This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/ZKJ7OMsZ-2L7gwZt-ahGl36GQCk.roa File: ZKJ7OMsZ-2L7gwZt-ahGl36GQCk.roa (raw, json) Hash identifier: dn5pl0tJHil7i7MEL6Urv0uyJj/BFkAQ/mpD5JtEACA= Subject key identifier: 64:A2:7B:38:CB:19:FB:62:FB:83:06:6D:F9:A8:46:97:7E:86:40:29 Certificate issuer: /CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3 Certificate serial: 019B7E385ED19D654B052084570A00C373E3 Authority key identifier: 48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/ZKJ7OMsZ-2L7gwZt-ahGl36GQCk.roa Signing time: Fri 02 Jan 2026 10:19:42 +0000 ROA not before: Fri 02 Jan 2026 10:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44943 IP address blocks: 178.22.48.0/21 maxlen: 21 185.34.240.0/24 maxlen: 24 185.34.241.0/24 maxlen: 24 2a00:b880::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:5e:d1:9d:65:4b:05:20:84:57:0a:00:c3:73:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3 Validity Not Before: Jan 2 10:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64a27b38cb19fb62fb83066df9a846977e864029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fc:07:83:3e:e6:e6:68:9c:ba:3d:2e:ac:53: 1b:2b:cf:c2:9e:c4:55:23:86:64:eb:cb:ba:11:b5: c7:b6:6e:4a:75:39:5a:ed:14:78:48:76:90:77:6e: 0e:24:3f:52:12:ba:af:13:19:4d:a0:db:1a:3d:61: 9b:7b:f8:d4:ed:73:f6:c2:eb:af:6c:7a:db:e1:18: 13:ee:8a:a9:d2:66:85:d3:b3:4d:9d:f7:31:d2:32: 2f:a4:2e:86:ed:82:b4:a5:10:69:d3:b3:f5:be:5f: 06:dd:78:73:8b:f9:c5:53:8b:88:56:45:8e:57:31: f0:e0:02:9f:31:26:12:63:02:e2:e8:7b:52:45:d3: 31:25:e4:7d:74:55:dd:6e:a3:be:ed:45:6d:39:ee: 87:4c:af:bc:19:84:1b:d7:f1:5a:32:34:14:8b:f6: 62:0a:5f:7b:5a:35:f9:62:e1:64:2a:c3:63:06:82: 6b:38:42:a6:f1:2c:fb:4e:17:a9:82:00:c9:4c:5a: f5:b0:62:0e:23:59:4c:af:3e:e0:a8:0b:f0:0f:55: 61:31:fd:10:34:82:14:c9:d4:15:a9:ad:29:92:b2: fa:fb:6c:44:c0:ec:e4:ac:69:6a:b5:ca:95:18:93: c3:cf:e0:39:35:6d:93:ab:9d:c7:41:34:4f:f5:d6: be:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A2:7B:38:CB:19:FB:62:FB:83:06:6D:F9:A8:46:97:7E:86:40:29 X509v3 Authority Key Identifier: keyid:48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/ZKJ7OMsZ-2L7gwZt-ahGl36GQCk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.22.48.0/21 185.34.240.0/23 IPv6: 2a00:b880::/32 Signature Algorithm: sha256WithRSAEncryption 1c:b6:4e:33:b0:d0:48:54:a5:71:35:45:eb:86:c3:89:f3:58: 01:14:1f:ce:f8:ec:fe:04:41:7c:31:54:4a:6e:e8:d3:4d:5d: