This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZJD_AVJF2cKeqSmonXprsm4rzTM.roa File: ZJD_AVJF2cKeqSmonXprsm4rzTM.roa (raw, json) Hash identifier: Wnft/EHrpVhQxZ5RFYfIeT4UFDod9QeQoX24dq5kmY8= Subject key identifier: 64:90:FF:01:52:45:D9:C2:9E:A9:29:A8:9D:7A:6B:B2:6E:2B:CD:33 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AE32525D81FDEB6D4F6B8808D07B5 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZJD_AVJF2cKeqSmonXprsm4rzTM.roa Signing time: Thu 01 Jan 2026 16:18:55 +0000 ROA not before: Thu 01 Jan 2026 16:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215672 IP address blocks: 82.153.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e3:25:25:d8:1f:de:b6:d4:f6:b8:80:8d:07:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6490ff015245d9c29ea929a89d7a6bb26e2bcd33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:59:cc:29:c5:1c:4f:4c:e0:81:58:90:49:84: 4f:18:4f:e3:0e:be:c5:03:c3:a8:a2:be:43:b1:a2: a2:fd:5c:e1:52:a0:49:fe:37:29:ed:df:2e:0e:cd: d3:8a:33:67:bc:34:96:a9:6f:49:a1:fc:54:5e:34: a9:b9:4a:94:dd:17:97:4e:72:ae:04:c2:6e:f9:2c: 2a:ac:dc:32:7a:1e:0d:8a:ed:0b:d7:17:fb:76:f3: 46:88:cd:0c:35:44:4c:c3:7e:1c:90:d7:22:f5:dc: 4e:48:c8:b7:bd:20:b2:0a:20:95:01:02:08:ec:c9: 56:c7:e2:1e:f9:b6:36:bc:b3:70:22:d2:e5:09:74: b5:7c:0a:0f:2f:29:7e:cf:41:d0:a2:bd:ec:85:a2: 55:52:64:3d:26:1a:6c:ac:be:c6:e7:06:43:32:d6: e3:3b:95:34:ce:5e:47:9f:50:0a:3e:53:d9:d6:f5: 8c:98:f5:a1:c9:f0:73:44:5b:ed:63:fd:73:e2:db: 53:ee:83:8b:f4:6d:8c:fc:6a:d4:96:7d:c3:94:b6: 50:e9:3d:a0:33:9c:44:54:db:cb:b7:ab:de:11:e2: a8:f6:f3:7b:96:09:66:3a:6e:b5:6e:7e:bd:2a:61: d6:8e:fd:8c:03:04:60:54:9d:55:0d:a7:b9:a6:e7: 29:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:90:FF:01:52:45:D9:C2:9E:A9:29:A8:9D:7A:6B:B2:6E:2B:CD:33 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZJD_AVJF2cKeqSmonXprsm4rzTM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.157.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:ae:be:58:f4:3e:fb:c5:72:93:63:c1:81:95:ee:65:98:af: ad:c3:94:82:16:af:1a:ca:f7:bb:1b:37:b9:64:53:4f:f4:6c: e0:02:a4:1e:3f:bb:eb:24:ba:6c:62:1b:aa:45:f8:a4:45:b0: 80:d8:55:70:95:2a:bb:92:49:f8:a8:59:84:2e:4b:9c:fc:b8: 48:54:54:26:63:88:f2:d9:e0:b9:2e:ab:a3:4d:b4:b8:3d:6b: ba:57:21:ec:c6:b1:28:e0:88:ce:a5:2e:45:d2:9c:3d:64:f2: 7a:c5:36:3b:97:c4:c5:19:2d:29:6b:47:6f:6a:cf:15:3b:28: ef:1b:58:a9:bf:b9:7d:83:1d:67:a1:8c:f6:f6:24:50:94:6f: 37:8e:85:19:77:6f:bb:a1:b3:a0:db:91:e5:2f:08:86:b6:f1: ab:c7:c6:85:36:52:1a:c4:a9:74:5c:80:8f:fa:7f:f4:b2:72: 4a:0f:29:de:13:b3:11:4c:bd:b5:ce:6d:c3:4e:ee:13:53:8b: 29:11:ed:24:7c:4a:a9:8a:67:2d:fe:91:50:eb:2b:19:a3:7d: 3f:a4:7a:cc:44:b0:0f:65:46:e3:62:3c:51:1b:6d:30:44:65: 26:27:e5:56:93:7e:6b:55:61:78:c5:77:61:9f:68:99:00:04: db:83:33:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WuMlJdgf3rbU9riAjQe1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDkwZmYwMTUyNDVkOWMyOWVhOTI5YTg5ZDdhNmJiMjZlMmJjZDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlnMKcUcT0zggViQSYRPGE/jDr7F A8Ooor5DsaKi/VzhUqBJ/jcp7d8uDs3TijNnvDSWqW9JofxUXjSpuUqU3ReXTnKu BMJu+SwqrNwyeh4Niu0L1xf7dvNGiM0MNURMw34ckNci9dxOSMi3vSCyCiCVAQII 7MlWx+Ie+bY2vLNwItLlCXS1fAoPLyl+z0HQor3shaJVUmQ9JhpsrL7G5wZDMtbj O5U0zl5Hn1AKPlPZ1vWMmPWhyfBzRFvtY/1z4ttT7oOL9G2M/GrUln3DlLZQ6T2g M5xEVNvLt6veEeKo9vN7lglmOm61bn69KmHWjv2MAwRgVJ1VDae5pucphQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGSQ/wFSRdnCnqkpqJ16a7JuK80zMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvWkpEX0FWSkYyY0tlcVNtb25YcHJzbTRyelRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpmdMA0G CSqGSIb3DQEBCwUAA4IBAQAfrr5Y9D77xXKTY8GBle5lmK+tw5SCFq8ayve7Gze5 ZFNP9GzgAqQeP7vrJLpsYhuqRfikRbCA2FVwlSq7kkn4qFmELkuc/LhIVFQmY4jy 2eC5LqujTbS4PWu6VyHsxrEo4IjOpS5F0pw9ZPJ6xTY7l8TFGS0pa0dvas8VOyjv G1ipv7l9gx1noYz29iRQlG83joUZd2+7obOg25HlLwiGtvGrx8aFNlIaxKl0XICP +n/0snJKDyneE7MRTL21zm3DTu4TU4spEe0kfEqpimct/pFQ6ysZo30/pHrMRLAP ZUbjYjxRG20wRGUmJ+VWk35rVWF4xXdhn2iZAATbgzMp -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:53 2026 by rpki-client