This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/ZMtSB0l_076CYwpSuOF4CneQKrk.roa File: ZMtSB0l_076CYwpSuOF4CneQKrk.roa (raw, json) Hash identifier: 9DT7VHiPpHd++csJSGVeKtgcVzqUOkeCYTM33unCaDU= Subject key identifier: 64:CB:52:07:49:7F:D3:BE:82:63:0A:52:B8:E1:78:0A:77:90:2A:B9 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA5505864C5008E272306C802BE5EA4 Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/ZMtSB0l_076CYwpSuOF4CneQKrk.roa Signing time: Thu 01 Jan 2026 22:19:50 +0000 ROA not before: Thu 01 Jan 2026 22:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210119 IP address blocks: 82.137.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:50:58:64:c5:00:8e:27:23:06:c8:02:be:5e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64cb5207497fd3be82630a52b8e1780a77902ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1b:4e:5a:f2:7d:bd:06:cb:7a:b2:1b:19:b1: 4e:a1:29:b1:67:bf:23:27:51:15:24:f3:25:87:5c: c2:f8:41:f2:d3:12:08:6e:4c:e0:08:c0:24:1a:cb: b4:09:af:82:2a:0e:31:62:ac:e3:35:45:18:33:56: 4b:1a:2c:0f:01:9a:20:71:79:c2:05:b4:77:89:bb: cc:01:15:f2:c4:9f:8b:3b:66:93:d3:a2:06:d7:17: a1:d4:28:84:90:69:0d:59:4b:f0:ca:34:b6:5d:b8: 39:db:de:3f:f0:57:a1:dc:af:22:42:c0:b0:e9:4d: df:fc:42:c7:92:0f:23:f0:99:c6:8e:37:68:d2:f7: bc:65:73:2e:3f:37:2e:db:27:63:83:c4:20:ee:33: 55:c5:78:dc:3f:3f:a5:72:9a:a6:66:1a:69:06:ec: 7c:0e:69:d3:9a:5b:15:64:31:a3:10:db:9f:f4:fa: de:fd:95:5f:a5:82:fb:93:44:e8:a0:87:84:58:b5: fc:83:17:67:4e:d7:e0:54:1a:17:46:8b:c5:cd:f4: 12:6f:bd:14:2a:35:55:3a:26:ef:85:e7:3e:26:07: ad:23:01:cd:43:9e:a9:7f:5a:2c:80:71:07:7e:4b: 48:19:00:93:fd:6b:e9:95:af:d9:a0:4f:18:38:bb: 0a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:CB:52:07:49:7F:D3:BE:82:63:0A:52:B8:E1:78:0A:77:90:2A:B9 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/ZMtSB0l_076CYwpSuOF4CneQKrk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.137.68.0/24 Signature Algorithm: sha256WithRSAEncryption 77:16:44:cb:1f:2b:15:3b:4f:b0:3d:ba:4b:70:c2:01:9b:c3: 20:ad:18:02:6a:eb:ed:fe:f6:7a:be:f4:70:02:41:91:35:a0: b4:dc:27:11:33:9c:48:4b:5d:29:51:d7:67:39:92:9c:1a:88: 1a:74:51:d8:70:16:36:00:67:fe:32:55:ae:ea:6f:55:5c:6e: 39:38:38:84:68:aa:45:08:f0:59:26:ac:4b:0e:a7:d8:25:3c: 54:2b:83:b9:84:56:18:fb:81:f8:96:88:0d:42:eb:74:cd:f8: af:2c:26:cd:74:cb:66:f8:1f:03:4a:e5:0e:75:3a:a9:78:69: 82:1a:43:4c:d7:ec:42:28:57:5a:71:3e:bf:22:de:ed:fb:aa: 44:f2:e8:8f:bb:77:4f:79:9a:b6:78:27:e8:6d:50:78:91:ed: 09:81:2a:49:0c:65:16:e3:dd:e2:58:f8:e1:3d:94:76:19:95: e6:76:58:28:ba:c5:04:c2:15:d1:71:37:f0:14:5c:a6:38:02: bd:ff:28:e4:86:0b:4c:06:04:2a:85:61:f9:00:6a:12:74:e5: 6f:64:3b:61:0d:9c:67:36:20:17:9e:9c:d2:04:31:0c:17:98: 82:33:18:fa:b7:fb:c4:f5:bf:93:21:66:cd:39:37:67:ea:01: 74:45:76:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pVBYZMUAjicjBsgCvl6kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGNiNTIwNzQ5N2ZkM2JlODI2MzBhNTJiOGUxNzgwYTc3OTAyYWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBtOWvJ9vQbLerIbGbFOoSmxZ78j J1EVJPMlh1zC+EHy0xIIbkzgCMAkGsu0Ca+CKg4xYqzjNUUYM1ZLGiwPAZogcXnC BbR3ibvMARXyxJ+LO2aT06IG1xeh1CiEkGkNWUvwyjS2Xbg5294/8Feh3K8iQsCw 6U3f/ELHkg8j8JnGjjdo0ve8ZXMuPzcu2ydjg8Qg7jNVxXjcPz+lcpqmZhppBux8 DmnTmlsVZDGjENuf9Pre/ZVfpYL7k0TooIeEWLX8gxdnTtfgVBoXRovFzfQSb70U KjVVOibvhec+JgetIwHNQ56pf1osgHEHfktIGQCT/Wvpla/ZoE8YOLsKtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGTLUgdJf9O+gmMKUrjheAp3kCq5MB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvWk10U0IwbF8wNzZDWXdwU3VPRjRDbmVRS3JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUolEMA0G CSqGSIb3DQEBCwUAA4IBAQB3FkTLHysVO0+wPbpLcMIBm8MgrRgCauvt/vZ6vvRw AkGRNaC03CcRM5xIS10pUddnOZKcGogadFHYcBY2AGf+MlWu6m9VXG45ODiEaKpF CPBZJqxLDqfYJTxUK4O5hFYY+4H4logNQut0zfivLCbNdMtm+B8DSuUOdTqpeGmC GkNM1+xCKFdacT6/It7t+6pE8uiPu3dPeZq2eCfobVB4ke0JgSpJDGUW493iWPjh PZR2GZXmdlgousUEwhXRcTfwFFymOAK9/yjkhgtMBgQqhWH5AGoSdOVvZDthDZxn NiAXnpzSBDEMF5iCMxj6t/vE9b+TIWbNOTdn6gF0RXaA -----END CERTIFICATE-----Generated at Mon Jan 26 11:44:26 2026 by rpki-client