This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/zote-bU43Xc3L_TsvE3s0Qqd22g.roa
File: zote-bU43Xc3L_TsvE3s0Qqd22g.roa (raw, json)
Hash identifier: C40MNHbMRurC40NZMuiNePjAq8avbr212pcusOQWouU=
Subject key identifier: CE:8B:5E:F9:B5:38:DD:77:37:2F:F4:EC:BC:4D:EC:D1:0A:9D:DB:68
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 019C227E077B617BE703B4C6CCAFF5D189C4
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/zote-bU43Xc3L_TsvE3s0Qqd22g.roa
Signing time: Tue 03 Feb 2026 07:53:30 +0000
ROA not before: Tue 03 Feb 2026 07:53:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26769
IP address blocks: 185.253.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:22:7e:07:7b:61:7b:e7:03:b4:c6:cc:af:f5:d1:89:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Feb 3 07:53:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce8b5ef9b538dd77372ff4ecbc4decd10a9ddb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fa:71:f0:d4:c7:85:08:c2:cd:96:fe:a6:26:
77:c4:f7:36:23:cb:ed:90:41:9c:45:2f:61:69:af:
8d:1f:23:20:f4:71:63:26:e7:bf:f8:6d:a5:c5:3d:
43:04:9b:e2:cf:fc:1a:8a:fe:a5:48:40:bb:de:88:
25:61:0b:c3:bf:b3:90:25:ae:65:69:2e:53:c1:94:
ad:27:33:f5:40:62:56:49:30:16:44:7e:38:fc:91:
8e:66:ed:b2:e2:2b:55:79:da:fd:c4:d2:8f:1b:1f:
22:f3:92:eb:2c:b7:0c:e1:5c:fd:75:a4:fd:26:fb:
61:4f:c8:92:42:69:10:a7:8a:72:29:57:13:f3:c7:
51:b1:8d:47:54:92:e5:9d:64:0f:bd:d2:0d:b8:04:
dd:da:da:6c:8d:32:1f:e6:00:dd:3e:5a:ec:53:cd:
d9:47:cd:8d:27:a9:c8:a6:d5:bf:46:cd:81:8e:f2:
c4:c5:05:88:cf:07:1e:5f:39:7b:86:52:08:7d:41:
f7:84:ac:4b:5b:93:3a:4c:4a:54:10:d0:53:b1:6d:
42:38:ba:e3:0d:64:e1:da:49:51:70:f6:5f:aa:6d:
34:d5:6b:f4:57:81:93:7f:9e:84:13:2c:cc:70:39:
97:91:ff:92:03:50:45:73:f1:3d:7a:03:04:10:6c:
21:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8B:5E:F9:B5:38:DD:77:37:2F:F4:EC:BC:4D:EC:D1:0A:9D:DB:68
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/zote-bU43Xc3L_TsvE3s0Qqd22g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.61.0/24
Signature Algorithm: sha256WithRSAEncryption
53:9f:1d:05:d2:06:b0:d6:ac:39:0f:50:3b:ba:59:de:65:9b:
b9:a1:83:b2:51:80:7f:9e:d4:8d:0f:10:35:d4:29:ad:a8:63:
4d:a9:ae:e5:10:6e:13:a1:fc:6f:fc:ae:eb:14:f0:0e:b3:76:
29:ab:dd:33:e7:9e:85:a8:59:a0:2f:e8:cf:f6:9f:07:43:6e:
f8:98:2b:a4:35:ad:2c:18:4c:3d:49:6c:d8:6a:f3:d0:df:b4:
89:c6:00:b9:89:45:5b:a3:c1:6f:c6:99:27:48:fb:0c:53:96:
15:9b:66:2e:78:f0:fb:8d:bb:98:b3:27:77:13:cc:69:a9:7b:
51:50:58:72:82:8d:60:d3:6c:e8:93:da:31:10:0d:4d:fc:2e:
05:63:d6:7d:1d:90:1f:12:e7:44:36:d5:58:b3:83:22:e7:dc:
ed:0f:47:a6:85:df:7b:40:e1:8b:e2:6b:e3:8a:ad:93:88:d6:
8b:a4:64:d6:fc:d6:d5:14:36:1a:6d:37:14:84:37:bd:64:cf:
63:9a:a3:84:64:fa:0a:aa:d8:89:c0:27:22:a2:9b:71:51:e1:
56:7d:41:d4:e7:2b:72:2e:b3:b1:a2:aa:f5:d2:5f:b7:2c:d4:
d6:aa:99:7a:18:67:4d:df:87:f8:1a:5e:eb:cd:db:b2:9e:37:
4c:7f:68:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:48:56 2026 by rpki-client