This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/ZPlBlPD-W-maIRDabAoyZWrxupE.roa File: ZPlBlPD-W-maIRDabAoyZWrxupE.roa (raw, json) Hash identifier: MQ/ql1GxKXsn5YKKa+q3cWZtrV1Ms5Llr3f8Hh6BGNE= Subject key identifier: 64:F9:41:94:F0:FE:5B:E9:9A:21:10:DA:6C:0A:32:65:6A:F1:BA:91 Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Certificate serial: 019B7BA3E762A2F60E1FBD4AE1C7E4CBF960 Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/ZPlBlPD-W-maIRDabAoyZWrxupE.roa Signing time: Thu 01 Jan 2026 22:18:17 +0000 ROA not before: Thu 01 Jan 2026 22:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200900 IP address blocks: 195.184.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:e7:62:a2:f6:0e:1f:bd:4a:e1:c7:e4:cb:f9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Validity Not Before: Jan 1 22:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64f94194f0fe5be99a2110da6c0a32656af1ba91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:68:9e:9f:55:79:98:7e:b3:8d:c7:a5:98:f6: 3d:29:e7:eb:2d:57:1d:44:53:91:ec:8c:63:8f:61: 68:6f:c5:52:df:a3:08:1d:22:2e:d1:ac:13:1a:5e: 00:35:c8:b6:a0:c6:da:13:87:0f:96:4a:55:e3:7d: eb:1d:73:3d:48:9f:39:7e:b0:74:f6:f5:2a:68:d5: 5e:93:b8:a0:e3:91:ec:9e:03:51:dc:df:21:8a:e8: 0a:92:48:67:2c:d9:e4:13:12:39:e0:9a:b8:eb:85: 77:3b:f8:c3:9c:c5:15:47:2f:af:fd:2d:87:36:70: 20:72:e2:05:47:e2:a5:f5:c8:1b:7c:f9:d8:16:a3: 4a:96:e7:b8:4d:6c:46:94:9d:7c:fc:3f:09:34:db: 43:15:73:a8:0c:8e:f3:fc:4f:a0:e1:7b:89:5f:ff: a0:2d:32:3f:31:02:ac:75:09:19:74:5f:de:8a:a4: 17:f9:db:11:72:21:8e:7d:eb:c7:e0:72:ab:9c:2f: 12:74:cf:87:4c:a1:33:b4:66:73:8a:c7:80:1b:24: 34:9e:18:d8:b8:37:68:87:43:73:b2:bb:d3:84:0b: e7:5d:91:51:44:69:0c:d6:24:26:49:59:79:53:0b: 9e:4a:4c:3a:35:a9:67:80:81:75:6e:74:16:39:e4: 82:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F9:41:94:F0:FE:5B:E9:9A:21:10:DA:6C:0A:32:65:6A:F1:BA:91 X509v3 Authority Key Identifier: keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/ZPlBlPD-W-maIRDabAoyZWrxupE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.184.27.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:7a:4e:ef:c7:b2:c6:85:fd:92:94:39:1c:d2:98:8b:e5:45: ea:bb:b1:e9:ae:63:75:30:c8:3a:dd:6a:a7:04:5b:8d:fe:d7: 68:cf:a0:bb:15:25:95:24:88:5e:a2:32:4c:96:b4:be:94:07: 7a:cc:03:34:5f:4e:76:e1:66:a7:c7:37:3f:01:3d:f4:c4:20: 73:57:0b:a5:fa:b8:a8:04:f5:90:8e:a7:1e:3d:77:8a:ec:98: 0d:54:77:f4:90:58:8c:32:89:11:20:75:8e:77:d7:4c:96:80: a4:b0:9f:aa:02:b0:7d:5d:6f:b5:c9:35:f6:51:a0:41:56:63: c5:a9:8c:79:8d:ea:ae:6f:ec:4c:10:44:e3:62:6a:87:be:15: 47:1d:69:71:36:57:71:39:79:d7:79:33:38:91:11:b0:e3:cb: 14:74:7c:5a:b3:3a:1c:69:ea:88:d5:e1:d7:25:91:2c:da:ac: 6d:9b:79:da:7e:62:f9:26:3e:99:26:77:d5:f6:cf:57:16:06: 19:80:f2:93:15:8f:7f:85:b5:16:5d:8e:e0:e6:9a:19:df:04: 92:81:a5:ad:53:0f:57:ab:6d:38:eb:bb:ac:3f:92:a1:ee:f3: 53:b6:f7:f3:7c:dd:0e:fc:b7:0b:da:1d:14:8b:28:a8:c3:ce: b2:31:8d:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o+diovYOH71K4cfky/lgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5 ZDQyODgwHhcNMjYwMTAxMjIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGY5NDE5NGYwZmU1YmU5OWEyMTEwZGE2YzBhMzI2NTZhZjFiYTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWien1V5mH6zjcelmPY9KefrLVcd RFOR7Ixjj2Fob8VS36MIHSIu0awTGl4ANci2oMbaE4cPlkpV433rHXM9SJ85frB0 9vUqaNVek7ig45HsngNR3N8hiugKkkhnLNnkExI54Jq464V3O/jDnMUVRy+v/S2H NnAgcuIFR+Kl9cgbfPnYFqNKlue4TWxGlJ18/D8JNNtDFXOoDI7z/E+g4XuJX/+g LTI/MQKsdQkZdF/eiqQX+dsRciGOfevH4HKrnC8SdM+HTKEztGZziseAGyQ0nhjY uDdoh0NzsrvThAvnXZFRRGkM1iQmSVl5UwueSkw6NalngIF1bnQWOeSCGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGT5QZTw/lvpmiEQ2mwKMmVq8bqRMB8GA1UdIwQY MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It ZWNjNDliZGMyYWQ4LzEvWlBsQmxQRC1XLW1hSVJEYWJBb3laV3J4dXBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4 LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7gbMA0G CSqGSIb3DQEBCwUAA4IBAQAdek7vx7LGhf2SlDkc0piL5UXqu7HprmN1MMg63Wqn BFuN/tdoz6C7FSWVJIheojJMlrS+lAd6zAM0X0524Wanxzc/AT30xCBzVwul+rio BPWQjqcePXeK7JgNVHf0kFiMMokRIHWOd9dMloCksJ+qArB9XW+1yTX2UaBBVmPF qYx5jequb+xMEETjYmqHvhVHHWlxNldxOXnXeTM4kRGw48sUdHxaszocaeqI1eHX JZEs2qxtm3nafmL5Jj6ZJnfV9s9XFgYZgPKTFY9/hbUWXY7g5poZ3wSSgaWtUw9X q20467usP5Kh7vNTtvfzfN0O/LcL2h0Uiyiow86yMY0U -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:20 2026 by rpki-client