This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/ZLAxEh4litD4nIq8JP6jHqrQBEI.roa File: ZLAxEh4litD4nIq8JP6jHqrQBEI.roa (raw, json) Hash identifier: wOnTcEEXKGcVn5w5YtBIgaG5tAO0klLqAJlQ/7xmzWI= Subject key identifier: 64:B0:31:12:1E:25:8A:D0:F8:9C:8A:BC:24:FE:A3:1E:AA:D0:04:42 Certificate issuer: /CN=86c4112efc9bed84761d3678b87c483948d2a72f Certificate serial: 019B7D5C9744EE90C253F05CDD2700FCFE7B Authority key identifier: 86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/ZLAxEh4litD4nIq8JP6jHqrQBEI.roa Signing time: Fri 02 Jan 2026 06:19:38 +0000 ROA not before: Fri 02 Jan 2026 06:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43773 IP address blocks: 91.200.40.0/24 maxlen: 24 91.200.41.0/24 maxlen: 24 91.200.42.0/24 maxlen: 24 91.200.43.0/24 maxlen: 24 91.225.136.0/24 maxlen: 24 91.225.137.0/24 maxlen: 24 91.225.138.0/24 maxlen: 24 91.225.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:97:44:ee:90:c2:53:f0:5c:dd:27:00:fc:fe:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86c4112efc9bed84761d3678b87c483948d2a72f Validity Not Before: Jan 2 06:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64b031121e258ad0f89c8abc24fea31eaad00442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ea:13:2f:53:db:0c:f6:46:df:d5:d6:c9:b4: 21:d1:61:db:e6:9b:7a:e7:2a:92:8c:f8:0a:55:7f: 41:dc:33:57:5e:76:52:e8:ef:90:1a:2d:af:65:28: d7:31:7d:77:b3:4b:b8:54:2d:01:d9:6a:94:15:33: a2:b7:cd:7e:3c:af:9c:a7:92:cd:76:c0:8e:e5:fe: ef:30:ca:f6:0b:b3:3f:57:60:4e:81:4f:7d:a1:1c: 2d:5e:17:0d:12:79:63:ee:d8:7a:d2:00:c9:14:0f: 06:5e:d2:9a:c8:88:11:b2:b2:db:17:a1:27:d2:13: ef:7d:6c:8d:44:cc:fd:d3:11:62:73:f1:01:4f:2e: b1:ed:00:4c:f2:c4:cc:56:a1:b6:7f:59:b3:94:5a: 3f:da:fc:89:28:e3:fd:bb:5f:2b:b3:8c:a8:1c:96: 86:9f:be:94:4a:7d:4c:fc:03:a8:d5:dc:1c:da:26: 1b:55:84:4d:58:e9:8e:95:33:a8:82:53:09:d1:cc: f1:29:9d:bb:1e:8b:04:37:02:69:5e:53:42:5d:4b: 91:b4:9f:18:f9:50:df:43:68:66:56:8e:80:69:f7: fb:86:38:05:0c:9c:8f:ab:d8:36:63:a2:4b:12:b1: 99:05:10:b3:67:d9:bb:06:3b:43:32:a6:be:0a:3d: 84:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B0:31:12:1E:25:8A:D0:F8:9C:8A:BC:24:FE:A3:1E:AA:D0:04:42 X509v3 Authority Key Identifier: keyid:86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/ZLAxEh4litD4nIq8JP6jHqrQBEI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.40.0/22 91.225.136.