This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/ZW_uWUofk0PVk5ZvUH4CXwMQf9k.roa File: ZW_uWUofk0PVk5ZvUH4CXwMQf9k.roa (raw, json) Hash identifier: nMPGS72S0ymOk8yKU1XMgfQYFC4FprUwCeSnvYRogMM= Subject key identifier: 65:6F:EE:59:4A:1F:93:43:D5:93:96:6F:50:7E:02:5F:03:10:7F:D9 Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Certificate serial: 019B7E37B07EB761362862381319A98A82D8 Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/ZW_uWUofk0PVk5ZvUH4CXwMQf9k.roa Signing time: Fri 02 Jan 2026 10:18:57 +0000 ROA not before: Fri 02 Jan 2026 10:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 394161 IP address blocks: 62.67.197.0/24 maxlen: 24 213.244.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:b0:7e:b7:61:36:28:62:38:13:19:a9:8a:82:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Validity Not Before: Jan 2 10:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=656fee594a1f9343d593966f507e025f03107fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:49:50:1e:62:f6:e1:46:8c:0a:4b:e9:ac:6c: a0:5c:fd:a7:46:ce:82:74:c9:40:d8:b2:07:3c:d2: 15:9c:e9:37:96:06:11:2d:4c:fb:bb:ec:d7:fd:87: 00:6d:96:52:6a:94:d3:fb:b7:b6:e9:9b:8d:47:b6: 12:d5:ae:cc:0f:b5:2b:7b:36:d0:aa:dd:92:65:bc: 54:8c:ed:b2:2b:5f:a8:71:95:4a:b4:65:e8:ad:31: fc:29:97:46:46:8c:c4:87:19:71:d9:6d:54:1b:10: 67:00:6d:1d:9f:c6:b9:f6:5c:39:6f:a1:9d:d3:2a: 09:a8:f4:e2:6c:f6:e6:0c:bd:52:72:21:e0:94:91: 2a:33:ce:35:2f:57:3f:c1:ea:e3:53:0a:aa:31:9f: cc:c3:27:6a:58:93:02:e6:2e:7d:89:33:04:be:00: b7:2d:e5:af:7f:ee:19:ee:35:43:53:e6:3e:14:65: 19:c1:d1:13:61:1c:6d:da:2c:d0:91:6b:8d:93:eb: 01:ea:0a:09:a8:13:a4:31:e4:21:2b:cb:40:13:30: 63:bd:37:dd:d0:6b:25:42:f8:7c:80:e7:7d:0d:f0: 22:a3:a5:69:b9:2f:e7:45:66:b8:4e:08:42:5e:60: b1:fb:c9:cb:e7:ee:7a:4b:aa:15:f3:1c:17:91:b9: d5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6F:EE:59:4A:1F:93:43:D5:93:96:6F:50:7E:02:5F:03:10:7F:D9 X509v3 Authority Key Identifier: keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/ZW_uWUofk0PVk5ZvUH4CXwMQf9k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.67.197.0/24 213.244.145.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:c9:9b:fa:f1:36:98:f4:78:76:23:31:4f:80:4f:59:49:c9: cb:52:6d:ca:e8:bc:65:c6:d7:75:27:b8:c2:0f:b0:48:33:d7: 2f:47:c3:90:62:c8:c4:6a:33:0f:cc:4b:d3:e4:2f:53:99:a2: c5:9d:fd:40:08:4d:bc:b3:d6:28:8d:61:a5:77:9f:5e:86:ca: f0:39:97:c0:5d:9b:a1:70:d2:18:a1:b6:79:d9:fd:6a:10:3f: a4:b0:f5:b8:88:7d:48:fc:6d:30:1c:51:f5:36:e1:35:b0:77: ec:3f:04:49:6e:fa:23:ba:71:c1:ce:ba:50:9b:ba:04:bc:d0: 6a:f3:43:f8:11:f7:71:d2:33:6b:e6:07:67:8b:66:59:5d:13: ba:22:97:53:12:0d:4f:9f:b0:40:c2:5b:7d:55:2e:f2:66:68: af:ed:5a:f5:54:c6:5a:2e:21:8c:bf:7a:0a:39:72:0e:9f:1b: 15:bc:82:cf:a7:03:f3:9f:96:e5:cf:66:18:2b:c4:41:df:c3: f0:a3:e2:e2:0b:cc:67:6b:43:8f:38:f6:24:64:ff:a6:87:ea: d2:3b:6a:a2:fa:25:70:fa:a7:eb:7f:6f:2a:7f:ba:61:04:41: 7c:10:04:63:06:7a:d9:c8:e2:60:61:6b:d6:f1:2f:64:1e:16: ee:31:f7:e0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N7B+t2E2KGI4ExmpioLYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzJhNGJmYjc3OTY0MDVhNTU2Yjc1OWYxZDE5M2U0YzRk MzcxMjkwHhcNMjYwMTAyMTAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTZmZWU1OTRhMWY5MzQzZDU5Mzk2NmY1MDdlMDI1ZjAzMTA3ZmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50lQHmL24UaMCkvprGygXP2nRs6C dMlA2LIHPNIVnOk3lgYRLUz7u+zX/YcAbZZSapTT+7e26ZuNR7YS1a7MD7UrezbQ qt2SZbxUjO2yK1+ocZVKtGXorTH8KZdGRozEhxlx2W1UGxBnAG0dn8a59lw5b6Gd 0yoJqPTibPbmDL1SciHglJEqM841L1c/werjUwqqMZ/MwydqWJMC5i59iTMEvgC3 LeWvf+4Z7jVDU+Y+FGUZwdETYRxt2izQkWuNk+sB6goJqBOkMeQhK8tAEzBjvTfd 0GslQvh8gOd9DfAio6VpuS/nRWa4TghCXmCx+8nL5+56S6oV8xwXkbnVWQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGVv7llKH5ND1ZOWb1B+Al8DEH/ZMB8GA1UdIwQY MBaAFAIypL+3eWQFpVa3WfHRk+TE03EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEt M2JiNGQ2MjAwNTE4LzEvWldfdVdVb2ZrMFBWazVadlVINENYd01RZjlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEtM2JiNGQ2MjAwNTE4 LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPkPFAwQA 1fSRMA0GCSqGSIb3DQEBCwUAA4IBAQANyZv68TaY9Hh2IzFPgE9ZScnLUm3K6Lxl xtd1J7jCD7BIM9cvR8OQYsjEajMPzEvT5C9TmaLFnf1ACE28s9YojWGld59ehsrw OZfAXZuhcNIYobZ52f1qED+ksPW4iH1I/G0wHFH1NuE1sHfsPwRJbvojunHBzrpQ m7oEvNBq80P4Efdx0jNr5gdni2ZZXRO6IpdTEg1Pn7BAwlt9VS7yZmiv7Vr1VMZa LiGMv3oKOXIOnxsVvILPpwPzn5blz2YYK8RB38Pwo+LiC8xna0OPOPYkZP+mh+rS O2qi+iVw+qfrf28qf7phBEF8EARjBnrZyOJgYWvW8S9kHhbuMffg -----END CERTIFICATE-----Generated at Sun Jan 25 10:08:52 2026 by rpki-client