This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZiIjQFIjZ8j8nup9nB6UTnphCHE.roa File: ZiIjQFIjZ8j8nup9nB6UTnphCHE.roa (raw, json) Hash identifier: QLs1jSzP7n9jTZ9LffNdrzXR3/pn3Ze2DppBtoqxG3s= Subject key identifier: 66:22:23:40:52:23:67:C8:FC:9E:EA:7D:9C:1E:94:4E:7A:61:08:71 Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Certificate serial: 019B974A2B7D1BA0F161F6F8FF90192970E8 Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZiIjQFIjZ8j8nup9nB6UTnphCHE.roa Signing time: Wed 07 Jan 2026 07:09:38 +0000 ROA not before: Wed 07 Jan 2026 07:09:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 91.190.184.0/24 maxlen: 24 92.61.106.0/24 maxlen: 24 185.112.240.0/24 maxlen: 24 185.112.241.0/24 maxlen: 24 185.112.242.0/24 maxlen: 24 185.112.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:97:4a:2b:7d:1b:a0:f1:61:f6:f8:ff:90:19:29:70:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Validity Not Before: Jan 7 07:09:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66222340522367c8fc9eea7d9c1e944e7a610871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0f:f0:5b:d5:59:2c:ee:89:70:aa:e7:a7:5d: 3d:a9:d8:a5:04:f7:86:a2:a2:49:92:5e:a5:f2:81: 16:09:e1:89:ff:a9:11:76:5d:5c:c2:78:8f:f4:7c: 1c:0f:2d:75:3a:f5:e7:61:35:af:3a:dc:ac:af:d1: c9:72:c7:a7:75:d3:af:e6:b5:f5:0b:60:89:11:53: ec:69:9d:b2:bd:8d:20:e1:83:54:3b:69:e1:95:a8: 76:31:dc:eb:b7:a5:0b:19:58:70:b3:52:98:2d:4e: 10:5c:9f:ac:19:1a:ce:db:b2:b0:49:75:75:44:5b: d5:fa:3f:88:a3:0c:a0:2a:f9:b2:65:7b:4d:00:96: ca:d1:75:1c:d0:bd:0b:54:e3:a1:b4:8c:a5:36:36: 0e:7f:25:63:dc:27:07:12:56:a1:2a:85:9f:54:2a: 15:35:6d:f8:52:3e:42:77:78:de:13:29:8a:42:2e: ff:80:41:db:06:1c:e6:dd:19:d4:55:33:8a:e6:52: e5:ee:8d:4d:f3:52:29:70:93:47:8a:ff:f5:e9:23: ef:6a:94:2a:6c:3a:cb:79:6f:b9:31:67:7d:6d:de: e9:69:de:19:a9:d9:b9:16:1a:60:1f:f1:66:bf:23: 71:bb:6a:7b:4e:59:f1:76:e1:42:ac:04:dc:a7:26: b8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:22:23:40:52:23:67:C8:FC:9E:EA:7D:9C:1E:94:4E:7A:61:08:71 X509v3 Authority Key Identifier: keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZiIjQFIjZ8j8nup9nB6UTnphCHE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.190.184.0/24 92.61.106.0/24 185.112.240.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:88:29:6a:c4:ff:96:de:9e:f9:48:f7:b8:2e:be:e0:35:3a: af:5c:f2:37:0a:c6:4a:db:b5:57:aa:cc:e3:be:9d:6e:37:7a: 14:18:99:88:42:86:f7:89:5d:03:7e:63:05:24:74:0d:19:3b: 1f:79:f8:5b:1d:aa:6e:0c:49:c6:4d:5b:c6:28:de:3f:91:fc: b7:f4:e8:4b:e2:00:98:21:c6:43:fe:13:44:f0:71:75:92:44: bb:6b:18:88:70:40:fd:68:96:9e:3f:07:73:49:97:24:a9:f0: a2:7a:5a:c9:b9:3e:78:c4:9f:d3:49:96:5a:40:70:4d:53:8e: 87:cd:41:0b:17:a1:f1:2c:80:f6:56:60:4e:5b:db:6f:a1:af: e3:5e:46:a5:ea:6e:f6:bb:bc:16:4f:f4:a7:a2:a9:81:e9:f9: ee:63:48:53:94:f3:2a:d3:bb:75:0c:02:92:fa:3f:41:56:74: 74:18:1a:cd:4d:d7:55:a8:1e:57:66:79:60:c4:2c:a2:3f:e2: 5d:15:d0:eb:ed:0b:33:cf:aa:db:c0:30:06:b3:e3:53:bd:c0: d0:5d:ec:49:b9:a3:9b:2a:de:1a:60:ee:8f:7e:30:89:25:94: 1b:65:eb:74:77:6d:ec:18:5a:4a:de:32:a7:5d:5c:45:3b:29: b2:23:4e:9a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZuXSit9G6DxYfb4/5AZKXDoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw YzZmYzMwHhcNMjYwMTA3MDcwOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjIyMjM0MDUyMjM2N2M4ZmM5ZWVhN2Q5YzFlOTQ0ZTdhNjEwODcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA/wW9VZLO6JcKrnp109qdilBPeG oqJJkl6l8oEWCeGJ/6kRdl1cwniP9HwcDy11OvXnYTWvOtysr9HJcsenddOv5rX1 C2CJEVPsaZ2yvY0g4YNUO2nhlah2Mdzrt6ULGVhws1KYLU4QXJ+sGRrO27KwSXV1 RFvV+j+IowygKvmyZXtNAJbK0XUc0L0LVOOhtIylNjYOfyVj3CcHElahKoWfVCoV NW34Uj5Cd3jeEymKQi7/gEHbBhzm3RnUVTOK5lLl7o1N81IpcJNHiv/16SPvapQq bDrLeW+5MWd9bd7pad4Zqdm5FhpgH/FmvyNxu2p7TlnxduFCrATcpya4aQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGYiI0BSI2fI/J7qfZwelE56YQhxMB8GA1UdIwQY MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt ZjFjMzNhYTJmZDUwLzEvWmlJalFGSWpaOGo4bnVwOW5CNlVUbnBoQ0hFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW764AwQA XD1qAwQCuXDwMA0GCSqGSIb3DQEBCwUAA4IBAQBqiClqxP+W3p75SPe4Lr7gNTqv XPI3CsZK27VXqszjvp1uN3oUGJmIQob3iV0DfmMFJHQNGTsfefhbHapuDEnGTVvG KN4/kfy39OhL4gCYIcZD/hNE8HF1kkS7axiIcED9aJaePwdzSZckqfCielrJuT54 xJ/TSZZaQHBNU46HzUELF6HxLID2VmBOW9tvoa/jXkal6m72u7wWT/SnoqmB6fnu Y0hTlPMq07t1DAKS+j9BVnR0GBrNTddVqB5XZnlgxCyiP+JdFdDr7Qszz6rbwDAG s+NTvcDQXexJuaObKt4aYO6PfjCJJZQbZet0d23sGFpK3jKnXVxFOymyI06a -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:22 2026 by rpki-client