This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ZZi7ezA12Inf_n_I1B7Ve_zTAD0.roa File: ZZi7ezA12Inf_n_I1B7Ve_zTAD0.roa (raw, json) Hash identifier: ze53Rvst5pjVu8wwL/6uJPhsSvSGadkVjQ+hAUeZfd4= Subject key identifier: 65:98:BB:7B:30:35:D8:89:DF:FE:7F:C8:D4:1E:D5:7B:FC:D3:00:3D Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA41111BA6C4C6F0D9CF856187BBDC0 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ZZi7ezA12Inf_n_I1B7Ve_zTAD0.roa Signing time: Thu 01 Jan 2026 22:18:28 +0000 ROA not before: Thu 01 Jan 2026 22:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205125 IP address blocks: 45.95.201.0/24 maxlen: 24 2a03:e2c0::/32 maxlen: 32 2a0b:7780::/29 maxlen: 29 2a0d:3880::/29 maxlen: 29 2a0d:8340::/32 maxlen: 32 2a0d:8343::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:11:11:ba:6c:4c:6f:0d:9c:f8:56:18:7b:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6598bb7b3035d889dffe7fc8d41ed57bfcd3003d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e3:fb:fa:b9:48:dc:04:72:e8:2f:eb:ff:1f: 73:0a:4f:bf:2e:e8:39:75:0d:43:ff:bc:38:01:39: 50:8b:45:6d:fc:df:f3:f5:cb:44:38:c0:52:09:47: ed:ef:1b:d4:e4:ea:f2:a3:59:08:18:50:ae:32:8e: 47:1d:57:d6:c1:a9:fd:d9:f1:bf:2a:d2:7f:6c:e0: 6a:0c:b1:87:8f:89:a0:f6:21:dd:b3:26:3e:ff:a0: 5e:d8:f4:18:b3:72:0b:b2:aa:0e:40:65:cb:04:fa: 4b:de:20:c3:05:c5:3c:12:6a:a2:7a:66:e4:c9:d8: 3a:ef:36:5a:cd:5f:b4:0d:99:4a:6c:98:db:a3:9b: 00:34:eb:03:59:9e:0d:f6:b0:a2:d0:c6:f9:fc:ed: 65:01:db:b5:f2:06:b9:cd:b8:27:71:e9:39:60:99: 39:f3:92:1a:23:69:8b:d0:53:41:57:92:a4:b9:fb: 7e:88:eb:14:c7:e4:ee:4c:c7:30:41:b5:7b:a2:d4: 26:fc:13:3b:5a:5c:4b:02:04:b3:b6:52:36:8e:a7: 13:f5:76:3d:89:48:97:c3:2c:c7:f0:ba:ac:66:1b: 5a:30:f4:69:21:a6:68:e5:6d:21:fc:49:3a:4d:2c: b2:97:e3:28:e1:95:12:1c:5e:cb:f0:bf:66:21:e9: 90:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:98:BB:7B:30:35:D8:89:DF:FE:7F:C8:D4:1E:D5:7B:FC:D3:00:3D X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ZZi7ezA12Inf_n_I1B7Ve_zTAD0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.201.0/24 IPv6: 2a03:e2c0::/32 2a0b:7780::/29 2a0d:3880::/29 2a0d:8340::/32 2a0d:8343::/32 Signature Algorithm: sha256WithRSAEncryption 8e:0a:7c:b4:f4:ed:50:6d:82:e6:0d:20:38:92:c4:1e:86:97: 63:06:99:17:e8:b9:26:e2:dc:97:7b:27:b3:1f:ee:1a:1c:9f: 87:9f:70:29:3a:49:fb:3b:9f:6f:89:8c:7e:93:9e:68:07:d0: 44:ea:40:30:be:55:d5:75:06:1f:7d:b8:26:9c:49:c8:97:82: a3:13:2f:67:bc:aa:8a:3c:b1:d0:10:83:f3:0e:a9:3a:1e:54: 11:3a:90:74:01:59:94:4e:62:f7:f3:73:ff:ab:5f:19:78:f3: 9b:49:a9:08:9a:61:20:77:50:8c:8e:84:7b:d1:12:0a:54:83: e1:22:e8:f5:1e:ac:e0:d3:82:b8:46:ff:e1:3f:39:63:82:ae: 2d:9a:1b:08:d4:7e:b2:99:cf:04:2e:b1:ff:eb:78:11:72:cd: 61:37:43:2a:a1:28:f1:b2:0d:a0:ce:38:d3:0f:1d:65:b9:2e: 0f:20:97:3c:15:c5:dc:65:10:87:66:45:c3:0a:6f:2d:bc:a9: d0:cd:d2:e9:67:7c:df:ce:b8:d9:21:74:66:f0:6c:27:d0:7a: d3:3b:8e:bd:67:4c:50:d0:a3:89:94:12:bc:ba:8e:4c:86:6b: 4d:13:72:3f:0c:c1:54:50:44:48:05:ad:be:ac:d8:5f:72:a7: e3:f0:6c:a7 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgISAZt7pBERumxMbw2c+FYYe73AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTk4YmI3YjMwMzVkODg5ZGZmZTdmYzhkNDFlZDU3YmZjZDMwMDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueP7+rlI3ARy6C/r/x9zCk+/Lug5 dQ1D/7w4ATlQi0Vt/N/z9ctEOMBSCUft7xvU5Oryo1kIGFCuMo5HHVfWwan92fG/ KtJ/bOBqDLGHj4mg9iHdsyY+/6Be2PQYs3ILsqoOQGXLBPpL3iDDBcU8Emqiembk ydg67zZazV+0DZlKbJjbo5sANOsDWZ4N9rCi0Mb5/O1lAdu18ga5zbgncek5YJk5 85IaI2mL0FNBV5Kkuft+iOsUx+TuTMcwQbV7otQm/BM7WlxLAgSztlI2jqcT9XY9 iUiXwyzH8LqsZhtaMPRpIaZo5W0h/Ek6TSyyl+Mo4ZUSHF7L8L9mIemQDwIDAQAB o4ICNDCCAjAwHQYDVR0OBBYEFGWYu3swNdiJ3/5/yNQe1Xv80wA9MB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvWlppN2V6QTEySW5mX25fSTFCN1ZlX3pUQUQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAMBAIAATAGAwQALV/JMCkE AgACMCMDBQAqA+LAAwUDKgt3gAMFAyoNOIADBQAqDYNAAwUAKg2DQzANBgkqhkiG 9w0BAQsFAAOCAQEAjgp8tPTtUG2C5g0gOJLEHoaXYwaZF+i5JuLcl3snsx/uGhyf h59wKTpJ+zufb4mMfpOeaAfQROpAML5V1XUGH324JpxJyJeCoxMvZ7yqijyx0BCD 8w6pOh5UETqQdAFZlE5i9/Nz/6tfGXjzm0mpCJphIHdQjI6Ee9ESClSD4SLo9R6s 4NOCuEb/4T85Y4KuLZobCNR+spnPBC6x/+t4EXLNYTdDKqEo8bINoM440w8dZbku DyCXPBXF3GUQh2ZFwwpvLbyp0M3S6Wd838642SF0ZvBsJ9B60zuOvWdMUNCjiZQS vLqOTIZrTRNyPwzBVFBESAWtvqzYX3Kn4/Bspw== -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:46 2026 by rpki-client