This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/ZirTS64HUq0wU0U5fVRkk_xmOYU.roa
File: ZirTS64HUq0wU0U5fVRkk_xmOYU.roa (raw, json)
Hash identifier: XeKkKCgAcPGHwBgkK+e2vFYdfsRv+92SlsiWIMKOWAw=
Subject key identifier: 66:2A:D3:4B:AE:07:52:AD:30:53:45:39:7D:54:64:93:FC:66:39:85
Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial: 019BFE6A2F7D01947811EF64F4F245724522
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/ZirTS64HUq0wU0U5fVRkk_xmOYU.roa
Signing time: Tue 27 Jan 2026 07:45:30 +0000
ROA not before: Tue 27 Jan 2026 07:45:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137235
IP address blocks: 45.136.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fe:6a:2f:7d:01:94:78:11:ef:64:f4:f2:45:72:45:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Validity
Not Before: Jan 27 07:45:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=662ad34bae0752ad305345397d546493fc663985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2c:96:5a:5d:18:82:06:00:38:76:1e:c5:19:
cb:22:2b:22:b8:a7:08:57:07:b8:ea:13:e5:77:34:
32:9c:1c:e4:97:c4:6e:74:b5:a5:5c:fc:16:07:f3:
09:9a:ef:a9:68:ae:01:ac:1a:ad:7a:be:b4:e3:7c:
d8:40:5a:db:ef:4d:22:ea:0f:e9:06:11:ef:d0:a1:
e2:a5:17:de:48:c7:54:40:48:74:c9:b7:dc:83:0e:
1a:d1:c2:1f:9c:cc:b2:6b:72:05:da:b2:17:c9:23:
28:9a:e2:84:70:e3:2e:9d:85:b6:4b:a2:1a:17:b8:
ba:07:e0:14:5e:40:25:69:eb:f6:91:96:c2:cc:a5:
c2:1f:49:10:d9:2c:e0:9f:4e:b0:26:0a:1f:02:7f:
71:ef:30:c5:f7:d2:12:45:3d:be:f4:19:01:58:e0:
b6:5a:2c:f3:5c:95:80:5e:d7:fe:c3:e1:82:d8:75:
d1:a5:f3:63:a2:33:db:3e:3c:f5:a1:b2:1a:47:bc:
b3:81:51:e4:de:1f:44:22:36:be:be:8c:b4:b1:5f:
87:7f:18:51:5f:44:3e:4f:a8:b6:b7:07:84:86:05:
23:98:16:54:87:db:fb:02:b7:33:dc:b3:2b:e4:46:
59:c2:ff:9c:8d:72:a4:97:97:5c:b8:b3:bd:58:eb:
24:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2A:D3:4B:AE:07:52:AD:30:53:45:39:7D:54:64:93:FC:66:39:85
X509v3 Authority Key Identifier:
keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/ZirTS64HUq0wU0U5fVRkk_xmOYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.39.0/24
Signature Algorithm: sha256WithRSAEncryption
86:d7:f9:e6:48:53:c3:e8:12:45:4b:bd:34:78:1b:1f:99:7c:
b5:ec:41:86:08:5f:8f:6a:2c:3a:25:a7:4b:34:ce:f7:a8:b6:
80:a0:a7:5f:b5:b9:bc:23:df:74:0c:38:cb:71:c7:36:b5:24:
b0:30:9f:64:30:c6:e4:63:eb:b1:5d:9a:89:98:33:a5:6a:8e:
7f:ee:01:aa:50:83:e7:d2:f7:ca:b9:63:00:dd:2c:0b:fd:25:
05:dc:b8:ff:98:be:40:04:d7:56:6c:ed:a4:00:ea:da:14:b3:
98:30:6a:9e:02:3f:e1:d9:87:f0:43:c3:d0:6f:bb:de:fc:d1:
af:07:72:a5:f9:91:d2:16:1d:3f:b9:d5:70:63:e5:0e:de:57:
97:ee:3c:7e:b9:ea:12:c8:9f:25:3a:10:f7:dd:f9:82:b1:83:
8b:85:45:b4:61:ba:37:b2:e8:ee:88:75:c5:97:26:00:aa:bf:
40:bb:41:5d:dd:df:7c:10:86:6b:c8:3e:7c:bb:12:e5:f6:37:
fe:fc:b1:63:ec:51:b7:78:57:62:a5:b1:67:1f:68:81:02:36:
3e:3d:c7:0b:1e:2d:49:e6:8c:16:fc:b7:f9:6a:c2:6f:f7:49:
12:d4:ee:9b:c5:01:a7:95:c2:eb:91:fa:4e:3d:0f:5b:f8:e8:
c8:87:98:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZv+ai99AZR4Ee9k9PJFckUiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZTc3MGY0N2ZkOTAzOTI1ZDgwYWM1OGUwNWUwNzZmM2Jh
YTExMGIwHhcNMjYwMTI3MDc0NTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjJhZDM0YmFlMDc1MmFkMzA1MzQ1Mzk3ZDU0NjQ5M2ZjNjYzOTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SyWWl0YggYAOHYexRnLIisiuKcI
Vwe46hPldzQynBzkl8RudLWlXPwWB/MJmu+paK4BrBqter6043zYQFrb700i6g/p
BhHv0KHipRfeSMdUQEh0ybfcgw4a0cIfnMyya3IF2rIXySMomuKEcOMunYW2S6Ia
F7i6B+AUXkAlaev2kZbCzKXCH0kQ2Szgn06wJgofAn9x7zDF99ISRT2+9BkBWOC2
WizzXJWAXtf+w+GC2HXRpfNjojPbPjz1obIaR7yzgVHk3h9EIja+voy0sV+HfxhR
X0Q+T6i2tweEhgUjmBZUh9v7Arcz3LMr5EZZwv+cjXKkl5dcuLO9WOsktQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGYq00uuB1KtMFNFOX1UZJP8ZjmFMB8GA1UdIwQY
MBaAFD7ncPR/2QOSXYCsWOBeB287qhELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTIt
NjI0ZjgzNjgyMTY5LzEvWmlyVFM2NEhVcTB3VTBVNWZWUmtrX3htT1lVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTItNjI0ZjgzNjgyMTY5
LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYgnMA0G
CSqGSIb3DQEBCwUAA4IBAQCG1/nmSFPD6BJFS700eBsfmXy17EGGCF+Paiw6JadL
NM73qLaAoKdftbm8I990DDjLccc2tSSwMJ9kMMbkY+uxXZqJmDOlao5/7gGqUIPn
0vfKuWMA3SwL/SUF3Lj/mL5ABNdWbO2kAOraFLOYMGqeAj/h2YfwQ8PQb7ve/NGv
B3Kl+ZHSFh0/udVwY+UO3leX7jx+ueoSyJ8lOhD33fmCsYOLhUW0Ybo3sujuiHXF
lyYAqr9Au0Fd3d98EIZryD58uxLl9jf+/LFj7FG3eFdipbFnH2iBAjY+PccLHi1J
5owW/Lf5asJv90kS1O6bxQGnlcLrkfpOPQ9b+OjIh5he
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:00:06 2026 by rpki-client