This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/ZRLYVrP2rb95Q-Ge4TVnxmxa0zg.roa File: ZRLYVrP2rb95Q-Ge4TVnxmxa0zg.roa (raw, json) Hash identifier: Xsb75QA4ApCthewBTBgfSKpRYNo5qI3KmhsLF/JdAuM= Subject key identifier: 65:12:D8:56:B3:F6:AD:BF:79:43:E1:9E:E1:35:67:C6:6C:5A:D3:38 Certificate issuer: /CN=7780cd4e74f185a8f1ad40521b611b74d516bf77 Certificate serial: 019B78350AAE22EED6A487386031E4C9A8C9 Authority key identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/ZRLYVrP2rb95Q-Ge4TVnxmxa0zg.roa Signing time: Thu 01 Jan 2026 06:18:20 +0000 ROA not before: Thu 01 Jan 2026 06:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50898 IP address blocks: 46.254.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:0a:ae:22:ee:d6:a4:87:38:60:31:e4:c9:a8:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7780cd4e74f185a8f1ad40521b611b74d516bf77 Validity Not Before: Jan 1 06:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6512d856b3f6adbf7943e19ee13567c66c5ad338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:db:9e:c3:98:a5:d8:d3:82:b7:41:38:9b:97: 9a:77:a9:12:21:9d:93:20:8a:cb:48:e8:c1:81:0d: 06:4e:7b:69:86:2b:2c:df:a7:16:99:c6:f9:80:a3: c3:9c:05:0c:0a:9a:fb:ca:3e:b5:1d:4a:9f:b2:49: 1b:0c:3e:46:6e:27:0e:ee:31:5d:05:4a:40:a4:b5: e4:a2:fa:84:74:57:a0:79:85:6b:89:5c:65:eb:40: 15:0e:47:b4:07:c9:fb:c1:6e:90:6f:8b:4e:8e:6b: 4f:2a:94:c1:8f:5f:5b:13:b3:7d:df:01:19:80:45: 7d:b8:d7:5c:06:ae:37:8c:ca:5b:c0:f9:61:35:7e: 54:00:ca:4c:bd:e3:46:b0:2b:a0:b0:ad:4d:d9:23: cc:3f:81:0c:ed:52:80:8d:d2:d6:d4:74:63:ca:c5: 66:f3:a8:45:8a:0b:20:12:47:e8:cb:67:eb:cd:d3: e2:53:49:51:81:c6:33:40:98:04:93:b5:ad:ff:d7: fc:ac:10:3c:77:a9:5d:e0:e6:f1:73:e1:a7:34:f9: 7b:ad:ef:d8:8d:fa:7d:d0:84:f0:94:42:fc:43:6d: a1:bd:c6:31:2d:65:a1:7f:4a:15:86:e0:a2:d4:a3: 4a:72:de:c1:5f:82:c0:1c:6c:95:4d:ca:72:45:73: 18:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:12:D8:56:B3:F6:AD:BF:79:43:E1:9E:E1:35:67:C6:6C:5A:D3:38 X509v3 Authority Key Identifier: keyid:77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/ZRLYVrP2rb95Q-Ge4TVnxmxa0zg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.254.78.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:91:a0:54:e8:9c:9f:3e:f5:af:5e:d9:61:c4:b9:92:5b:dc: f4:9b:16:13:36:db:18:07:b9:f0:d5:ae:0f:42:03:54:af:ee: f8:18:c8:03:6d:f4:fe:3f:3a:d4:99:12:e2:07:c5:d3:ce:67: 63:3f:b9:50:83:9e:54:3b:71:d8:9f:a8:b1:49:ed:cb:32:38: 28:a4:02:35:f6:dc:cf:12:c0:31:10:3d:ba:73:b2:97:d8:9a: 12:94:87:6d:20:9a:28:ae:29:a3:c3:db:e2:06:bd:52:b7:c6: a0:1a:5e:f2:7a:a2:03:8f:f6:8b:88:32:dd:dc:a4:bf:03:eb: ef:c2:f9:00:37:92:25:36:1a:05:22:10:36:44:63:5c:68:f3: 0b:4a:d6:cf:e7:e7:a8:17:55:55:11:73:06:3a:ec:68:c1:55: 31:8b:ca:54:73:70:d9:c7:be:bc:65:e3:77:07:63:89:a3:cb: a9:a2:6c:84:b1:5e:bb:88:f9:52:8f:4f:62:7b:1a:34:01:22: 11:90:ac:9c:f2:c5:3a:b6:a4:af:92:77:a5:5d:22:e2:1c:9d: e2:3d:c9:c6:5f:b8:df:35:9b:41:71:36:49:4e:cb:ec:bd:0e: 56:d9:1b:e3:ca:1a:04:75:5c:ca:78:c5:80:e5:0c:2e:dc:4f: f2:10:f5:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NQquIu7WpIc4YDHkyajJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ODBjZDRlNzRmMTg1YThmMWFkNDA1MjFiNjExYjc0ZDUx NmJmNzcwHhcNMjYwMTAxMDYxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTEyZDg1NmIzZjZhZGJmNzk0M2UxOWVlMTM1NjdjNjZjNWFkMzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNuew5il2NOCt0E4m5ead6kSIZ2T IIrLSOjBgQ0GTntphiss36cWmcb5gKPDnAUMCpr7yj61HUqfskkbDD5GbicO7jFd BUpApLXkovqEdFegeYVriVxl60AVDke0B8n7wW6Qb4tOjmtPKpTBj19bE7N93wEZ gEV9uNdcBq43jMpbwPlhNX5UAMpMveNGsCugsK1N2SPMP4EM7VKAjdLW1HRjysVm 86hFigsgEkfoy2frzdPiU0lRgcYzQJgEk7Wt/9f8rBA8d6ld4Obxc+GnNPl7re/Y jfp90ITwlEL8Q22hvcYxLWWhf0oVhuCi1KNKct7BX4LAHGyVTcpyRXMYCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGUS2Faz9q2/eUPhnuE1Z8ZsWtM4MB8GA1UdIwQY MBaAFHeAzU508YWo8a1AUhthG3TVFr93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDRETlRuVHhoYWp4clVCU0cyRWJkTlVXdjNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9mZjU5ZjctYmZjMy00OTg5LThiOGQt ZTk4ZDA1MmNlYTdmLzEvWlJMWVZyUDJyYjk1US1HZTRUVm54bXhhMHpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9mZjU5ZjctYmZjMy00OTg5LThiOGQtZTk4ZDA1MmNlYTdm LzEvZDRETlRuVHhoYWp4clVCU0cyRWJkTlVXdjNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALv5OMA0G CSqGSIb3DQEBCwUAA4IBAQAakaBU6JyfPvWvXtlhxLmSW9z0mxYTNtsYB7nw1a4P QgNUr+74GMgDbfT+PzrUmRLiB8XTzmdjP7lQg55UO3HYn6ixSe3LMjgopAI19tzP EsAxED26c7KX2JoSlIdtIJoorimjw9viBr1St8agGl7yeqIDj/aLiDLd3KS/A+vv wvkAN5IlNhoFIhA2RGNcaPMLStbP5+eoF1VVEXMGOuxowVUxi8pUc3DZx768ZeN3 B2OJo8upomyEsV67iPlSj09iexo0ASIRkKyc8sU6tqSvknelXSLiHJ3iPcnGX7jf NZtBcTZJTsvsvQ5W2RvjyhoEdVzKeMWA5Qwu3E/yEPXP -----END CERTIFICATE-----Generated at Tue Feb 10 00:28:51 2026 by rpki-client