This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/ZZV4J0xzHJahvI9bkvvUlw3YqJ8.roa File: ZZV4J0xzHJahvI9bkvvUlw3YqJ8.roa (raw, json) Hash identifier: 2jraLRcOy/O0ieEHzHeWnifNeQVyP8qfUT2eUqJPbaA= Subject key identifier: 65:95:78:27:4C:73:1C:96:A1:BC:8F:5B:92:FB:D4:97:0D:D8:A8:9F Certificate issuer: /CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9 Certificate serial: 019B797E840CF915EED3FC32BF9D31EA554A Authority key identifier: 36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/ZZV4J0xzHJahvI9bkvvUlw3YqJ8.roa Signing time: Thu 01 Jan 2026 12:18:13 +0000 ROA not before: Thu 01 Jan 2026 12:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198812 IP address blocks: 91.239.147.0/24 maxlen: 24 2001:67c:1240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:84:0c:f9:15:ee:d3:fc:32:bf:9d:31:ea:55:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9 Validity Not Before: Jan 1 12:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=659578274c731c96a1bc8f5b92fbd4970dd8a89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e9:e4:ca:44:85:09:ed:aa:fa:e6:70:79:e5: af:01:c0:b4:eb:07:39:5c:58:36:b3:36:35:a6:b7: 04:86:fd:33:6c:0f:c6:d6:94:02:1f:b8:8e:8d:b3: 0b:10:2c:01:4d:c1:5a:2c:bd:37:62:19:4a:70:45: 9a:2b:12:ad:09:ec:8e:3e:52:5d:6c:57:9c:01:ac: 61:04:56:c8:13:53:af:64:f5:4a:a8:3f:8d:25:2d: d0:90:66:2f:7b:48:d8:39:1f:54:76:e0:07:e0:03: 7a:78:c2:66:99:af:73:bd:56:d9:51:bb:c2:50:ae: 7d:7f:e6:c7:91:b3:f1:d4:5d:d5:df:c1:f1:9f:91: 2c:4e:ea:c5:08:e2:12:d5:9d:51:6f:ff:db:54:f5: 70:08:c0:5f:3e:6e:c0:9b:b0:03:09:97:5e:5b:d1: 18:21:50:56:dc:3a:bb:ca:a8:5d:b4:99:d7:38:d2: 17:e1:ab:c2:0f:c6:7d:ea:33:c7:e5:12:f6:c0:ea: a6:8f:04:a4:aa:ef:48:c1:6a:fd:53:01:01:e3:3b: b8:17:df:b2:de:50:49:4d:96:9c:71:46:0f:94:63: ca:04:4d:c9:8d:fe:2f:6b:cb:b8:4a:61:db:9a:53: 50:d7:52:e9:8a:02:c8:f6:42:0a:26:b8:21:4d:c3: 82:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:95:78:27:4C:73:1C:96:A1:BC:8F:5B:92:FB:D4:97:0D:D8:A8:9F X509v3 Authority Key Identifier: keyid:36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/ZZV4J0xzHJahvI9bkvvUlw3YqJ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.147.0/24 IPv6: 2001:67c:1240::/48 Signature Algorithm: sha256WithRSAEncryption 87:97:0a:c3:94:95:0c:77:d9:b8:de:e3:90:34:bd:67:8a:ac: ae:5d:2c:b7:3e:a4:5c:68:a5:0f:9e:d0:6f:ed:d1:41:28:6c: d5:8a:c6:cd:a3:03:3a:01:53:eb:99:f4:3f:4d:21:4d:05:80: 