This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ZjZXPDlHn81_4y1o8EOyyWQFOK0.roa File: ZjZXPDlHn81_4y1o8EOyyWQFOK0.roa (raw, json) Hash identifier: t5TFMt21hzR1xI2iLQXrOSUp0AtZhhzr3C10gjCv8PY= Subject key identifier: 66:36:57:3C:39:47:9F:CD:7F:E3:2D:68:F0:43:B2:C9:64:05:38:AD Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84A318CB885BD04021EC8EB28A44CB Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ZjZXPDlHn81_4y1o8EOyyWQFOK0.roa Signing time: Fri 02 Jan 2026 16:22:37 +0000 ROA not before: Fri 02 Jan 2026 16:22:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42782 IP address blocks: 146.120.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a3:18:cb:88:5b:d0:40:21:ec:8e:b2:8a:44:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6636573c39479fcd7fe32d68f043b2c9640538ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:20:4d:ab:dc:70:68:f5:22:de:7d:d2:55:65: 9b:35:69:c5:ec:a2:e7:54:51:95:eb:80:68:20:82: 05:a8:bf:4f:13:68:c1:c5:c6:16:e2:47:56:71:20: b2:97:74:97:88:a0:96:86:07:f6:85:4c:09:bd:86: 66:69:ac:a1:c7:e6:a0:34:40:0b:32:4f:de:b2:34: 20:97:c7:b1:ec:05:d8:98:c6:5f:91:a0:dd:a3:18: 14:61:57:df:ce:aa:32:8c:d0:e3:25:18:0a:19:7b: d7:b5:a1:07:5d:dc:2d:38:e8:a9:15:6b:7c:48:12: 24:04:52:a0:fd:e6:85:c7:49:cc:a4:c3:f4:78:1b: 53:fc:63:94:86:b8:76:0a:04:58:3d:26:8d:d5:4d: e1:1c:eb:88:31:46:2f:98:48:0d:da:3f:2f:7e:83: 7b:05:d3:79:c5:8e:bb:7e:16:4b:b8:bc:5f:8b:e8: 64:ec:f2:0d:95:10:b2:06:1a:2a:86:52:ea:a0:94: 82:e3:ab:92:75:38:e0:7e:c6:ff:84:8f:61:3a:d8: ec:fd:a3:46:05:73:bc:20:ac:77:44:33:35:f8:dd: 62:cd:58:23:6a:ac:38:7d:49:2e:2a:e1:84:c4:f1: 04:7b:20:95:fc:75:12:b4:b6:a5:38:64:17:28:a2: ee:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:36:57:3C:39:47:9F:CD:7F:E3:2D:68:F0:43:B2:C9:64:05:38:AD X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ZjZXPDlHn81_4y1o8EOyyWQFOK0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.120.198.0/24 Signature Algorithm: sha256WithRSAEncryption 89:32:6c:e5:54:0d:fc:10:ea:64:dc:63:1d:d9:55:d5:4d:1c: 22:f2:15:33:a0:79:1a:c3:d3:01:ab:0a:5c:25:c5:03:2f:66: 83:a2:78:69:5e:c3:9d:52:38:ae:ab:48:ba:72:7a:a0:38:a8: 4d:6d:47:b1:18:17:67:0c:7c:5f:b5:05:d0:21:63:64:0e:6d: 65:3e:aa:c2:2d:a7:41:4b:db:bd:75:ac:84:29:af:96:1c:5f: 5b:86:63:17:f3:96:5d:a3:3c:b1:cb:b7:d4:ba:40:a6:0c:32: 4f:f0:75:b4:8d:8d:4a:96:2c:47:a4:f5:cb:95:5c:95:ef:d4: ab:93:0f:48:81:25:ce:f3:d8:d4:bf:da:b1:f1:ca:69:cd:1d: f5:e4:16:a1:19:f1:d3:00:78:da:36:82:d6:68:ff:2e:33:2c: 0c:cb:db:1f:d3:d6:19:f0:e0:de:fd:cb:7d:85:ac:1f:69:08: 36:f7:3f:b3:72:52:ad:39:b8:7a:06:e6:32:70:54:2f:c9:1c: 07:f9:74:e6:99:1a:b5:c1:6e:49:1b:77:90:a0:42:c4:0d:0c: 9d:20:d6:aa:e3:ed:97:09:50:bd:0d:88:98:0b:be:84:2d:b8: 1a:c0:58:b4:e2:9b:5b:df:be:ff:ba:7f:9c:a6:32:50:7f:d6: f6:57:22:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hKMYy4hb0EAh7I6yikTLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjM2NTczYzM5NDc5ZmNkN2ZlMzJkNjhmMDQzYjJjOTY0MDUzOGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiBNq9xwaPUi3n3SVWWbNWnF7KLn VFGV64BoIIIFqL9PE2jBxcYW4kdWcSCyl3SXiKCWhgf2hUwJvYZmaayhx+agNEAL Mk/esjQgl8ex7AXYmMZfkaDdoxgUYVffzqoyjNDjJRgKGXvXtaEHXdwtOOipFWt8 SBIkBFKg/eaFx0nMpMP0eBtT/GOUhrh2CgRYPSaN1U3hHOuIMUYvmEgN2j8vfoN7 BdN5xY67fhZLuLxfi+hk7PINlRCyBhoqhlLqoJSC46uSdTjgfsb/hI9hOtjs/aNG BXO8IKx3RDM1+N1izVgjaqw4fUkuKuGExPEEeyCV/HUStLalOGQXKKLu5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGY2Vzw5R5/Nf+MtaPBDsslkBTitMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvWmpaWFBEbEhuODFfNHkxbzhFT3l5V1FGT0swLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAknjGMA0G CSqGSIb3DQEBCwUAA4IBAQCJMmzlVA38EOpk3GMd2VXVTRwi8hUzoHkaw9MBqwpc JcUDL2aDonhpXsOdUjiuq0i6cnqgOKhNbUexGBdnDHxftQXQIWNkDm1lPqrCLadB S9u9dayEKa+WHF9bhmMX85Zdozyxy7fUukCmDDJP8HW0jY1KlixHpPXLlVyV79Sr kw9IgSXO89jUv9qx8cppzR315BahGfHTAHjaNoLWaP8uMywMy9sf09YZ8ODe/ct9 hawfaQg29z+zclKtObh6BuYycFQvyRwH+XTmmRq1wW5JG3eQoELEDQydINaq4+2X CVC9DYiYC76ELbgawFi04ptb377/un+cpjJQf9b2VyKK -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:59 2026 by rpki-client