This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/zymQ8lQH58g9kZdGDaCuBYAYQI4.roa File: zymQ8lQH58g9kZdGDaCuBYAYQI4.roa (raw, json) Hash identifier: UsBi140YQptoK8CMotM0bOiYKyUZpHcPLjWyz1MACI4= Subject key identifier: CF:29:90:F2:54:07:E7:C8:3D:91:97:46:0D:A0:AE:05:80:18:40:8E Certificate issuer: /CN=ad9afade4183ae80048d6b84818eec46f680fa26 Certificate serial: 019B7BA382FE3ECC5AE489EDEEE875888A62 Authority key identifier: AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/zymQ8lQH58g9kZdGDaCuBYAYQI4.roa Signing time: Thu 01 Jan 2026 22:17:51 +0000 ROA not before: Thu 01 Jan 2026 22:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212788 IP address blocks: 213.170.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:82:fe:3e:cc:5a:e4:89:ed:ee:e8:75:88:8a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad9afade4183ae80048d6b84818eec46f680fa26 Validity Not Before: Jan 1 22:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf2990f25407e7c83d9197460da0ae058018408e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fd:0e:cf:85:00:1b:ec:10:29:a4:19:36:b4: 8b:d0:a3:21:fe:d9:f2:e3:4b:55:3d:cc:2c:31:27: bf:d3:0f:f5:36:75:3f:90:82:be:2b:71:9d:b6:21: 42:5f:f5:89:da:71:b1:c4:e5:15:b8:bb:e4:fa:2e: c2:60:86:4e:4b:24:27:99:a8:97:ff:44:cf:49:94: 8a:c2:d8:52:59:c6:32:37:21:67:df:53:c9:0e:3c: 2d:4e:1a:6c:2b:8d:04:b6:b9:e7:3a:69:05:f9:dd: 96:fb:50:89:4a:15:d6:09:a5:61:d7:60:2f:3e:fc: 8f:e8:12:85:9d:4c:11:4f:2e:03:35:b2:cf:9a:99: b4:ba:49:ca:a6:70:c7:86:ff:c6:e3:01:42:62:a4: 15:3c:8e:3b:e1:8c:86:51:28:a0:dd:33:33:1c:19: a9:13:b5:78:ad:81:7b:4c:5f:19:c8:66:da:e2:df: d2:f4:5c:df:4b:51:3f:3b:6e:7b:89:fb:02:cd:41: e7:92:db:46:20:61:5c:84:48:d0:69:09:6d:28:2c: 2d:17:2d:90:71:cc:0a:1f:1d:29:48:80:cd:82:64: 84:06:4c:3c:b3:84:b0:75:e1:25:2d:0e:1a:c7:52: 1e:8e:d0:f9:ef:44:e9:8f:c7:1e:d8:7a:98:e7:03: cf:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:29:90:F2:54:07:E7:C8:3D:91:97:46:0D:A0:AE:05:80:18:40:8E X509v3 Authority Key Identifier: keyid:AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/zymQ8lQH58g9kZdGDaCuBYAYQI4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.170.141.0/24 Signature Algorithm: sha256WithRSAEncryption 10:a0:7d:aa:d0:87:e7:9d:58:b6:f5:08:13:57:e5:1d:50:f5: 8f:d1:ff:34:2b:ac:c4:bf:3e:75:d9:8a:77:31:ff:62:d5:1e: 10:ed:7b:97:93:38:ba:09:b5:50:e3:86:78:68:51:35:68:98: b0:a7:85:12:a0:f1:3b:a4:45:2a:42:e4:a6:0c:92:73:bc:f1: 92:d2:6b:a1:a8:8c:62:0a:1c:11:f3:ab:4c:22:b7:ae:ff:49: b3:42:ab:03:77:37:48:5b:af:73:ca:04:81:fc:69:0d:c5:6f: 34:e5:e8:97:09:a8:e2:fd:26:73:93:4a:ee:ae:bd:eb:2c:c4: c0:fe:47:73:51:27:e1:f0:4a:0e:79:35:bc:79:96:0d:99:e6: a3:45:14:6e:44:c8:af:78:80:dd:8f:74:87:57:c1:25:9d:f0: 0c:d2:fb:aa:e1:f8:ed:34:57:e0:e1:f2:6a:a2:db:5b:9e:34: 20:8b:f7:d5:4a:b8:5f:7d:2e:9d:df:38:ae:bd:73:67:b6:ce: a2:59:74:af:49:57:ae:e8:e9:58:70:d6:60:2a:b6:67:7c:2d: 4c:11:ea:fe:49:00:05:48:df:84:2f:81:9b:c1:44:2e:15:2d: 7b:16:07:63:6e:a6:f0:3b:a2:e5:a8:8e:b2:8b:17:09:88:b7: 24:0e:0d:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o4L+Psxa5Int7uh1iIpiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkOWFmYWRlNDE4M2FlODAwNDhkNmI4NDgxOGVlYzQ2ZjY4 MGZhMjYwHhcNMjYwMTAxMjIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjI5OTBmMjU0MDdlN2M4M2Q5MTk3NDYwZGEwYWUwNTgwMTg0MDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/0Oz4UAG+wQKaQZNrSL0KMh/tny 40tVPcwsMSe/0w/1NnU/kIK+K3GdtiFCX/WJ2nGxxOUVuLvk+i7CYIZOSyQnmaiX /0TPSZSKwthSWcYyNyFn31PJDjwtThpsK40EtrnnOmkF+d2W+1CJShXWCaVh12Av PvyP6BKFnUwRTy4DNbLPmpm0uknKpnDHhv/G4wFCYqQVPI474YyGUSig3TMzHBmp E7V4rYF7TF8ZyGba4t/S9FzfS1E/O257ifsCzUHnkttGIGFchEjQaQltKCwtFy2Q ccwKHx0pSIDNgmSEBkw8s4SwdeElLQ4ax1IejtD570Tpj8ce2HqY5wPPAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM8pkPJUB+fIPZGXRg2grgWAGECOMB8GA1UdIwQY MBaAFK2a+t5Bg66ABI1rhIGO7Eb2gPomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclpyNjNrR0Ryb0FFald1RWdZN3NSdmFBLWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kMzc3Y2QtZTM2Zi00Y2I5LTgyNWIt YzAyMzM0YmUxMjhjLzEvenltUThsUUg1OGc5a1pkR0RhQ3VCWUFZUUk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9kMzc3Y2QtZTM2Zi00Y2I5LTgyNWItYzAyMzM0YmUxMjhj LzEvclpyNjNrR0Ryb0FFald1RWdZN3NSdmFBLWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1aqNMA0G CSqGSIb3DQEBCwUAA4IBAQAQoH2q0IfnnVi29QgTV+UdUPWP0f80K6zEvz512Yp3 Mf9i1R4Q7XuXkzi6CbVQ44Z4aFE1aJiwp4USoPE7pEUqQuSmDJJzvPGS0muhqIxi ChwR86tMIreu/0mzQqsDdzdIW69zygSB/GkNxW805eiXCaji/SZzk0rurr3rLMTA /kdzUSfh8EoOeTW8eZYNmeajRRRuRMiveIDdj3SHV8ElnfAM0vuq4fjtNFfg4fJq ottbnjQgi/fVSrhffS6d3ziuvXNnts6iWXSvSVeu6OlYcNZgKrZnfC1MEer+SQAF SN+EL4GbwUQuFS17FgdjbqbwO6LlqI6yixcJiLckDg3S -----END CERTIFICATE-----Generated at Mon Jan 26 12:20:43 2026 by rpki-client