This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/n-ZAT-Ul9tbkaV0CLaWA-XT411U.roa File: n-ZAT-Ul9tbkaV0CLaWA-XT411U.roa (raw, json) Hash identifier: TtS8MXUMjryS2KglqrPI9cFZLS1rb1BrcZ1YrWA74zE= Subject key identifier: 9F:E6:40:4F:E5:25:F6:D6:E4:69:5D:02:2D:A5:80:F9:74:F8:D7:55 Certificate issuer: /CN=69d492be3fcf8cc5a859c9048c50fd40bfdb7787 Certificate serial: 019B7BA38991387AEC6A9802C4910DC4BE16 Authority key identifier: 69:D4:92:BE:3F:CF:8C:C5:A8:59:C9:04:8C:50:FD:40:BF:DB:77:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/n-ZAT-Ul9tbkaV0CLaWA-XT411U.roa Signing time: Thu 01 Jan 2026 22:17:53 +0000 ROA not before: Thu 01 Jan 2026 22:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49761 IP address blocks: 95.215.76.0/22 maxlen: 22 109.197.39.0/24 maxlen: 24 193.28.226.0/24 maxlen: 24 193.37.140.0/24 maxlen: 24 195.211.8.0/22 maxlen: 22 2001:67c:c90::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:89:91:38:7a:ec:6a:98:02:c4:91:0d:c4:be:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69d492be3fcf8cc5a859c9048c50fd40bfdb7787 Validity Not Before: Jan 1 22:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fe6404fe525f6d6e4695d022da580f974f8d755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:38:6c:5a:fb:a4:68:dd:91:0c:51:a1:e0:b7: 1f:c7:76:f6:b7:82:2a:3f:d8:77:17:6d:93:3b:ce: 85:2b:b1:75:4a:ef:b1:68:cd:c9:51:8e:23:11:6b: 95:c8:62:a9:de:1a:7d:92:39:82:a7:18:90:68:90: ef:59:68:63:04:a0:34:17:64:90:92:e5:01:1e:85: 75:59:32:3c:3f:3e:49:b6:92:85:29:b4:e5:eb:e8: 56:c2:0a:39:4c:69:ac:dc:20:60:23:d0:ce:2b:d9: 29:ec:71:be:44:7f:53:5a:a6:9e:e1:96:52:52:45: 2e:b1:02:62:c3:a1:bc:40:f7:ef:7f:b3:96:1c:c3: f7:e6:fd:91:17:c3:44:28:c3:50:1d:06:31:c4:54: 74:bf:35:2a:d6:98:0b:81:e2:15:38:6d:b6:76:b1: f4:47:7d:d6:60:0d:16:f3:83:02:1e:37:79:61:ba: ee:4d:d1:dc:3a:1b:72:01:a4:f8:cf:9c:16:77:63: 16:0d:4e:ee:af:36:15:ed:c8:53:f0:b6:c8:8d:9e: 12:d4:19:e0:54:ca:67:b0:3e:8f:d6:96:83:56:42: 3e:c0:c9:f7:ea:b9:a7:bf:ba:99:1f:a4:9a:c3:e7: 55:1d:ed:e1:2f:5c:50:be:54:67:6e:13:ea:7f:49: f0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E6:40:4F:E5:25:F6:D6:E4:69:5D:02:2D:A5:80:F9:74:F8:D7:55 X509v3 Authority Key Identifier: keyid:69:D4:92:BE:3F:CF:8C:C5:A8:59:C9:04:8C:50:FD:40:BF:DB:77:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/n-ZAT-Ul9tbkaV0CLaWA-XT411U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.215.76.0/22 109.197.39.0/24 193.28.226.0/24 193.37.140.0/24 195.211.8.0/22 IPv6: 2001:67c:c90::/48 Signature Algorithm: sha256WithRSAEncryption 