This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Zrl_LI98ejR_ptyBg8r1lyw7m1E.roa File: Zrl_LI98ejR_ptyBg8r1lyw7m1E.roa (raw, json) Hash identifier: zWHBibOlt4lieSIFCJKAyoXQZQ9v/N0UujoOtC4qitg= Subject key identifier: 66:B9:7F:2C:8F:7C:7A:34:7F:A6:DC:81:83:CA:F5:97:2C:3B:9B:51 Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C7720550BEFF0A8C2DD1AE8B2F2816 Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Zrl_LI98ejR_ptyBg8r1lyw7m1E.roa Signing time: Thu 01 Jan 2026 04:18:38 +0000 ROA not before: Thu 01 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198700 IP address blocks: 37.16.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:72:05:50:be:ff:0a:8c:2d:d1:ae:8b:2f:28:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66b97f2c8f7c7a347fa6dc8183caf5972c3b9b51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f2:aa:f2:47:bd:ec:99:6b:a6:52:89:8d:b4: 77:c1:48:c8:34:b1:e8:46:4c:d8:7b:f1:fd:02:5a: 00:d1:3e:c8:72:52:10:08:ab:e1:95:6b:44:ab:3e: 90:fd:63:29:28:f7:38:b8:9b:e4:6a:8c:48:ba:b1: a6:7a:45:ee:3c:08:48:2e:eb:9a:39:80:95:5a:87: 8a:df:b6:5a:91:1e:82:ca:dc:11:d5:45:eb:ac:2a: 41:0d:2f:bb:db:ee:82:8b:ff:d9:2f:3c:d9:31:85: 50:c7:43:66:d1:c0:a2:af:58:6b:c5:f0:ce:2b:cb: c9:12:51:85:be:dd:38:3b:29:22:bd:0a:94:1c:1d: e3:8e:66:e3:8b:13:6a:43:3c:9d:9b:97:c1:3a:e4: 49:4a:15:f0:20:ea:cf:63:f1:a1:53:29:b1:a7:39: 38:76:e0:98:d3:d8:07:8b:c6:a8:5a:ab:d1:61:34: 21:cf:90:7a:da:6e:cf:12:db:30:02:df:b2:1f:d8: 03:99:70:08:b7:b2:0f:83:c7:00:a9:f5:9d:f5:f8: 35:7f:4a:19:be:92:26:e5:da:a5:8b:be:34:f7:76: 4f:1b:88:96:44:1d:dc:15:c2:4d:99:b8:13:83:ae: 63:f9:c3:f3:9f:00:8b:ac:af:36:61:72:56:0e:39: 64:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B9:7F:2C:8F:7C:7A:34:7F:A6:DC:81:83:CA:F5:97:2C:3B:9B:51 X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Zrl_LI98ejR_ptyBg8r1lyw7m1E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.16.86.0/24 Signature Algorithm: sha256WithRSAEncryption 40:36:36:9c:79:a8:df:3a:f4:be:a9:74:e7:3a:bc:c4:7e:bd: f6:9a:f4:67:d7:aa:b0:e1:eb:48:89:be:2f:af:b1:1a:27:f1: 85:8f:b8:98:9a:a2:f7:7a:51:fd:8c:27:af:6e:89:d0:94:30: 60:a5:33:8a:77:c4:5f:27:88:37:fa:05:ad:fa:12:7f:10:82: 75:8c:70:b8:23:82:8f:9b:d6:33:a5:44:28:98:4e:03:a7:a1: a5:46:c3:cc:c9:67:f5:74:32:18:9f:9a:d3:a9:57:b7:78:b6: 51:e2:cd:b7:14:21:08:dc:66:00:e3:b8:00:ee:51:31:70:4a: b3:d3:2e:55:ca:96:76:27:62:32:f1:e9:47:bb:66:1f:aa:b0: 8d:13:21:34:81:bd:87:f6:fc:11:bb:77:7b:94:ac:ce:38:5c: ad:8a:fd:fc:c2:30:3a:d9:7f:05:73:5e:14:6b:de:86:1f:b8: 57:a3:7a:9b:ac:f1:3f:85:58:21:95:20:ad:43:f6:33:88:4b: 30:f6:bd:5a:6f:e7:4f:a0:cb:e0:8e:9c:12:72:58:a8:31:2a: 70:ba:a4:d7:ae:67:0c:72:92:43:e4:98:cf:61:b5:41:45:3b: 74:1c:aa:53:5e:3d:58:1e:b2:df:1a:d3:76:ab:d7:e5:44:e5: 37:5c:85:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3IFUL7/Cowt0a6LLygWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmI5N2YyYzhmN2M3YTM0N2ZhNmRjODE4M2NhZjU5NzJjM2I5YjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/Kq8ke97JlrplKJjbR3wUjINLHo RkzYe/H9AloA0T7IclIQCKvhlWtEqz6Q/WMpKPc4uJvkaoxIurGmekXuPAhILuua OYCVWoeK37ZakR6CytwR1UXrrCpBDS+72+6Ci//ZLzzZMYVQx0Nm0cCir1hrxfDO K8vJElGFvt04OykivQqUHB3jjmbjixNqQzydm5fBOuRJShXwIOrPY/GhUymxpzk4 duCY09gHi8aoWqvRYTQhz5B62m7PEtswAt+yH9gDmXAIt7IPg8cAqfWd9fg1f0oZ vpIm5dqli74093ZPG4iWRB3cFcJNmbgTg65j+cPznwCLrK82YXJWDjlkYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGa5fyyPfHo0f6bcgYPK9ZcsO5tRMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvWnJsX0xJOThlalJfcHR5Qmc4cjFseXc3bTFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJRBWMA0G CSqGSIb3DQEBCwUAA4IBAQBANjaceajfOvS+qXTnOrzEfr32mvRn16qw4etIib4v r7EaJ/GFj7iYmqL3elH9jCevbonQlDBgpTOKd8RfJ4g3+gWt+hJ/EIJ1jHC4I4KP m9YzpUQomE4Dp6GlRsPMyWf1dDIYn5rTqVe3eLZR4s23FCEI3GYA47gA7lExcEqz 0y5VypZ2J2Iy8elHu2YfqrCNEyE0gb2H9vwRu3d7lKzOOFytiv38wjA62X8Fc14U a96GH7hXo3qbrPE/hVghlSCtQ/YziEsw9r1ab+dPoMvgjpwSclioMSpwuqTXrmcM cpJD5JjPYbVBRTt0HKpTXj1YHrLfGtN2q9flROU3XIVh -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:44 2026 by rpki-client