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:94:3d:74:8e:ae:b9:e7:27:79:99:3b:1f:ce:85:49:d5:bb: 52:db:39:ad:60:a0:2b:74:9a:76:4f:1b:3e:90:bb:72:b0:d1: 2b:5b:89:2c:61:d0:28:30:53:d8:20:4d:52:c6:57:d0:70:0d: 44:45:b6:c9:b2:9a:15:3c:a3:8c:08:0a:b2:be:ae:c0:cc:63: 34:36:a3:9b:c0:96:e4:c5:6c:62:88:8c:42:a9:15:0e:27:99: 3e:a2:fb:bf:cc:bd:7d:6f:69:ee:f9:9d:87:04:5b:7a:ce:92: 09:ff:2c:3a:25:a2:da:49:cc:cf:a2:a9:92:36:76:df:95:93: 83:71:11:9a:df:a8:60:10:50:38:34:01:5c:a1:a6:0a:09:d0: 78:26:29:5b:91:2e:57:69:38:88:24:ba:af:fa:9e:d1:91:c7: d6:c9:7c:6d:36:11:64:46:5b:44:58:38:be:3f:19:0a:25:dc: 75:05:e9:a4:88:eb:c3:3b:6e:d6:d8:61:c6:7e:39:57:74:63: e5:84:7f:fb:4d:63:c5:6a:51:04:32:da:69:bb:0e:8e:77:cc: 2a:7a:7b:3b:1e:7b:97:d8:27:6f:37:29:4a:36:17:55:d7:73: 57:ae:a6:4f:c3:1d:69:ce:db:d8:9b:e9:0e:dd:64:8e:b8:27: 23:76:8a:35 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XJdE7pDCU/Bc3ScA/P57MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2YzQxMTJlZmM5YmVkODQ3NjFkMzY3OGI4N2M0ODM5NDhk MmE3MmYwHhcNMjYwMTAyMDYxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGIwMzExMjFlMjU4YWQwZjg5YzhhYmMyNGZlYTMxZWFhZDAwNDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+oTL1PbDPZG39XWybQh0WHb5pt6 5yqSjPgKVX9B3DNXXnZS6O+QGi2vZSjXMX13s0u4VC0B2WqUFTOit81+PK+cp5LN dsCO5f7vMMr2C7M/V2BOgU99oRwtXhcNEnlj7th60gDJFA8GXtKayIgRsrLbF6En 0hPvfWyNRMz90xFic/EBTy6x7QBM8sTMVqG2f1mzlFo/2vyJKOP9u18rs4yoHJaG n76USn1M/AOo1dwc2iYbVYRNWOmOlTOoglMJ0czxKZ27HosENwJpXlNCXUuRtJ8Y +VDfQ2hmVo6Aaff7hjgFDJyPq9g2Y6JLErGZBRCzZ9m7BjtDMqa+Cj2E/QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGSwMRIeJYrQ+JyKvCT+ox6q0ARCMB8GA1UdIwQY MBaAFIbEES78m+2Edh02eLh8SDlI0qcvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHNRUkx2eWI3WVIySFRaNHVIeElPVWpTcHk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC80NWViZGEtYzJjNy00YzI3LTk1ZDQt MDBiOTZkNzRkOGIwLzEvWkxBeEVoNGxpdEQ0bklxOEpQNmpIcXJRQkVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC80NWViZGEtYzJjNy00YzI3LTk1ZDQtMDBiOTZkNzRkOGIw LzEvaHNRUkx2eWI3WVIySFRaNHVIeElPVWpTcHk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8goAwQC W+GIMA0GCSqGSIb3DQEBCwUAA4IBAQAalD10jq655yd5mTsfzoVJ1btS2zmtYKAr dJp2Txs+kLtysNErW4ksYdAoMFPYIE1SxlfQcA1ERbbJspoVPKOMCAqyvq7AzGM0 NqObwJbkxWxiiIxCqRUOJ5k+ovu/zL19b2nu+Z2HBFt6zpIJ/yw6JaLaSczPoqmS NnbflZODcRGa36hgEFA4NAFcoaYKCdB4JilbkS5XaTiIJLqv+p7RkcfWyXxtNhFk RltEWDi+PxkKJdx1BemkiOvDO27W2GHGfjlXdGPlhH/7TWPFalEEMtppuw6Od8wq ens7HnuX2CdvNylKNhdV13NXrqZPwx1pztvYm+kO3WSOuCcjdoo1 -----END CERTIFICATE-----Generated at Mon Feb 9 23:55:38 2026 by rpki-client