40:dd:17:ca:87:2e:4b:f7:fe:36:26:58:99:cb:c7:0a:a1:11: 66:f8:7b:99:24:f7:ad:b5:08:ad:40:86:ca:b7:ca:ce:d3:c8: cb:95:7a:f9:d9:b8:cc:3a:c1:f9:4d:d4:ce:ca:40:6e:a0:2b: 1c:f6:06:81:10:5a:fa:5e:e8:62:5e:a5:33:28:c3:47:f5:c6: ef:c6:4e:5a:ff:9d:6a:b2:99:c6:4e:ee:0b:2d:06:68:33:fd: 4f:58:81:64:66:dd:17:b2:f5:2e:fc:ab:04:94:56:e9:c4:0d: 94:ed:fe:1e:2a:50:7f:41:75:3e:c2:a7:e4:db:72:34:98:c2: 20:91:59:72:c3:48:90:06:b8:6c:04:4f:21:c2:88:53:f8:e0: 9c:2a:cc:cf:4b:43:37:5a:a8:aa:29:34:2a:82:1d:35:3e:d1: c8:ff:a1:ad:8c:af:2f:d3:ce:65:8c:d8:28:5f:f3:ac:a0:35: 09:55:50:a3:56:1f:9e:a6:54:ea:5f:f2:db:dc:a1:02:2d:9b: 1d:a7:32:9d:0d:7e:22:76:09:c5:c4:37:36:34:39:c6:7c:79: 7f:f1:74:1c:e8:99:42:af:e6:e2:ba:0f:37:e3:30:2a:22:5c: 3e:c4:5c:a4:47:38:64:64:9a:af:85:a5:2f:5a:48:1c:64:2d: 26:dd:9e:9e -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt7o4mROHrsapgCxJENxL4WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZDQ5MmJlM2ZjZjhjYzVhODU5YzkwNDhjNTBmZDQwYmZk Yjc3ODcwHhcNMjYwMTAxMjIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmU2NDA0ZmU1MjVmNmQ2ZTQ2OTVkMDIyZGE1ODBmOTc0ZjhkNzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDhsWvukaN2RDFGh4Lcfx3b2t4Iq P9h3F22TO86FK7F1Su+xaM3JUY4jEWuVyGKp3hp9kjmCpxiQaJDvWWhjBKA0F2SQ kuUBHoV1WTI8Pz5JtpKFKbTl6+hWwgo5TGms3CBgI9DOK9kp7HG+RH9TWqae4ZZS UkUusQJiw6G8QPfvf7OWHMP35v2RF8NEKMNQHQYxxFR0vzUq1pgLgeIVOG22drH0 R33WYA0W84MCHjd5YbruTdHcOhtyAaT4z5wWd2MWDU7urzYV7chT8LbIjZ4S1Bng VMpnsD6P1paDVkI+wMn36rmnv7qZH6Saw+dVHe3hL1xQvlRnbhPqf0nwDwIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFJ/mQE/lJfbW5GldAi2lgPl0+NdVMB8GA1UdIwQY MBaAFGnUkr4/z4zFqFnJBIxQ/UC/23eHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWRTU3ZqX1BqTVdvV2NrRWpGRDlRTF9iZDRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iNThkNTEtMWFjZS00OTBlLThjMmUt NTkyMDhiYWJlYjEzLzEvbi1aQVQtVWw5dGJrYVYwQ0xhV0EtWFQ0MTFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9iNThkNTEtMWFjZS00OTBlLThjMmUtNTkyMDhiYWJlYjEz LzEvYWRTU3ZqX1BqTVdvV2NrRWpGRDlRTF9iZDRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAkBAIAATAeAwQCX9dMAwQA bcUnAwQAwRziAwQAwSWMAwQCw9MIMA8EAgACMAkDBwAgAQZ8DJAwDQYJKoZIhvcN AQELBQADggEBAEDdF8qHLkv3/jYmWJnLxwqhEWb4e5kk9621CK1Ahsq3ys7TyMuV evnZuMw6wflN1M7KQG6gKxz2BoEQWvpe6GJepTMow0f1xu/GTlr/nWqymcZO7gst Bmgz/U9YgWRm3Rey9S78qwSUVunEDZTt/h4qUH9BdT7Cp+TbcjSYwiCRWXLDSJAG uGwETyHCiFP44JwqzM9LQzdaqKopNCqCHTU+0cj/oa2Mry/TzmWM2Chf86ygNQlV UKNWH56mVOpf8tvcoQItmx2nMp0NfiJ2CcXENzY0OcZ8eX/xdBzomUKv5uK6Dzfj MCoiXD7EXKRHOGRkmq+FpS9aSBxkLSbdnp4= -----END CERTIFICATE-----Generated at Tue Feb 10 01:13:06 2026 by rpki-client