This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/ZDeK_h7Yktwusk00tf3NgSBT4g0.roa File: ZDeK_h7Yktwusk00tf3NgSBT4g0.roa (raw, json) Hash identifier: rNsj+HJvDzUoAVXz/lUifSYu5zPEcVn/nppLLD+QbMQ= Subject key identifier: 64:37:8A:FE:1E:D8:92:DC:2E:B2:4D:34:B5:FD:CD:81:20:53:E2:0D Certificate issuer: /CN=2e252a477242fb45f20bb08020a403a2bb466a9b Certificate serial: 019C09772A2DD973551D72CD69D2B99BB2C2 Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/ZDeK_h7Yktwusk00tf3NgSBT4g0.roa Signing time: Thu 29 Jan 2026 11:15:30 +0000 ROA not before: Thu 29 Jan 2026 11:15:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206977 IP address blocks: 31.170.232.0/24 maxlen: 24 31.170.233.0/24 maxlen: 24 31.170.234.0/24 maxlen: 24 31.170.235.0/24 maxlen: 24 31.170.236.0/24 maxlen: 24 31.170.237.0/24 maxlen: 24 31.170.238.0/24 maxlen: 24 31.170.239.0/24 maxlen: 24 85.132.24.0/24 maxlen: 24 85.132.26.0/24 maxlen: 24 85.132.27.0/24 maxlen: 24 85.132.58.0/24 maxlen: 24 85.132.65.0/24 maxlen: 24 85.132.66.0/24 maxlen: 24 85.132.70.0/24 maxlen: 24 85.132.121.0/24 maxlen: 24 85.132.122.0/24 maxlen: 24 94.20.63.0/24 maxlen: 24 94.20.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:09:77:2a:2d:d9:73:55:1d:72:cd:69:d2:b9:9b:b2:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b Validity Not Before: Jan 29 11:15:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64378afe1ed892dc2eb24d34b5fdcd812053e20d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cc:f6:19:ab:af:68:af:ea:25:56:e8:ad:0a: 68:01:98:9b:7f:5d:83:ae:38:a9:45:a7:be:33:f1: 53:e9:04:8d:48:a9:80:5e:0f:38:79:c0:0b:ac:6d: 7e:1d:52:0c:22:12:9a:d9:34:ea:f9:32:1c:14:71: 9c:c2:33:3b:75:a1:07:49:15:14:a0:f0:c6:85:9b: fa:c2:51:ae:aa:50:3c:cc:5d:ee:aa:d9:aa:a4:3c: 18:65:c5:21:75:c8:09:ee:08:78:76:b5:9e:9b:c2: 30:33:8f:1b:98:7f:3b:05:98:a2:d2:8a:31:1b:61: 74:87:71:21:da:93:12:2f:39:15:5e:c5:5a:94:1e: a4:e7:75:22:cb:d9:9c:6f:68:71:66:28:3b:62:52: 57:af:ba:d6:aa:cd:8f:4e:95:b5:5b:9f:e0:e6:5f: 4f:78:6c:18:02:07:0e:e4:8e:61:60:47:d9:c4:89: e7:f2:cb:9e:9f:7f:81:96:2b:b3:1c:63:5d:ac:01: 23:91:8c:d6:ca:eb:14:bd:85:09:27:f0:01:2c:37: 32:1c:5d:5f:47:47:75:24:5c:46:12:f5:d8:ec:ce: f0:75:82:8e:5b:79:1c:f9:36:87:4c:5e:8d:02:0a: 2f:c6:41:c8:d4:2e:db:c5:74:b5:b9:41:d2:6c:1e: c4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:37:8A:FE:1E:D8:92:DC:2E:B2:4D:34:B5:FD:CD:81:20:53:E2:0D X509v3 Authority Key Identifier: keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/ZDeK_h7Yktwusk00tf3NgSBT4g0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.170.232.0/21 85.132.24.0/24 85.132.26.0/23 85.132.58.0/24 85.132.65.0-85.132.66.255 85.132.70.0/24 85.132.121.0-85.132.122.255 94.20.63.0/24 94.20.157.