bf:ef:93:3d:24:39:14:7a:0b:19:9a:1e:71:53:25:ea:7e:6a: c7:ee:4b:b9:1d:36:32:1c:21:63:85:3e:20:cc:ad:1a:3c:b6: e7:80:0e:5f:cb:d4:f6:be:10:40:ac:bf:d3:62:36:03:04:66: c8:5a:53:d2:6b:04:92:03:3a:e6:41:05:03:fc:4f:cd:4e:a3: 9a:21:aa:76:80:0a:f1:bf:98:ab:0f:91:fd:4e:8f:77:96:f7: b3:29:a9:e4:98:2f:1d:f7:cb:68:37:d0:9f:8b:5f:1c:de:4a: 28:95:a9:e5:3a:c6:ad:73:a2:3e:b3:1e:54:69:58:7f:b8:df: a0:f4:af:72:97:bd:b9:85:ff:20:87:26:e5:a1:58:c2:65:c9: 9b:d1:88:fd:3d:79:a4:d5:00:dc:6e:dc:1d:c9:14:f2:aa:28: 6e:9f:33:3e:76:5b:55:13:3a:ec:86:5d:bb:bf:92:38:d7:db: 8d:4d:25:ed:5d:ed:15:50:bc:0a:a5:e9:10:85:39:5e:29:ba: e8:9f:d8:59:0c:56:0f:2c:97:09:7d:2e:00:6a:d2:68:bc:61: 9d:c7:25:a8 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+OF7RnWVLBSCEVwoAw3PjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4ZTk5YTNmZWVjNjRkNmJhZDA5OGQxYjJkZjBiNTM2YTAz ODhlYTMwHhcNMjYwMTAyMTAxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGEyN2IzOGNiMTlmYjYyZmI4MzA2NmRmOWE4NDY5NzdlODY0MDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfwHgz7m5micuj0urFMbK8/CnsRV I4Zk68u6EbXHtm5KdTla7RR4SHaQd24OJD9SErqvExlNoNsaPWGbe/jU7XP2wuuv bHrb4RgT7oqp0maF07NNnfcx0jIvpC6G7YK0pRBp07P1vl8G3Xhzi/nFU4uIVkWO VzHw4AKfMSYSYwLi6HtSRdMxJeR9dFXdbqO+7UVtOe6HTK+8GYQb1/FaMjQUi/Zi Cl97WjX5YuFkKsNjBoJrOEKm8Sz7ThepggDJTFr1sGIOI1lMrz7gqAvwD1VhMf0Q NIIUydQVqa0pkrL6+2xEwOzkrGlqtcqVGJPDz+A5NW2Tq53HQTRP9da+pQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGSiezjLGfti+4MGbfmoRpd+hkApMB8GA1UdIwQY MBaAFEjpmj/uxk1rrQmNGy3wtTagOI6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU09tYVAtN0dUV3V0Q1kwYkxmQzFOcUE0anFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yNGE4MTctMjRhNi00YWMwLTkzMzYt N2Q3ODE0YzdhNWY3LzEvWktKN09Nc1otMkw3Z3dadC1haEdsMzZHUUNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yNGE4MTctMjRhNi00YWMwLTkzMzYtN2Q3ODE0YzdhNWY3 LzEvU09tYVAtN0dUV3V0Q1kwYkxmQzFOcUE0anFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDshYwAwQB uSLwMA0EAgACMAcDBQAqALiAMA0GCSqGSIb3DQEBCwUAA4IBAQActk4zsNBIVKVx NUXrhsOJ81gBFB/O+Oz+BEF8MVRKbujTTV2/75M9JDkUegsZmh5xUyXqfmrH7ku5 HTYyHCFjhT4gzK0aPLbngA5fy9T2vhBArL/TYjYDBGbIWlPSawSSAzrmQQUD/E/N TqOaIap2gArxv5irD5H9To93lvezKankmC8d98toN9Cfi18c3koolanlOsatc6I+ sx5UaVh/uN+g9K9yl725hf8ghybloVjCZcmb0Yj9PXmk1QDcbtwdyRTyqihunzM+ dltVEzrshl27v5I419uNTSXtXe0VULwKpekQhTleKbron9hZDFYPLJcJfS4AatJo vGGdxyWo -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:36 2026 by rpki-client