This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/ZGJ8WhVJsv6_DZVx2zsNEqurhws.roa File: ZGJ8WhVJsv6_DZVx2zsNEqurhws.roa (raw, json) Hash identifier: zsRDtxw8BLOr18CsA2qPwGsKzxSNIYKS0wdlcoLLn2Q= Subject key identifier: 64:62:7C:5A:15:49:B2:FE:BF:0D:95:71:DB:3B:0D:12:AB:AB:87:0B Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24 Certificate serial: 019B78A32B54297607CD1F101FA262ACCCE0 Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/ZGJ8WhVJsv6_DZVx2zsNEqurhws.roa Signing time: Thu 01 Jan 2026 08:18:37 +0000 ROA not before: Thu 01 Jan 2026 08:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13737 IP address blocks: 176.111.216.0/24 maxlen: 24 2a0e:c80:4::/48 maxlen: 48 2a0f:9980:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2b:54:29:76:07:cd:1f:10:1f:a2:62:ac:cc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24 Validity Not Before: Jan 1 08:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64627c5a1549b2febf0d9571db3b0d12abab870b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2d:73:b4:8f:db:97:7f:0a:99:89:21:5a:01: 71:66:67:63:43:1d:53:e0:81:1c:26:e5:3b:90:92: 21:31:e8:d1:63:56:e6:fe:19:ac:23:87:42:78:95: 90:ba:25:f7:76:27:17:5b:09:ef:bd:ec:f8:26:b7: 21:95:e6:eb:ae:7a:a5:2d:17:15:8b:33:93:69:ea: 4d:7a:60:65:a0:60:a3:a8:b3:9d:21:07:3e:53:76: fe:51:04:13:0e:7b:78:79:53:50:33:03:11:85:b6: e7:23:1a:fe:09:7a:b4:a0:bb:36:9e:aa:5a:f6:21: 58:a9:f6:c1:5c:12:20:01:19:3a:ba:95:f9:b1:2b: cd:24:81:98:6e:89:14:d2:7e:da:5a:3f:38:1a:a5: 24:1f:42:17:33:bc:8c:f9:74:d8:ff:de:24:74:1b: 47:82:db:b5:4a:07:71:2f:7e:a9:27:00:9d:46:e0: 1a:c7:97:d2:29:d9:7c:35:7d:e8:3c:bc:cc:2b:fd: 35:e4:89:cb:4b:df:ca:ce:7d:b5:9e:00:52:73:89: 78:f4:e0:fe:16:a7:5f:e9:d4:5e:52:d8:e7:c2:07: 9f:a5:d3:53:ea:0b:ff:29:6d:d6:d5:20:6f:13:5e: 56:3c:76:21:6d:0e:84:d9:c2:db:5c:ab:1d:6b:fd: 11:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:62:7C:5A:15:49:B2:FE:BF:0D:95:71:DB:3B:0D:12:AB:AB:87:0B X509v3 Authority Key Identifier: keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/ZGJ8WhVJsv6_DZVx2zsNEqurhws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.111.216.0/24 IPv6: 2a0e:c80:4::/48 2a0f:9980:7::/48 Signature Algorithm: sha256WithRSAEncryption a5:c9:df:4c:67:79:07:5b:76:4c:da:94:3d:32:4c:03:ba:db: 5a:64:33:44:c6:61:9e:82:7e:65:24:ae:74:3f:da:00:7f:27: c5:d8:bb:32:a7:e1:ed:95:5f:63:a6:32:76:c1:e5:65:7d:09: