This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/ZJDmPvzDE__eYUkVLrAmHcTbK2E.roa File: ZJDmPvzDE__eYUkVLrAmHcTbK2E.roa (raw, json) Hash identifier: mZslKl2yoouF0x/HaqlGPF55VMLSQDizBAGrzjr6tuY= Subject key identifier: 64:90:E6:3E:FC:C3:13:FF:DE:61:49:15:2E:B0:26:1D:C4:DB:2B:61 Certificate issuer: /CN=0adcf62c6b5411139a5d1309dd9ed926f4314320 Certificate serial: 019B77C6C3A02C514DDACAC563E28C74D6C6 Authority key identifier: 0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/ZJDmPvzDE__eYUkVLrAmHcTbK2E.roa Signing time: Thu 01 Jan 2026 04:17:53 +0000 ROA not before: Thu 01 Jan 2026 04:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60893 IP address blocks: 91.132.240.0/22 maxlen: 24 91.132.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c3:a0:2c:51:4d:da:ca:c5:63:e2:8c:74:d6:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0adcf62c6b5411139a5d1309dd9ed926f4314320 Validity Not Before: Jan 1 04:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6490e63efcc313ffde6149152eb0261dc4db2b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:eb:2d:84:06:48:a4:7b:7c:88:3b:db:36:7b: c2:af:99:29:c7:73:5c:4c:5f:3e:bb:f2:6e:cd:d8: 5d:e5:0d:d3:77:cf:94:a2:8a:59:5d:b9:23:db:e2: 3f:89:bc:8d:2b:53:98:a0:7e:a1:98:0f:87:e3:c7: a3:4f:46:2b:d2:e7:f1:b9:75:42:9b:cb:28:83:59: 2b:4d:22:11:fd:c2:65:13:45:74:dd:50:f2:cb:5c: 3c:29:bc:e5:1b:7d:69:ac:a4:07:65:84:d8:bd:e7: 80:21:66:da:93:70:90:d7:0e:24:7c:cb:05:13:bd: 11:2f:35:81:ad:c9:bb:ab:e0:a0:fe:f0:1c:65:ce: 82:2e:1e:21:06:39:d6:ef:98:26:13:de:ff:65:0c: d4:b3:04:8d:2b:9a:9e:44:58:80:32:49:de:d5:b9: 42:39:ba:03:ec:96:6d:8a:b9:01:db:ba:b0:b2:59: 3c:fa:23:a7:45:93:5a:fd:ac:47:88:9d:99:e6:b5: 26:76:8c:7a:03:4d:99:8c:7c:5f:ce:83:aa:70:96: a8:76:21:e7:da:07:05:19:2e:4c:f0:97:ab:f5:ca: f7:bd:2b:fa:b4:12:81:4f:20:b9:dd:c9:9a:16:b4: d3:ae:d7:12:b0:23:5d:8f:f3:af:f5:f3:7d:50:a7: 88:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:90:E6:3E:FC:C3:13:FF:DE:61:49:15:2E:B0:26:1D:C4:DB:2B:61 X509v3 Authority Key Identifier: keyid:0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/ZJDmPvzDE__eYUkVLrAmHcTbK2E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.240.0/22 Signature Algorithm: sha256WithRSAEncryption a8:42:f7:4a:cf:4e:24:dd:40:66:23:ab:d0:44:cd:9b:10:65: 67:1a:f1:3a:cb:64:79:e1:13:6e:95:ad:05:a3:79:62:e1:c6: 1e:50:4b:1d:86:40:f8:ec:f2:42:ee:e9:ab:74:85:89:b9:ee: 