This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/zakSxSI_wYoHQeaPnt8X9AknTHE.roa File: zakSxSI_wYoHQeaPnt8X9AknTHE.roa (raw, json) Hash identifier: DFDQf/fadQ5V13foLZM1hVw4SY7MFQSi7KXroTzcGGo= Subject key identifier: CD:A9:12:C5:22:3F:C1:8A:07:41:E6:8F:9E:DF:17:F4:09:27:4C:71 Certificate issuer: /CN=af2b0e217a35168392206bda73ce619535a02f35 Certificate serial: 019BB6A968C3BDFA902B9C861058DEFF97E2 Authority key identifier: AF:2B:0E:21:7A:35:16:83:92:20:6B:DA:73:CE:61:95:35:A0:2F:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rysOIXo1FoOSIGvac85hlTWgLzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/zakSxSI_wYoHQeaPnt8X9AknTHE.roa Signing time: Tue 13 Jan 2026 09:21:54 +0000 ROA not before: Tue 13 Jan 2026 09:21:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209369 IP address blocks: 77.78.90.0/24 maxlen: 24 185.22.96.0/22 maxlen: 23 213.134.21.0/24 maxlen: 24 2a13:5280::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.mft rsync://rpki.ripe.net/repository/DEFAULT/rysOIXo1FoOSIGvac85hlTWgLzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:a9:68:c3:bd:fa:90:2b:9c:86:10:58:de:ff:97:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af2b0e217a35168392206bda73ce619535a02f35 Validity Not Before: Jan 13 09:21:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cda912c5223fc18a0741e68f9edf17f409274c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e0:53:94:36:4d:09:2f:3a:bc:fb:ba:5d:07: ae:a7:53:39:7c:ec:1f:9d:af:93:46:cf:fd:3f:33: fb:85:af:a1:c1:7a:e9:0a:a2:11:52:7e:c5:ad:34: 42:c7:8f:55:a2:42:d9:ac:c6:aa:97:cc:66:0c:c8: e2:0f:60:c0:53:f2:f1:39:3e:c2:bd:e8:bb:52:a4: bb:1e:93:27:1e:16:25:42:47:5a:38:f7:6b:fa:50: 2c:5c:96:b8:a7:11:a1:f6:71:77:3a:90:a8:5a:c2: 8c:ef:63:fa:15:6c:d4:36:b6:60:f6:e1:a3:40:ba: f5:88:24:9f:63:4f:79:e9:f2:7a:38:4c:2f:1a:45: 30:99:7c:4d:40:ad:7e:6b:7f:bc:c0:a1:e8:f6:f0: 2d:16:8f:02:5f:d4:6e:9f:78:40:c8:1d:e4:b8:ad: c8:1d:97:ef:dd:21:7d:2c:0d:5d:97:17:fd:8e:fd: e5:b7:9b:c6:e3:7f:31:dd:8f:cd:8a:5b:e1:9b:3b: 85:08:0c:ea:f2:f6:a9:18:49:53:bc:5b:d1:be:41: 76:bb:4f:10:fc:08:f6:f9:41:81:3b:2a:04:c1:05: 82:13:8d:20:65:ab:86:af:8a:d8:34:c8:7d:40:80: 48:d9:e5:7d:78:4f:07:b9:14:d0:a1:a6:9a:2a:06: 62:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A9:12:C5:22:3F:C1:8A:07:41:E6:8F:9E:DF:17:F4:09:27:4C:71 X509v3 Authority Key Identifier: keyid:AF:2B:0E:21:7A:35:16:83:92:20:6B:DA:73:CE:61:95:35:A0:2F:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rysOIXo1FoOSIGvac85hlTWgLzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/zakSxSI_wYoHQeaPnt8X9AknTHE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.78.90.0/24 