This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/ZXR_15JRahbz7OCWkK3p2ywKJJo.roa File: ZXR_15JRahbz7OCWkK3p2ywKJJo.roa (raw, json) Hash identifier: DSH5lii59E1s7PlJcxjxqQZ7ATM0CS2IZreGq0V6Mh4= Subject key identifier: 65:74:7F:D7:92:51:6A:16:F3:EC:E0:96:90:AD:E9:DB:2C:0A:24:9A Certificate issuer: /CN=6de2aab077c9eef103f97984f309d891e5a19983 Certificate serial: 019B7C11735A17D55BBCAD4CE8A735F61A3B Authority key identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/ZXR_15JRahbz7OCWkK3p2ywKJJo.roa Signing time: Fri 02 Jan 2026 00:17:56 +0000 ROA not before: Fri 02 Jan 2026 00:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200590 IP address blocks: 45.130.7.0/24 maxlen: 24 91.147.98.0/24 maxlen: 24 91.147.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:73:5a:17:d5:5b:bc:ad:4c:e8:a7:35:f6:1a:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6de2aab077c9eef103f97984f309d891e5a19983 Validity Not Before: Jan 2 00:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65747fd792516a16f3ece09690ade9db2c0a249a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b7:92:2e:9e:4f:2e:61:b9:10:32:1b:fe:7d: b5:ef:d1:92:7a:ba:ce:10:dc:18:89:91:df:1c:9a: 63:2f:5a:fc:e5:84:88:c3:c0:03:68:ad:4a:2a:ac: 78:b7:45:b4:b3:48:73:4c:19:46:85:6a:9e:b9:70: e3:80:27:d4:cb:a3:31:df:ca:eb:bf:aa:d3:fb:4e: 1e:0a:a1:4a:02:b7:b8:dd:55:5d:01:fb:d6:20:4a: 2e:dc:5a:75:df:38:2d:56:3e:1c:bd:3d:ef:cb:43: fa:d0:40:bd:5f:be:a9:39:70:60:e7:ef:a8:c5:91: 1b:39:25:b6:e0:53:56:fb:5d:da:fe:03:eb:5e:ce: 23:67:12:42:c5:80:eb:76:23:9d:d1:a2:18:2e:08: 23:2e:0b:f3:b7:7c:21:fa:ed:85:81:45:20:57:7e: 45:d1:99:e7:bd:08:f3:d6:8e:4d:7b:9d:10:c4:7a: 0c:d9:52:d5:d6:53:56:91:b5:6c:87:9a:c5:60:d1: a2:9b:13:a9:ee:39:64:94:4e:c2:31:fb:94:be:bb: ad:49:a6:6d:de:c2:a1:3c:69:22:ac:10:30:32:b2: 7d:12:b1:b9:e7:11:e3:bc:30:11:28:f3:ef:a9:dc: 90:68:8e:b0:6a:cb:ab:88:98:47:4b:82:16:fd:f5: c8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:74:7F:D7:92:51:6A:16:F3:EC:E0:96:90:AD:E9:DB:2C:0A:24:9A X509v3 Authority Key Identifier: keyid:6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/ZXR_15JRahbz7OCWkK3p2ywKJJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.7.0/24 91.147.98.0/23 Signature Algorithm: sha256WithRSAEncryption 12:a0:2f:35:2c:da:cf:a6:62:5f:58:f7:b9:a2:25:a5:4b:da: 4a:90:d8:28:45:c9:33:61:d4:7c:f4:2b:72:e0:72:cc:72:79: 