This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ZdsxHDO2nLc4Kl8ndeC_2-HP7V4.roa File: ZdsxHDO2nLc4Kl8ndeC_2-HP7V4.roa (raw, json) Hash identifier: Bag2Egox30YXLNayX+wGeXoWx+BunJIhMQpRLJA7SYM= Subject key identifier: 65:DB:31:1C:33:B6:9C:B7:38:2A:5F:27:75:E0:BF:DB:E1:CF:ED:5E Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A2560B900E453C9FC755552D345142 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ZdsxHDO2nLc4Kl8ndeC_2-HP7V4.roa Signing time: Thu 01 Jan 2026 08:17:43 +0000 ROA not before: Thu 01 Jan 2026 08:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 139057 IP address blocks: 87.82.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:56:0b:90:0e:45:3c:9f:c7:55:55:2d:34:51:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65db311c33b69cb7382a5f2775e0bfdbe1cfed5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cd:c8:aa:b0:73:14:0a:ed:51:4c:a8:6c:f6: 7c:87:f8:0f:19:63:ec:2c:dc:e6:6f:1a:9d:86:15: a5:41:a3:a8:45:95:4e:20:4c:f6:be:8d:68:e8:f1: af:c8:25:07:3a:d9:c7:70:21:ef:3b:4a:43:43:ce: 7b:a6:b8:c1:2a:26:43:be:b8:80:c0:92:ce:f3:d9: 80:d5:4d:5e:39:c1:b6:9a:02:f9:a5:b7:51:39:cc: ac:dc:10:d8:4b:67:39:c7:86:f1:02:3f:74:ac:07: fc:fe:c4:30:f4:26:01:f7:cc:27:f5:58:a8:a0:66: 55:29:17:6e:15:50:95:d2:45:86:ae:75:27:af:02: 5a:1b:77:3f:cc:19:38:b1:71:67:70:f3:17:11:71: 7f:e5:85:0d:97:f2:f2:15:d5:b2:62:34:a0:9c:aa: 99:07:51:39:1c:5c:42:1c:9c:cf:39:40:0b:91:b5: 9f:08:0f:14:08:2b:18:ea:f7:e9:ca:eb:24:e7:1d: 9a:f7:db:75:b8:12:29:c5:0a:4f:9b:60:21:ac:e1: 4c:0a:c8:aa:3d:c3:de:69:0e:71:bc:b9:56:34:e8: 76:4b:92:5f:e9:41:41:6d:e6:5a:e3:fc:a7:ea:86: 13:4b:7b:b1:7b:03:49:fd:0d:29:66:b7:dd:ec:45: 26:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DB:31:1C:33:B6:9C:B7:38:2A:5F:27:75:E0:BF:DB:E1:CF:ED:5E X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ZdsxHDO2nLc4Kl8ndeC_2-HP7V4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.82.51.0/24 Signature Algorithm: sha256WithRSAEncryption 79:bf:af:e3:4a:c5:bb:1b:84:e1:ca:38:96:9a:c5:91:19:2e: 05:0f:61:64:18:3c:ef:87:d8:6b:27:87:9d:54:21:10:d8:f8: 6b:47:30:6c:c1:25:41:c3:26:e4:41:cd:68:b4:a3:ce:f5:79: 65:af:ea:e7:4b:b1:60:05:28:73:64:e1:e1:1c:ca:97:5a:3b: a0:d7:e5:e7:75:6d:4f:64:04:5b:6e:2a:30:04:ed:2f:a5:f4: 24:fd:2d:bb:27:8b:98:8b:3b:e2:c4:e0:32:7a:bd:c8:a4:f3: 2e:8c:4e:a1:be:b4:8d:48:87:fc:0d:ef:75:ef:01:d2:b8:7d: 96:69:6a:eb:27:cb:f0:88:25:53:22:de:e4:18:4d:0f:e8:28: fa:5b:e3:bc:14:5d:2d:3d:5e:2c:3f:30:63:49:94:d9:d1:9d: 04:98:28:c3:25:38:2f:f0:19:65:90:d1:f9:67:27:14:8f:f4: b7:02:dd:dd:03:c3:0a:45:80:b8:83:60:51:b3:89:51:db:c7: dc:aa:a0:34:1c:df:ef:77:7d:42:45:60:e8:d5:38:e3:33:09: 2b:ee:2f:a2:d6:dd:55:5f:e2:af:2d:9d:b2:53:fc:ea:1f:a6: 08:de:d1:81:12:4e:6a:5d:54:71:9a:5e:38:9b:4b:1d:89:5f: d5:60:30:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4olYLkA5FPJ/HVVUtNFFCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWRiMzExYzMzYjY5Y2I3MzgyYTVmMjc3NWUwYmZkYmUxY2ZlZDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu83IqrBzFArtUUyobPZ8h/gPGWPs LNzmbxqdhhWlQaOoRZVOIEz2vo1o6PGvyCUHOtnHcCHvO0pDQ857prjBKiZDvriA wJLO89mA1U1eOcG2mgL5pbdROcys3BDYS2c5x4bxAj90rAf8/sQw9CYB98wn9Vio oGZVKRduFVCV0kWGrnUnrwJaG3c/zBk4sXFncPMXEXF/5YUNl/LyFdWyYjSgnKqZ B1E5HFxCHJzPOUALkbWfCA8UCCsY6vfpyusk5x2a99t1uBIpxQpPm2AhrOFMCsiq PcPeaQ5xvLlWNOh2S5Jf6UFBbeZa4/yn6oYTS3uxewNJ/Q0pZrfd7EUmjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGXbMRwztpy3OCpfJ3Xgv9vhz+1eMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvWmRzeEhETzJuTGM0S2w4bmRlQ18yLUhQN1Y0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV1IzMA0G CSqGSIb3DQEBCwUAA4IBAQB5v6/jSsW7G4ThyjiWmsWRGS4FD2FkGDzvh9hrJ4ed VCEQ2PhrRzBswSVBwybkQc1otKPO9Xllr+rnS7FgBShzZOHhHMqXWjug1+XndW1P ZARbbiowBO0vpfQk/S27J4uYizvixOAyer3IpPMujE6hvrSNSIf8De917wHSuH2W aWrrJ8vwiCVTIt7kGE0P6Cj6W+O8FF0tPV4sPzBjSZTZ0Z0EmCjDJTgv8BllkNH5 ZycUj/S3At3dA8MKRYC4g2BRs4lR28fcqqA0HN/vd31CRWDo1TjjMwkr7i+i1t1V X+KvLZ2yU/zqH6YI3tGBEk5qXVRxml44m0sdiV/VYDBr -----END CERTIFICATE-----Generated at Sun Jan 18 04:26:25 2026 by rpki-client