07:c3:96:26:1d:5f:e2:ce:22:dc:f2:09:d4:ab:f1:b3:d2:80: 3f:2f:8c:02:51:9e:6a:18:80:03:5a:d4:d3:11:41:b0:de:ec: a7:38:b9:64:73:77:19:b5:a8:88:ba:51:ff:7d:9f:f4:19:e2: 89:1e:d0:28:58:b5:b0:ae:f0:4d:53:52:9c:fd:dc:8c:af:a8: 51:0f:75:51:2e:ed:d3:67:58:e7:35:a0:21:cb:ee:77:a9:f4: 84:b5:17:71:dc:8a:5b:b1:d2:96:89:a3:d7:38:79:32:30:ed: b2:53:dc:12:96:40:42:e7:49:4e:39:08:5e:87:24:ed:2c:c8: d2:2b:69:ae:8a:93:25:ce:5e:03:0c:cf:30:b2:9c:fe:90:01: cb:c2:56:fc:3f:60:31:aa:a3:df:d1:d3:ec:65:43:b6:1f:5c: 79:6c:b9:2a:7b:0f:77:a9:3b:13:33:f9:fa:d2:cf:8f:f5:6b: ce:d6:7a:89:86:e2:83:46:e8:05:11:0b:96:44:22:52:0c:46: c6:f4:6c:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xsOgLFFN2srFY+KMdNbGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZGNmNjJjNmI1NDExMTM5YTVkMTMwOWRkOWVkOTI2ZjQz MTQzMjAwHhcNMjYwMTAxMDQxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDkwZTYzZWZjYzMxM2ZmZGU2MTQ5MTUyZWIwMjYxZGM0ZGIyYjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoesthAZIpHt8iDvbNnvCr5kpx3Nc TF8+u/Juzdhd5Q3Td8+UoopZXbkj2+I/ibyNK1OYoH6hmA+H48ejT0Yr0ufxuXVC m8sog1krTSIR/cJlE0V03VDyy1w8KbzlG31prKQHZYTYveeAIWbak3CQ1w4kfMsF E70RLzWBrcm7q+Cg/vAcZc6CLh4hBjnW75gmE97/ZQzUswSNK5qeRFiAMkne1blC OboD7JZtirkB27qwslk8+iOnRZNa/axHiJ2Z5rUmdox6A02ZjHxfzoOqcJaodiHn 2gcFGS5M8Jer9cr3vSv6tBKBTyC53cmaFrTTrtcSsCNdj/Ov9fN9UKeIawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGSQ5j78wxP/3mFJFS6wJh3E2ythMB8GA1UdIwQY MBaAFArc9ixrVBETml0TCd2e2Sb0MUMgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3R6MkxHdFVFUk9hWFJNSjNaN1pKdlF4UXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYzg0M2UtNjBjNy00N2FjLTgyM2It ZjhkNmJkMzBjYzE5LzEvWkpEbVB2ekRFX19lWVVrVkxyQW1IY1RiSzJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYzg0M2UtNjBjNy00N2FjLTgyM2ItZjhkNmJkMzBjYzE5 LzEvQ3R6MkxHdFVFUk9hWFJNSjNaN1pKdlF4UXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW4TwMA0G CSqGSIb3DQEBCwUAA4IBAQCoQvdKz04k3UBmI6vQRM2bEGVnGvE6y2R54RNula0F o3li4cYeUEsdhkD47PJC7umrdIWJue4Hw5YmHV/iziLc8gnUq/Gz0oA/L4wCUZ5q GIADWtTTEUGw3uynOLlkc3cZtaiIulH/fZ/0GeKJHtAoWLWwrvBNU1Kc/dyMr6hR D3VRLu3TZ1jnNaAhy+53qfSEtRdx3IpbsdKWiaPXOHkyMO2yU9wSlkBC50lOOQhe hyTtLMjSK2muipMlzl4DDM8wspz+kAHLwlb8P2AxqqPf0dPsZUO2H1x5bLkqew93 qTsTM/n60s+P9WvO1nqJhuKDRugFEQuWRCJSDEbG9Gy7 -----END CERTIFICATE-----Generated at Mon Jan 26 07:57:46 2026 by rpki-client