This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/NZSCezX9f7M1-GnFrCgY9OEg1zE.roa File: NZSCezX9f7M1-GnFrCgY9OEg1zE.roa (raw, json) Hash identifier: PERBXmXEv0ap8YpzNzJwAXuHbWOn9tU9qkVZwOJ0YYc= Subject key identifier: 35:94:82:7B:35:FD:7F:B3:35:F8:69:C5:AC:28:18:F4:E1:20:D7:31 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA76B7ED10924567CCEAC46DD413216 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/NZSCezX9f7M1-GnFrCgY9OEg1zE.roa Signing time: Fri 02 Jan 2026 12:20:59 +0000 ROA not before: Fri 02 Jan 2026 12:20:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34137 IP address blocks: 79.105.0.0/16 maxlen: 16 79.105.128.0/17 maxlen: 17 85.88.160.0/19 maxlen: 19 89.109.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:6b:7e:d1:09:24:56:7c:ce:ac:46:dd:41:32:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3594827b35fd7fb335f869c5ac2818f4e120d731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:79:08:67:17:9b:bf:8a:f7:d9:f9:44:4f:98: 22:ca:82:fb:a9:e2:64:8d:1e:51:1f:07:0c:af:cb: c0:8b:77:cc:c0:8d:ec:9b:d7:82:d1:67:48:67:89: 0b:49:e4:b1:bb:25:9f:8a:bb:c7:8d:38:35:9b:8a: 36:df:f2:db:d3:c4:cb:f8:60:88:56:39:b5:53:e2: 90:c5:46:7d:60:2f:6c:43:ba:9c:fe:dd:e2:a5:43: b1:15:77:b1:dc:39:4b:81:63:dc:eb:5c:59:57:b4: 12:8e:70:f7:af:65:26:16:40:6f:a6:06:cc:b0:16: f7:6f:a6:7e:a0:5f:1d:98:0b:b0:d7:66:31:6c:e5: 43:6f:25:01:89:f6:ca:3b:be:11:8d:f1:67:ff:a4: 88:09:84:bd:87:71:38:68:86:73:18:33:24:0c:3a: 65:d5:d9:eb:08:a1:ce:35:2c:b8:e2:4f:b8:35:e3: 70:ef:e2:31:00:0c:6a:a7:ef:d8:b7:5f:7b:07:7a: 65:97:68:bd:35:14:94:0f:a5:a9:89:02:c1:27:08: 93:df:c6:7c:e4:f2:a2:8e:29:98:8a:34:26:47:81: 10:de:7d:cc:fa:a6:38:fd:cd:e7:ac:cc:05:98:47: a0:da:3c:7a:3c:f7:88:53:d6:89:20:cd:52:c2:32: 23:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:94:82:7B:35:FD:7F:B3:35:F8:69:C5:AC:28:18:F4:E1:20:D7:31 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/NZSCezX9f7M1-GnFrCgY9OEg1zE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.105.0.0/16 85.88.160.0/19 89.109.128.0/18 Signature Algorithm: sha256WithRSAEncryption 7e:74:ed:14:77:60:43:f6:cf:cd:46:6a:a6:03:bf:0c:11:41: 72:71:00:1c:dc:a8:cc:db:b6:4f:35:d6:42:ed:8f:15:16:87: 0b:6b:a4:38:68:0d:08:f8:99:d3:aa:f2:61:bf:ef:80:50:5c: 4e:10:0a:65:7d:d2:aa:e3:3f:bb:96:d3:c1:14:fd:be:18:ab: 50:5d:16:ae:e7:00:e7:bc:cc:cd:93:a5:9d:86:d0:c8:65:e6: 13:c6:77:8d:d2:a6:47:f2:b3:b4:fb:5f:9d:5f:de:2f:4a:37: 6c:5e:ac:df:bb:24:0e:ea:4b:3f:f6:89:d3:ab:c0:39:ac:e0: 21:66:5e:e9:6e:e7:57:24:28:a7:71:8f:16:e7:ae:75:c9:88: df:ae:61:25:2a:2b:f4:30:6f:e3:ff:a3:22:ea:3d:5a:f3:09: 69:bb:e1:21:c6:26:bf:ff:dc:1c:f0:5d:f0:cb:fd:eb:bd:b8: cd:58:ea:71:b4:6c:45:2a:81:af:a9:db:f4:00:dc:85:7e:57: e5:9e:7f:be:d2:47:f3:99:a5:4a:1c:95:ad:9a:4e:63:41:05: ef:58:9b:87:eb:a2:e5:ab:53:90:12:7c:71:78:c6:e7:4d:0d: 38:e5:4c:f9:31:26:ff:84:04:59:46:7a:a3:99:c2:9f:25:10: ba:43:e1:cb -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt+p2t+0QkkVnzOrEbdQTIWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTk0ODI3YjM1ZmQ3ZmIzMzVmODY5YzVhYzI4MThmNGUxMjBkNzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3kIZxebv4r32flET5giyoL7qeJk jR5RHwcMr8vAi3fMwI3sm9eC0WdIZ4kLSeSxuyWfirvHjTg1m4o23/Lb08TL+GCI Vjm1U+KQxUZ9YC9sQ7qc/t3ipUOxFXex3DlLgWPc61xZV7QSjnD3r2UmFkBvpgbM sBb3b6Z+oF8dmAuw12YxbOVDbyUBifbKO74RjfFn/6SICYS9h3E4aIZzGDMkDDpl 1dnrCKHONSy44k+4NeNw7+IxAAxqp+/Yt197B3pll2i9NRSUD6WpiQLBJwiT38Z8 5PKijimYijQmR4EQ3n3M+qY4/c3nrMwFmEeg2jx6PPeIU9aJIM1SwjIj3wIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFDWUgns1/X+zNfhpxawoGPThINcxMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvTlpTQ2V6WDlmN00xLUduRnJDZ1k5T0VnMXpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAATARAwMAT2kDBAVV WKADBAZZbYAwDQYJKoZIhvcNAQELBQADggEBAH507RR3YEP2z81GaqYDvwwRQXJx ABzcqMzbtk811kLtjxUWhwtrpDhoDQj4mdOq8mG/74BQXE4QCmV90qrjP7uW08EU /b4Yq1BdFq7nAOe8zM2TpZ2G0Mhl5hPGd43Spkfys7T7X51f3i9KN2xerN+7JA7q Sz/2idOrwDms4CFmXulu51ckKKdxjxbnrnXJiN+uYSUqK/Qwb+P/oyLqPVrzCWm7 4SHGJr//3BzwXfDL/eu9uM1Y6nG0bEUqga+p2/QA3IV+V+Wef77SR/OZpUocla2a TmNBBe9Ym4frouWrU5ASfHF4xudNDTjlTPkxJv+EBFlGeqOZwp8lELpD4cs= -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:14 2026 by rpki-client