This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Zcum-wxPPLmWALLZ6MSWFP7YNwo.roa File: Zcum-wxPPLmWALLZ6MSWFP7YNwo.roa (raw, json) Hash identifier: P0eQWWac1naKG/POTxV5vgVUVPZlD1Pu45prFygrm5Y= Subject key identifier: 65:CB:A6:FB:0C:4F:3C:B9:96:00:B2:D9:E8:C4:96:14:FE:D8:37:0A Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C1300E526132DECC0AACEC45CE109AA Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Zcum-wxPPLmWALLZ6MSWFP7YNwo.roa Signing time: Fri 02 Jan 2026 00:19:38 +0000 ROA not before: Fri 02 Jan 2026 00:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204483 IP address blocks: 212.243.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:00:e5:26:13:2d:ec:c0:aa:ce:c4:5c:e1:09:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65cba6fb0c4f3cb99600b2d9e8c49614fed8370a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3d:e1:3e:31:9a:38:08:61:65:5d:1f:8a:5d: ac:29:b6:8e:3b:41:18:7d:2c:3a:1b:a9:d5:4d:98: d1:98:50:1a:97:03:2e:07:80:38:14:01:bc:51:9c: 4f:4f:f1:e6:95:cd:c1:71:b7:12:f3:5c:da:4c:6b: 9a:f4:d0:c7:c2:62:95:59:79:34:3e:4b:10:45:f8: 40:0d:27:e5:ec:57:17:b1:90:02:72:93:d5:b7:37: 28:31:be:91:89:b8:3e:31:bd:57:2b:0d:a0:da:c5: 97:8c:63:68:b7:0d:86:3b:34:8e:ef:91:cc:a7:c5: 84:54:a2:2f:54:1a:cf:ee:fa:b8:1c:6b:69:2c:02: ea:24:95:e7:23:f6:bf:b1:e9:89:7e:66:d6:5c:f6: c0:fb:a8:5c:ac:34:94:7e:ad:f2:73:25:4a:db:42: 25:54:e3:6c:c5:0b:de:15:4b:6f:1b:dd:a1:a8:c2: 7d:3a:6d:f4:8c:8c:2e:1d:7e:e1:2d:9a:6e:d1:f0: d9:c8:18:74:1e:0b:15:a2:0c:f7:ad:d3:e5:db:41: 3c:1b:8d:76:b5:b5:3b:45:e1:10:24:20:bf:47:4f: 68:01:c6:87:74:6c:87:bc:f2:50:7e:da:c8:3a:54: 3f:43:1a:4e:3e:21:75:83:ec:a0:7e:52:a0:42:fb: 4a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CB:A6:FB:0C:4F:3C:B9:96:00:B2:D9:E8:C4:96:14:FE:D8:37:0A X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Zcum-wxPPLmWALLZ6MSWFP7YNwo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.243.124.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:5e:17:69:3c:8b:8a:de:bb:12:16:76:db:12:a4:cc:b2:ed: 74:5f:f6:47:c1:b6:ed:b6:e7:29:ed:a0:38:ea:bc:4d:12:98: 45:20:81:b6:7b:a8:af:5b:d5:21:fc:a5:8e:1f:7c:51:fd:d0: e0:65:70:7c:d6:28:64:93:c1:b3:7e:bb:8b:31:98:77:37:b9: ec:9d:be:42:b6:15:e7:a3:d5:c5:3c:a8:9f:72:16:73:5d:6f: a4:58:1f:89:49:d2:b8:69:0e:c2:11:6b:63:c0:25:b0:27:7b: 7a:38:53:a6:d3:f8:19:d3:79:05:78:63:9d:43:f5:25:a4:60: 67:ea:3b:22:7a:46:4c:8f:c7:3e:bf:ed:76:af:05:c0:aa:82: 15:16:9b:aa:80:6d:7e:0a:e9:92:b3:6e:25:af:5b:ee:5d:6a: ae:18:f1:81:35:e5:70:b4:12:8e:30:d3:bb:c7:b8:24:d6:a4: 75:17:f2:cd:57:43:45:6d:c7:59:65:00:ee:4c:98:6c:b9:1b: 80:bb:bd:f5:2d:51:d6:0a:57:5f:63:1f:ca:d8:f4:14:60:f6: 40:3d:c4:cc:97:63:6f:87:19:88:d8:09:aa:36:33:42:00:90: 46:7d:77:9f:79:58:ca:86:05:aa:90:59:47:bb:97:94:6c:13: 46:a9:d3:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EwDlJhMt7MCqzsRc4QmqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWNiYTZmYjBjNGYzY2I5OTYwMGIyZDllOGM0OTYxNGZlZDgzNzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4z3hPjGaOAhhZV0fil2sKbaOO0EY fSw6G6nVTZjRmFAalwMuB4A4FAG8UZxPT/Hmlc3BcbcS81zaTGua9NDHwmKVWXk0 PksQRfhADSfl7FcXsZACcpPVtzcoMb6Ribg+Mb1XKw2g2sWXjGNotw2GOzSO75HM p8WEVKIvVBrP7vq4HGtpLALqJJXnI/a/semJfmbWXPbA+6hcrDSUfq3ycyVK20Il VONsxQveFUtvG92hqMJ9Om30jIwuHX7hLZpu0fDZyBh0HgsVogz3rdPl20E8G412 tbU7ReEQJCC/R09oAcaHdGyHvPJQftrIOlQ/QxpOPiF1g+ygflKgQvtKOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGXLpvsMTzy5lgCy2ejElhT+2DcKMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvWmN1bS13eFBQTG1XQUxMWjZNU1dGUDdZTndvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1PN8MA0G CSqGSIb3DQEBCwUAA4IBAQAbXhdpPIuK3rsSFnbbEqTMsu10X/ZHwbbttucp7aA4 6rxNEphFIIG2e6ivW9Uh/KWOH3xR/dDgZXB81ihkk8GzfruLMZh3N7nsnb5CthXn o9XFPKifchZzXW+kWB+JSdK4aQ7CEWtjwCWwJ3t6OFOm0/gZ03kFeGOdQ/UlpGBn 6jsiekZMj8c+v+12rwXAqoIVFpuqgG1+CumSs24lr1vuXWquGPGBNeVwtBKOMNO7 x7gk1qR1F/LNV0NFbcdZZQDuTJhsuRuAu731LVHWCldfYx/K2PQUYPZAPcTMl2Nv hxmI2AmqNjNCAJBGfXefeVjKhgWqkFlHu5eUbBNGqdPK -----END CERTIFICATE-----Generated at Mon Jan 26 17:44:21 2026 by rpki-client