This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa File: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (raw, json) Hash identifier: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4= Subject key identifier: 67:07:83:F6:14:8E:F8:58:D2:36:04:63:62:25:8F:E6:8C:EA:82:23 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019B7C12FCC326B9B29164B94AA708F1E3E0 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa Signing time: Fri 02 Jan 2026 00:19:37 +0000 ROA not before: Fri 02 Jan 2026 00:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212068 IP address blocks: 139.28.205.0/24 maxlen: 24 2a0d:1a40:7a00::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 06:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:fc:c3:26:b9:b2:91:64:b9:4a:a7:08:f1:e3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Jan 2 00:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=670783f6148ef858d236046362258fe68cea8223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d1:c6:3b:19:d6:94:fa:d1:35:97:b5:06:5b: 36:8e:54:6a:06:cf:41:af:2b:a9:5e:5e:7d:93:9b: d8:b1:f3:e7:e3:b5:1e:b8:77:3d:09:4d:79:ef:f6: 7e:fe:1e:a5:5d:41:7d:d1:5d:da:3d:34:29:ec:5a: a4:ec:aa:c0:61:4f:32:90:07:a9:ad:9f:c3:16:d2: 22:ac:49:ad:84:2e:cb:8a:f4:32:d5:67:08:79:61: 83:2d:a3:3d:90:dd:27:52:bc:7e:52:75:46:56:85: 90:dc:ba:b0:bb:82:fc:3f:21:79:fc:1b:5f:2d:df: 0e:a7:3f:e9:a2:37:20:c7:a2:91:da:c4:dd:7e:53: 7e:7e:75:ff:49:24:9d:99:38:17:ba:c7:e6:ca:48: bb:7c:68:9d:7d:f0:16:e2:be:ea:b7:30:bb:2e:fd: bf:cc:20:05:f1:16:a9:b9:91:b1:3d:7d:0d:e0:40: c2:3b:09:89:7e:74:9c:cf:80:64:5f:91:2c:5b:38: d5:ef:52:7e:35:9d:1d:17:f1:d4:22:84:e5:88:aa: b5:4b:63:25:3f:69:c1:df:09:68:af:50:bf:b6:6a: 0d:06:ce:28:c4:ee:9b:e7:e4:b9:5c:54:82:f3:fb: 71:fe:22:8e:02:4d:41:c9:6f:78:6e:ef:05:a9:00: 71:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:07:83:F6:14:8E:F8:58:D2:36:04:63:62:25:8F:E6:8C:EA:82:23 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.28.205.0/24 IPv6: 2a0d:1a40:7a00::/44 Signature Algorithm: sha256WithRSAEncryption 4c:fb:23:94:ff:4b:ee:91:bd:43:37:58:17:1b:89:ec:4b:92: 4b:0c:cd:13:48:9e:08:a8:e2:a4:1e:09:29:a6:bb:6c:25:2e: 58:d3:96:78:aa:a2:f2:c2:9d:cd:aa:cc:32:88:41:b4:3d:f1: ec:0a:ed:2f:40:0f:65:97:42:c3:55:39:1e:b5:1e:d9:80:69: bd:13:bf:c0:a6:09:f4:99:e7:30:fe:9c:19:d1:51:26:dd:98: f7:cd:40:e8:10:3b:3a:02:88:71:e9:f5:df:6e:e1:64:4a:5e: 84:f6:29:ba:74:c0:57:5c:73:bc:d0:e5:47:fc:cf:02:42:b1: 25:30:c6:ee:57:57:b3:4b:a0:82:c8:de:da:cc:ce:75:c8:ce: e5:85:eb:d9:d2:5f:8d:54:81:71:ef:f9:37:aa:6d:47:68:3a: 4f:2d:a3:09:a1:40:74:a6:74:c0:6f:b6:6b:fe:f2:d2:d1:68: 3a:63:f3:eb:bc:ef:00:98:f6:31:20:33:84:3f:c3:d4:4b:36: 9a:02:62:8b:e9:b6:86:c3:4d:9d:e1:28:df:9e:1d:cc:25:e1: 43:6a:ea:c1:93:0e:1c:e3:a3:76:3f:41:b2:c3:cb:d7:d5:dc: 41:ac:b3:32:d6:7d:be:01:7a:cc:45:57:58:29:cd:d8:cc:91: f8:2e:ee:c2 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8EvzDJrmykWS5SqcI8ePgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwMTAyMDAxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzA3ODNmNjE0OGVmODU4ZDIzNjA0NjM2MjI1OGZlNjhjZWE4MjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNHGOxnWlPrRNZe1Bls2jlRqBs9B ryupXl59k5vYsfPn47UeuHc9CU157/Z+/h6lXUF90V3aPTQp7Fqk7KrAYU8ykAep rZ/DFtIirEmthC7LivQy1WcIeWGDLaM9kN0nUrx+UnVGVoWQ3Lqwu4L8PyF5/Btf Ld8Opz/pojcgx6KR2sTdflN+fnX/SSSdmTgXusfmyki7fGidffAW4r7qtzC7Lv2/ zCAF8RapuZGxPX0N4EDCOwmJfnScz4BkX5EsWzjV71J+NZ0dF/HUIoTliKq1S2Ml P2nB3wlor1C/tmoNBs4oxO6b5+S5XFSC8/tx/iKOAk1ByW94bu8FqQBxKwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGcHg/YUjvhY0jYEY2Ilj+aM6oIjMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvWndlRDloU08tRmpTTmdSallpV1A1b3pxZ2lNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAixzNMA8E AgACMAkDBwQqDRpAegAwDQYJKoZIhvcNAQELBQADggEBAEz7I5T/S+6RvUM3WBcb iexLkksMzRNIngio4qQeCSmmu2wlLljTlniqovLCnc2qzDKIQbQ98ewK7S9AD2WX QsNVOR61HtmAab0Tv8CmCfSZ5zD+nBnRUSbdmPfNQOgQOzoCiHHp9d9u4WRKXoT2 Kbp0wFdcc7zQ5Uf8zwJCsSUwxu5XV7NLoILI3trMznXIzuWF69nSX41UgXHv+Teq bUdoOk8towmhQHSmdMBvtmv+8tLRaDpj8+u87wCY9jEgM4Q/w9RLNpoCYovptobD TZ3hKN+eHcwl4UNq6sGTDhzjo3Y/QbLDy9fV3EGsszLWfb4BesxFV1gpzdjMkfgu 7sI= -----END CERTIFICATE-----Generated at Wed Jan 7 15:53:11 2026 by rpki-client