This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/zl-n2q1Zb7EgYohA26XnxYXqdxE.roa File: zl-n2q1Zb7EgYohA26XnxYXqdxE.roa (raw, json) Hash identifier: BY/YVHNSQVEAmKd+rhuDTBW07jn5TB4TSJNB9lFmcSs= Subject key identifier: CE:5F:A7:DA:AD:59:6F:B1:20:62:88:40:DB:A5:E7:C5:85:EA:77:11 Certificate issuer: /CN=ba81b24a6d6030bf088dea30c9a5932febdc6a7c Certificate serial: 019B7910C7E2658480648BD6D95091BF9397 Authority key identifier: BA:81:B2:4A:6D:60:30:BF:08:8D:EA:30:C9:A5:93:2F:EB:DC:6A:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/zl-n2q1Zb7EgYohA26XnxYXqdxE.roa Signing time: Thu 01 Jan 2026 10:18:21 +0000 ROA not before: Thu 01 Jan 2026 10:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57241 IP address blocks: 185.82.180.0/22 maxlen: 22 185.82.180.0/23 maxlen: 23 185.82.180.0/24 maxlen: 24 185.82.181.0/24 maxlen: 24 185.82.182.0/23 maxlen: 23 185.82.182.0/24 maxlen: 24 185.82.183.0/24 maxlen: 24 212.1.192.0/21 maxlen: 21 212.1.192.0/22 maxlen: 22 212.1.192.0/23 maxlen: 23 212.1.192.0/24 maxlen: 24 212.1.193.0/24 maxlen: 24 212.1.194.0/23 maxlen: 23 212.1.194.0/24 maxlen: 24 212.1.195.0/24 maxlen: 24 212.1.196.0/22 maxlen: 22 212.1.196.0/23 maxlen: 23 212.1.196.0/24 maxlen: 24 212.1.197.0/24 maxlen: 24 212.1.198.0/23 maxlen: 23 212.1.198.0/24 maxlen: 24 212.1.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c7:e2:65:84:80:64:8b:d6:d9:50:91:bf:93:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba81b24a6d6030bf088dea30c9a5932febdc6a7c Validity Not Before: Jan 1 10:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce5fa7daad596fb120628840dba5e7c585ea7711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:79:27:e8:e6:d1:54:d9:0b:b1:0a:04:31:5b: 31:5d:6f:c0:df:2d:db:0c:83:c9:7e:77:86:ae:31: b6:3b:7e:ce:ee:32:46:67:68:9b:46:b6:ee:7b:dc: 9a:8e:90:d1:7d:4c:d1:30:bc:af:bf:37:d1:c9:4c: 04:74:50:dc:fe:00:2b:60:6c:65:20:f0:83:14:e1: e6:be:55:15:80:26:ac:35:54:a3:50:99:43:9d:ab: 65:ad:ed:ac:dc:71:64:ad:2f:a2:db:dd:e7:89:51: 53:9c:9d:fd:9a:07:f3:63:d5:d9:9d:cd:3e:0b:21: 64:a7:9d:82:76:e2:2b:bc:cb:a1:40:19:31:b9:1b: 7e:a4:6a:e7:c6:d5:5f:ac:0c:81:43:35:a3:5c:e8: 6f:72:1d:3a:00:d9:96:bd:fd:6d:52:8d:70:7a:17: cc:50:98:ea:8d:84:58:a3:9c:29:28:2b:ce:19:9a: eb:18:25:b8:3d:d2:f0:19:34:b5:39:dd:c8:53:d7: 95:91:91:d0:2f:75:69:cd:ae:bc:82:0e:07:a1:30: 83:1d:9c:38:2f:04:50:bd:bc:4f:b7:72:19:8f:c8: 26:cd:02:7a:9b:5b:40:9f:86:50:ef:b1:1c:6d:e5: e5:bf:79:7b:ee:de:c8:7a:1c:1b:4c:eb:af:84:91: e3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5F:A7:DA:AD:59:6F:B1:20:62:88:40:DB:A5:E7:C5:85:EA:77:11 X509v3 Authority Key Identifier: