This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ZDBrlrSgtMzV1-ye-cnUWw5k1_0.roa File: ZDBrlrSgtMzV1-ye-cnUWw5k1_0.roa (raw, json) Hash identifier: Mp01vkld3oDAZwqFPgaaJa4ro/5axCEotJhbwwyUVx8= Subject key identifier: 64:30:6B:96:B4:A0:B4:CC:D5:D7:EC:9E:F9:C9:D4:5B:0E:64:D7:FD Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78347B727E5EC7FDDA493A97BD987FD1 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ZDBrlrSgtMzV1-ye-cnUWw5k1_0.roa Signing time: Thu 01 Jan 2026 06:17:43 +0000 ROA not before: Thu 01 Jan 2026 06:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200559 IP address blocks: 192.71.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:7b:72:7e:5e:c7:fd:da:49:3a:97:bd:98:7f:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64306b96b4a0b4ccd5d7ec9ef9c9d45b0e64d7fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6d:22:b4:20:f3:e2:67:83:08:88:fa:ab:3b: b4:32:77:53:69:01:bd:e7:61:11:63:69:c4:54:6b: 6a:b1:8d:03:e7:39:f2:6b:4a:54:bd:29:66:ed:bf: 5d:f0:7f:2e:84:34:83:1a:aa:0f:c1:69:bb:bf:3e: 66:cb:0a:00:8a:90:cc:d0:b7:89:ca:57:bf:2e:12: 23:06:54:4b:4b:80:28:b3:36:64:1f:22:9e:92:fc: 6f:8d:29:56:61:2d:15:b0:ff:3c:01:07:68:1f:ee: ea:93:89:a5:b9:fe:0f:e2:2f:91:bf:cf:67:e3:09: 7d:b6:2b:81:be:26:00:4b:5d:da:f0:cc:c8:89:99: a8:7a:e2:ec:da:d4:bb:73:47:f0:e1:8a:8a:56:b7: 99:fe:fb:9a:18:46:94:da:c7:4b:a8:40:20:25:cf: a1:98:a2:b0:a6:e3:bf:8e:a4:e7:f2:2f:0b:39:a1: e4:f7:40:22:85:1a:3e:a3:f8:fc:3f:82:4f:4e:dd: 37:fb:7d:c7:ce:ec:d4:dd:ca:98:3a:ce:f3:3c:e6: 2d:6c:96:48:4b:fc:5e:07:b8:77:51:6e:8a:e3:f9: 3c:9f:e3:a6:48:9b:b5:0c:74:a5:b4:f2:c4:d1:80: 20:37:e5:39:34:67:2c:e9:6f:6d:b6:dd:29:8b:6d: 78:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:30:6B:96:B4:A0:B4:CC:D5:D7:EC:9E:F9:C9:D4:5B:0E:64:D7:FD X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ZDBrlrSgtMzV1-ye-cnUWw5k1_0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.71.40.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:e9:5e:58:3d:70:fa:83:63:ab:4f:7e:3b:7d:d4:33:41:31: 77:2a:5e:c6:76:23:ff:00:2e:c3:32:5c:a2:e0:f0:66:27:55: 01:5f:8f:5d:11:73:01:15:c4:45:fb:43:41:8d:17:3a:7e:e7: d5:c8:47:fb:e2:ad:77:f3:e1:f2:b5:a5:c6:12:e6:53:46:10: 87:8b:6f:bd:01:3f:5b:b9:c9:b8:b9:73:96:16:f1:d5:8c:a3: bf:4e:18:b7:7e:dd:25:95:ad:90:6f:1c:51:f1:59:df:bb:16: 58:d9:cb:54:6a:cd:aa:9b:b1:b5:ad:f7:15:2c:9d:f9:6f:1e: 65:8d:a6:a8:99:5b:f0:e3:a7:4c:d7:56:97:32:9c:9c:3b:0b: 88:f1:04:1b:75:d0:bf:53:04:10:14:23:64:eb:fb:f7:0f:ab: dd:af:ce:14:a7:e6:ae:69:98:e2:f4:84:ea:1c:8c:d2:c5:19: 7b:b3:fb:ed:7a:76:43:2f:f7:1c:bb:f4:f0:0c:7c:e6:2d:0d: 24:70:7f:58:8e:ad:9f:10:83:2c:1d:f3:46:6a:d3:af:9e:2d: fd:aa:7c:14:a8:06:08:6f:70:c4:80:c8:7a:51:8e:bd:ca:95: 81:26:fb:2c:a2:44:97:e0:51:62:4c:e5:4a:e0:04:82:cd:e3: f2:bc:e6:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NHtyfl7H/dpJOpe9mH/RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDMwNmI5NmI0YTBiNGNjZDVkN2VjOWVmOWM5ZDQ1YjBlNjRkN2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW0itCDz4meDCIj6qzu0MndTaQG9 52ERY2nEVGtqsY0D5znya0pUvSlm7b9d8H8uhDSDGqoPwWm7vz5mywoAipDM0LeJ yle/LhIjBlRLS4AoszZkHyKekvxvjSlWYS0VsP88AQdoH+7qk4mluf4P4i+Rv89n 4wl9tiuBviYAS13a8MzIiZmoeuLs2tS7c0fw4YqKVreZ/vuaGEaU2sdLqEAgJc+h mKKwpuO/jqTn8i8LOaHk90AihRo+o/j8P4JPTt03+33HzuzU3cqYOs7zPOYtbJZI S/xeB7h3UW6K4/k8n+OmSJu1DHSltPLE0YAgN+U5NGcs6W9ttt0pi214UwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGQwa5a0oLTM1dfsnvnJ1FsOZNf9MB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvWkRCcmxyU2d0TXpWMS15ZS1jblVXdzVrMV8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEcoMA0G CSqGSIb3DQEBCwUAA4IBAQCf6V5YPXD6g2OrT347fdQzQTF3Kl7GdiP/AC7DMlyi 4PBmJ1UBX49dEXMBFcRF+0NBjRc6fufVyEf74q138+HytaXGEuZTRhCHi2+9AT9b ucm4uXOWFvHVjKO/Thi3ft0lla2QbxxR8VnfuxZY2ctUas2qm7G1rfcVLJ35bx5l jaaomVvw46dM11aXMpycOwuI8QQbddC/UwQQFCNk6/v3D6vdr84Up+auaZji9ITq HIzSxRl7s/vtenZDL/ccu/TwDHzmLQ0kcH9Yjq2fEIMsHfNGatOvni39qnwUqAYI b3DEgMh6UY69ypWBJvssokSX4FFiTOVK4ASCzePyvObN -----END CERTIFICATE-----Generated at Sun Jan 25 11:11:39 2026 by rpki-client