This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/ZsJPTZXXB045lk8pCnsp2CLYOZM.roa File: ZsJPTZXXB045lk8pCnsp2CLYOZM.roa (raw, json) Hash identifier: GPfwJy4uFitVDvcySR6+0SS8jibEAKPckREFyT+sS5c= Subject key identifier: 66:C2:4F:4D:95:D7:07:4E:39:96:4F:29:0A:7B:29:D8:22:D8:39:93 Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 019B78A34AD42F562D67088D5312529952B1 Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/ZsJPTZXXB045lk8pCnsp2CLYOZM.roa Signing time: Thu 01 Jan 2026 08:18:45 +0000 ROA not before: Thu 01 Jan 2026 08:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203057 IP address blocks: 91.186.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:4a:d4:2f:56:2d:67:08:8d:53:12:52:99:52:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Jan 1 08:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66c24f4d95d7074e39964f290a7b29d822d83993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f2:00:4f:0f:83:e9:a5:5b:cd:fd:9d:c7:16: 0a:63:98:1a:c8:a6:00:d9:4e:d1:0e:07:19:9d:ca: 0c:84:8c:a7:72:cb:6c:c6:e4:4b:c9:4c:18:3d:5c: 39:c3:a9:b4:e5:d4:c9:16:81:b8:70:e9:28:0c:2f: cf:d8:5b:51:ad:86:de:44:e0:35:59:d6:99:93:de: 74:97:86:4e:5c:cc:7b:a9:d2:41:cb:1f:2a:7b:26: 50:d6:14:7a:b1:cc:86:4a:77:6d:7c:41:0e:2a:9b: 16:ee:b2:27:29:ae:34:ad:36:79:1b:80:5e:25:27: 11:87:b6:f6:11:e8:13:02:c9:ac:9f:0a:cd:04:15: 3e:cc:b8:d8:47:25:cc:86:be:3f:a7:80:ab:58:50: b3:45:e1:f8:82:13:e2:4b:ef:ea:f3:84:f0:7f:bd: 80:a3:36:47:09:fc:9b:de:77:ae:ca:6f:f7:75:b1: 83:bc:a3:98:e8:67:c1:d9:6e:df:35:0c:eb:d4:f1: 72:90:e8:1b:a7:54:dd:2b:94:aa:fc:ef:74:60:ea: ac:81:6b:0f:7d:a4:e3:30:03:34:fe:a6:b5:bc:22: 7f:5b:49:a6:4c:33:7d:5a:2c:52:0f:2d:74:f8:c0: e3:11:1e:9c:bf:90:db:55:eb:35:2b:06:5d:5a:2e: aa:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C2:4F:4D:95:D7:07:4E:39:96:4F:29:0A:7B:29:D8:22:D8:39:93 X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/ZsJPTZXXB045lk8pCnsp2CLYOZM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.186.220.0/22 Signature Algorithm: sha256WithRSAEncryption 9c:9d:c6:90:cd:47:e8:aa:c5:34:42:8c:95:23:5f:13:76:3a: 9e:52:0c:ab:eb:ee:43:83:3e:e8:4d:32:99:2a:34:54:57:fd: b6:eb:30:5e:ce:6c:39:6b:08:4b:36:94:92:12:a5:50:55:85: ea:4c:ca:de:56:f7:ed:60:c8:70:93:8a:52:2a:b2:31:ab:f4: 5d:cf:fe:79:5e:d6:44:58:c8:e8:a4:f2:dc:7c:71:2c:ee:15: 2f:80:49:1e:ed:71:ae:46:ad:71:ac:9b:1d:5b:27:bd:ed:cb: d4:72:78:b6:e5:e6:25:07:18:59:5c:c9:b7:57:7a:cb:0d:b0: 89:95:69:80:c9:3a:25:e7:e8:f3:af:db:92:2e:29:d4:7f:5c: 69:a6:63:34:08:c6:de:a9:24:69:ad:fa:6d:9a:a9:a1:71:0b: 25:34:21:bc:cd:75:fc:75:99:f1:5c:91:ec:49:b0:07:92:7c: 11:77:68:92:32:8a:e7:68:1e:d2:88:20:d0:a9:30:47:de:3b: cb:df:a1:b0:46:9a:32:78:c6:e3:82:6c:b7:7c:af:ac:27:64: f9:ab:f1:a5:6d:cf:b4:79:31:88:70:64:fe:97:12:56:ef:70: a3:65:08:0f:5f:08:29:4d:ad:31:31:4d:55:42:96:51:39:1e: c0:ec:ca:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o0rUL1YtZwiNUxJSmVKxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjYwMTAxMDgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmMyNGY0ZDk1ZDcwNzRlMzk5NjRmMjkwYTdiMjlkODIyZDgzOTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvIATw+D6aVbzf2dxxYKY5gayKYA 2U7RDgcZncoMhIyncstsxuRLyUwYPVw5w6m05dTJFoG4cOkoDC/P2FtRrYbeROA1 WdaZk950l4ZOXMx7qdJByx8qeyZQ1hR6scyGSndtfEEOKpsW7rInKa40rTZ5G4Be JScRh7b2EegTAsmsnwrNBBU+zLjYRyXMhr4/p4CrWFCzReH4ghPiS+/q84Twf72A ozZHCfyb3neuym/3dbGDvKOY6GfB2W7fNQzr1PFykOgbp1TdK5Sq/O90YOqsgWsP faTjMAM0/qa1vCJ/W0mmTDN9WixSDy10+MDjER6cv5DbVes1KwZdWi6qGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGbCT02V1wdOOZZPKQp7Kdgi2DmTMB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvWnNKUFRaWFhCMDQ1bGs4cENuc3AyQ0xZT1pNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW7rcMA0G CSqGSIb3DQEBCwUAA4IBAQCcncaQzUfoqsU0QoyVI18TdjqeUgyr6+5Dgz7oTTKZ KjRUV/226zBezmw5awhLNpSSEqVQVYXqTMreVvftYMhwk4pSKrIxq/Rdz/55XtZE WMjopPLcfHEs7hUvgEke7XGuRq1xrJsdWye97cvUcni25eYlBxhZXMm3V3rLDbCJ lWmAyTol5+jzr9uSLinUf1xppmM0CMbeqSRprfptmqmhcQslNCG8zXX8dZnxXJHs SbAHknwRd2iSMornaB7SiCDQqTBH3jvL36GwRpoyeMbjgmy3fK+sJ2T5q/Glbc+0 eTGIcGT+lxJW73CjZQgPXwgpTa0xMU1VQpZROR7A7MrH -----END CERTIFICATE-----Generated at Tue Jan 20 02:56:21 2026 by rpki-client