65:35:c6:d2:d3:a3:0d:bc:bf:f4:c0:0e:59:de:fa:47:04:fb: 5e:f0:1a:73:f7:73:ea:13:c7:8b:1f:ab:e0:8d:c5:59:1e:b0: 2a:e2:1d:66:db:24:e0:13:39:3b:0a:e3:d2:57:0a:c9:d9:3e: d4:60:3c:bd:5c:12:ee:2e:9f:da:b5:b2:fb:3c:24:f5:c1:a3: 13:a4:d2:af:f4:79:2d:34:a1:2b:06:36:21:b9:15:c7:55:b9: 67:e3:1f:3d:4c:de:68:4f:34:37:49:58:bb:f2:cc:de:f2:d5: 09:9b:85:13:f8:e4:7e:cf:4b:7d:54:d5:88:2f:44:9e:1b:30: b3:af:ad:5d:1b:b7:bf:5a:bf:4e:c5:6d:c6:e9:0b:42:b8:b8: 7c:9f:6c:31:73:f9:a6:37:f3:eb:1f:2f:13:60:8a:3a:5b:bf: 87:47:80:d2:46:01:43:a8:c3:6e:f5:23:c6:54:97:3e:af:c1: 4a:35:0a:29:ce:67:bd:68:8b:95:4b:9e:19:56:eb:d3:53:ad: 1b:df:d3:5d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5foQM+RXu0/wyv50x6lVKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MWFkZjU3YzhkY2I3YmZkMzRlOWFlY2Q4M2UzNjM0MmVj M2EzYzkwHhcNMjYwMTAxMTIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTk1NzgyNzRjNzMxYzk2YTFiYzhmNWI5MmZiZDQ5NzBkZDhhODlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6unkykSFCe2q+uZweeWvAcC06wc5 XFg2szY1prcEhv0zbA/G1pQCH7iOjbMLECwBTcFaLL03YhlKcEWaKxKtCeyOPlJd bFecAaxhBFbIE1OvZPVKqD+NJS3QkGYve0jYOR9UduAH4AN6eMJmma9zvVbZUbvC UK59f+bHkbPx1F3V38Hxn5EsTurFCOIS1Z1Rb//bVPVwCMBfPm7Am7ADCZdeW9EY IVBW3Dq7yqhdtJnXONIX4avCD8Z96jPH5RL2wOqmjwSkqu9IwWr9UwEB4zu4F9+y 3lBJTZaccUYPlGPKBE3Jjf4va8u4SmHbmlNQ11LpigLI9kIKJrghTcOClQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGWVeCdMcxyWobyPW5L71JcN2KifMB8GA1UdIwQY MBaAFDYa31fI3Le/006a7Ng+NjQuw6PJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmhyZlY4amN0N19UVHByczJENDJOQzdEbzhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lMGY4YzYtYWFkYy00YzMxLWI5MmIt MWExODczOGI0NzQxLzEvWlpWNEoweHpISmFodkk5Ymt2dlVsdzNZcUo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9lMGY4YzYtYWFkYy00YzMxLWI5MmItMWExODczOGI0NzQx LzEvTmhyZlY4amN0N19UVHByczJENDJOQzdEbzhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW++TMA8E AgACMAkDBwAgAQZ8EkAwDQYJKoZIhvcNAQELBQADggEBAIeXCsOUlQx32bje45A0 vWeKrK5dLLc+pFxopQ+e0G/t0UEobNWKxs2jAzoBU+uZ9D9NIU0FgGU1xtLTow28 v/TADlne+kcE+17wGnP3c+oTx4sfq+CNxVkesCriHWbbJOATOTsK49JXCsnZPtRg PL1cEu4un9q1svs8JPXBoxOk0q/0eS00oSsGNiG5FcdVuWfjHz1M3mhPNDdJWLvy zN7y1QmbhRP45H7PS31U1YgvRJ4bMLOvrV0bt79av07FbcbpC0K4uHyfbDFz+aY3 8+sfLxNgijpbv4dHgNJGAUOow271I8ZUlz6vwUo1CinOZ71oi5VLnhlW69NTrRvf 010= -----END CERTIFICATE-----Generated at Sun Jan 25 10:52:01 2026 by rpki-client