This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/ZP3LCtKrBkzUel77FsVXywGgRk8.roa File: ZP3LCtKrBkzUel77FsVXywGgRk8.roa (raw, json) Hash identifier: i1nVxawv2gpA1GeSUFY59H1040iN9e9Zdxt8Om5Sw0Y= Subject key identifier: 64:FD:CB:0A:D2:AB:06:4C:D4:7A:5E:FB:16:C5:57:CB:01:A0:46:4F Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315 Certificate serial: 019B7D5D16DB2E63104319A091338B29E75C Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/ZP3LCtKrBkzUel77FsVXywGgRk8.roa Signing time: Fri 02 Jan 2026 06:20:11 +0000 ROA not before: Fri 02 Jan 2026 06:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1836 IP address blocks: 82.211.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:16:db:2e:63:10:43:19:a0:91:33:8b:29:e7:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315 Validity Not Before: Jan 2 06:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64fdcb0ad2ab064cd47a5efb16c557cb01a0464f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f5:05:6e:4b:26:43:fe:c1:fb:73:02:76:da: c6:2f:3c:1c:69:e6:fb:58:e5:5b:6a:3e:d9:2b:2a: c7:f7:67:4a:93:e1:e1:f2:cf:3a:eb:79:4a:c5:76: 9f:9a:ba:c4:ff:a7:31:2a:98:c9:7a:5f:9a:0f:f4: 5e:90:90:6a:14:f5:2e:5b:42:d5:41:c3:5f:de:3f: 8c:ee:74:f4:f9:f1:f9:9a:76:fe:86:eb:dc:e8:d2: e3:57:63:7d:3b:b4:29:6c:db:12:cc:fc:c7:5d:cd: fc:2c:2d:e3:1f:70:81:a7:14:e3:7f:2c:c2:79:1a: ee:06:7a:e2:b1:48:0f:5c:9f:2d:5b:37:60:ee:79: 9e:03:af:b0:64:0a:f1:17:a0:7f:3a:d8:86:81:0e: e1:84:b2:56:53:69:6d:f8:27:57:ec:62:2d:82:7e: 08:2e:17:9c:ca:3f:99:3c:70:8f:4c:50:19:64:13: a9:e5:c7:cd:c4:b7:ed:de:6f:a2:94:68:43:05:d2: 47:de:d5:93:58:c6:af:8b:e3:a0:b1:83:91:83:b3: 1f:f8:06:dd:9c:92:f5:0a:64:22:cb:91:90:54:06: 3d:32:a1:f8:4a:f6:9f:2c:ce:e5:00:3f:d0:79:32: 21:f2:e0:b4:72:5b:31:45:40:c4:28:bf:b3:cf:fd: 80:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FD:CB:0A:D2:AB:06:4C:D4:7A:5E:FB:16:C5:57:CB:01:A0:46:4F X509v3 Authority Key Identifier: keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/ZP3LCtKrBkzUel77FsVXywGgRk8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.211.17.0/24 Signature Algorithm: sha256WithRSAEncryption 96:89:d7:42:57:4a:a8:3d:e2:73:0e:7a:e2:17:7f:3b:38:44: 6d:1e:34:dd:bb:a9:51:d6:c9:79:5f:1d:c4:18:a2:67:8a:f7: 91:20:48:b6:fb:66:e5:70:30:b6:38:f7:5b:b7:69:9d:84:fd: 01:d3:7b:e8:1f:83:2a:20:60:c2:b6:ef:fd:eb:c4:f0:18:1a: e2:7a:90:35:f3:8c:0c:cf:a5:8c:2f:d2:7c:5f:4e:0d:58:28: c3:5e:52:cd:3d:eb:27:c3:25:c4:c6:c6:f0:98:a7:4b:c7:75: f9:65:66:60:03:4d:4c:a1:c1:5f:27:7f:d0:ff:3a:5a:7f:44: 35:57:84:bd:89:5c:83:e4:8a:3f:36:19:cb:61:49:dd:b4:eb: 99:fb:1e:56:8a:d1:0f:f0:43:4e:f5:a6:20:f2:14:88:f6:2b: f7:56:c7:4b:c5:b5:83:16:54:54:b3:3c:71:e0:56:88:9c:92: 6f:89:b6:02:1e:bb:56:17:50:39:fb:ce:56:4d:73:f2:1f:93: 47:08:3b:80:95:f8:39:fb:e6:c9:53:68:65:07:ce:c3:2b:4e: 4b:ab:2e:25:d6:89:18:4e:03:9d:05:73:32:ad:52:be:31:c7: c2:e7:56:25:77:1b:b5:00:fa:16:47:a2:bb:04:38:e6:e4:81: 90:38:43:be -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XRbbLmMQQxmgkTOLKedcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMWRjNTBhNGI1MjZkZjE4ZThiMGE2NTY1ZDdiOWQ1OGE3 NWQzMTUwHhcNMjYwMTAyMDYyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGZkY2IwYWQyYWIwNjRjZDQ3YTVlZmIxNmM1NTdjYjAxYTA0NjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPUFbksmQ/7B+3MCdtrGLzwcaeb7 WOVbaj7ZKyrH92dKk+Hh8s8663lKxXafmrrE/6cxKpjJel+aD/RekJBqFPUuW0LV QcNf3j+M7nT0+fH5mnb+huvc6NLjV2N9O7QpbNsSzPzHXc38LC3jH3CBpxTjfyzC eRruBnrisUgPXJ8tWzdg7nmeA6+wZArxF6B/OtiGgQ7hhLJWU2lt+CdX7GItgn4I Lhecyj+ZPHCPTFAZZBOp5cfNxLft3m+ilGhDBdJH3tWTWMavi+OgsYORg7Mf+Abd nJL1CmQiy5GQVAY9MqH4SvafLM7lAD/QeTIh8uC0clsxRUDEKL+zz/2AVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGT9ywrSqwZM1Hpe+xbFV8sBoEZPMB8GA1UdIwQY MBaAFKodxQpLUm3xjosKZWXXudWKddMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mMjM5MjktNzM3NS00MWM4LTk5NzMt MzNkNzI4NDMzYzExLzEvWlAzTEN0S3JCa3pVZWw3N0ZzVlh5d0dnUms4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mMjM5MjktNzM3NS00MWM4LTk5NzMtMzNkNzI4NDMzYzEx LzEvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUtMRMA0G CSqGSIb3DQEBCwUAA4IBAQCWiddCV0qoPeJzDnriF387OERtHjTdu6lR1sl5Xx3E GKJniveRIEi2+2blcDC2OPdbt2mdhP0B03voH4MqIGDCtu/968TwGBriepA184wM z6WML9J8X04NWCjDXlLNPesnwyXExsbwmKdLx3X5ZWZgA01MocFfJ3/Q/zpaf0Q1 V4S9iVyD5Io/NhnLYUndtOuZ+x5WitEP8ENO9aYg8hSI9iv3VsdLxbWDFlRUszxx 4FaInJJvibYCHrtWF1A5+85WTXPyH5NHCDuAlfg5++bJU2hlB87DK05Lqy4l1okY TgOdBXMyrVK+McfC51Yldxu1APoWR6K7BDjm5IGQOEO+ -----END CERTIFICATE-----Generated at Mon Jan 26 01:42:29 2026 by rpki-client