This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/zrkn_uB3ShS_cd_b_R1hmzfy6Ew.roa File: zrkn_uB3ShS_cd_b_R1hmzfy6Ew.roa (raw, json) Hash identifier: ooIevr06g975ZUs+fykIJwicos54nML/60Bg9GaeLiQ= Subject key identifier: CE:B9:27:FE:E0:77:4A:14:BF:71:DF:DB:FD:1D:61:9B:37:F2:E8:4C Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Certificate serial: 019B79103C84663E0FEA60346F283394785D Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/zrkn_uB3ShS_cd_b_R1hmzfy6Ew.roa Signing time: Thu 01 Jan 2026 10:17:45 +0000 ROA not before: Thu 01 Jan 2026 10:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61254 IP address blocks: 195.216.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 Jan 2026 04:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:3c:84:66:3e:0f:ea:60:34:6f:28:33:94:78:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Validity Not Before: Jan 1 10:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ceb927fee0774a14bf71dfdbfd1d619b37f2e84c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:83:82:47:dd:ca:7e:01:04:1c:b1:7f:09:9d: 26:43:6b:52:d6:9a:6d:ea:23:89:52:17:16:4a:50: 53:82:e6:db:53:25:64:49:40:fb:25:f2:8d:f2:ef: 89:fe:ba:34:5c:d9:0b:da:81:97:13:9d:ea:e8:f4: 48:69:4b:6f:4c:d7:57:34:96:51:a2:1c:42:92:62: 94:da:d2:64:06:d4:b8:24:c4:36:10:87:0f:e9:e3: cf:46:54:c8:e6:36:5f:6b:f6:e8:f2:95:69:67:01: 0a:30:d4:ee:c4:70:a5:16:d7:dc:3e:df:20:09:63: 3a:81:46:98:7b:02:22:5a:26:a9:32:f2:e6:a5:24: 60:c7:58:b3:88:8d:af:a2:65:4d:cb:96:7d:48:cb: 65:c4:73:38:f5:71:0f:f7:ce:79:e1:8b:a5:e7:1b: e9:cd:85:fa:fd:45:69:f4:14:0b:6b:bc:80:49:6f: 62:37:9a:a4:29:8a:43:ec:b0:0b:8c:65:1a:ec:7c: 83:ee:68:86:3d:76:7b:8d:df:8e:7a:b2:a4:32:ba: fc:5f:af:6c:0e:a8:62:2b:fb:e2:b2:b2:59:74:9a: 5e:68:7f:5b:26:98:89:bb:49:b3:87:24:63:14:e3: da:37:c6:b1:59:fd:7c:06:08:d3:d2:ab:68:bf:84: 6c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B9:27:FE:E0:77:4A:14:BF:71:DF:DB:FD:1D:61:9B:37:F2:E8:4C X509v3 Authority Key Identifier: keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/zrkn_uB3ShS_cd_b_R1hmzfy6Ew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.216.170.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:fa:02:e8:a2:ef:0b:6d:73:1c:5a:43:88:fe:5b:d0:ae:d8: f9:54:c9:5d:b1:67:e5:0a:b4:55:48:f7:eb:e4:5e:0f:ba:f9: 77:03:59:b8:e7:cc:f2:5c:24:96:18:cc:40:56:40:2d:0c:13: ee:6b:3b:42:aa:61:cf:68:27:1f:5b:0b:a8:d2:d1:0b:ad:79: f7:86:9d:ed:36:c8:6a:ae:cf:ea:ae:e3:45:da:82:37:f3:68: bd:9b:07:e0:da:88:d8:ea:b2:c4:4c:c0:e7:23:d1:5c:5b:dd: e0:c2:74:25:d9:e4:64:c4:80:b8:d2:1e:8d:25:53:98:ab:b9: 59:91:48:07:e1:9c:64:85:0e:08:51:94:17:4c:1a:83:80:44: be:16:f2:a9:ca:99:9e:3e:44:6d:30:b5:5e:5a:dc:4f:62:03: 8d:96:b8:99:6f:e4:e2:c6:1b:75:39:bf:09:22:ce:d5:3d:83: b7:f2:74:4f:14:3d:f2:b3:85:ac:27:de:f6:0d:05:29:05:2a: e4:2e:fe:59:55:e9:a7:0b:9f:f8:53:86:47:13:f3:d5:c9:b5: f8:53:26:d4:00:44:dd:9d:01:9e:2e:1d:78:7b:6f:b9:d0:68: 99:42:93:61:c6:41:11:32:72:f2:c6:65:d4:49:7d:0d:5d:56: 8d:8b:6f:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EDyEZj4P6mA0bygzlHhdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy MTVkYTcwHhcNMjYwMTAxMTAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWI5MjdmZWUwNzc0YTE0YmY3MWRmZGJmZDFkNjE5YjM3ZjJlODRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4OCR93KfgEEHLF/CZ0mQ2tS1ppt 6iOJUhcWSlBTgubbUyVkSUD7JfKN8u+J/ro0XNkL2oGXE53q6PRIaUtvTNdXNJZR ohxCkmKU2tJkBtS4JMQ2EIcP6ePPRlTI5jZfa/bo8pVpZwEKMNTuxHClFtfcPt8g CWM6gUaYewIiWiapMvLmpSRgx1iziI2vomVNy5Z9SMtlxHM49XEP98554Yul5xvp zYX6/UVp9BQLa7yASW9iN5qkKYpD7LALjGUa7HyD7miGPXZ7jd+OerKkMrr8X69s DqhiK/visrJZdJpeaH9bJpiJu0mzhyRjFOPaN8axWf18BgjT0qtov4RsGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM65J/7gd0oUv3Hf2/0dYZs38uhMMB8GA1UdIwQY MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct OWU0MTNlYmY0MmYzLzEvenJrbl91QjNTaFNfY2RfYl9SMWhtemZ5NkV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9iqMA0G CSqGSIb3DQEBCwUAA4IBAQAM+gLoou8LbXMcWkOI/lvQrtj5VMldsWflCrRVSPfr 5F4Puvl3A1m458zyXCSWGMxAVkAtDBPuaztCqmHPaCcfWwuo0tELrXn3hp3tNshq rs/qruNF2oI382i9mwfg2ojY6rLETMDnI9FcW93gwnQl2eRkxIC40h6NJVOYq7lZ kUgH4ZxkhQ4IUZQXTBqDgES+FvKpypmePkRtMLVeWtxPYgONlriZb+Tixht1Ob8J Is7VPYO38nRPFD3ys4WsJ972DQUpBSrkLv5ZVemnC5/4U4ZHE/PVybX4UybUAETd nQGeLh14e2+50GiZQpNhxkERMnLyxmXUSX0NXVaNi28c -----END CERTIFICATE-----Generated at Wed Jan 14 09:31:04 2026 by rpki-client