This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/zdaIvH_fUFM_5VvwisUdwZJqT84.roa File: zdaIvH_fUFM_5VvwisUdwZJqT84.roa (raw, json) Hash identifier: J/rkVF3ZNhVRPsyrfjd3o3Hne/iFmloSaT0sAV/oqmQ= Subject key identifier: CD:D6:88:BC:7F:DF:50:53:3F:E5:5B:F0:8A:C5:1D:C1:92:6A:4F:CE Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B89240552965D61BFBCECE0B403013EB4 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/zdaIvH_fUFM_5VvwisUdwZJqT84.roa Signing time: Sun 04 Jan 2026 13:13:17 +0000 ROA not before: Sun 04 Jan 2026 13:13:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63199 IP address blocks: 147.90.13.0/24 maxlen: 24 158.173.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:89:24:05:52:96:5d:61:bf:bc:ec:e0:b4:03:01:3e:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 4 13:13:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cdd688bc7fdf50533fe55bf08ac51dc1926a4fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:3a:01:9e:e3:af:e8:5d:67:6c:f7:c6:68:39: da:e7:af:b0:00:50:3f:3e:0e:3e:74:8c:6c:1c:e0: 98:d0:5d:95:6d:07:7a:ce:64:fd:56:6d:00:1e:be: a4:fc:05:8e:bb:a2:b3:f6:bf:3c:61:69:02:5e:73: 61:b6:0e:3b:c0:09:bc:50:b8:d1:54:30:da:63:aa: 2c:0f:83:88:5d:b1:80:c9:b6:5e:a0:38:0e:ce:b1: 01:41:1f:71:36:d5:b8:67:41:9d:8e:6f:bb:71:74: e4:fb:1e:f4:d6:0c:75:89:5d:b3:c4:a4:8c:55:93: f9:1f:f6:85:c0:9f:24:05:4e:e3:c3:f5:e3:8e:0d: 6c:85:48:a6:65:5d:02:11:6a:e0:e3:d3:70:45:17: 2e:d6:00:6d:ba:62:5c:6b:ad:e0:07:c8:e7:c5:e7: 70:42:b6:5e:37:92:3a:37:68:88:17:5e:83:eb:e9: 7a:47:96:82:6e:d0:85:12:79:81:77:34:72:37:19: 50:11:15:3f:ef:d6:71:2a:16:0a:8c:3e:f0:d5:80: 60:93:ea:06:cf:ef:ad:49:70:77:c7:81:88:31:76: 4a:dd:44:2f:6e:81:94:0a:29:b9:e0:65:cf:2a:2a: 4f:26:51:58:04:ba:50:63:11:b3:76:71:1e:f4:83: 11:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D6:88:BC:7F:DF:50:53:3F:E5:5B:F0:8A:C5:1D:C1:92:6A:4F:CE X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/zdaIvH_fUFM_5VvwisUdwZJqT84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.90.13.0/24 158.173.239.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:b7:08:44:3f:e5:98:68:e9:29:25:7c:75:5a:57:5f:2e:1f: 2a:5e:79:a7:47:37:26:b9:3c:42:c4:ea:ed:a9:cd:83:89:21: 19:de:87:c3:f7:e0:e1:c4:73:09:c5:d7:54:d6:81:81:0d:67: 76:07:35:3e:10:ee:04:83:20:c4:81:2b:cd:f4:e5:bd:70:cf: fa:bf:95:be:55:a6:24:1c:31:68:8f:35:80:ef:85:41:cf:da: 2d:7e:76:c9:36:01:29:e8:dc:46:6b:fd:49:85:5d:6f:94:0c: 9d:7a:50:0f:ae:df:39:da:db:cd:2f:d4:8d:51:9d:40:df:d9: dc:24:cc:c8:32:db:94:b3:10:f8:93:8e:89:33:07:62:04:12: d4:cf:6c:88:0b:54:93:8f:96:9e:d0:e1:3f:1a:82:11:65:0c: 66:80:88:00:98:8a:22:29:a1:94:fc:5f:c7:c0:ee:c5:26:ff: 7a:76:6e:71:8d:ee:b5:4c:a0:47:23:3c:87:1b:81:4b:23:10: 52:a4:b3:7f:2e:48:e6:7f:0a:c9:b3:0e:cf:cf:5b:6e:51:52: 92:6b:a6:4d:86:d1:15:a8:14:a3:98:16:2a:2d:bc:ae:fb:34: 92:33:6e:20:fb:0e:66:f7:cf:bb:dd:29:40:01:2b:ae:cf:c9: d0:47:80:8a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZuJJAVSll1hv7zs4LQDAT60MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTA0MTMxMzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGQ2ODhiYzdmZGY1MDUzM2ZlNTViZjA4YWM1MWRjMTkyNmE0ZmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zoBnuOv6F1nbPfGaDna56+wAFA/ Pg4+dIxsHOCY0F2VbQd6zmT9Vm0AHr6k/AWOu6Kz9r88YWkCXnNhtg47wAm8ULjR VDDaY6osD4OIXbGAybZeoDgOzrEBQR9xNtW4Z0Gdjm+7cXTk+x701gx1iV2zxKSM VZP5H/aFwJ8kBU7jw/Xjjg1shUimZV0CEWrg49NwRRcu1gBtumJca63gB8jnxedw QrZeN5I6N2iIF16D6+l6R5aCbtCFEnmBdzRyNxlQERU/79ZxKhYKjD7w1YBgk+oG z++tSXB3x4GIMXZK3UQvboGUCim54GXPKipPJlFYBLpQYxGzdnEe9IMRbwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM3WiLx/31BTP+Vb8IrFHcGSak/OMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvemRhSXZIX2ZVRk1fNVZ2d2lzVWR3WkpxVDg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAk1oNAwQA nq3vMA0GCSqGSIb3DQEBCwUAA4IBAQCatwhEP+WYaOkpJXx1WldfLh8qXnmnRzcm uTxCxOrtqc2DiSEZ3ofD9+DhxHMJxddU1oGBDWd2BzU+EO4EgyDEgSvN9OW9cM/6 v5W+VaYkHDFojzWA74VBz9otfnbJNgEp6NxGa/1JhV1vlAydelAPrt852tvNL9SN UZ1A39ncJMzIMtuUsxD4k46JMwdiBBLUz2yIC1STj5ae0OE/GoIRZQxmgIgAmIoi KaGU/F/HwO7FJv96dm5xje61TKBHIzyHG4FLIxBSpLN/LkjmfwrJsw7Pz1tuUVKS a6ZNhtEVqBSjmBYqLbyu+zSSM24g+w5m98+73SlAASuuz8nQR4CK -----END CERTIFICATE-----Generated at Mon Jan 19 17:08:56 2026 by rpki-client