This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/ZzjkBXr5q1g4RTOv6r81K4wPzek.roa File: ZzjkBXr5q1g4RTOv6r81K4wPzek.roa (raw, json) Hash identifier: EbxKJ4vDtHIhISfCa5emGMn2e3XIMHISVR6d79MhkPc= Subject key identifier: 67:38:E4:05:7A:F9:AB:58:38:45:33:AF:EA:BF:35:2B:8C:0F:CD:E9 Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20 Certificate serial: 019B7F136494805148901EF5088489F4F053 Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/ZzjkBXr5q1g4RTOv6r81K4wPzek.roa Signing time: Fri 02 Jan 2026 14:18:55 +0000 ROA not before: Fri 02 Jan 2026 14:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15415 IP address blocks: 185.211.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:64:94:80:51:48:90:1e:f5:08:84:89:f4:f0:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20 Validity Not Before: Jan 2 14:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6738e4057af9ab58384533afeabf352b8c0fcde9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cf:c9:ad:a8:01:21:e9:a8:8c:ef:8a:56:7f: e8:85:c8:da:62:d1:e2:3c:2a:d4:d0:a1:11:e9:f7: 0e:1f:c7:4c:8f:1b:66:b1:e1:0c:89:f1:0c:32:ef: 6e:ee:12:98:b7:53:5b:a7:4c:57:64:66:3f:26:8c: 2c:7e:3e:bb:92:4e:53:4f:be:db:91:31:be:cb:83: 47:d5:87:5c:91:f8:e7:2e:49:a5:4d:05:d9:d8:61: de:af:d3:22:38:0a:d7:0a:af:0f:5c:87:1c:20:d5: ab:2d:35:cd:3f:ed:b4:fb:e5:6f:f9:e3:e3:6a:82: 9f:22:21:09:e1:8f:7d:ff:25:32:6f:5d:ea:03:d6: 51:3a:23:a8:68:e0:3a:f9:18:1d:80:a8:1c:3a:eb: 65:b4:21:5f:90:43:f5:fa:62:8e:a0:e1:eb:79:f4: 4f:03:d0:f7:4c:51:30:37:15:7c:75:bc:2c:62:7c: 71:48:a4:d2:0a:54:77:1a:6d:88:0b:f4:f7:9f:f2: fa:c0:6e:78:87:e0:57:5c:1b:49:75:7d:d1:9a:aa: d1:d4:4f:67:7d:ae:d3:eb:4f:e9:a5:ca:77:59:d5: 99:8a:ca:2f:37:22:a0:77:fe:fb:6a:2d:69:88:80: e1:c7:75:bd:52:9c:25:fc:e8:ca:d1:bc:fa:de:08: b6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:38:E4:05:7A:F9:AB:58:38:45:33:AF:EA:BF:35:2B:8C:0F:CD:E9 X509v3 Authority Key Identifier: keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/ZzjkBXr5q1g4RTOv6r81K4wPzek.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.102.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:de:7a:7f:d3:40:50:95:15:c2:49:37:70:99:5e:4f:fb:0d: cc:c9:6b:b6:1f:01:b2:9b:aa:da:7c:00:fa:20:63:ce:bc:81: 23:07:69:e0:51:4b:ca:94:71:13:95:1a:e8:30:46:0a:0a:64: 58:c9:18:56:27:4a:77:5e:5a:92:3c:1f:c9:d7:04:9a:38:4f: 66:53:7e:ed:e3:00:f6:97:26:fe:90:ae:93:42:03:08:4e:9c: dc:35:d7:33:4f:d9:1b:72:4e:d8:20:30:b6:99:ab:5e:88:19: 9c:d2:f7:2a:0d:b1:f4:3d:73:67:29:c0:75:dd:44:7e:99:cd: a2:11:48:ed:7a:6b:e5:29:f1:e5:92:1c:bc:a5:d2:33:f7:2e: c9:92:84:18:35:6d:35:24:67:93:ff:5b:91:78:16:0b:25:77: 4a:d7:6b:d9:2c:7f:b3:f0:5d:b6:91:54:9a:6b:5c:6f:08:e5: 36:a3:8d:ad:22:90:aa:e9:3c:26:fd:a0:72:fb:27:16:a3:3b: 8e:72:93:65:e0:40:da:94:f0:b1:78:e2:a0:02:b9:19:84:26: 0b:95:78:94:7a:40:30:29:ba:d3:20:d9:d5:dd:e0:dd:3b:21: 3e:78:70:15:29:36:79:63:b3:6f:c8:c8:55:93:16:7c:4d:8a: 98:ae:e2:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E2SUgFFIkB71CISJ9PBTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMzI1MGE1YzFiZGFiNzRiMWJkMjNjMDFjNTRhOGQ3MGI2 ZGVmMjAwHhcNMjYwMTAyMTQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzM4ZTQwNTdhZjlhYjU4Mzg0NTMzYWZlYWJmMzUyYjhjMGZjZGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc/JragBIemojO+KVn/ohcjaYtHi PCrU0KER6fcOH8dMjxtmseEMifEMMu9u7hKYt1Nbp0xXZGY/Jowsfj67kk5TT77b kTG+y4NH1YdckfjnLkmlTQXZ2GHer9MiOArXCq8PXIccINWrLTXNP+20++Vv+ePj aoKfIiEJ4Y99/yUyb13qA9ZROiOoaOA6+RgdgKgcOutltCFfkEP1+mKOoOHrefRP A9D3TFEwNxV8dbwsYnxxSKTSClR3Gm2IC/T3n/L6wG54h+BXXBtJdX3RmqrR1E9n fa7T60/ppcp3WdWZisovNyKgd/77ai1piIDhx3W9Upwl/OjK0bz63gi2QwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGc45AV6+atYOEUzr+q/NSuMD83pMB8GA1UdIwQY MBaAFGwyUKXBvat0sb0jwBxUqNcLbe8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEt MjU0NDY4M2FhMTI1LzEvWnpqa0JYcjVxMWc0UlRPdjZyODFLNHdQemVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEtMjU0NDY4M2FhMTI1 LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudNmMA0G CSqGSIb3DQEBCwUAA4IBAQAs3np/00BQlRXCSTdwmV5P+w3MyWu2HwGym6rafAD6 IGPOvIEjB2ngUUvKlHETlRroMEYKCmRYyRhWJ0p3XlqSPB/J1wSaOE9mU37t4wD2 lyb+kK6TQgMITpzcNdczT9kbck7YIDC2mateiBmc0vcqDbH0PXNnKcB13UR+mc2i EUjtemvlKfHlkhy8pdIz9y7JkoQYNW01JGeT/1uReBYLJXdK12vZLH+z8F22kVSa a1xvCOU2o42tIpCq6Twm/aBy+ycWozuOcpNl4EDalPCxeOKgArkZhCYLlXiUekAw KbrTINnV3eDdOyE+eHAVKTZ5Y7NvyMhVkxZ8TYqYruIn -----END CERTIFICATE-----Generated at Sat Jan 3 06:26:47 2026 by rpki-client