185.22.96.0/22 213.134.21.0/24 IPv6: 2a13:5280::/29 Signature Algorithm: sha256WithRSAEncryption c0:fc:38:c2:e5:3c:3f:4f:4c:ce:59:17:ef:5a:a5:59:0b:e6: cf:28:88:9c:9d:c8:b5:d9:71:51:ce:e1:0a:e2:66:93:47:85: 34:81:8c:1a:b9:ee:9d:c1:d5:7d:53:f9:25:09:6b:f4:ff:f9: 9c:e5:0d:a0:8b:7c:7d:18:0a:43:a7:d5:d1:c1:9c:cc:20:c8: 1b:5d:aa:91:b1:62:2e:d5:83:24:69:2c:aa:33:70:85:44:f3: e5:18:2c:1c:09:f4:2f:3c:37:ed:a0:f3:7f:c8:a7:5d:34:6e: 1f:c3:4c:c2:e1:d6:a6:a5:76:96:57:ab:4a:1a:85:35:70:ba: 55:c5:71:ef:7e:f8:9f:3c:a7:f3:06:62:b0:fb:14:58:28:2a: a2:df:05:00:7d:43:ad:06:37:40:25:bf:ae:20:11:da:24:a9: b0:1a:5d:a5:79:0a:a0:f2:d5:c7:5b:f7:3e:b4:9e:2c:dd:a0: ad:72:40:ca:3c:fe:18:f6:83:ca:88:d9:d1:30:3e:d1:ee:b9: ef:d1:80:6b:a6:90:21:3e:5f:44:59:f2:8b:0e:88:ff:45:f7: 65:bc:ff:da:e7:9e:d2:33:be:c7:46:dc:3d:32:5a:7a:01:3d: 49:ec:ac:ab:63:19:30:30:76:47:3f:7e:43:1d:eb:7f:60:eb: 00:24:39:f3 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZu2qWjDvfqQK5yGEFje/5fiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMmIwZTIxN2EzNTE2ODM5MjIwNmJkYTczY2U2MTk1MzVh MDJmMzUwHhcNMjYwMTEzMDkyMTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGE5MTJjNTIyM2ZjMThhMDc0MWU2OGY5ZWRmMTdmNDA5Mjc0YzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eBTlDZNCS86vPu6XQeup1M5fOwf na+TRs/9PzP7ha+hwXrpCqIRUn7FrTRCx49VokLZrMaql8xmDMjiD2DAU/LxOT7C vei7UqS7HpMnHhYlQkdaOPdr+lAsXJa4pxGh9nF3OpCoWsKM72P6FWzUNrZg9uGj QLr1iCSfY0956fJ6OEwvGkUwmXxNQK1+a3+8wKHo9vAtFo8CX9Run3hAyB3kuK3I HZfv3SF9LA1dlxf9jv3lt5vG438x3Y/NilvhmzuFCAzq8vapGElTvFvRvkF2u08Q /Aj2+UGBOyoEwQWCE40gZauGr4rYNMh9QIBI2eV9eE8HuRTQoaaaKgZiwQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFM2pEsUiP8GKB0Hmj57fF/QJJ0xxMB8GA1UdIwQY MBaAFK8rDiF6NRaDkiBr2nPOYZU1oC81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnlzT0lYbzFGb09TSUd2YWM4NWhsVFdnTHpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kMjU0MWUtNzU5Ny00ODIwLWJlZDct ZjBkMTk4MDk4NzRhLzEvemFrU3hTSV93WW9IUWVhUG50OFg5QWtuVEhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9kMjU0MWUtNzU5Ny00ODIwLWJlZDctZjBkMTk4MDk4NzRh LzEvcnlzT0lYbzFGb09TSUd2YWM4NWhsVFdnTHpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQATU5aAwQC uRZgAwQA1YYVMA0EAgACMAcDBQMqE1KAMA0GCSqGSIb3DQEBCwUAA4IBAQDA/DjC 5Tw/T0zOWRfvWqVZC+bPKIicnci12XFRzuEK4maTR4U0gYwaue6dwdV9U/klCWv0 //mc5Q2gi3x9GApDp9XRwZzMIMgbXaqRsWIu1YMkaSyqM3CFRPPlGCwcCfQvPDft oPN/yKddNG4fw0zC4dampXaWV6tKGoU1cLpVxXHvfvifPKfzBmKw+xRYKCqi3wUA fUOtBjdAJb+uIBHaJKmwGl2leQqg8tXHW/c+tJ4s3aCtckDKPP4Y9oPKiNnRMD7R 7rnv0YBrppAhPl9EWfKLDoj/RfdlvP/a557SM77HRtw9Mlp6AT1J7KyrYxkwMHZH P35DHet/YOsAJDnz -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:07 2026 by rpki-client