This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/Zw_PlkCoc7b4w9c1NFRcTvHu_Fo.roa File: Zw_PlkCoc7b4w9c1NFRcTvHu_Fo.roa (raw, json) Hash identifier: Wqi7qOZvgM3RPc29KzFtX0inQZlH2CPxij4n38nvX8w= Subject key identifier: 67:0F:CF:96:40:A8:73:B6:F8:C3:D7:35:34:54:5C:4E:F1:EE:FC:5A Certificate issuer: /CN=dc0e25e17a51696923a5c02966787409aac9aa36 Certificate serial: 019B7DC9AB217A32FE8D78D5618B06B8B488 Authority key identifier: DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/Zw_PlkCoc7b4w9c1NFRcTvHu_Fo.roa Signing time: Fri 02 Jan 2026 08:18:47 +0000 ROA not before: Fri 02 Jan 2026 08:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59726 IP address blocks: 37.230.201.0/24 maxlen: 24 212.86.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:ab:21:7a:32:fe:8d:78:d5:61:8b:06:b8:b4:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc0e25e17a51696923a5c02966787409aac9aa36 Validity Not Before: Jan 2 08:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=670fcf9640a873b6f8c3d73534545c4ef1eefc5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:16:13:48:11:af:b3:ec:58:db:3a:2d:85:d7: 79:82:c3:48:26:9f:6f:29:7b:a9:39:18:aa:ff:29: 5e:f1:02:f4:a7:3a:9f:f2:af:bf:95:d2:7a:f8:54: 6a:23:93:2a:92:05:ec:43:bf:54:0c:bd:1f:27:43: 1c:90:ee:71:ce:61:6c:a1:87:92:f3:68:cd:ce:cc: 56:8d:16:40:3a:3e:46:5b:2b:a5:9f:4c:fa:3e:eb: 45:d3:fa:f5:b6:34:99:d3:33:eb:ce:d0:9a:bb:02: 0e:c9:c8:af:be:63:6a:0a:db:82:ff:a8:f0:9e:31: 17:cf:28:c6:27:25:eb:1d:c7:de:8b:c7:9d:37:5a: f3:de:87:dd:f0:92:a5:b3:ad:f7:e5:9a:e6:8f:92: 3c:72:57:d9:9a:78:a5:57:e2:b2:3d:5b:2c:48:46: da:09:89:1a:d6:ce:d6:82:57:7c:9e:ee:49:44:01: 52:93:64:8e:40:48:ff:ac:5a:7d:91:66:23:a6:50: 48:fe:0b:13:6b:62:b4:f7:a5:98:21:0b:4e:0a:39: 10:1d:a9:1f:72:38:96:89:94:eb:06:dd:48:a5:af: c7:4f:61:b8:72:fe:15:04:5c:93:05:8e:ad:a4:7b: 71:18:bf:c0:81:d5:12:29:81:d0:b5:e0:18:a1:d0: 5a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0F:CF:96:40:A8:73:B6:F8:C3:D7:35:34:54:5C:4E:F1:EE:FC:5A X509v3 Authority Key Identifier: keyid:DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/Zw_PlkCoc7b4w9c1NFRcTvHu_Fo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.201.0/24 212.86.99.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:7d:e3:3d:e4:8e:f4:a8:6c:16:1e:33:42:9b:0b:fe:41:2d: e7:7e:5d:35:50:7b:5b:0b:38:28:a3:94:ea:c8:3d:af:cd:d0: 20:44:4b:45:54:3b:98:4b:0d:40:e1:fe:ba:01:7f:88:e5:a7: bd:8e:36:5d:11:b2:6e:94:f5:d0:f9:59:4f:20:f6:fc:7d:f2: 2a:fa:81:66:33:aa:fe:34:91:31:ee:11:22:60:4f:ea:8e:fd: 2b:3f:af:9d:aa:5e:2b:33:db:d1:74:79:3a:39:01:8f:97:d7: 54:49:20:fa:2c:32:3f:1e:9e:2f:48:91:c0:05:37:74:54:02: 6f:a6:29:4f:c0:8a:16:95:ba:06:ff:5d:81:c9:fe:49:3d:95: af:a6:ec:ac:2e:a2:8c:28:be:e9:3a:9d:0a:1b:9c:95:d4:89: a9:3c:66:04:eb:af:dc:ff:c7:39:63:3f:17:db:e6:f4:aa:71: 92:9c:d4:77:f6:f4:87:fe:4b:34:1f:a6:d7:3a:e5:4e:cc:7b: 6e:01:01:1c:51:93:f1:89:c4:a8:80:9d:dc:41:5d:d7:59:91: 38:c0:79:7b:76:72:3e:ad:e6:38:00:93:ef:17:e1:17:dd:da: 1f:65:6c:7b:52:ac:2a:9d:64:f8:9a:95:61:10:f5:19:04:4b: d0:70:a8:7a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yashejL+jXjVYYsGuLSIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMGUyNWUxN2E1MTY5NjkyM2E1YzAyOTY2Nzg3NDA5YWFj OWFhMzYwHhcNMjYwMTAyMDgxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzBmY2Y5NjQwYTg3M2I2ZjhjM2Q3MzUzNDU0NWM0ZWYxZWVmYzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhYTSBGvs+xY2zothdd5gsNIJp9v KXupORiq/yle8QL0pzqf8q+/ldJ6+FRqI5MqkgXsQ79UDL0fJ0MckO5xzmFsoYeS 82jNzsxWjRZAOj5GWyuln0z6PutF0/r1tjSZ0zPrztCauwIOycivvmNqCtuC/6jw njEXzyjGJyXrHcfei8edN1rz3ofd8JKls6335Zrmj5I8clfZmnilV+KyPVssSEba CYka1s7Wgld8nu5JRAFSk2SOQEj/rFp9kWYjplBI/gsTa2K096WYIQtOCjkQHakf cjiWiZTrBt1Ipa/HT2G4cv4VBFyTBY6tpHtxGL/AgdUSKYHQteAYodBaRwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGcPz5ZAqHO2+MPXNTRUXE7x7vxaMB8GA1UdIwQY MBaAFNwOJeF6UWlpI6XAKWZ4dAmqyao2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0E0bDRYcFJhV2tqcGNBcFpuaDBDYXJKcWpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8yY2M0NmMtOGM1MS00MzMwLWI2MjMt MTgzNWNjOGExZDlkLzEvWndfUGxrQ29jN2I0dzljMU5GUmNUdkh1X0ZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS8yY2M0NmMtOGM1MS00MzMwLWI2MjMtMTgzNWNjOGExZDlk LzEvM0E0bDRYcFJhV2tqcGNBcFpuaDBDYXJKcWpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJebJAwQA 1FZjMA0GCSqGSIb3DQEBCwUAA4IBAQBtfeM95I70qGwWHjNCmwv+QS3nfl01UHtb Czgoo5TqyD2vzdAgREtFVDuYSw1A4f66AX+I5ae9jjZdEbJulPXQ+VlPIPb8ffIq +oFmM6r+NJEx7hEiYE/qjv0rP6+dql4rM9vRdHk6OQGPl9dUSSD6LDI/Hp4vSJHA BTd0VAJvpilPwIoWlboG/12Byf5JPZWvpuysLqKMKL7pOp0KG5yV1ImpPGYE66/c /8c5Yz8X2+b0qnGSnNR39vSH/ks0H6bXOuVOzHtuAQEcUZPxicSogJ3cQV3XWZE4 wHl7dnI+reY4AJPvF+EX3dofZWx7UqwqnWT4mpVhEPUZBEvQcKh6 -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:36 2026 by rpki-client