This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/zkZYJhWSPz3cmCOa-oaMr0B4Hz4.roa File: zkZYJhWSPz3cmCOa-oaMr0B4Hz4.roa (raw, json) Hash identifier: l5UKf0qTnkJaMSM/u8sIK416WIDgHsGFudsRfCdoBTs= Subject key identifier: CE:46:58:26:15:92:3F:3D:DC:98:23:9A:FA:86:8C:AF:40:78:1F:3E Certificate issuer: /CN=47ea61d7cc2c278a7c4bcfbc2137b394a22654ad Certificate serial: 019B7FF1A558187459D328356FB04C90743D Authority key identifier: 47:EA:61:D7:CC:2C:27:8A:7C:4B:CF:BC:21:37:B3:94:A2:26:54:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/zkZYJhWSPz3cmCOa-oaMr0B4Hz4.roa Signing time: Fri 02 Jan 2026 18:21:41 +0000 ROA not before: Fri 02 Jan 2026 18:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42640 IP address blocks: 195.248.228.0/24 maxlen: 24 195.248.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.crl rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:a5:58:18:74:59:d3:28:35:6f:b0:4c:90:74:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47ea61d7cc2c278a7c4bcfbc2137b394a22654ad Validity Not Before: Jan 2 18:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce46582615923f3ddc98239afa868caf40781f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:58:d6:52:a1:8b:2f:96:a7:1e:90:98:1f:6d: 67:7b:60:ef:92:35:c0:18:c9:4c:bf:83:ca:e1:01: d2:35:2f:2f:ca:77:7c:f5:17:be:0e:83:e3:e8:c7: c1:88:aa:05:98:d1:c3:c9:5f:b5:88:13:96:e9:c7: 39:9e:68:39:fe:40:18:4b:08:79:12:24:11:56:89: b8:4b:06:97:22:78:dc:59:4f:ad:e1:2c:c7:48:42: 4b:b4:9e:31:5b:6a:2a:a6:8c:f8:07:44:0d:da:de: d2:d4:66:e9:ed:13:d3:01:1a:df:c5:77:87:50:c1: b7:df:4a:61:8e:60:d6:8f:2f:07:13:4d:30:8d:e4: 50:40:b8:df:04:21:8b:88:e4:5e:6b:0c:26:8c:66: 11:3f:68:3e:6b:63:11:f4:75:7a:f6:2f:e2:cf:81: f3:ef:6e:fa:42:fa:c9:3a:9e:fe:ba:dc:a3:91:20: 80:16:8d:c1:87:8d:97:7a:61:c7:32:ad:34:21:6d: 19:94:62:39:13:e2:de:7e:33:ad:2a:1b:90:d3:c3: 05:37:69:d3:f2:3e:2d:60:87:a1:29:e1:21:51:78: 15:7a:bb:98:ad:2c:3e:78:fd:08:3c:58:7e:ac:31: f9:ab:e5:7b:63:d2:05:fe:c3:12:b4:6a:1a:09:8c: e0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:46:58:26:15:92:3F:3D:DC:98:23:9A:FA:86:8C:AF:40:78:1F:3E X509v3 Authority Key Identifier: keyid:47:EA:61:D7:CC:2C:27:8A:7C:4B:CF:BC:21:37:B3:94:A2:26:54:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/zkZYJhWSPz3cmCOa-oaMr0B4Hz4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.248.228.0/23 Signature Algorithm: sha256WithRSAEncryption 95:ab:97:4a:cc:0d:77:4c:07:0b:f0:af:a1:01:65:a2:19:3b: 