This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/zm_zTtidrEiuyGIJ9xC0dYOYVsw.roa File: zm_zTtidrEiuyGIJ9xC0dYOYVsw.roa (raw, json) Hash identifier: J1GJgdFWQEf7k64nQl0mr5yPcHotjObvTQFYDrnoDYE= Subject key identifier: CE:6F:F3:4E:D8:9D:AC:48:AE:C8:62:09:F7:10:B4:75:83:98:56:CC Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 019B7B35F936F8DCB06302FD2B03642BCC99 Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/zm_zTtidrEiuyGIJ9xC0dYOYVsw.roa Signing time: Thu 01 Jan 2026 20:18:13 +0000 ROA not before: Thu 01 Jan 2026 20:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215124 IP address blocks: 95.170.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f9:36:f8:dc:b0:63:02:fd:2b:03:64:2b:cc:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Jan 1 20:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce6ff34ed89dac48aec86209f710b475839856cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:74:c3:08:68:f4:52:e4:be:47:63:c5:ef:8b: 3f:90:14:6c:da:3e:5d:19:9d:c1:ae:88:be:32:2d: 55:2d:ac:19:d0:0c:b0:96:81:7b:37:f9:45:10:1c: 46:c4:35:5c:57:60:86:c0:08:fd:70:b3:b8:1e:1b: 1d:25:61:ce:88:6f:25:73:50:89:d9:c3:a0:8e:53: 82:bf:0a:a8:d7:61:7a:91:93:08:71:95:9a:e6:e4: e2:9b:a8:49:fa:4c:32:a8:a6:df:b1:9f:ac:7e:3e: bc:c3:da:25:15:37:5f:cc:ad:32:71:76:dd:47:79: 46:10:61:2b:c8:62:4d:4b:43:cd:52:c4:f2:55:4b: 1e:f9:d4:82:35:ff:39:0a:1a:a6:ac:69:94:a5:92: fd:68:20:d0:e1:b5:e5:8e:52:0b:7a:d9:36:3f:d4: 56:65:46:28:77:4f:33:85:dd:0b:47:5d:b4:4b:6a: ce:ca:c0:ae:63:63:7d:71:fc:18:d8:82:f6:25:e1: 88:f5:08:5a:50:5e:3f:bc:b2:36:f6:18:40:12:85: 89:54:fc:c8:09:12:39:de:28:64:89:07:5f:47:bf: 18:e1:04:54:db:e4:3b:c9:32:02:2a:70:8a:46:6a: ef:d6:17:5c:f1:5c:87:c5:ce:67:41:d4:4e:cc:ed: d8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6F:F3:4E:D8:9D:AC:48:AE:C8:62:09:F7:10:B4:75:83:98:56:CC X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/zm_zTtidrEiuyGIJ9xC0dYOYVsw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.170.30.0/24 Signature Algorithm: sha256WithRSAEncryption 48:27:8c:dc:f5:58:1d:7c:1b:75:b2:49:ce:0c:27:fd:d9:8d: cb:8a:35:65:d4:29:6b:ad:6c:4c:2f:bc:18:e7:6d:d9:74:cf: 07:24:1b:cb:cb:9f:4d:bb:0a:43:24:0b:67:1c:31:68:33:a9: 6a:44:6b:d8:02:7c:a5:66:3f:50:e6:67:ba:3e:c5:9d:3b:a6: 9c:d0:18:6b:d7:b8:34:64:1f:7d:ff:77:fb:48:06:aa:13:9a: ef:7a:4f:09:59:d5:04:c0:4f:6b:b1:48:cf:c8:d5:e5:57:1b: ea:b9:0f:77:50:5f:09:de:97:95:5f:6f:fb:ec:16:0e:db:d7: 9a:64:97:42:55:e3:dd:96:72:6b:95:cb:49:8d:7c:5f:f4:9a: c9:4b:2f:48:fd:d3:a2:0e:5b:c0:82:a2:41:6c:ef:b1:ae:38: fc:78:8b:2d:66:63:16:1e:1f:18:40:6e:1a:49:95:72:21:c0: 40:ef:bb:36:fd:7e:a9:29:0f:48:8d:d8:ee:56:38:8a:70:00: 67:29:d3:b3:a4:e3:c5:5d:22:1a:b0:14:79:9c:ad:cb:48:59: ac:a6:9a:6d:72:13:22:ac:c5:05:a9:5b:07:53:3a:a0:bd:fb: a8:4c:31:4f:50:5e:57:13:60:df:7f:63:af:f9:86:53:7e:ed: 62:e8:9c:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nfk2+NywYwL9KwNkK8yZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjYwMTAxMjAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTZmZjM0ZWQ4OWRhYzQ4YWVjODYyMDlmNzEwYjQ3NTgzOTg1NmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXTDCGj0UuS+R2PF74s/kBRs2j5d GZ3Broi+Mi1VLawZ0AywloF7N/lFEBxGxDVcV2CGwAj9cLO4HhsdJWHOiG8lc1CJ 2cOgjlOCvwqo12F6kZMIcZWa5uTim6hJ+kwyqKbfsZ+sfj68w9olFTdfzK0ycXbd R3lGEGEryGJNS0PNUsTyVUse+dSCNf85ChqmrGmUpZL9aCDQ4bXljlILetk2P9RW ZUYod08zhd0LR120S2rOysCuY2N9cfwY2IL2JeGI9QhaUF4/vLI29hhAEoWJVPzI CRI53ihkiQdfR78Y4QRU2+Q7yTICKnCKRmrv1hdc8VyHxc5nQdROzO3YywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM5v807YnaxIrshiCfcQtHWDmFbMMB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvem1felR0aWRyRWl1eUdJSjl4QzBkWU9ZVnN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX6oeMA0G CSqGSIb3DQEBCwUAA4IBAQBIJ4zc9VgdfBt1sknODCf92Y3LijVl1ClrrWxML7wY 523ZdM8HJBvLy59NuwpDJAtnHDFoM6lqRGvYAnylZj9Q5me6PsWdO6ac0Bhr17g0 ZB99/3f7SAaqE5rvek8JWdUEwE9rsUjPyNXlVxvquQ93UF8J3peVX2/77BYO29ea ZJdCVePdlnJrlctJjXxf9JrJSy9I/dOiDlvAgqJBbO+xrjj8eIstZmMWHh8YQG4a SZVyIcBA77s2/X6pKQ9IjdjuVjiKcABnKdOzpOPFXSIasBR5nK3LSFmsppptchMi rMUFqVsHUzqgvfuoTDFPUF5XE2Dff2Ov+YZTfu1i6Jyq -----END CERTIFICATE-----Generated at Sun Jan 25 17:46:36 2026 by rpki-client