This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/ZNPHRsMoW22WSAYzCSGzUppWQJ4.roa File: ZNPHRsMoW22WSAYzCSGzUppWQJ4.roa (raw, json) Hash identifier: eCUgKnUJEYamCAbrq9oqSac5PWqK0Kp5wfBfnJm93wo= Subject key identifier: 64:D3:C7:46:C3:28:5B:6D:96:48:06:33:09:21:B3:52:9A:56:40:9E Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Certificate serial: 019B775917C9C957329A8D275706ACA793CD Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/ZNPHRsMoW22WSAYzCSGzUppWQJ4.roa Signing time: Thu 01 Jan 2026 02:18:06 +0000 ROA not before: Thu 01 Jan 2026 02:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211516 IP address blocks: 77.65.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:17:c9:c9:57:32:9a:8d:27:57:06:ac:a7:93:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Validity Not Before: Jan 1 02:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64d3c746c3285b6d964806330921b3529a56409e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:19:fd:67:fe:e7:c7:2d:af:6c:f9:d9:aa:75: 30:a3:43:fb:57:80:11:b7:1c:85:7e:f6:c5:8e:b3: c8:cb:3c:99:e6:b6:12:c2:58:0d:86:02:8a:f2:70: 4f:d4:06:6d:56:3b:26:bb:25:a3:9f:3c:10:0c:b8: d1:1a:ce:c5:4d:d1:0a:10:5d:0d:2c:7c:e0:df:c5: 17:eb:a2:e5:59:33:2e:8a:8b:5f:f2:81:8c:ae:61: d6:2b:b8:20:46:20:c8:e1:3f:40:6d:4b:18:ed:4b: 62:af:b4:5b:3c:61:32:50:70:73:28:ff:43:3c:fa: 1a:51:94:03:60:28:da:a3:63:f8:5e:94:cf:ea:3e: 35:88:17:e1:e9:fb:d9:fc:6e:1b:37:28:3f:d4:07: be:e0:ab:3a:a5:5a:fd:c0:97:0c:c9:d7:c6:85:b0: ef:30:26:d3:65:53:25:2c:74:ef:fb:f7:e8:e3:68: e8:ab:b0:d6:d3:71:4e:fe:2e:d0:29:54:d1:c7:f6: d0:7b:7f:3a:38:e4:dc:0f:84:ae:22:22:cf:5c:90: 38:37:f3:93:76:da:7e:ed:5e:c0:6e:0a:86:30:9f: 8e:7e:22:c9:18:81:36:4a:fe:19:db:1e:d4:53:6d: b5:e7:de:fa:49:a9:57:28:60:d8:a2:dc:e8:9f:b3: 38:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D3:C7:46:C3:28:5B:6D:96:48:06:33:09:21:B3:52:9A:56:40:9E X509v3 Authority Key Identifier: keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/ZNPHRsMoW22WSAYzCSGzUppWQJ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.65.220.0/23 Signature Algorithm: sha256WithRSAEncryption 12:35:a5:9b:0e:91:4b:eb:76:36:1e:e4:ca:64:f1:e3:d9:ea: fa:b2:e3:20:d6:3e:a9:1d:80:66:a4:0f:91:69:6a:84:e7:ad: af:da:88:97:e9:aa:3f:34:81:8b:a6:55:68:6d:cf:a6:5e:53: d7:ad:08:12:6b:d3:a5:15:48:14:32:95:38:e1:eb:1b:80:2c: 0a:ef:11:0c:e0:e9:b6:db:49:d4:c2:2c:74:6c:ab:5b:e1:de: 56:6a:b6:01:6b:f2:05:18:34:c5:f3:c6:b7:25:90:66:06:e4: fb:29:f1:a3:22:88:dc:69:e8:c4:76:93:e6:b1:5c:2f:6b:50: 8d:b0:6c:05:d7:d3:63:cf:a5:aa:49:cb:e3:be:b0:03:ce:b7: 2e:01:14:e1:a3:cb:f0:29:91:07:63:b7:d9:e3:c8:94:0d:04: 75:fc:df:a2:e6:d5:45:23:fe:b3:5f:da:db:1c:c6:d3:47:8e: 36:0a:84:34:cb:19:bb:e7:77:d4:87:b1:1c:21:8b:b4:b0:6b: 53:17:1a:22:30:87:f5:13:4e:2a:7e:11:a9:b4:f9:a3:f9:ff: 4e:bd:b5:e5:8e:5d:67:7e:5d:fa:ab:93:d7:f7:49:08:1b:9d: e0:f6:bb:7a:4a:bc:44:53:15:91:ca:cb:6b:d2:bf:3a:bf:d9: 5d:24:fb:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WRfJyVcymo0nVwasp5PNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx YjM2ZTgwHhcNMjYwMTAxMDIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGQzYzc0NmMzMjg1YjZkOTY0ODA2MzMwOTIxYjM1MjlhNTY0MDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBn9Z/7nxy2vbPnZqnUwo0P7V4AR txyFfvbFjrPIyzyZ5rYSwlgNhgKK8nBP1AZtVjsmuyWjnzwQDLjRGs7FTdEKEF0N LHzg38UX66LlWTMuiotf8oGMrmHWK7ggRiDI4T9AbUsY7Utir7RbPGEyUHBzKP9D PPoaUZQDYCjao2P4XpTP6j41iBfh6fvZ/G4bNyg/1Ae+4Ks6pVr9wJcMydfGhbDv MCbTZVMlLHTv+/fo42joq7DW03FO/i7QKVTRx/bQe386OOTcD4SuIiLPXJA4N/OT dtp+7V7AbgqGMJ+OfiLJGIE2Sv4Z2x7UU2215976SalXKGDYotzon7M4HwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGTTx0bDKFttlkgGMwkhs1KaVkCeMB8GA1UdIwQY MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt MDI0YjE2NTVjMjQ3LzEvWk5QSFJzTW9XMjJXU0FZekNTR3pVcHBXUUo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3 LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTUHcMA0G CSqGSIb3DQEBCwUAA4IBAQASNaWbDpFL63Y2HuTKZPHj2er6suMg1j6pHYBmpA+R aWqE562v2oiX6ao/NIGLplVobc+mXlPXrQgSa9OlFUgUMpU44esbgCwK7xEM4Om2 20nUwix0bKtb4d5WarYBa/IFGDTF88a3JZBmBuT7KfGjIojcaejEdpPmsVwva1CN sGwF19Njz6WqScvjvrADzrcuARTho8vwKZEHY7fZ48iUDQR1/N+i5tVFI/6zX9rb HMbTR442CoQ0yxm753fUh7EcIYu0sGtTFxoiMIf1E04qfhGptPmj+f9OvbXljl1n fl36q5PX90kIG53g9rt6SrxEUxWRystr0r86v9ldJPtG -----END CERTIFICATE-----Generated at Mon Jan 26 15:34:10 2026 by rpki-client