7a:62:48:df:dd:03:1b:25:48:f6:ba:07:3a:9a:5f:ce:4c:ef: bf:33:8c:3a:7c:12:e9:f6:af:45:58:12:ac:69:1e:fa:8b:09: 38:6c:f4:06:d8:a6:92:72:04:75:96:5d:18:eb:56:0a:fd:fe: c2:09:49:6f:e4:a8:da:7d:04:48:0f:1d:df:69:db:ce:aa:b0: 63:7d:6a:7f:95:9b:6e:ae:50:89:e5:47:84:44:b1:1b:fd:4f: 85:de:10:3c:ce:b4:45:b5:45:f8:1c:2e:5a:1b:05:ef:ec:33: 58:39:bf:73:d6:e2:3b:7b:72:42:81:5a:d0:2d:23:4b:c9:65: c5:71:43:b1:b4:0e:08:91:87:5a:ea:a4:d1:99:87:63:7f:93: d0:bf:89:b0:27:bf:09:02:09:6f:b7:df:9e:52:23:33:b7:ca: c0:5c:96:e6:3f:e0:e5:1a:f5:a5:62:90:9d:07:d0:e3:5e:1c: 2e:7c:85:cf:76:e5:56:78:8c:81:7e:46:ae:79:99:c0:df:d8: 8c:58:9c:1a:9b:e2:2b:e8:c9:1b:fc:27:d4:20:27:57:42:c6: 70:30:09:98:c6:b4:17:ac:d0:01:9d:b7:0c:28:fe:89:81:d7: bb:ec:39:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8aVYGHRZ0yg1b7BMkHQ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZWE2MWQ3Y2MyYzI3OGE3YzRiY2ZiYzIxMzdiMzk0YTIy NjU0YWQwHhcNMjYwMTAyMTgyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTQ2NTgyNjE1OTIzZjNkZGM5ODIzOWFmYTg2OGNhZjQwNzgxZjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FjWUqGLL5anHpCYH21ne2DvkjXA GMlMv4PK4QHSNS8vynd89Re+DoPj6MfBiKoFmNHDyV+1iBOW6cc5nmg5/kAYSwh5 EiQRVom4SwaXInjcWU+t4SzHSEJLtJ4xW2oqpoz4B0QN2t7S1Gbp7RPTARrfxXeH UMG330phjmDWjy8HE00wjeRQQLjfBCGLiOReawwmjGYRP2g+a2MR9HV69i/iz4Hz 7276QvrJOp7+utyjkSCAFo3Bh42XemHHMq00IW0ZlGI5E+LefjOtKhuQ08MFN2nT 8j4tYIehKeEhUXgVeruYrSw+eP0IPFh+rDH5q+V7Y9IF/sMStGoaCYzg4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM5GWCYVkj893JgjmvqGjK9AeB8+MB8GA1UdIwQY MBaAFEfqYdfMLCeKfEvPvCE3s5SiJlStMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUi1waDE4d3NKNHA4UzgtOElUZXpsS0ltVkswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xMTVjNDQtYmM0YS00ZTI0LWJmMzgt OGM3MjYwOWYyZjAyLzEvemtaWUpoV1NQejNjbUNPYS1vYU1yMEI0SHo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8xMTVjNDQtYmM0YS00ZTI0LWJmMzgtOGM3MjYwOWYyZjAy LzEvUi1waDE4d3NKNHA4UzgtOElUZXpsS0ltVkswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/jkMA0G CSqGSIb3DQEBCwUAA4IBAQCVq5dKzA13TAcL8K+hAWWiGTt6Ykjf3QMbJUj2ugc6 ml/OTO+/M4w6fBLp9q9FWBKsaR76iwk4bPQG2KaScgR1ll0Y61YK/f7CCUlv5Kja fQRIDx3fadvOqrBjfWp/lZturlCJ5UeERLEb/U+F3hA8zrRFtUX4HC5aGwXv7DNY Ob9z1uI7e3JCgVrQLSNLyWXFcUOxtA4IkYda6qTRmYdjf5PQv4mwJ78JAglvt9+e UiMzt8rAXJbmP+DlGvWlYpCdB9DjXhwufIXPduVWeIyBfkaueZnA39iMWJwam+Ir 6Mkb/CfUICdXQsZwMAmYxrQXrNABnbcMKP6Jgde77Dn1 -----END CERTIFICATE-----Generated at Mon Feb 9 23:44:47 2026 by rpki-client