This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/ZewHKWrHNOMwIxJHxqic_aTJY04.roa File: ZewHKWrHNOMwIxJHxqic_aTJY04.roa (raw, json) Hash identifier: 7rKRF0dR37tXD1HqIpBCpn2htHk2ZlUa/g7FUtMM0TU= Subject key identifier: 65:EC:07:29:6A:C7:34:E3:30:23:12:47:C6:A8:9C:FD:A4:C9:63:4E Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 019B7910F05DA7E33AE59ED9780444CEC6C1 Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/ZewHKWrHNOMwIxJHxqic_aTJY04.roa Signing time: Thu 01 Jan 2026 10:18:31 +0000 ROA not before: Thu 01 Jan 2026 10:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44307 IP address blocks: 96.125.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f0:5d:a7:e3:3a:e5:9e:d9:78:04:44:ce:c6:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: Jan 1 10:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65ec07296ac734e330231247c6a89cfda4c9634e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cd:48:c5:7e:1a:c2:c4:26:42:72:9a:4c:47: b3:24:47:be:45:de:ed:e0:47:71:3e:63:70:cf:8a: fb:4e:fb:59:60:c2:b6:85:15:1a:77:94:20:18:ef: 8d:4d:d9:df:fa:38:5b:e1:02:6e:2a:92:9b:17:b9: fc:ee:f0:ea:6a:17:23:9a:0a:2f:31:16:7b:27:53: 51:e8:2e:6c:b3:23:38:5b:04:38:d0:21:a8:4c:0c: b7:b3:12:c7:7f:92:13:8e:3f:05:d9:da:cd:1b:e3: d0:48:a6:8e:94:f3:02:0c:89:61:e0:f8:06:9d:da: aa:66:d6:ad:9e:fd:a3:08:8f:bf:f8:13:81:7b:08: f0:8d:89:40:f6:20:3d:ba:86:35:77:7e:2f:c3:11: 02:89:7a:a4:54:67:20:e7:6e:7d:19:06:96:ed:15: 9c:a9:6f:91:64:07:97:07:bd:10:70:cf:a3:df:06: 0c:9c:4b:8e:77:50:67:66:23:c5:bd:5c:3e:40:70: e9:84:e1:7f:1a:9f:17:fb:56:3a:97:6c:ec:31:52: ab:58:74:97:c7:59:04:76:ff:d6:ee:73:88:03:dc: eb:ca:9c:77:5e:4f:59:27:a3:fa:74:7e:08:21:b8: 22:42:32:b1:52:cf:89:1d:62:d7:8c:b7:fc:f4:38: d3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:EC:07:29:6A:C7:34:E3:30:23:12:47:C6:A8:9C:FD:A4:C9:63:4E X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/ZewHKWrHNOMwIxJHxqic_aTJY04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.125.144.0/20 Signature Algorithm: sha256WithRSAEncryption 65:90:f0:df:ff:34:88:ed:5e:b6:44:1a:22:c4:71:51:98:af: 60:32:9f:26:7c:7b:b6:f6:50:0e:6d:40:02:4f:88:a1:b7:c8: 6a:5f:8b:d6:93:08:53:87:53:4c:48:a5:97:28:01:2b:28:f8: 34:a9:bf:63:b1:11:27:d2:93:53:02:f5:26:69:16:f9:34:01: 1d:e7:02:3b:f8:d7:bd:63:58:40:3e:5a:7b:e4:c9:bd:06:e5: 8d:df:2a:c7:6b:56:cc:48:1a:6a:c3:60:e5:ce:8d:1a:6f:a4: 2d:3f:c3:66:53:78:79:58:66:98:39:09:38:ee:43:44:ec:c1: 6c:b8:83:2f:85:e8:dd:27:9e:c3:ad:7b:06:9d:30:f0:04:2b: 26:ad:c6:26:93:c6:de:2e:4b:43:5e:26:95:f3:7e:68:84:84: 1c:16:61:26:c2:2d:68:68:9d:5a:58:20:bb:95:c2:c9:00:2c: ca:bb:b4:df:4b:6f:20:e9:b0:fe:fe:e3:ea:32:d7:55:07:ec: e2:9e:4e:85:1b:94:b2:3a:c1:d0:fb:9a:c1:50:3a:b1:3d:d2: eb:ba:83:4c:75:f8:f2:45:9f:58:db:44:c5:8d:0b:13:70:5b: ee:4e:0a:37:4a:61:b2:56:03:27:6a:64:9f:bc:e2:60:40:ae: 9d:ca:08:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EPBdp+M65Z7ZeAREzsbBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjYwMTAxMTAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWVjMDcyOTZhYzczNGUzMzAyMzEyNDdjNmE4OWNmZGE0Yzk2MzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM1IxX4awsQmQnKaTEezJEe+Rd7t 4EdxPmNwz4r7TvtZYMK2hRUad5QgGO+NTdnf+jhb4QJuKpKbF7n87vDqahcjmgov MRZ7J1NR6C5ssyM4WwQ40CGoTAy3sxLHf5ITjj8F2drNG+PQSKaOlPMCDIlh4PgG ndqqZtatnv2jCI+/+BOBewjwjYlA9iA9uoY1d34vwxECiXqkVGcg5259GQaW7RWc qW+RZAeXB70QcM+j3wYMnEuOd1BnZiPFvVw+QHDphOF/Gp8X+1Y6l2zsMVKrWHSX x1kEdv/W7nOIA9zrypx3Xk9ZJ6P6dH4IIbgiQjKxUs+JHWLXjLf89DjTuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGXsBylqxzTjMCMSR8aonP2kyWNOMB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEvWmV3SEtXckhOT013SXhKSHhxaWNfYVRKWTA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYH2QMA0G CSqGSIb3DQEBCwUAA4IBAQBlkPDf/zSI7V62RBoixHFRmK9gMp8mfHu29lAObUAC T4iht8hqX4vWkwhTh1NMSKWXKAErKPg0qb9jsREn0pNTAvUmaRb5NAEd5wI7+Ne9 Y1hAPlp75Mm9BuWN3yrHa1bMSBpqw2Dlzo0ab6QtP8NmU3h5WGaYOQk47kNE7MFs uIMvhejdJ57DrXsGnTDwBCsmrcYmk8beLktDXiaV835ohIQcFmEmwi1oaJ1aWCC7 lcLJACzKu7TfS28g6bD+/uPqMtdVB+zink6FG5SyOsHQ+5rBUDqxPdLruoNMdfjy RZ9Y20TFjQsTcFvuTgo3SmGyVgMnamSfvOJgQK6dyggY -----END CERTIFICATE-----Generated at Sun Jan 25 08:00:23 2026 by rpki-client