This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/zetNVI_5RmQ_9yMT7BWp_EHTd7k.roa File: zetNVI_5RmQ_9yMT7BWp_EHTd7k.roa (raw, json) Hash identifier: BSZVF8mXcpYwrxryg8NDVMtvr+dxn8y1JxLoHLq3VvQ= Subject key identifier: CD:EB:4D:54:8F:F9:46:64:3F:F7:23:13:EC:15:A9:FC:41:D3:77:B9 Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Certificate serial: 019B7A5B33B4F91379B528E876B07DC3FB7C Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/zetNVI_5RmQ_9yMT7BWp_EHTd7k.roa Signing time: Thu 01 Jan 2026 16:19:15 +0000 ROA not before: Thu 01 Jan 2026 16:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203144 IP address blocks: 45.134.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:33:b4:f9:13:79:b5:28:e8:76:b0:7d:c3:fb:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Validity Not Before: Jan 1 16:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cdeb4d548ff946643ff72313ec15a9fc41d377b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3e:13:00:ea:b5:89:c0:4e:55:53:7e:90:de: 49:01:be:0a:1e:f8:ad:42:28:c0:d9:43:d3:96:32: 45:6a:9e:b7:58:7d:4e:ba:0f:76:b1:e5:90:41:a9: 11:2b:bc:a4:9a:97:43:cf:3b:95:38:90:35:18:bb: c3:f2:0b:f1:e1:56:54:3b:8c:4a:92:c6:28:e5:f2: 92:47:4f:60:3e:ff:25:9a:74:7d:9a:f4:09:c6:60: 28:1d:13:3f:9c:37:33:67:f7:8f:d0:b3:33:84:95: e1:d8:6a:00:7f:23:88:9b:c6:78:60:24:ee:d8:65: 5a:9a:df:57:75:9f:92:11:29:e9:b4:9b:bd:4c:05: 4c:47:48:b9:f6:50:6d:25:10:ce:bd:36:71:c6:e8: d5:26:70:fe:c4:77:47:6d:80:a7:be:c7:50:e1:3c: f1:cc:a6:60:17:07:0e:fe:cf:bc:1b:a9:76:b7:80: f6:c5:00:82:a9:92:79:7e:70:4c:c7:af:fd:c7:28: 4c:32:9f:90:87:59:9c:0a:79:93:99:ed:18:51:3b: be:5d:44:06:35:ba:58:5f:4d:b4:75:84:ad:a0:23: 6d:eb:8f:80:79:91:a6:89:8b:0b:51:14:a6:7e:41: 7c:0f:f3:73:6e:20:92:5c:d1:a2:09:76:eb:45:c0: ba:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:EB:4D:54:8F:F9:46:64:3F:F7:23:13:EC:15:A9:FC:41:D3:77:B9 X509v3 Authority Key Identifier: keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/zetNVI_5RmQ_9yMT7BWp_EHTd7k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.21.0/24 Signature Algorithm: sha256WithRSAEncryption 38:cb:40:dc:c0:ce:8e:86:4e:d3:8e:47:a9:c3:1d:37:92:af: ba:6f:8b:10:00:97:2b:f4:cf:c5:88:c4:c6:81:1e:09:a3:27: 11:b7:ec:1c:a9:15:8b:45:17:aa:a3:39:95:26:d2:0f:71:11: 45:39:51:9c:f6:e5:57:54:df:be:c9:82:90:1f:d9:3c:ed:89: 4f:1f:20:ec:5b:c3:28:0b:81:31:e4:76:db:ae:7b:98:26:0e: 7c:58:85:c7:2e:3f:05:a7:f5:f9:60:97:ef:80:63:a3:ba:27: d5:4b:65:dc:5a:19:40:a4:3d:9a:ae:7d:27:56:c4:30:60:7b: a6:f0:c1:80:9b:59:66:d9:00:bf:07:aa:36:50:82:e0:20:e1: 0f:4d:0d:5a:a0:33:e6:2b:a8:a5:c8:ea:94:36:ae:bb:d2:4d: 44:b2:d7:d5:c8:f9:e9:de:ab:3f:1e:2a:d0:15:07:7a:d3:e4: e3:6f:3e:43:24:a8:60:42:c9:bb:7a:c6:df:c1:91:2b:dc:17: 74:6c:45:aa:a1:b6:b3:cc:2e:1a:1d:b9:6d:91:3a:67:f0:e4: 2d:c5:31:e2:90:16:68:7b:13:a8:e1:c3:66:fc:3a:13:32:a8: 5a:1d:71:2c:33:dc:ca:47:0e:2d:27:08:e2:b6:8f:6a:04:4a: 6d:c6:e6:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WzO0+RN5tSjodrB9w/t8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl NzM2NjQwHhcNMjYwMTAxMTYxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGViNGQ1NDhmZjk0NjY0M2ZmNzIzMTNlYzE1YTlmYzQxZDM3N2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyT4TAOq1icBOVVN+kN5JAb4KHvit QijA2UPTljJFap63WH1Oug92seWQQakRK7ykmpdDzzuVOJA1GLvD8gvx4VZUO4xK ksYo5fKSR09gPv8lmnR9mvQJxmAoHRM/nDczZ/eP0LMzhJXh2GoAfyOIm8Z4YCTu 2GVamt9XdZ+SESnptJu9TAVMR0i59lBtJRDOvTZxxujVJnD+xHdHbYCnvsdQ4Tzx zKZgFwcO/s+8G6l2t4D2xQCCqZJ5fnBMx6/9xyhMMp+Qh1mcCnmTme0YUTu+XUQG NbpYX020dYStoCNt64+AeZGmiYsLURSmfkF8D/NzbiCSXNGiCXbrRcC6iwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM3rTVSP+UZkP/cjE+wVqfxB03e5MB8GA1UdIwQY MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt OGMxNTM5NjViYWM5LzEvemV0TlZJXzVSbVFfOXlNVDdCV3BfRUhUZDdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5 LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYYVMA0G CSqGSIb3DQEBCwUAA4IBAQA4y0DcwM6Ohk7Tjkepwx03kq+6b4sQAJcr9M/FiMTG gR4JoycRt+wcqRWLRReqozmVJtIPcRFFOVGc9uVXVN++yYKQH9k87YlPHyDsW8Mo C4Ex5HbbrnuYJg58WIXHLj8Fp/X5YJfvgGOjuifVS2XcWhlApD2arn0nVsQwYHum 8MGAm1lm2QC/B6o2UILgIOEPTQ1aoDPmK6ilyOqUNq670k1EstfVyPnp3qs/HirQ FQd60+Tjbz5DJKhgQsm7esbfwZEr3Bd0bEWqobazzC4aHbltkTpn8OQtxTHikBZo exOo4cNm/DoTMqhaHXEsM9zKRw4tJwjito9qBEptxuZK -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:17 2026 by rpki-client