This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/ZveU_Vqfn9-Be4p3ztmtZTlHkhM.roa File: ZveU_Vqfn9-Be4p3ztmtZTlHkhM.roa (raw, json) Hash identifier: /KDFOVm97hN+qDZV4DOVh7izdesZzp1DJOCDSbno4BA= Subject key identifier: 66:F7:94:FD:5A:9F:9F:DF:81:7B:8A:77:CE:D9:AD:65:39:47:92:13 Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d Certificate serial: 019B7AC82F10CAE3D00200E31C5AF97CF399 Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/ZveU_Vqfn9-Be4p3ztmtZTlHkhM.roa Signing time: Thu 01 Jan 2026 18:18:18 +0000 ROA not before: Thu 01 Jan 2026 18:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202085 IP address blocks: 213.252.210.0/23 maxlen: 24 213.252.211.0/24 maxlen: 24 213.252.212.0/22 maxlen: 22 213.252.216.0/22 maxlen: 22 213.252.221.0/24 maxlen: 24 213.252.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:2f:10:ca:e3:d0:02:00:e3:1c:5a:f9:7c:f3:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d Validity Not Before: Jan 1 18:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66f794fd5a9f9fdf817b8a77ced9ad6539479213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:01:80:3d:bd:2c:19:a3:4a:e8:47:3b:2e:e6: d3:ab:ea:f4:d4:26:8f:93:85:ea:86:09:b3:19:08: a7:76:3d:73:e1:63:d8:32:07:70:2e:8b:2e:8b:71: cb:44:6f:fc:fc:6c:fa:a7:4d:ce:5e:25:a6:71:fa: 53:c0:8f:63:2a:3d:4d:2d:32:3b:1f:da:2d:e0:45: f3:29:42:ef:ae:92:c6:2c:1a:ba:f9:e6:50:92:6d: 2a:7e:44:9d:49:7d:e9:33:87:50:af:de:79:b8:d9: d5:92:12:b1:0f:64:99:53:1c:07:5e:4d:b2:13:36: 95:14:68:c2:8a:d5:48:5f:df:b6:b5:4b:f2:b4:a1: 6e:41:2b:ec:18:09:f3:02:0d:89:91:68:ac:3a:88: c1:5b:07:26:41:aa:af:a7:bd:81:db:54:b4:e8:8f: f0:4b:d4:67:cf:d6:e5:f5:87:99:cb:c9:c5:08:f1: 76:83:6f:94:9d:68:e6:6f:70:c2:42:8a:1f:42:8e: d4:2f:b4:3e:e4:8e:27:f6:07:da:6e:d2:4c:06:2e: 72:1c:ee:dc:e0:46:2b:aa:2b:73:d3:d9:dc:12:25: 3c:37:7b:da:9c:55:8f:4d:1f:82:81:30:7a:0a:db: a5:af:80:a3:cd:3e:cb:b1:71:71:34:34:00:95:27: 9d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F7:94:FD:5A:9F:9F:DF:81:7B:8A:77:CE:D9:AD:65:39:47:92:13 X509v3 Authority Key Identifier: keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/ZveU_Vqfn9-Be4p3ztmtZTlHkhM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.252.210.0-213.252.219.255 213.252.221.0-213.252.222.255 Signature Algorithm: sha256WithRSAEncryption 38:82:e0:70:91:2f:56:f9:31:00:3e:98:29:bd:be:fd:58:99: 49:98:ce:4b:b6:81:58:7b:fa:b5:f1:26:58:cb:69:73:33:39: a9:6e:81:7d:c7:7b:fe:37:2f:fa:35:68:42:2f:09:31:fa:ff: 1e:09:0a:84:f2:6b:c0:2d:3d:57:92:ec:5d:a2:c9:b1:95:a5: db:65:94:4a:34:9e:c1:be:f8:27:72:d1:6d:cc:a0:c8:ad:20: 78:ea:20:77:50:6c:17:4e:96:01:06:b7:c5:06:3a:fa:b3:11: d1:93:91:90:e5:4a:b5:1e:96:2b:c1:a7:bf:72:b5:a4:9b:98: 3e:0d:ef:1e:a5:a3:1b:d5:33:8e:79:8c:10:79:51:93:b1:fc: 8b:1b:b9:cc:a4:65:f9:84:c1:25:0e:db:c6:08:be:d2:8d:38: 15:8f:1a:6c:fc:8b:70:db:e6:23:d8:dd:28:0d:00:98:93:37: 6a:3d:a7:ed:51:d3:af:96:cd:89:ca:f0:12:a4:8f:80:84:bc: 95:3a:88:da:a2:e9:ee:b3:60:f3:2a:be:43:be:3d:67:6e:9f: 8c:7a:1d:78:bb:ba:a0:40:be:53:1e:02:95:44:e1:a3:f0:f5: dc:0d:ee:50:2c:2a:2a:f2:9f:07:54:34:21:19:f0:64:16:85: 67:bd:18:9e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt6yC8QyuPQAgDjHFr5fPOZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3 MTE4MGQwHhcNMjYwMTAxMTgxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmY3OTRmZDVhOWY5ZmRmODE3YjhhNzdjZWQ5YWQ2NTM5NDc5MjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AGAPb0sGaNK6Ec7LubTq+r01CaP k4XqhgmzGQindj1z4WPYMgdwLosui3HLRG/8/Gz6p03OXiWmcfpTwI9jKj1NLTI7 H9ot4EXzKULvrpLGLBq6+eZQkm0qfkSdSX3pM4dQr955uNnVkhKxD2SZUxwHXk2y EzaVFGjCitVIX9+2tUvytKFuQSvsGAnzAg2JkWisOojBWwcmQaqvp72B21S06I/w S9Rnz9bl9YeZy8nFCPF2g2+UnWjmb3DCQoofQo7UL7Q+5I4n9gfabtJMBi5yHO7c 4EYrqitz09ncEiU8N3vanFWPTR+CgTB6Ctulr4CjzT7LsXFxNDQAlSedhwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFGb3lP1an5/fgXuKd87ZrWU5R5ITMB8GA1UdIwQY MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt MDQ2ODA0MjQ4NmRjLzEvWnZlVV9WcWZuOS1CZTRwM3p0bXRaVGxIa2hNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAHV/NID BALV/NgwDAMEANX83QMEANX83jANBgkqhkiG9w0BAQsFAAOCAQEAOILgcJEvVvkx AD6YKb2+/ViZSZjOS7aBWHv6tfEmWMtpczM5qW6Bfcd7/jcv+jVoQi8JMfr/HgkK hPJrwC09V5LsXaLJsZWl22WUSjSewb74J3LRbcygyK0geOogd1BsF06WAQa3xQY6 +rMR0ZORkOVKtR6WK8Gnv3K1pJuYPg3vHqWjG9UzjnmMEHlRk7H8ixu5zKRl+YTB JQ7bxgi+0o04FY8abPyLcNvmI9jdKA0AmJM3aj2n7VHTr5bNicrwEqSPgIS8lTqI 2qLp7rNg8yq+Q749Z26fjHodeLu6oEC+Ux4ClUTho/D13A3uUCwqKvKfB1Q0IRnw ZBaFZ70Yng== -----END CERTIFICATE-----Generated at Sun Jan 25 07:15:44 2026 by rpki-client