This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/zMqk1-WIYUxSncp-81GKb9JoWog.roa File: zMqk1-WIYUxSncp-81GKb9JoWog.roa (raw, json) Hash identifier: g3omPs3FrgCp88PJmKaoUEjf80fMum+1oxYyWWIAYGw= Subject key identifier: CC:CA:A4:D7:E5:88:61:4C:52:9D:CA:7E:F3:51:8A:6F:D2:68:5A:88 Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Certificate serial: 019B79103D3C5F986E4D89F9B5A7F864E635 Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/zMqk1-WIYUxSncp-81GKb9JoWog.roa Signing time: Thu 01 Jan 2026 10:17:45 +0000 ROA not before: Thu 01 Jan 2026 10:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203674 IP address blocks: 195.216.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:3d:3c:5f:98:6e:4d:89:f9:b5:a7:f8:64:e6:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Validity Not Before: Jan 1 10:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cccaa4d7e588614c529dca7ef3518a6fd2685a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f6:77:f3:65:b6:0b:ae:cf:bf:7e:78:20:57: a4:b7:c2:aa:07:ed:2d:e6:d6:d1:74:d0:2b:e6:99: 83:6d:86:e1:a0:a3:bc:3b:d0:e9:2a:e1:13:2f:6b: ba:18:4b:f5:ea:32:5b:d6:30:7f:17:b0:2a:6b:f4: e4:52:64:8a:03:cc:02:7c:93:3f:2d:f6:60:be:cf: 34:53:64:3d:9a:da:92:8a:cb:89:03:3e:f2:a0:63: b9:64:e9:d9:2d:ba:0f:ef:a4:8c:0a:1d:92:70:c1: d8:6a:41:5f:74:17:20:0f:6a:81:96:6e:fb:73:c2: b6:01:5a:1c:36:3f:9b:9f:c8:47:61:05:e1:27:a5: 37:23:3b:ce:48:73:f9:71:2a:0c:40:2b:23:77:5e: 4e:82:a8:cb:70:df:ab:6d:19:0c:b2:60:b2:41:83: 79:50:9c:85:00:06:8b:66:aa:18:f7:08:83:cd:48: 56:90:ea:eb:b6:41:c7:83:15:b6:50:01:34:db:18: 0f:2d:fd:60:81:56:eb:cf:98:bc:e8:05:7e:e1:aa: 92:8d:26:bd:e6:da:71:a3:93:bd:d3:24:76:85:75: 7c:5b:03:e0:5b:ca:ff:ac:f7:d9:bf:b8:89:ef:62: 28:f2:5a:71:a6:df:91:b4:54:46:74:8a:30:2c:15: 5e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:CA:A4:D7:E5:88:61:4C:52:9D:CA:7E:F3:51:8A:6F:D2:68:5A:88 X509v3 Authority Key Identifier: keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/zMqk1-WIYUxSncp-81GKb9JoWog.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.216.187.0/24 Signature Algorithm: sha256WithRSAEncryption 27:dd:81:f3:ac:91:2e:a7:7d:5e:28:a2:82:7b:72:be:64:f7: 4b:fd:f4:ba:8d:d9:f3:c6:aa:34:73:0d:51:3f:76:6e:b6:56: 4d:6c:f1:f4:ab:e1:5a:bc:a0:e5:b6:87:e0:66:5b:3f:5d:5a: 6c:38:d7:07:41:df:38:83:13:cc:d1:d3:e7:64:03:6e:7e:77: b0:84:1a:60:4c:40:e7:39:0c:2a:01:30:f5:b5:96:56:12:25: 54:53:61:4d:a2:d4:a7:7d:dc:3d:cb:95:31:24:e1:8d:d7:b1: 55:5f:ee:e7:69:86:41:93:2a:41:8c:ae:ee:7f:99:9f:e4:20: e1:31:ea:da:55:a3:ee:fe:28:98:03:da:dd:0c:fb:b7:90:d0: 1f:ad:b7:79:0e:0d:a3:68:1f:36:bd:51:ba:3c:db:5f:55:c9: 49:6a:51:dd:b0:c9:31:97:bd:62:a7:fa:bb:2c:96:34:4a:39: 5f:3c:94:95:35:0b:c2:d2:8d:47:6d:1d:3f:4a:1d:ea:18:4d: 2c:ef:94:00:78:2c:04:f1:79:b6:ac:f2:59:f8:ef:9c:90:95: 9c:53:18:46:54:f2:df:ab:da:24:89:15:3b:1a:13:d9:31:49: d5:8f:6b:0f:b1:8e:94:07:b7:49:e7:85:73:51:16:69:22:c0: 71:5e:c9:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ED08X5huTYn5taf4ZOY1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy MTVkYTcwHhcNMjYwMTAxMTAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2NhYTRkN2U1ODg2MTRjNTI5ZGNhN2VmMzUxOGE2ZmQyNjg1YTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfZ382W2C67Pv354IFekt8KqB+0t 5tbRdNAr5pmDbYbhoKO8O9DpKuETL2u6GEv16jJb1jB/F7Aqa/TkUmSKA8wCfJM/ LfZgvs80U2Q9mtqSisuJAz7yoGO5ZOnZLboP76SMCh2ScMHYakFfdBcgD2qBlm77 c8K2AVocNj+bn8hHYQXhJ6U3IzvOSHP5cSoMQCsjd15OgqjLcN+rbRkMsmCyQYN5 UJyFAAaLZqoY9wiDzUhWkOrrtkHHgxW2UAE02xgPLf1ggVbrz5i86AV+4aqSjSa9 5tpxo5O90yR2hXV8WwPgW8r/rPfZv7iJ72Io8lpxpt+RtFRGdIowLBVeOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMzKpNfliGFMUp3KfvNRim/SaFqIMB8GA1UdIwQY MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct OWU0MTNlYmY0MmYzLzEvek1xazEtV0lZVXhTbmNwLTgxR0tiOUpvV29nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9i7MA0G CSqGSIb3DQEBCwUAA4IBAQAn3YHzrJEup31eKKKCe3K+ZPdL/fS6jdnzxqo0cw1R P3ZutlZNbPH0q+FavKDltofgZls/XVpsONcHQd84gxPM0dPnZANufnewhBpgTEDn OQwqATD1tZZWEiVUU2FNotSnfdw9y5UxJOGN17FVX+7naYZBkypBjK7uf5mf5CDh MeraVaPu/iiYA9rdDPu3kNAfrbd5Dg2jaB82vVG6PNtfVclJalHdsMkxl71ip/q7 LJY0SjlfPJSVNQvC0o1HbR0/Sh3qGE0s75QAeCwE8Xm2rPJZ+O+ckJWcUxhGVPLf q9okiRU7GhPZMUnVj2sPsY6UB7dJ54VzURZpIsBxXsmU -----END CERTIFICATE-----Generated at Tue Jan 20 07:32:18 2026 by rpki-client