This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ZLYC5LcBsi9aRISo3q-4AO3aWDQ.roa File: ZLYC5LcBsi9aRISo3q-4AO3aWDQ.roa (raw, json) Hash identifier: 21iUj+4eqQbJP2CkgSanrlctDTfVX6FGQtvFIgEoQxc= Subject key identifier: 64:B6:02:E4:B7:01:B2:2F:5A:44:84:A8:DE:AF:B8:00:ED:DA:58:34 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B77595DF95E6EA546D653F3AE48B99E71 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ZLYC5LcBsi9aRISo3q-4AO3aWDQ.roa Signing time: Thu 01 Jan 2026 02:18:23 +0000 ROA not before: Thu 01 Jan 2026 02:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59910 IP address blocks: 86.107.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5d:f9:5e:6e:a5:46:d6:53:f3:ae:48:b9:9e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64b602e4b701b22f5a4484a8deafb800edda5834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f0:9d:07:96:1b:b7:05:ec:51:63:cf:4d:b6: 86:cb:4a:d4:68:32:06:00:1b:70:55:37:af:8d:e5: 90:95:f9:53:b2:b3:f0:2f:13:a3:6b:41:b1:ab:a0: c5:d7:01:d0:a3:a0:ba:12:50:19:6b:f5:ce:5d:8f: 5d:bf:90:d4:17:01:9a:e1:64:e5:d6:af:6f:11:3d: ca:f9:06:f1:f0:7e:ac:17:d6:d0:13:bc:3c:c7:2a: 3a:53:dd:50:30:38:99:74:81:fe:9c:1a:b7:fa:af: ed:f7:c9:af:21:0e:6b:5f:e4:14:f3:b4:6b:f5:42: 85:e8:d6:8f:67:e4:40:73:6c:b9:4c:54:c8:6d:e9: 94:f5:e2:d3:38:8f:88:e0:38:db:59:61:76:70:85: 6d:ae:1f:08:c7:3c:cd:90:bb:fc:90:7b:37:df:04: e4:3e:1b:a6:f1:d3:ce:13:fb:81:3c:f5:56:ce:82: 63:8d:5e:f7:b8:76:77:15:85:27:3e:99:31:b1:fc: 70:2f:d8:a1:ef:9f:ef:e4:cc:69:28:8d:f3:df:a0: 28:75:8b:24:0c:c0:59:16:e7:f8:f4:36:04:e8:cb: 7f:94:1c:6e:1d:3a:f2:21:62:a9:01:ae:8a:bf:a3: 3c:b0:42:9c:51:d0:f6:3e:04:33:d2:ad:d2:fe:9b: 65:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B6:02:E4:B7:01:B2:2F:5A:44:84:A8:DE:AF:B8:00:ED:DA:58:34 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ZLYC5LcBsi9aRISo3q-4AO3aWDQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.107.111.0/24 Signature Algorithm: sha256WithRSAEncryption c4:39:e8:88:5d:d8:4d:65:e8:75:58:aa:f4:b7:2c:64:65:8b: b3:12:67:45:c3:d7:cb:8d:5a:df:37:b7:62:90:48:c4:e6:cc: 46:a3:7f:ea:d0:b9:47:cf:95:51:7a:0b:7b:51:46:37:48:f8: f6:83:c8:eb:54:b9:9d:86:b9:03:8b:2c:49:3f:a4:fa:2d:23: 3e:14:7d:23:93:9f:97:5c:38:fb:52:3f:eb:d5:8e:bd:12:f9: cd:9c:05:3a:a5:8e:d7:06:a1:eb:f4:ed:9a:a2:ba:04:2a:c6: 3b:e4:5a:ed:c0:1c:21:66:3a:ac:70:d3:c1:6b:94:4e:1e:c9: 17:62:ff:93:fc:42:c1:07:20:00:0a:2b:20:db:d4:0f:21:9a: a2:94:52:bd:9b:d5:55:fb:07:4e:ab:af:d4:09:e1:87:e0:3c: bb:7f:f5:aa:ee:dc:bd:7c:ba:66:a4:09:f3:60:24:96:f7:86: 64:6b:d6:ce:0e:da:6e:1f:f6:a6:54:02:2a:07:01:4d:60:16: fa:63:74:d3:06:b2:c8:18:fe:27:1b:b6:e0:cd:cf:9e:6c:61: d4:10:ff:72:30:7e:98:b4:0f:b6:60:29:ff:f6:b2:71:74:45: d9:f3:fc:b6:f2:69:c8:2d:2d:40:51:90:96:c4:1c:7f:58:68: 3b:a9:81:fe -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WV35Xm6lRtZT865IuZ5xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGI2MDJlNGI3MDFiMjJmNWE0NDg0YThkZWFmYjgwMGVkZGE1ODM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvCdB5YbtwXsUWPPTbaGy0rUaDIG ABtwVTevjeWQlflTsrPwLxOja0Gxq6DF1wHQo6C6ElAZa/XOXY9dv5DUFwGa4WTl 1q9vET3K+Qbx8H6sF9bQE7w8xyo6U91QMDiZdIH+nBq3+q/t98mvIQ5rX+QU87Rr 9UKF6NaPZ+RAc2y5TFTIbemU9eLTOI+I4DjbWWF2cIVtrh8IxzzNkLv8kHs33wTk Phum8dPOE/uBPPVWzoJjjV73uHZ3FYUnPpkxsfxwL9ih75/v5MxpKI3z36AodYsk DMBZFuf49DYE6Mt/lBxuHTryIWKpAa6Kv6M8sEKcUdD2PgQz0q3S/ptlLwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFGS2AuS3AbIvWkSEqN6vuADt2lg0MB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL1pMWUM1TGNCc2k5YVJJU28zcS00QU8zYVdEUS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABWa28w DQYJKoZIhvcNAQELBQADggEBAMQ56Ihd2E1l6HVYqvS3LGRli7MSZ0XD18uNWt83 t2KQSMTmzEajf+rQuUfPlVF6C3tRRjdI+PaDyOtUuZ2GuQOLLEk/pPotIz4UfSOT n5dcOPtSP+vVjr0S+c2cBTqljtcGoev07ZqiugQqxjvkWu3AHCFmOqxw08FrlE4e yRdi/5P8QsEHIAAKKyDb1A8hmqKUUr2b1VX7B06rr9QJ4YfgPLt/9aru3L18umak CfNgJJb3hmRr1s4O2m4f9qZUAioHAU1gFvpjdNMGssgY/icbtuDNz55sYdQQ/3Iw fpi0D7ZgKf/2snF0Rdnz/LbyacgtLUBRkJbEHH9YaDupgf4= -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:41 2026 by rpki-client