79:a4:68:0d:2a:39:8b:36:33:1f:3a:ef:1a:2e:88:6f:ec:fe: db:f0:ef:dd:bc:f8:b2:80:9e:5e:ca:19:02:52:23:28:45:aa: d9:75:2b:9c:1a:c8:6e:ac:bd:d4:ca:80:00:54:1f:71:88:50: d5:fa:62:89:af:69:ea:a2:4d:03:a0:b9:5e:8e:4b:4c:b3:4d: 3c:c8:88:4f:96:67:6d:8f:d0:44:f4:5e:9c:6d:0e:91:f6:5f: 65:45:14:6b:e4:ba:36:d1:0e:99:5a:20:32:fb:86:27:dc:9e: be:69:86:2b:4b:e3:b0:7c:6c:d9:90:d6:57:7d:0e:b9:8d:18: ce:ef:69:63:01:88:24:05:29:32:ac:0d:ca:00:0e:29:c2:2e: 36:03:2d:a9:44:a1:19:71:5c:d0:32:68:4d:84:f0:50:a9:40: ee:7d:91:16:23:f5:96:b9:3d:1f:99:63:82:8b:1a:71:24:e8: 5d:59:9e:a4:8f:79:16:d1:b4:fd:4f:5a:27:e7:1a:be:50:57: c2:bf:1b:60:8b:0e:d8:84:28:b9:3f:32:74:ca:9c:87:b3:c4: 97:a5:52:0b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EXNaF9VbvK1M6Kc19ho7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZTJhYWIwNzdjOWVlZjEwM2Y5Nzk4NGYzMDlkODkxZTVh MTk5ODMwHhcNMjYwMTAyMDAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTc0N2ZkNzkyNTE2YTE2ZjNlY2UwOTY5MGFkZTlkYjJjMGEyNDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6beSLp5PLmG5EDIb/n2179GSerrO ENwYiZHfHJpjL1r85YSIw8ADaK1KKqx4t0W0s0hzTBlGhWqeuXDjgCfUy6Mx38rr v6rT+04eCqFKAre43VVdAfvWIEou3Fp13zgtVj4cvT3vy0P60EC9X76pOXBg5++o xZEbOSW24FNW+13a/gPrXs4jZxJCxYDrdiOd0aIYLggjLgvzt3wh+u2FgUUgV35F 0ZnnvQjz1o5Ne50QxHoM2VLV1lNWkbVsh5rFYNGimxOp7jlklE7CMfuUvrutSaZt 3sKhPGkirBAwMrJ9ErG55xHjvDARKPPvqdyQaI6wasuriJhHS4IW/fXIPQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGV0f9eSUWoW8+zglpCt6dssCiSaMB8GA1UdIwQY MBaAFG3iqrB3ye7xA/l5hPMJ2JHloZmDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmVLcXNIZko3dkVELVhtRTh3bllrZVdobVlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9hNDAwNzAtYWExNy00MmZlLTg2ZGQt YjlhZTU3Mzk0MTg5LzEvWlhSXzE1SlJhaGJ6N09DV2tLM3AyeXdLSkpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9hNDAwNzAtYWExNy00MmZlLTg2ZGQtYjlhZTU3Mzk0MTg5 LzEvYmVLcXNIZko3dkVELVhtRTh3bllrZVdobVlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYIHAwQB W5NiMA0GCSqGSIb3DQEBCwUAA4IBAQASoC81LNrPpmJfWPe5oiWlS9pKkNgoRckz YdR89Cty4HLMcnl5pGgNKjmLNjMfOu8aLohv7P7b8O/dvPiygJ5eyhkCUiMoRarZ dSucGshurL3UyoAAVB9xiFDV+mKJr2nqok0DoLlejktMs008yIhPlmdtj9BE9F6c bQ6R9l9lRRRr5Lo20Q6ZWiAy+4Yn3J6+aYYrS+OwfGzZkNZXfQ65jRjO72ljAYgk BSkyrA3KAA4pwi42Ay2pRKEZcVzQMmhNhPBQqUDufZEWI/WWuT0fmWOCixpxJOhd WZ6kj3kW0bT9T1on5xq+UFfCvxtgiw7YhCi5PzJ0ypyHs8SXpVIL -----END CERTIFICATE-----Generated at Mon Jan 26 11:38:52 2026 by rpki-client