This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/ZWqzQW9YD9i4oAqI2NU1KN-k8BA.roa File: ZWqzQW9YD9i4oAqI2NU1KN-k8BA.roa (raw, json) Hash identifier: m/dMgskCu/LRhEwHUxPFbSCbCpuefF8R5De3vG7ME3g= Subject key identifier: 65:6A:B3:41:6F:58:0F:D8:B8:A0:0A:88:D8:D5:35:28:DF:A4:F0:10 Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41 Certificate serial: 019B7E3884E7A0987506AE7DDA69618761B5 Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/ZWqzQW9YD9i4oAqI2NU1KN-k8BA.roa Signing time: Fri 02 Jan 2026 10:19:51 +0000 ROA not before: Fri 02 Jan 2026 10:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42625 IP address blocks: 213.145.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:84:e7:a0:98:75:06:ae:7d:da:69:61:87:61:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41 Validity Not Before: Jan 2 10:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=656ab3416f580fd8b8a00a88d8d53528dfa4f010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:56:9e:58:97:93:62:db:00:f9:26:08:9d:f5: a2:34:fb:53:92:d2:52:e8:97:0e:e2:6a:45:23:27: fc:c4:9f:72:15:e4:50:ec:20:2b:84:fb:c4:ab:ad: b7:90:c8:b9:eb:36:ea:ea:12:4a:b6:6f:30:6f:05: b7:f9:85:b8:aa:ef:b5:2f:9b:1f:ef:2f:84:8a:e8: 36:52:eb:e7:bb:34:8e:7c:29:dd:0f:c5:67:3a:f7: ad:94:82:92:3b:71:a6:a6:44:8c:0e:c3:c5:74:36: b8:71:be:05:a7:62:49:c1:ba:63:3b:6a:02:43:e9: dd:66:86:b4:71:2e:78:55:98:8c:e5:c5:9e:db:ed: ba:ec:e3:f8:33:d6:89:e5:d0:7a:bb:f2:ae:dc:98: ae:e4:64:54:80:55:7d:03:c2:0d:c2:d5:7c:eb:25: 46:2a:57:76:9b:59:2f:71:db:01:95:cb:dd:39:38: 64:02:07:58:6b:a8:0e:f8:ba:b3:41:d9:ce:ce:5b: c6:99:ee:b4:cf:f2:ce:b2:34:9e:80:4d:42:16:fb: 9f:5f:b6:6a:e1:44:24:b7:90:97:67:13:a4:58:ee: e3:ef:de:90:78:94:08:49:59:06:10:de:4e:61:0a: ef:fd:c4:12:03:df:0a:60:29:c6:db:b5:49:81:4d: 18:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6A:B3:41:6F:58:0F:D8:B8:A0:0A:88:D8:D5:35:28:DF:A4:F0:10 X509v3 Authority Key Identifier: keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/ZWqzQW9YD9i4oAqI2NU1KN-k8BA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.145.96.0/24 Signature Algorithm: sha256WithRSAEncryption 00:4f:36:a9:26:b7:a6:74:33:c4:80:46:f2:ca:af:22:66:d0: d3:f6:9e:95:56:da:13:14:33:1b:85:f5:38:6d:de:a6:8f:55: 13:20:d5:66:b9:d3:54:04:ba:cd:14:28:8e:e8:d1:9f:e2:8d: 25:52:a4:a5:72:fa:2c:2b:42:d9:9e:2f:bb:4a:5d:8a:fe:4a: f8:3b:85:54:42:25:0c:e7:06:b6:22:a4:1a:df:80:27:87:d9: 2a:e4:e0:8d:40:b1:35:31:7a:ff:8c:a4:b9:16:a5:bd:44:0e: d7:8f:01:67:55:1d:74:5a:e6:55:69:0b:83:9a:2e:35:3f:8c: e9:53:6c:db:33:e8:5f:26:34:91:a8:c6:61:ad:a7:1c:1e:e2: 4a:de:db:e8:92:7e:93:59:cf:f3:05:d3:e6:f8:cf:69:2c:62: 75:87:21:fd:a7:a6:18:a6:be:5c:8b:c5:31:9a:55:2e:6f:7a: 00:2a:f4:00:0c:f4:c3:2d:2c:cc:65:b3:ec:b0:66:28:28:b1: 0d:b8:2e:cf:85:0b:0c:48:cd:17:bb:c5:cb:6f:8c:3e:dc:a4: 85:c8:81:b6:8f:26:c5:62:cf:81:38:0d:8e:3f:74:ad:e5:fc: 74:e2:04:2c:fb:57:d6:bc:40:44:1e:f8:0f:0b:13:fc:91:29: 85:73:3c:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OITnoJh1Bq592mlhh2G1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwN2Q3NTczYWFjYWU4MjFjODdkNmQzNjQzMWNmZTRiMjgw MWFiNDEwHhcNMjYwMTAyMTAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTZhYjM0MTZmNTgwZmQ4YjhhMDBhODhkOGQ1MzUyOGRmYTRmMDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFaeWJeTYtsA+SYInfWiNPtTktJS 6JcO4mpFIyf8xJ9yFeRQ7CArhPvEq623kMi56zbq6hJKtm8wbwW3+YW4qu+1L5sf 7y+Eiug2UuvnuzSOfCndD8VnOvetlIKSO3GmpkSMDsPFdDa4cb4Fp2JJwbpjO2oC Q+ndZoa0cS54VZiM5cWe2+267OP4M9aJ5dB6u/Ku3Jiu5GRUgFV9A8INwtV86yVG Kld2m1kvcdsBlcvdOThkAgdYa6gO+LqzQdnOzlvGme60z/LOsjSegE1CFvufX7Zq 4UQkt5CXZxOkWO7j796QeJQISVkGEN5OYQrv/cQSA98KYCnG27VJgU0YMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGVqs0FvWA/YuKAKiNjVNSjfpPAQMB8GA1UdIwQY MBaAFNB9dXOqyughyH1tNkMc/ksoAatBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjIt Y2Y5ZGM1YmFhYTc5LzEvWldxelFXOVlEOWk0b0FxSTJOVTFLTi1rOEJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjItY2Y5ZGM1YmFhYTc5 LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ZFgMA0G CSqGSIb3DQEBCwUAA4IBAQAATzapJremdDPEgEbyyq8iZtDT9p6VVtoTFDMbhfU4 bd6mj1UTINVmudNUBLrNFCiO6NGf4o0lUqSlcvosK0LZni+7Sl2K/kr4O4VUQiUM 5wa2IqQa34Anh9kq5OCNQLE1MXr/jKS5FqW9RA7XjwFnVR10WuZVaQuDmi41P4zp U2zbM+hfJjSRqMZhraccHuJK3tvokn6TWc/zBdPm+M9pLGJ1hyH9p6YYpr5ci8Ux mlUub3oAKvQADPTDLSzMZbPssGYoKLENuC7PhQsMSM0Xu8XLb4w+3KSFyIG2jybF Ys+BOA2OP3St5fx04gQs+1fWvEBEHvgPCxP8kSmFczy5 -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:55 2026 by rpki-client