This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/ZDEDd_YeOToI9AaWJsRc80GXXYs.roa File: ZDEDd_YeOToI9AaWJsRc80GXXYs.roa (raw, json) Hash identifier: Lpl7sYdvpM/141Giex7RwhFqbe2pOY8JAQElcXsooE8= Subject key identifier: 64:31:03:77:F6:1E:39:3A:08:F4:06:96:26:C4:5C:F3:41:97:5D:8B Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Certificate serial: 019B7D5D07E156DE8F63EC7E641B2732B1DA Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/ZDEDd_YeOToI9AaWJsRc80GXXYs.roa Signing time: Fri 02 Jan 2026 06:20:07 +0000 ROA not before: Fri 02 Jan 2026 06:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201253 IP address blocks: 217.153.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:07:e1:56:de:8f:63:ec:7e:64:1b:27:32:b1:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Validity Not Before: Jan 2 06:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64310377f61e393a08f4069626c45cf341975d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:25:09:58:83:24:21:48:12:94:ea:35:46:b7: 3d:4f:25:08:03:c3:d1:15:a9:09:4c:8f:c7:06:17: 74:47:73:39:49:de:f4:90:c1:f2:a5:b3:d0:52:d0: 63:b0:ff:07:4e:85:e0:b7:c9:b3:da:69:d1:44:00: f2:23:46:8f:1e:12:7d:17:78:23:67:24:c3:91:d9: 2d:dc:6c:f7:3f:6e:a3:f9:04:1c:86:32:96:48:04: f5:8b:06:a1:b0:29:13:9a:cb:38:4e:ff:51:37:c2: f0:c5:bc:43:76:01:b7:91:5a:ba:85:ff:a3:05:d2: 7a:ed:a2:17:37:af:31:9d:e7:4e:43:e7:a4:14:e1: 0d:7e:05:fc:3d:24:90:52:66:fa:57:dd:52:05:ec: e3:4f:33:bf:dd:b1:f3:70:cf:65:20:2b:a1:95:67: 0e:a3:03:f3:90:49:57:bc:b6:35:39:37:5c:0f:18: 7d:0f:9b:c3:8e:56:2e:47:db:9a:66:07:4a:c6:17: 1f:2e:e4:e5:2b:d1:07:9e:a7:95:63:6a:ed:a5:ec: 09:7f:b3:cb:04:84:37:94:9e:aa:0d:c3:d8:42:0b: 8f:c2:fa:9d:d1:e9:a2:83:30:61:77:4b:3f:f1:66: 6d:29:31:d9:a5:18:e4:97:ef:f9:08:4b:c3:06:ff: 06:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:31:03:77:F6:1E:39:3A:08:F4:06:96:26:C4:5C:F3:41:97:5D:8B X509v3 Authority Key Identifier: keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/ZDEDd_YeOToI9AaWJsRc80GXXYs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.153.126.0/24 Signature Algorithm: sha256WithRSAEncryption 91:c4:2d:5d:cc:bf:9a:1c:a4:ae:06:27:b0:b4:8f:f7:68:f1: d2:a3:ee:9b:36:5a:e7:85:e8:40:24:71:8c:85:80:e8:db:3c: 45:d3:a5:99:58:4a:bb:5c:cb:2c:a7:87:a7:36:58:3d:2b:49: 12:43:ce:a0:19:39:e2:6a:71:84:d6:2f:17:bc:c4:ec:02:c2: 5d:35:f1:55:13:47:a7:10:74:18:22:5c:a6:d9:3e:77:28:79: a4:4c:a7:d5:9e:e4:cd:b0:f4:bd:d5:74:e7:7c:4d:cb:a1:1d: bb:ea:fd:a4:81:0c:e0:c6:71:02:24:a8:10:b9:76:5a:8e:3d: 60:2e:0c:96:f1:32:1a:7f:c4:2d:10:17:80:18:9a:fd:03:c8: e6:98:9b:0a:2a:1e:44:70:a4:3a:68:89:9c:77:b9:23:a9:f2: f5:e0:a6:03:e8:4e:70:69:c2:1e:f3:0e:96:fb:bc:80:43:80: fe:58:97:e5:ff:9a:2d:88:8a:5e:b6:f9:c0:9c:ef:e4:a7:eb: 39:64:29:fd:ef:6b:f9:6a:bc:6d:48:f4:87:7a:4b:ba:93:8d: 58:a2:66:3c:da:d3:02:92:cd:44:7b:57:9c:94:9d:86:1d:7c: 18:0b:ef:b3:f8:19:94:50:ab:70:eb:be:c4:c3:f2:ca:75:ef: 4c:19:c2:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XQfhVt6PY+x+ZBsnMrHaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj ZWY5MzMwHhcNMjYwMTAyMDYyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDMxMDM3N2Y2MWUzOTNhMDhmNDA2OTYyNmM0NWNmMzQxOTc1ZDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCUJWIMkIUgSlOo1Rrc9TyUIA8PR FakJTI/HBhd0R3M5Sd70kMHypbPQUtBjsP8HToXgt8mz2mnRRADyI0aPHhJ9F3gj ZyTDkdkt3Gz3P26j+QQchjKWSAT1iwahsCkTmss4Tv9RN8LwxbxDdgG3kVq6hf+j BdJ67aIXN68xnedOQ+ekFOENfgX8PSSQUmb6V91SBezjTzO/3bHzcM9lICuhlWcO owPzkElXvLY1OTdcDxh9D5vDjlYuR9uaZgdKxhcfLuTlK9EHnqeVY2rtpewJf7PL BIQ3lJ6qDcPYQguPwvqd0emigzBhd0s/8WZtKTHZpRjkl+/5CEvDBv8GvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGQxA3f2Hjk6CPQGlibEXPNBl12LMB8GA1UdIwQY MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt OTFlMzE4NGJiMGFiLzEvWkRFRGRfWWVPVG9JOUFhV0pzUmM4MEdYWFlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Zl+MA0G CSqGSIb3DQEBCwUAA4IBAQCRxC1dzL+aHKSuBiewtI/3aPHSo+6bNlrnhehAJHGM hYDo2zxF06WZWEq7XMssp4enNlg9K0kSQ86gGTnianGE1i8XvMTsAsJdNfFVE0en EHQYIlym2T53KHmkTKfVnuTNsPS91XTnfE3LoR276v2kgQzgxnECJKgQuXZajj1g LgyW8TIaf8QtEBeAGJr9A8jmmJsKKh5EcKQ6aImcd7kjqfL14KYD6E5wacIe8w6W +7yAQ4D+WJfl/5otiIpetvnAnO/kp+s5ZCn972v5arxtSPSHeku6k41YomY82tMC ks1Ee1eclJ2GHXwYC++z+BmUUKtw677Ew/LKde9MGcLJ -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:47 2026 by rpki-client