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:9d:0d:b6:e2:d6:78:3c:6b:3f:a3:1f:e7:f3:22:13:2b:9e: df:69:18:14:87:95:6c:a9:65:22:9b:7d:65:c6:bd:59:db:07: a4:2c:92:37:bd:3b:b6:ba:e9:c8:bc:a8:c3:e3:d6:43:1f:bc: f4:ea:08:f7:d6:60:a7:cd:27:55:e2:91:15:f1:c0:43:cf:9c: fe:d8:18:0f:9a:d3:00:10:ee:b8:3d:54:88:8e:33:fb:a0:75: cf:71:ca:f5:7b:77:3a:68:af:c1:85:e7:f1:82:02:b1:1a:87: b2:2c:78:5e:37:0d:ca:1f:fc:ca:33:ae:66:7e:00:2f:60:75: 05:89:03:ec:4d:f2:46:33:ee:50:5e:df:88:55:32:3d:da:c7: 24:2a:5d:47:69:a5:83:22:5e:01:6d:54:80:4c:fe:43:3c:33: e3:e1:65:9e:e6:81:04:b4:55:5d:7e:41:db:89:66:6d:7b:8b: 86:29:d5:59:e0:9f:ce:1c:2b:e1:6d:53:5d:4f:81:47:2e:60: 83:6c:6f:36:e8:3b:ec:09:08:a3:52:bd:1c:03:13:bf:a7:47: f7:a5:1d:ce:ff:ec:b2:7e:e6:ef:53:2f:ff:f5:45:d7:c9:4f: 80:a5:91:94:22:9a:0f:1e:e1:dc:73:80:de:06:5c:f5:c2:7d: 14:91:60:c7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZwJdyot2XNVHXLNadK5m7LCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMjUyYTQ3NzI0MmZiNDVmMjBiYjA4MDIwYTQwM2EyYmI0 NjZhOWIwHhcNMjYwMTI5MTExNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDM3OGFmZTFlZDg5MmRjMmViMjRkMzRiNWZkY2Q4MTIwNTNlMjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcz2GauvaK/qJVborQpoAZibf12D rjipRae+M/FT6QSNSKmAXg84ecALrG1+HVIMIhKa2TTq+TIcFHGcwjM7daEHSRUU oPDGhZv6wlGuqlA8zF3uqtmqpDwYZcUhdcgJ7gh4drWem8IwM48bmH87BZii0oox G2F0h3Eh2pMSLzkVXsValB6k53Uiy9mcb2hxZig7YlJXr7rWqs2PTpW1W5/g5l9P eGwYAgcO5I5hYEfZxInn8suen3+BliuzHGNdrAEjkYzWyusUvYUJJ/ABLDcyHF1f R0d1JFxGEvXY7M7wdYKOW3kc+TaHTF6NAgovxkHI1C7bxXS1uUHSbB7EGwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFGQ3iv4e2JLcLrJNNLX9zYEgU+INMB8GA1UdIwQY MBaAFC4lKkdyQvtF8guwgCCkA6K7RmqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGlVcVIzSkMtMFh5QzdDQUlLUURvcnRHYXBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iMTA1NjItMjZhMS00NjQ1LThkMmIt MTZmMTQ2YmVmOTk1LzEvWkRlS19oN1lrdHd1c2swMHRmM05nU0JUNGcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9iMTA1NjItMjZhMS00NjQ1LThkMmItMTZmMTQ2YmVmOTk1 LzEvTGlVcVIzSkMtMFh5QzdDQUlLUURvcnRHYXBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQDH6roAwQA VYQYAwQBVYQaAwQAVYQ6MAwDBABVhEEDBABVhEIDBABVhEYwDAMEAFWEeQMEAFWE egMEAF4UPwMEAF4UnTANBgkqhkiG9w0BAQsFAAOCAQEAe50NtuLWeDxrP6Mf5/Mi Eyue32kYFIeVbKllIpt9Zca9WdsHpCySN707trrpyLyow+PWQx+89OoI99Zgp80n VeKRFfHAQ8+c/tgYD5rTABDuuD1UiI4z+6B1z3HK9Xt3OmivwYXn8YICsRqHsix4 XjcNyh/8yjOuZn4AL2B1BYkD7E3yRjPuUF7fiFUyPdrHJCpdR2mlgyJeAW1UgEz+ Qzwz4+FlnuaBBLRVXX5B24lmbXuLhinVWeCfzhwr4W1TXU+BRy5gg2xvNug77AkI o1K9HAMTv6dH96Udzv/ssn7m71Mv//VF18lPgKWRlCKaDx7h3HOA3gZc9cJ9FJFg xw== -----END CERTIFICATE-----Generated at Tue Feb 10 06:08:07 2026 by rpki-client