d8:bf:8f:57:c8:82:db:36:ac:e0:38:13:af:95:4e:d5:0d:d1: d1:41:c7:01:56:c2:b4:ca:e1:30:a7:50:01:0e:9e:be:bf:b8: b5:4c:a1:0d:bf:43:43:2d:4e:25:73:e3:ba:97:cb:5a:81:b0: 51:f4:1b:01:1d:71:1f:79:01:a8:4b:2c:73:d2:ab:e2:67:75: c6:71:da:f8:72:69:68:61:90:57:ea:c1:0f:47:5a:2c:f6:12: f1:c2:99:0d:2a:05:d1:5e:cf:46:4c:43:e1:66:82:92:99:ca: be:1e:87:80:50:11:1e:69:5d:04:ce:95:bf:b0:99:45:3e:88: b7:c2:ab:49:d7:1f:d7:89:b7:6f:21:97:4d:16:d2:ac:d4:69: ee:53:b3:92:05:90:9b:0e:8d:05:b4:05:0b:2d:8c:30:0f:f0: e3:24:a4:b8:74:fa:d0:40:a8:69:93:4a:fb:52:94:84:00:76: f0:3d:d2:e0:0f:c6:be:c8:ea:15:ea:01:0b:2e:24:10:0e:f6: 55:9e:5c:21 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt4oytUKXYHzR8QH6JirMzgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5M2FjNmNkMjI0MDI0OWJiYTYwMTcxZjA4NmU5MTAxY2M4 N2NhMjQwHhcNMjYwMTAxMDgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDYyN2M1YTE1NDliMmZlYmYwZDk1NzFkYjNiMGQxMmFiYWI4NzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy1ztI/bl38KmYkhWgFxZmdjQx1T 4IEcJuU7kJIhMejRY1bm/hmsI4dCeJWQuiX3dicXWwnvvez4JrchlebrrnqlLRcV izOTaepNemBloGCjqLOdIQc+U3b+UQQTDnt4eVNQMwMRhbbnIxr+CXq0oLs2nqpa 9iFYqfbBXBIgARk6upX5sSvNJIGYbokU0n7aWj84GqUkH0IXM7yM+XTY/94kdBtH gtu1SgdxL36pJwCdRuAax5fSKdl8NX3oPLzMK/015InLS9/Kzn21ngBSc4l49OD+ Fqdf6dReUtjnwgefpdNT6gv/KW3W1SBvE15WPHYhbQ6E2cLbXKsda/0RiwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGRifFoVSbL+vw2Vcds7DRKrq4cLMB8GA1UdIwQY MBaAFPk6xs0iQCSbumAXHwhukQHMh8okMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Uckd6U0pBSkp1NllCY2ZDRzZSQWN5SHlpUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNl LWY3NTJkODE2MDVmYi8xL1pHSjhXaFZKc3Y2X0RaVngyenNORXF1cmh3cy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNlLWY3NTJkODE2MDVm Yi8xLzEtVHJHelNKQUpKdTZZQmNmQ0c2UkFjeUh5aVEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwOQYIKwYBBQUHAQcBAf8EKjAoMAwEAgABMAYDBACwb9gw GAQCAAIwEgMHACoODIAABAMHACoPmYAABzANBgkqhkiG9w0BAQsFAAOCAQEApcnf TGd5B1t2TNqUPTJMA7rbWmQzRMZhnoJ+ZSSudD/aAH8nxdi7Mqfh7ZVfY6YydsHl ZX0J2L+PV8iC2zas4DgTr5VO1Q3R0UHHAVbCtMrhMKdQAQ6evr+4tUyhDb9DQy1O JXPjupfLWoGwUfQbAR1xH3kBqEssc9Kr4md1xnHa+HJpaGGQV+rBD0daLPYS8cKZ DSoF0V7PRkxD4WaCkpnKvh6HgFARHmldBM6Vv7CZRT6It8KrSdcf14m3byGXTRbS rNRp7lOzkgWQmw6NBbQFCy2MMA/w4ySkuHT60ECoaZNK+1KUhAB28D3S4A/Gvsjq FeoBCy4kEA72VZ5cIQ== -----END CERTIFICATE-----Generated at Sun Jan 25 08:55:40 2026 by rpki-client