This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/zaw-l3nyUygb03TlyeeZ5uNtuxc.roa File: zaw-l3nyUygb03TlyeeZ5uNtuxc.roa (raw, json) Hash identifier: vbvudETvvHbmCpQdctUZ1OuuVkp6d4krvgnH2TdlDSA= Subject key identifier: CD:AC:3E:97:79:F2:53:28:1B:D3:74:E5:C9:E7:99:E6:E3:6D:BB:17 Certificate issuer: /CN=9c620f31b4997c7345bc66b46b43d686bf00931a Certificate serial: 019B7C809628C0724FDEDBD5BE2FA5E16B2B Authority key identifier: 9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/zaw-l3nyUygb03TlyeeZ5uNtuxc.roa Signing time: Fri 02 Jan 2026 02:19:20 +0000 ROA not before: Fri 02 Jan 2026 02:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20618 IP address blocks: 213.132.0.0/19 maxlen: 19 2a02:4bc0::/29 maxlen: 29 2a02:4bc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:96:28:c0:72:4f:de:db:d5:be:2f:a5:e1:6b:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c620f31b4997c7345bc66b46b43d686bf00931a Validity Not Before: Jan 2 02:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cdac3e9779f253281bd374e5c9e799e6e36dbb17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:06:8d:07:43:4e:e4:46:59:37:01:09:6a:a9: 5d:53:3b:83:3c:a8:4e:52:f3:e1:56:5c:96:e6:9f: d3:92:e1:74:a0:82:80:e8:41:11:95:01:68:f7:d1: a4:26:40:5f:bd:64:aa:37:ca:41:37:eb:9e:85:a7: 66:42:74:ca:19:b7:32:0f:be:45:0e:42:cd:21:8a: 75:9c:a2:2a:df:d2:f5:8d:15:ff:c4:6d:07:5e:d4: 2d:5e:5d:c6:3b:97:78:82:d3:9d:9c:bc:22:c1:bb: 5a:b2:a3:43:09:d3:ed:cf:cf:66:3c:88:ab:32:11: 26:49:c4:de:ec:46:5e:a5:87:c8:be:04:ae:3d:45: 3a:98:c3:f9:66:2f:05:b6:b9:30:c7:04:6f:5e:2e: e4:b9:82:1d:31:65:29:4d:d9:f8:0e:14:2e:d2:d5: 2a:5d:ab:c3:54:6e:0b:55:6f:88:4a:1b:32:ef:f9: f8:73:7f:ee:dc:a3:7e:43:18:84:73:08:37:eb:8c: d0:81:a6:dc:ed:16:94:7a:7e:0b:f3:4c:0f:e0:5b: 81:e7:8c:ae:ec:56:9d:90:2d:c5:e0:de:fc:5f:98: 68:69:39:34:43:aa:46:94:df:15:e1:c2:0c:e7:b3: 83:fa:48:ff:e6:40:b1:9c:de:88:b6:c6:4f:57:70: 8c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AC:3E:97:79:F2:53:28:1B:D3:74:E5:C9:E7:99:E6:E3:6D:BB:17 X509v3 Authority Key Identifier: keyid:9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/zaw-l3nyUygb03TlyeeZ5uNtuxc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.132.0.0/19 IPv6: 2a02:4bc0::/29 Signature Algorithm: sha256WithRSAEncryption 25:33:e4:2e:98:e3:44:3e:3e:65:3c:b1:7c:01:13:08:86:de: 41:1e:2c:08:cd:ac:c8:e0:6f:92:a6:91:5e:99:82:fe:cc:43: 00:64:ec:94:91:2e:48:dd:f9:e1:78:0e:78:9f:33:51:b0:a3: 64:56:d1:f8:41:12:1e:bf:26:42:68:c8:dc:1d:b0:3a:af:68: 92:f6:5a:48:2e:ca:97:84:77:83:cc:2b:e1:02:0e:b4:ad:fa: 2a:2a:a6:de:56:13:3b:a4:4d:4f:d5:93:1f:29:34:13:37:ed: c7:62:a6:c4:78:bc:20:c9:fd:6c:fd:75:e2:6f:50:39:00:ba: 81:3c:18:5d:1e:89:b8:44:e9:0b:74:ec:00:6a:2b:98:0b:6e: 7d:dd:62:1b:04:6c:b5:33:e2:39:cd:78:c3:dd:95:9c:bf:ec: 92:e3:04:d8:4f:ac:3e:96:8e:fd:18:2a:45:ef:73:03:72:51: 03:fc:46:13:fc:d8:66:f6:06:f6:f7:a6:63:24:13:7d:ce:eb: cd:0a:21:c2:05:a0:81:21:f4:59:47:cd:e1:d3:e4:0d:61:14: af:e9:21:89:dd:85:56:83:2e:79:b1:18:14:52:be:ca:88:a3: cd:a1:92:84:55:64:96:52:42:27:cb:6f:0c:12:1f:5e:fd:37: 99:fa:df:b2 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gJYowHJP3tvVvi+l4WsrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNjIwZjMxYjQ5OTdjNzM0NWJjNjZiNDZiNDNkNjg2YmYw MDkzMWEwHhcNMjYwMTAyMDIxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGFjM2U5Nzc5ZjI1MzI4MWJkMzc0ZTVjOWU3OTllNmUzNmRiYjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowaNB0NO5EZZNwEJaqldUzuDPKhO UvPhVlyW5p/TkuF0oIKA6EERlQFo99GkJkBfvWSqN8pBN+uehadmQnTKGbcyD75F DkLNIYp1nKIq39L1jRX/xG0HXtQtXl3GO5d4gtOdnLwiwbtasqNDCdPtz89mPIir MhEmScTe7EZepYfIvgSuPUU6mMP5Zi8FtrkwxwRvXi7kuYIdMWUpTdn4DhQu0tUq XavDVG4LVW+IShsy7/n4c3/u3KN+QxiEcwg364zQgabc7RaUen4L80wP4FuB54yu 7FadkC3F4N78X5hoaTk0Q6pGlN8V4cIM57OD+kj/5kCxnN6ItsZPV3CMWwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFM2sPpd58lMoG9N05cnnmebjbbsXMB8GA1UdIwQY MBaAFJxiDzG0mXxzRbxmtGtD1oa/AJMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84OTI4ZjEtODYxOC00YzE5LTlmM2Qt NGI4NzkzZGI3NDYwLzEvemF3LWwzbnlVeWdiMDNUbHllZVo1dU50dXhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni84OTI4ZjEtODYxOC00YzE5LTlmM2QtNGI4NzkzZGI3NDYw LzEvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQF1YQAMA0E AgACMAcDBQMqAkvAMA0GCSqGSIb3DQEBCwUAA4IBAQAlM+QumONEPj5lPLF8ARMI ht5BHiwIzazI4G+SppFemYL+zEMAZOyUkS5I3fnheA54nzNRsKNkVtH4QRIevyZC aMjcHbA6r2iS9lpILsqXhHeDzCvhAg60rfoqKqbeVhM7pE1P1ZMfKTQTN+3HYqbE eLwgyf1s/XXib1A5ALqBPBhdHom4ROkLdOwAaiuYC2593WIbBGy1M+I5zXjD3ZWc v+yS4wTYT6w+lo79GCpF73MDclED/EYT/Nhm9gb296ZjJBN9zuvNCiHCBaCBIfRZ R83h0+QNYRSv6SGJ3YVWgy55sRgUUr7KiKPNoZKEVWSWUkIny28MEh9e/TeZ+t+y -----END CERTIFICATE-----Generated at Mon Feb 9 22:24:20 2026 by rpki-client