This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/ZbzlNVKf1eKK7KiivvZ1QujJRLo.roa File: ZbzlNVKf1eKK7KiivvZ1QujJRLo.roa (raw, json) Hash identifier: JpHtVBVtqKHMUBQ5w8gmqDV0uY/Xo9NDIUCWtdbcBs0= Subject key identifier: 65:BC:E5:35:52:9F:D5:E2:8A:EC:A8:A2:BE:F6:75:42:E8:C9:44:BA Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019AE502ACE465AA72157830AA7B7EF0860E Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/ZbzlNVKf1eKK7KiivvZ1QujJRLo.roa Signing time: Wed 03 Dec 2025 16:19:09 +0000 ROA not before: Wed 03 Dec 2025 16:19:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215238 IP address blocks: 78.40.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e5:02:ac:e4:65:aa:72:15:78:30:aa:7b:7e:f0:86:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Dec 3 16:19:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=65bce535529fd5e28aeca8a2bef67542e8c944ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:85:5f:ba:32:39:53:bc:f2:2e:34:c9:8b:c0: c6:be:b4:31:f8:c9:e5:1b:1a:76:20:6a:c9:1b:e8: 98:43:34:da:19:d9:fa:b1:85:f3:27:12:f5:18:7c: cd:04:7a:75:6d:40:a2:1a:4f:44:97:5b:0a:08:8f: 19:03:1a:56:61:5a:8f:3c:bf:e4:59:90:ce:b6:99: d0:18:a8:91:8c:e6:40:67:14:54:d3:4c:45:cc:46: 97:2f:76:01:45:5b:4f:47:48:ae:e5:a8:fb:30:7c: d5:d9:04:07:d9:ed:25:dd:2f:9a:7c:69:f7:6f:45: ef:50:46:57:a8:a5:e7:2c:7f:62:8d:6b:57:47:f2: 53:1b:a1:b6:59:3f:3a:e4:6b:cf:c0:84:3d:e2:87: b7:b1:3a:66:6b:2a:ed:58:e1:f4:ab:f4:0e:28:3b: ae:67:9d:92:be:99:2f:be:00:11:06:d3:6a:c2:a8: 42:be:e2:86:32:72:4d:50:ed:d1:d2:53:6d:2e:43: 0d:19:95:d6:3f:e4:8a:61:51:83:38:80:24:08:ce: d4:7f:94:73:e5:95:7d:17:ac:54:14:d7:d3:c4:31: 71:47:0c:cd:e5:ee:4a:3a:7d:c5:b9:50:da:de:74: a8:ef:cd:81:87:47:69:15:51:f5:41:88:d0:6d:67: d9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:BC:E5:35:52:9F:D5:E2:8A:EC:A8:A2:BE:F6:75:42:E8:C9:44:BA X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/ZbzlNVKf1eKK7KiivvZ1QujJRLo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.40.208.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:1a:c7:8f:9e:81:41:91:ba:4d:45:a4:c7:f7:ea:7f:bb:32: f7:d3:47:c7:9c:0d:6d:f8:24:4e:25:2b:f4:0b:7c:53:ce:97: f1:ac:8a:c7:23:20:b2:d5:be:99:a8:f0:70:31:da:e2:b7:81: 47:18:57:a7:c4:72:cf:55:6d:d1:f1:f0:6c:4e:7f:b5:7e:5d: 23:06:77:54:b5:a6:5b:e0:c1:2f:8d:44:2b:a3:54:b2:02:b2: 64:87:67:5c:28:14:bb:1f:fa:71:ee:a8:37:bc:6a:28:ec:3b: f7:31:1b:b2:dc:87:2a:77:7f:71:ec:f5:4f:8e:ac:c5:0f:14: 3f:2d:c8:b4:7d:62:71:bb:df:bd:a4:0a:9c:d8:9c:f3:21:b0: 28:c1:c9:4c:1e:51:4e:35:7e:b9:7b:08:e6:34:49:91:1c:ec: fb:6b:4c:e1:a3:b1:1f:45:c4:a8:c9:cd:db:a5:ca:06:40:81: d3:be:3a:45:1a:f4:43:29:fb:6c:7a:f8:a6:68:09:f4:a7:7d: fb:c8:62:55:f0:2b:ea:b5:d2:d2:24:b2:63:d7:3d:49:43:e8: 70:bc:e2:b4:32:94:b8:05:a8:37:a2:61:6e:1d:1a:15:ca:7f: d3:05:a2:bc:6d:e3:f8:ba:37:c7:d3:03:b1:b7:12:d1:3d:1c: 83:65:e4:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrlAqzkZapyFXgwqnt+8IYOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjUxMjAzMTYxOTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWJjZTUzNTUyOWZkNWUyOGFlY2E4YTJiZWY2NzU0MmU4Yzk0NGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4VfujI5U7zyLjTJi8DGvrQx+Mnl Gxp2IGrJG+iYQzTaGdn6sYXzJxL1GHzNBHp1bUCiGk9El1sKCI8ZAxpWYVqPPL/k WZDOtpnQGKiRjOZAZxRU00xFzEaXL3YBRVtPR0iu5aj7MHzV2QQH2e0l3S+afGn3 b0XvUEZXqKXnLH9ijWtXR/JTG6G2WT865GvPwIQ94oe3sTpmayrtWOH0q/QOKDuu Z52SvpkvvgARBtNqwqhCvuKGMnJNUO3R0lNtLkMNGZXWP+SKYVGDOIAkCM7Uf5Rz 5ZV9F6xUFNfTxDFxRwzN5e5KOn3FuVDa3nSo782Bh0dpFVH1QYjQbWfZrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGW85TVSn9Xiiuyoor72dULoyUS6MB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvWmJ6bE5WS2YxZUtLN0tpaXZ2WjFRdWpKUkxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATijQMA0G CSqGSIb3DQEBCwUAA4IBAQAqGsePnoFBkbpNRaTH9+p/uzL300fHnA1t+CROJSv0 C3xTzpfxrIrHIyCy1b6ZqPBwMdrit4FHGFenxHLPVW3R8fBsTn+1fl0jBndUtaZb 4MEvjUQro1SyArJkh2dcKBS7H/px7qg3vGoo7Dv3MRuy3Icqd39x7PVPjqzFDxQ/ Lci0fWJxu9+9pAqc2JzzIbAowclMHlFONX65ewjmNEmRHOz7a0zho7EfRcSoyc3b pcoGQIHTvjpFGvRDKftsevimaAn0p337yGJV8CvqtdLSJLJj1z1JQ+hwvOK0MpS4 Bag3omFuHRoVyn/TBaK8beP4ujfH0wOxtxLRPRyDZeRW -----END CERTIFICATE-----Generated at Sat Dec 6 12:43:02 2025 by rpki-client