This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZAXWWxV_g0guWhxvtcTaPAClorQ.roa File: ZAXWWxV_g0guWhxvtcTaPAClorQ.roa (raw, json) Hash identifier: /1ePGts9zGO64Aq7aeLnS25SFc247LH2DdeZkd1fO/I= Subject key identifier: 64:05:D6:5B:15:7F:83:48:2E:5A:1C:6F:B5:C4:DA:3C:00:A5:A2:B4 Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Certificate serial: 019B7C8053E4BBFDA4637AD66D7A6324BCB7 Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZAXWWxV_g0guWhxvtcTaPAClorQ.roa Signing time: Fri 02 Jan 2026 02:19:03 +0000 ROA not before: Fri 02 Jan 2026 02:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7922 IP address blocks: 45.147.159.0/24 maxlen: 24 77.111.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:53:e4:bb:fd:a4:63:7a:d6:6d:7a:63:24:bc:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Validity Not Before: Jan 2 02:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6405d65b157f83482e5a1c6fb5c4da3c00a5a2b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:02:ad:d2:fe:96:12:8f:97:dc:2d:0b:2e:79: f9:af:b9:a0:b2:d9:01:f2:db:56:8b:b7:49:77:9b: 7c:d7:0c:36:ef:e5:53:e2:79:31:d8:b4:5f:1f:94: 7f:fd:18:75:50:c2:e5:fe:0b:3d:bb:6b:62:48:61: 45:c5:4a:fa:af:95:66:06:84:2b:dd:47:9b:ca:66: 42:91:ed:4f:bd:ff:93:e6:2e:de:f6:1b:92:83:b8: 34:15:97:72:97:4a:91:5e:00:50:18:5c:e9:f1:52: 3b:47:a4:2f:a1:9c:1e:44:6d:fa:bf:29:38:a0:2f: 35:24:e1:6e:17:b4:07:79:51:2a:eb:d8:61:f9:87: 3c:76:04:e1:23:6f:7a:33:06:eb:80:65:70:4c:4b: d5:61:49:3f:0f:a3:d5:5c:77:5c:70:84:ed:85:c9: b5:0a:b9:2a:2e:e9:fa:15:f1:eb:93:33:28:a0:b4: 81:e3:cd:ce:95:3f:6f:1c:af:69:0d:05:96:94:6c: 04:12:49:18:87:20:9d:d2:bf:94:24:07:92:76:3b: 9b:c6:c8:2a:ec:50:13:74:63:e6:d7:e6:4f:51:75: a5:18:7e:dd:e2:86:77:a1:ca:fd:38:0c:a2:a3:98: 76:c5:b7:bb:3e:9d:e0:91:81:89:58:a0:70:29:ef: ce:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:05:D6:5B:15:7F:83:48:2E:5A:1C:6F:B5:C4:DA:3C:00:A5:A2:B4 X509v3 Authority Key Identifier: keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZAXWWxV_g0guWhxvtcTaPAClorQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.159.0/24 77.111.118.0/24 Signature Algorithm: sha256WithRSAEncryption 26:45:34:40:f2:0e:e3:6b:1c:fb:e9:fa:b3:15:e7:22:ea:db: 03:23:38:87:f7:d2:3e:cc:90:8e:fa:27:a1:78:1f:b3:12:b3: a1:40:7c:77:57:58:af:33:99:f7:34:f7:49:68:b7:fe:39:83: 80:73:3a:5b:b0:b9:06:aa:c6:b9:58:f3:7f:d7:a9:65:07:34: 55:3c:0e:b8:90:35:34:1f:82:41:07:ab:63:4f:1f:93:90:85: 72:db:b4:d2:15:c9:d7:89:9c:91:f4:84:87:ab:e8:29:2d:97: f4:f4:b1:38:a5:13:49:20:a5:fe:f0:3d:21:c6:1b:12:95:30: f1:32:f2:01:53:d6:f7:51:6c:81:b4:da:db:a8:9a:87:a8:69: 00:0d:94:3a:9e:01:3a:a7:96:ff:6e:c4:ff:b3:d2:b7:2e:61: c3:05:ae:20:b9:40:8c:38:87:4f:05:df:65:9b:40:0a:23:ab: b0:4e:87:3a:7f:71:35:60:4b:3a:87:e5:08:2c:7d:9b:04:14: f5:80:33:8c:48:a0:de:6a:72:7f:5a:e1:9e:08:73:0f:01:26: 60:08:1a:fc:0f:db:fb:9b:e9:3d:a6:d2:26:c0:f3:fa:2e:d6: 02:ff:b6:6e:e3:4c:12:77:f3:f4:d6:10:3a:f2:9b:b4:5f:4d: fa:fa:6f:a6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gFPku/2kY3rWbXpjJLy3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw YzZmYzMwHhcNMjYwMTAyMDIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDA1ZDY1YjE1N2Y4MzQ4MmU1YTFjNmZiNWM0ZGEzYzAwYTVhMmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQKt0v6WEo+X3C0LLnn5r7mgstkB 8ttWi7dJd5t81ww27+VT4nkx2LRfH5R//Rh1UMLl/gs9u2tiSGFFxUr6r5VmBoQr 3UebymZCke1Pvf+T5i7e9huSg7g0FZdyl0qRXgBQGFzp8VI7R6QvoZweRG36vyk4 oC81JOFuF7QHeVEq69hh+Yc8dgThI296MwbrgGVwTEvVYUk/D6PVXHdccITthcm1 CrkqLun6FfHrkzMooLSB483OlT9vHK9pDQWWlGwEEkkYhyCd0r+UJAeSdjubxsgq 7FATdGPm1+ZPUXWlGH7d4oZ3ocr9OAyio5h2xbe7Pp3gkYGJWKBwKe/OoQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGQF1lsVf4NILlocb7XE2jwApaK0MB8GA1UdIwQY MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt ZjFjMzNhYTJmZDUwLzEvWkFYV1d4Vl9nMGd1V2h4dnRjVGFQQUNsb3JRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZOfAwQA TW92MA0GCSqGSIb3DQEBCwUAA4IBAQAmRTRA8g7jaxz76fqzFeci6tsDIziH99I+ zJCO+ieheB+zErOhQHx3V1ivM5n3NPdJaLf+OYOAczpbsLkGqsa5WPN/16llBzRV PA64kDU0H4JBB6tjTx+TkIVy27TSFcnXiZyR9ISHq+gpLZf09LE4pRNJIKX+8D0h xhsSlTDxMvIBU9b3UWyBtNrbqJqHqGkADZQ6ngE6p5b/bsT/s9K3LmHDBa4guUCM OIdPBd9lm0AKI6uwToc6f3E1YEs6h+UILH2bBBT1gDOMSKDeanJ/WuGeCHMPASZg CBr8D9v7m+k9ptImwPP6LtYC/7Zu40wSd/P01hA68pu0X036+m+m -----END CERTIFICATE-----Generated at Fri Jan 9 12:06:13 2026 by rpki-client