This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/zr2faZR5YeSQwhfP1BestpJXC-c.roa File: zr2faZR5YeSQwhfP1BestpJXC-c.roa (raw, json) Hash identifier: l0wUse8So6p8HXiUpDrAoN5JVZGYHdfzX/5wlHsppLs= Subject key identifier: CE:BD:9F:69:94:79:61:E4:90:C2:17:CF:D4:17:AC:B6:92:57:0B:E7 Certificate issuer: /CN=509bc63e68c90932b4fc28997fc3bf78de3b3743 Certificate serial: 019B78355FDE95D5E82099EA830F6A28038E Authority key identifier: 50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/zr2faZR5YeSQwhfP1BestpJXC-c.roa Signing time: Thu 01 Jan 2026 06:18:42 +0000 ROA not before: Thu 01 Jan 2026 06:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209969 IP address blocks: 185.164.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:5f:de:95:d5:e8:20:99:ea:83:0f:6a:28:03:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509bc63e68c90932b4fc28997fc3bf78de3b3743 Validity Not Before: Jan 1 06:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cebd9f69947961e490c217cfd417acb692570be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:11:7d:f7:29:42:da:36:0f:5c:96:f6:92:4c: 64:25:8e:e1:8e:fa:a2:03:ec:5e:89:75:f9:ed:40: 1c:70:04:28:f7:60:34:60:40:5b:58:35:09:c0:98: cf:58:c7:cb:dc:a8:af:19:af:23:e2:7d:c0:4a:28: d1:21:51:59:97:32:bd:08:2c:e9:a7:dd:db:f9:47: e0:f8:ca:db:1f:f7:cd:89:9b:48:f9:1b:c2:87:af: 78:10:a0:76:38:2f:55:b2:fd:bf:e4:cb:9b:87:98: ec:d5:8d:eb:b2:0d:ce:72:11:c1:6d:8c:2a:31:e5: de:75:70:ba:81:bf:5a:61:a8:70:8f:65:a1:5d:b5: ed:6b:af:fd:f6:15:e0:07:a8:de:d6:d1:72:5a:be: 1e:04:85:2a:1d:0f:e1:49:0a:8e:d7:64:82:73:5b: 1e:27:bb:c8:a1:f5:52:c6:a7:1f:ec:c6:46:91:a2: 18:84:b2:58:d2:2b:79:7f:92:c9:4b:de:cb:4b:2f: 6e:38:05:80:0c:53:7d:63:c0:3b:84:ca:60:c0:29: 69:ba:47:d4:f1:e7:b9:68:b8:ac:1b:e6:33:08:b0: ad:49:1a:54:fb:97:69:6d:ff:c2:ce:a7:f4:69:6e: 6d:79:2b:91:89:71:14:21:68:e3:f8:17:44:fb:c9: 38:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BD:9F:69:94:79:61:E4:90:C2:17:CF:D4:17:AC:B6:92:57:0B:E7 X509v3 Authority Key Identifier: keyid:50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/zr2faZR5YeSQwhfP1BestpJXC-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.164.78.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:b3:c7:9f:a8:35:1e:8d:49:3e:c1:ec:c8:6f:ae:c1:d0:9a: 76:4f:d4:d4:1c:30:f3:86:82:86:fb:18:a5:02:1a:7d:56:62: 1e:8b:d9:ce:63:6c:ba:1b:e3:0d:a7:60:a9:45:63:80:d2:d3: f6:c8:e9:8c:ad:bd:4b:9a:a3:2a:96:8d:c8:9c:0d:bb:bf:02: 7b:a0:fa:cb:47:56:12:fc:e1:45:77:73:35:9c:0b:19:1e:80: 3b:d7:ed:e7:81:06:19:7b:6c:fa:39:f5:0d:80:fa:ac:56:b3: cf:f0:6d:e1:4a:e9:b5:41:99:52:bb:e0:42:f8:58:22:c9:f1: 9f:51:0b:4f:7f:ca:c3:f8:f7:ef:ee:e6:49:50:b1:39:7c:94: 77:cb:61:82:e3:39:88:0b:65:d5:57:8a:fc:70:c4:19:7a:10: c2:e3:d2:0d:9a:d1:45:ff:01:64:3d:12:d6:c8:fe:58:c4:9a: 7f:15:53:06:ce:11:82:f9:e3:2d:49:33:57:32:fa:f7:93:53: 9a:e7:e0:65:21:53:ec:4a:c6:0f:37:bd:67:bd:98:b4:74:36: 8c:45:33:0f:c3:3c:de:1b:ff:83:ae:96:9e:dc:c3:43:5c:59: d2:8e:95:5a:9a:6d:91:6c:c5:0b:24:c9:2d:65:56:1d:c1:30: 05:52:e7:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NV/eldXoIJnqgw9qKAOOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOWJjNjNlNjhjOTA5MzJiNGZjMjg5OTdmYzNiZjc4ZGUz YjM3NDMwHhcNMjYwMTAxMDYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWJkOWY2OTk0Nzk2MWU0OTBjMjE3Y2ZkNDE3YWNiNjkyNTcwYmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RF99ylC2jYPXJb2kkxkJY7hjvqi A+xeiXX57UAccAQo92A0YEBbWDUJwJjPWMfL3KivGa8j4n3ASijRIVFZlzK9CCzp p93b+Ufg+MrbH/fNiZtI+RvCh694EKB2OC9Vsv2/5Mubh5js1Y3rsg3OchHBbYwq MeXedXC6gb9aYahwj2WhXbXta6/99hXgB6je1tFyWr4eBIUqHQ/hSQqO12SCc1se J7vIofVSxqcf7MZGkaIYhLJY0it5f5LJS97LSy9uOAWADFN9Y8A7hMpgwClpukfU 8ee5aLisG+YzCLCtSRpU+5dpbf/Czqf0aW5teSuRiXEUIWjj+BdE+8k4OQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM69n2mUeWHkkMIXz9QXrLaSVwvnMB8GA1UdIwQY MBaAFFCbxj5oyQkytPwomX/Dv3jeOzdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUp2R1BtakpDVEswX0NpWmY4T19lTjQ3TjBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zNGM1YjItYjZlMy00YjIzLWE2MDkt MTZlZDNjZDBjNzJhLzEvenIyZmFaUjVZZVNRd2hmUDFCZXN0cEpYQy1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8zNGM1YjItYjZlMy00YjIzLWE2MDktMTZlZDNjZDBjNzJh LzEvVUp2R1BtakpDVEswX0NpWmY4T19lTjQ3TjBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaROMA0G CSqGSIb3DQEBCwUAA4IBAQCfs8efqDUejUk+wezIb67B0Jp2T9TUHDDzhoKG+xil Ahp9VmIei9nOY2y6G+MNp2CpRWOA0tP2yOmMrb1LmqMqlo3InA27vwJ7oPrLR1YS /OFFd3M1nAsZHoA71+3ngQYZe2z6OfUNgPqsVrPP8G3hSum1QZlSu+BC+FgiyfGf UQtPf8rD+Pfv7uZJULE5fJR3y2GC4zmIC2XVV4r8cMQZehDC49INmtFF/wFkPRLW yP5YxJp/FVMGzhGC+eMtSTNXMvr3k1Oa5+BlIVPsSsYPN71nvZi0dDaMRTMPwzze G/+Drpae3MNDXFnSjpVamm2RbMULJMktZVYdwTAFUuei -----END CERTIFICATE-----Generated at Mon Jan 26 13:45:50 2026 by rpki-client