keyid:BA:81:B2:4A:6D:60:30:BF:08:8D:EA:30:C9:A5:93:2F:EB:DC:6A:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/zl-n2q1Zb7EgYohA26XnxYXqdxE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.82.180.0/22 212.1.192.0/21 Signature Algorithm: sha256WithRSAEncryption 14:07:01:4a:60:02:7b:b0:34:fc:64:a7:bc:34:db:4c:f8:30: 91:7d:26:30:0d:a9:b8:e4:14:26:85:77:9b:6e:4f:72:8b:cb: dd:f2:fd:8f:53:4b:a2:c4:42:ca:2e:54:40:67:4a:7b:a5:b0: 6d:f6:d1:66:1a:af:b1:29:1d:ab:4e:ca:d5:3e:68:85:44:e7: 1f:65:42:df:10:83:a0:65:29:a9:f2:18:b4:84:9e:6f:07:44: e7:60:b2:63:d9:af:33:51:0e:05:da:3e:6e:2e:56:05:66:5a: 8a:0b:64:ae:90:a1:fe:73:27:e4:4c:e1:55:dd:88:f7:a4:34: 8d:d4:c9:e7:63:68:12:b9:c3:63:f8:21:2a:89:ca:4f:4e:ef: 6a:82:e1:cd:84:c7:d7:9a:d3:9b:c1:a4:74:7f:c5:a4:b1:db: 6b:30:eb:73:16:de:5c:95:ae:7e:28:f0:db:f4:af:d5:87:c3: 4e:87:f6:42:46:5c:49:8a:c4:53:39:f5:f6:1e:57:5c:81:5e: 14:74:bc:eb:f4:30:5b:29:f4:e2:18:bb:02:37:9d:07:7b:21: ab:32:d0:d7:1b:11:5b:8f:fb:ab:70:ea:de:ad:ab:2d:eb:55: b2:d7:92:07:99:89:1c:1b:a2:ce:8f:c8:dd:55:5a:7d:6f:82: 42:a6:9a:69 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EMfiZYSAZIvW2VCRv5OXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhODFiMjRhNmQ2MDMwYmYwODhkZWEzMGM5YTU5MzJmZWJk YzZhN2MwHhcNMjYwMTAxMTAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTVmYTdkYWFkNTk2ZmIxMjA2Mjg4NDBkYmE1ZTdjNTg1ZWE3NzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Xkn6ObRVNkLsQoEMVsxXW/A3y3b DIPJfneGrjG2O37O7jJGZ2ibRrbue9yajpDRfUzRMLyvvzfRyUwEdFDc/gArYGxl IPCDFOHmvlUVgCasNVSjUJlDnatlre2s3HFkrS+i293niVFTnJ39mgfzY9XZnc0+ CyFkp52CduIrvMuhQBkxuRt+pGrnxtVfrAyBQzWjXOhvch06ANmWvf1tUo1wehfM UJjqjYRYo5wpKCvOGZrrGCW4PdLwGTS1Od3IU9eVkZHQL3Vpza68gg4HoTCDHZw4 LwRQvbxPt3IZj8gmzQJ6m1tAn4ZQ77EcbeXlv3l77t7IehwbTOuvhJHj8QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM5fp9qtWW+xIGKIQNul58WF6ncRMB8GA1UdIwQY MBaAFLqBskptYDC/CI3qMMmlky/r3Gp8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW9HeVNtMWdNTDhJamVvd3lhV1RMLXZjYW53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83MDAzMzMtYWE5Yy00YmQzLTgyMDQt NDhjZDA1ZWNhNzM2LzEvemwtbjJxMVpiN0VnWW9oQTI2WG54WVhxZHhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS83MDAzMzMtYWE5Yy00YmQzLTgyMDQtNDhjZDA1ZWNhNzM2 LzEvdW9HeVNtMWdNTDhJamVvd3lhV1RMLXZjYW53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuVK0AwQD 1AHAMA0GCSqGSIb3DQEBCwUAA4IBAQAUBwFKYAJ7sDT8ZKe8NNtM+DCRfSYwDam4 5BQmhXebbk9yi8vd8v2PU0uixELKLlRAZ0p7pbBt9tFmGq+xKR2rTsrVPmiFROcf ZULfEIOgZSmp8hi0hJ5vB0TnYLJj2a8zUQ4F2j5uLlYFZlqKC2SukKH+cyfkTOFV 3Yj3pDSN1MnnY2gSucNj+CEqicpPTu9qguHNhMfXmtObwaR0f8WksdtrMOtzFt5c la5+KPDb9K/Vh8NOh/ZCRlxJisRTOfX2HldcgV4UdLzr9DBbKfTiGLsCN50HeyGr MtDXGxFbj/urcOrerast61Wy15IHmYkcG6LOj8jdVVp9b4JCpppp -----END CERTIFICATE-----Generated at Mon Jan 26 04:22:08 2026 by rpki-client