYQ4iAZfyWQgGV/pAlR6zSxoca7EeGMvQpuxJtfCh6 -----END CERTIFICATE-----Generated at Wed Jan 21 06:47:51 2026 by rpki-client