This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/ZLMcFKrJG_TTJNZjizraTjXGN4M.roa File: ZLMcFKrJG_TTJNZjizraTjXGN4M.roa (raw, json) Hash identifier: 092H7JpCBZKt4WcgjIeO1lAUhsonKT3xuNUH40hY0II= Subject key identifier: 64:B3:1C:14:AA:C9:1B:F4:D3:24:D6:63:8B:3A:DA:4E:35:C6:37:83 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019AC2B24C21D76D11584248A976C62FD7D4 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/ZLMcFKrJG_TTJNZjizraTjXGN4M.roa Signing time: Thu 27 Nov 2025 00:24:15 +0000 ROA not before: Thu 27 Nov 2025 00:24:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134677 IP address blocks: 2a0f:7802:e2ec::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c2:b2:4c:21:d7:6d:11:58:42:48:a9:76:c6:2f:d7:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Nov 27 00:24:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=64b31c14aac91bf4d324d6638b3ada4e35c63783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c3:01:34:ef:6c:be:f5:5f:d7:e5:85:8a:90: 59:a8:ac:71:86:be:74:e5:fc:d5:da:37:5e:83:a0: 75:3c:a7:e1:1f:dd:05:59:08:55:52:73:63:3e:0d: e0:42:9a:84:66:93:d6:99:f1:41:46:66:93:41:98: 1f:80:0e:79:d2:00:96:97:03:94:bb:49:a8:f3:c7: 94:90:16:cc:d0:99:59:40:c3:56:1b:20:bb:ed:d9: 32:cf:fc:71:9b:e9:44:d0:97:71:2c:71:79:ee:a9: 0e:be:1e:23:b9:a4:e1:46:0b:e5:47:77:06:d5:42: 23:be:86:1a:18:81:dc:09:90:22:eb:68:9a:64:ea: 5b:1b:d5:3f:83:c5:9d:7f:d8:65:4e:a4:09:d1:26: dd:48:ab:7d:68:48:1e:3b:8c:e5:79:77:af:60:21: e7:89:12:d0:1b:c7:f4:2a:3a:22:14:e5:cb:4c:b8: 0c:23:b7:94:eb:cd:ae:75:6f:fb:bd:a8:c4:e3:6a: 01:aa:40:05:d3:26:8c:61:32:46:7e:fc:19:ab:16: fa:d6:d3:48:6e:41:ed:d2:7d:75:bf:9b:af:8f:ff: 6e:97:6a:8c:d3:dc:9a:ce:dc:e4:74:03:9a:fc:13: 01:73:95:17:14:d3:05:10:dc:c0:32:d5:96:d1:78: d5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B3:1C:14:AA:C9:1B:F4:D3:24:D6:63:8B:3A:DA:4E:35:C6:37:83 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/ZLMcFKrJG_TTJNZjizraTjXGN4M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7802:e2ec::/46 Signature Algorithm: sha256WithRSAEncryption a1:8f:dc:bf:af:e3:ac:02:9d:f9:3c:5b:ec:38:fc:91:de:4c: 90:93:91:cd:89:17:90:68:41:f2:45:cb:8d:97:f3:74:c7:c6: 16:92:72:88:86:ba:56:68:40:54:50:65:42:89:0e:a9:26:74: 25:24:91:4d:07:f2:d8:da:b0:aa:a3:4a:c9:2d:cf:eb:0e:99: 5b:12:09:3d:cc:43:d9:b7:15:b4:b3:d3:ec:bb:4e:5b:d3:db: 59:a8:7d:a0:a5:0e:d7:f6:4e:c5:fc:4c:db:3d:24:34:7c:6d: f5:cb:74:ca:c4:06:eb:d2:cd:8b:9e:a6:4d:25:2f:f6:7a:fe: 05:16:6d:8b:84:21:a1:34:d2:0c:c0:08:67:14:cc:20:88:56: 2c:6e:ad:6c:c6:6b:81:ef:93:51:d3:34:12:64:83:bc:42:bc: 66:1c:a7:04:37:0e:89:05:5c:23:53:cd:1b:33:7d:89:51:02: fb:a7:d4:c0:70:76:a2:66:01:e5:7f:aa:af:bd:ab:f2:fc:ca: a5:fb:8f:3b:90:24:33:10:35:32:cd:34:4c:03:f0:91:8b:0d: 7f:19:e6:30:ef:34:31:6b:10:cd:21:de:82:67:94:d0:52:89: 5f:c3:8d:df:bb:8f:c3:65:23:6f:f8:37:bc:03:c8:22:ef:aa: e5:b4:09:10 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZrCskwh120RWEJIqXbGL9fUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjUxMTI3MDAyNDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGIzMWMxNGFhYzkxYmY0ZDMyNGQ2NjM4YjNhZGE0ZTM1YzYzNzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcMBNO9svvVf1+WFipBZqKxxhr50 5fzV2jdeg6B1PKfhH90FWQhVUnNjPg3gQpqEZpPWmfFBRmaTQZgfgA550gCWlwOU u0mo88eUkBbM0JlZQMNWGyC77dkyz/xxm+lE0JdxLHF57qkOvh4juaThRgvlR3cG 1UIjvoYaGIHcCZAi62iaZOpbG9U/g8Wdf9hlTqQJ0SbdSKt9aEgeO4zleXevYCHn iRLQG8f0KjoiFOXLTLgMI7eU682udW/7vajE42oBqkAF0yaMYTJGfvwZqxb61tNI bkHt0n11v5uvj/9ul2qM09yaztzkdAOa/BMBc5UXFNMFENzAMtWW0XjV8wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGSzHBSqyRv00yTWY4s62k41xjeDMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvWkxNY0ZLckpHX1RUSk5aaml6cmFUalhHTjRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKg94AuLs MA0GCSqGSIb3DQEBCwUAA4IBAQChj9y/r+OsAp35PFvsOPyR3kyQk5HNiReQaEHy RcuNl/N0x8YWknKIhrpWaEBUUGVCiQ6pJnQlJJFNB/LY2rCqo0rJLc/rDplbEgk9 zEPZtxW0s9Psu05b09tZqH2gpQ7X9k7F/EzbPSQ0fG31y3TKxAbr0s2LnqZNJS/2 ev4FFm2LhCGhNNIMwAhnFMwgiFYsbq1sxmuB75NR0zQSZIO8QrxmHKcENw6JBVwj U80bM32JUQL7p9TAcHaiZgHlf6qvvavy/Mql+487kCQzEDUyzTRMA/CRiw1/GeYw 7zQxaxDNId6CZ5TQUolfw43fu4/DZSNv+De8A8gi76rltAkQ -----END CERTIFICATE-----Generated at Sun Dec 7 17:37:09 2025 by rpki-client