This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/ZjezsyQwp__S_-4bnAPJityXs-A.roa File: ZjezsyQwp__S_-4bnAPJityXs-A.roa (raw, json) Hash identifier: KtcE3154yrRhHpULPsbebKDxYlMS75i4aRoAd7gorN8= Subject key identifier: 66:37:B3:B3:24:30:A7:FF:D2:FF:EE:1B:9C:03:C9:8A:DC:97:B3:E0 Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019B9743C39C3C7EC8FA063AA5D0CF3A3EDA Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/ZjezsyQwp__S_-4bnAPJityXs-A.roa Signing time: Wed 07 Jan 2026 07:02:39 +0000 ROA not before: Wed 07 Jan 2026 07:02:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198154 IP address blocks: 87.236.38.0/24 maxlen: 24 2a05:9080::/48 maxlen: 48 2a05:9080:4::/48 maxlen: 48 2a05:9080:7::/48 maxlen: 48 2a05:9080:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:97:43:c3:9c:3c:7e:c8:fa:06:3a:a5:d0:cf:3a:3e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Jan 7 07:02:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6637b3b32430a7ffd2ffee1b9c03c98adc97b3e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1f:b2:e5:dc:ec:aa:16:2d:34:c5:48:ff:9e: 30:23:2f:d8:5c:74:d8:e8:c4:09:79:5f:79:04:d5: e1:71:ff:ba:58:53:2b:8f:eb:f2:ac:f2:32:ce:9e: ec:17:db:76:3b:53:f2:53:d2:b4:61:41:71:4d:ad: 20:fe:4f:dc:c6:85:e9:e1:ea:67:b4:e7:fc:e0:41: 68:33:a3:97:a2:a0:7c:56:9b:0e:23:42:6b:2c:52: bd:e8:5e:40:0c:cb:2e:57:9c:3b:34:90:8c:e7:a4: 24:ad:be:08:00:17:8b:d7:82:91:3c:c0:89:1b:fa: 11:54:3e:45:16:e1:e3:f3:93:b4:b0:92:4f:41:f5: 8e:13:1a:5d:31:53:ec:c5:da:0f:5f:a3:26:f5:ec: 5f:62:ea:d1:9b:ec:48:20:52:74:38:cc:83:3d:b5: 14:e5:28:da:b7:a5:a6:fd:15:95:fc:e9:bf:60:71: ca:1a:5d:1e:3c:e1:ff:8d:f7:34:21:0b:73:58:c2: d6:93:0b:ce:a3:9c:57:10:41:cf:fa:83:4a:58:d5: a6:a1:3f:e3:bd:5f:71:4c:d0:40:6a:08:09:6a:ed: 60:2c:16:93:f3:89:54:52:b3:ba:32:7d:af:ac:1b: d3:e3:b8:f9:b9:40:2a:49:f9:31:95:19:6c:54:02: 99:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:37:B3:B3:24:30:A7:FF:D2:FF:EE:1B:9C:03:C9:8A:DC:97:B3:E0 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/ZjezsyQwp__S_-4bnAPJityXs-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.38.0/24 IPv6: 2a05:9080::/48 2a05:9080:4::/48 2a05:9080:7::/48 2a05:9080:10::/48 Signature Algorithm: sha256WithRSAEncryption 58:58:93:9a:49:ea:5c:f9:e7:0f:ec:9f:25:29:60:8d:f5:5d: d4:42:4f:e9:2e:24:a9:82:d6:94:93:0a:32:9f:4d:f4:15:06: 05:2e:8a:13:0c:df:78:3f:71:84:1e:c3:bf:d5:fe:ac:dc:dc: 49:b7:1c:84:09:a5:d6:5a:41:39:10:d0:95:60:1b:22:42:69: bb:df:96:ae:f5:d1:1b:90:54:f0:45:8f:6f:17:7c:bd:7e:de: e5:9f:2d:91:66:57:c5:32:92:50:73:45:c6:8a:78:c4:df:30: 6c:dc:d7:30:49:6a:ae:d7:e2:3f:da:5a:fa:2a:1a:a1:ba:97: 52:93:a1:b2:44:ee:47:00:ac:16:92:12:a0:23:c2:bd:6e:11: 23:db:34:5f:47:eb:b6:8f:1b:bc:c8:4d:b2:62:ca:b8:b9:d8: c9:22:79:36:7a:51:2d:c3:d2:64:9a:71:ea:c7:af:86:55:7c: bc:af:c7:e5:5b:c0:90:76:f6:e3:04:25:3c:04:be:8e:a8:4f: 47:48:8c:9c:b2:3a:9c:66:7e:da:3e:4e:80:e6:5b:81:e8:ff: ad:15:b5:d6:a0:38:19:07:07:08:d7:59:0b:d6:5a:88:29:d5: a5:47:d8:8b:f6:60:0d:b3:e0:32:c4:1c:bc:aa:95:d2:2e:3b: 66:11:3e:c3 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZuXQ8OcPH7I+gY6pdDPOj7aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMTA3MDcwMjM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjM3YjNiMzI0MzBhN2ZmZDJmZmVlMWI5YzAzYzk4YWRjOTdiM2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5B+y5dzsqhYtNMVI/54wIy/YXHTY 6MQJeV95BNXhcf+6WFMrj+vyrPIyzp7sF9t2O1PyU9K0YUFxTa0g/k/cxoXp4epn tOf84EFoM6OXoqB8VpsOI0JrLFK96F5ADMsuV5w7NJCM56Qkrb4IABeL14KRPMCJ G/oRVD5FFuHj85O0sJJPQfWOExpdMVPsxdoPX6Mm9exfYurRm+xIIFJ0OMyDPbUU 5Sjat6Wm/RWV/Om/YHHKGl0ePOH/jfc0IQtzWMLWkwvOo5xXEEHP+oNKWNWmoT/j vV9xTNBAaggJau1gLBaT84lUUrO6Mn2vrBvT47j5uUAqSfkxlRlsVAKZzQIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFGY3s7MkMKf/0v/uG5wDyYrcl7PgMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvWmplenN5UXdwX19TXy00Ym5BUEppdHlYcy1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAMBAIAATAGAwQAV+wmMCoE AgACMCQDBwAqBZCAAAADBwAqBZCAAAQDBwAqBZCAAAcDBwAqBZCAABAwDQYJKoZI hvcNAQELBQADggEBAFhYk5pJ6lz55w/snyUpYI31XdRCT+kuJKmC1pSTCjKfTfQV BgUuihMM33g/cYQew7/V/qzc3Em3HIQJpdZaQTkQ0JVgGyJCabvflq710RuQVPBF j28XfL1+3uWfLZFmV8UyklBzRcaKeMTfMGzc1zBJaq7X4j/aWvoqGqG6l1KTobJE 7kcArBaSEqAjwr1uESPbNF9H67aPG7zITbJiyri52MkieTZ6US3D0mSacerHr4ZV fLyvx+VbwJB29uMEJTwEvo6oT0dIjJyyOpxmfto+ToDmW4Ho/60VtdagOBkHBwjX WQvWWogp1aVH2Iv2YA2z4DLEHLyqldIuO2YRPsM= -----END CERTIFICATE-----Generated at Fri Jan 9 00:34:55 2026 by rpki-client