This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/Zx8NV8g2SZTn17r6ny-ihGOw0zg.roa File: Zx8NV8g2SZTn17r6ny-ihGOw0zg.roa (raw, json) Hash identifier: oDKvuRyprpCre1JRHHQFdko0hYMR6EjsyiF9Shy7Ous= Subject key identifier: 67:1F:0D:57:C8:36:49:94:E7:D7:BA:FA:9F:2F:A2:84:63:B0:D3:38 Certificate issuer: /CN=b49bd84da17997cbb286af9022ab2e05ba08b442 Certificate serial: 019B7A5ACCC9E96E49CDEBB21BEEE0B44AE6 Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/Zx8NV8g2SZTn17r6ny-ihGOw0zg.roa Signing time: Thu 01 Jan 2026 16:18:49 +0000 ROA not before: Thu 01 Jan 2026 16:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210008 IP address blocks: 185.230.181.0/24 maxlen: 24 185.230.182.0/24 maxlen: 24 185.230.183.0/24 maxlen: 24 2a13:d00:a100::/40 maxlen: 48 2a13:d00:a680::/48 maxlen: 48 2a13:d00:c180::/48 maxlen: 48 2a13:d00:cf01::/48 maxlen: 48 2a13:d00:da30::/48 maxlen: 48 2a13:d00:da80::/48 maxlen: 48 2a13:d00:dc80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:cc:c9:e9:6e:49:cd:eb:b2:1b:ee:e0:b4:4a:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442 Validity Not Before: Jan 1 16:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=671f0d57c8364994e7d7bafa9f2fa28463b0d338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2a:ab:a6:e7:d3:1c:90:78:68:40:99:d0:52: a3:f1:6b:85:6f:a4:b4:a8:4b:ff:cf:98:57:2a:c5: 61:bb:ee:38:b0:31:57:c1:07:ea:e1:b8:c0:d0:bc: af:97:56:a6:9d:16:45:ad:17:50:a2:2a:3e:0a:8e: 9b:e5:2d:da:79:9d:dc:75:4d:90:8b:b2:63:01:6c: ed:67:73:41:df:7a:6d:74:65:bf:21:1f:c4:c8:25: 70:a6:f3:49:c0:3c:53:8c:34:10:4e:25:61:93:28: e3:9f:30:50:9e:26:72:55:35:a5:6a:aa:61:69:28: 38:b0:02:70:f6:86:31:09:23:0b:d3:e4:26:c4:20: 5c:30:bc:b9:4f:91:f5:f3:27:7a:d5:9d:39:27:a0: ac:5b:4c:07:9d:00:d3:9e:20:4c:ab:c7:e5:10:4b: b9:b6:41:58:85:ab:3b:e5:f2:e6:09:b0:67:d7:da: 6b:74:8e:05:78:ee:b6:95:11:73:e2:83:f2:8d:2f: f3:a4:33:4c:fd:8c:ef:b1:49:fe:ce:67:c4:a6:d1: c7:0c:04:d4:9e:44:a8:10:d9:1e:a7:de:6a:6c:2b: 70:3d:af:58:5d:a3:5f:d4:0e:2d:f6:48:24:27:1a: 2d:03:28:69:4b:a1:2e:8c:c4:fd:fd:7d:2f:c9:0f: 12:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1F:0D:57:C8:36:49:94:E7:D7:BA:FA:9F:2F:A2:84:63:B0:D3:38 X509v3 Authority Key Identifier: keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/Zx8NV8g2SZTn17r6ny-ihGOw0zg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.230.181.0-185.230.183.255 IPv6: 2a13:d00:a100::/40 2a13:d00:a680::/48 2a13:d00:c180::/48 2a13:d00:cf01::/48 2a13:d00:da30::/48 2a13:d00:da80::/48 2a13:d00:dc80::/48 Signature Algorithm: sha256WithRSAEncryption 47:73:61:92:d7:a2:15:db:1f:9e:7a:13:f4:16:5e:fc:fa:cb: e7:31:de:d5:61:37:e0:b0:27:26:07:26:af:f2:64:c4:af:05: 2f:6a:bf:37:c5:ff:db:4a:0f:8d:c8:47:04:03:58:8a:08:34: ca:a3:e7:a4:07:1a:49:ad:8f:c7:fc:9b:0b:fc:50:70:aa:3b: e6:5a:ad:92:4a:26:d3:3b:3d:b9:e0:41:a2:46:de:a3:b3:04: 03:f8:95:10:75:06:16:0d:da:d3:f1:ef:17:45:96:df:f8:65: af:d0:df:56:7a:54:f1:89:08:ad:4e:e3:bf:f0:5a:81:67:d2: e2:86:e4:11:01:22:87:4e:1c:0f:85:9c:f7:8c:ba:f9:1b:8a: 50:bd:97:29:be:50:b9:de:fa:1e:dd:a0:bb:88:f7:03:99:93: 54:35:cb:22:43:8a:bc:fc:a5:d8:1f:ce:2e:e1:32:10:ff:32: 59:4b:76:39:3d:c4:8d:90:2d:b8:96:2d:09:d1:a7:f2:4c:57: af:ae:68:fa:5c:de:42:9a:c0:95:0e:28:65:08:9b:96:e8:e2: 88:2b:5c:aa:35:56:22:39:29:5f:4b:b4:b8:d6:a4:0e:0f:78: 30:b2:ca:76:77:dd:45:7e:63:84:cd:f0:2c:03:54:cc:b5:6a: 42:7a:62:08 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZt6WszJ6W5JzeuyG+7gtErmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0OWJkODRkYTE3OTk3Y2JiMjg2YWY5MDIyYWIyZTA1YmEw OGI0NDIwHhcNMjYwMTAxMTYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzFmMGQ1N2M4MzY0OTk0ZTdkN2JhZmE5ZjJmYTI4NDYzYjBkMzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSqrpufTHJB4aECZ0FKj8WuFb6S0 qEv/z5hXKsVhu+44sDFXwQfq4bjA0Lyvl1amnRZFrRdQoio+Co6b5S3aeZ3cdU2Q i7JjAWztZ3NB33ptdGW/IR/EyCVwpvNJwDxTjDQQTiVhkyjjnzBQniZyVTWlaqph aSg4sAJw9oYxCSML0+QmxCBcMLy5T5H18yd61Z05J6CsW0wHnQDTniBMq8flEEu5 tkFYhas75fLmCbBn19prdI4FeO62lRFz4oPyjS/zpDNM/YzvsUn+zmfEptHHDATU nkSoENkep95qbCtwPa9YXaNf1A4t9kgkJxotAyhpS6EujMT9/X0vyQ8SkwIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFGcfDVfINkmU59e6+p8vooRjsNM4MB8GA1UdIwQY MBaAFLSb2E2heZfLsoavkCKrLgW6CLRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEp2WVRhRjVsOHV5aHEtUUlxc3VCYm9JdEVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lZTU0ZDEtNWIxNS00ZjkzLTg5N2It MGM5MDliZjViZTRkLzEvWng4TlY4ZzJTWlRuMTdyNm55LWloR093MHpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lZTU0ZDEtNWIxNS00ZjkzLTg5N2ItMGM5MDliZjViZTRk LzEvdEp2WVRhRjVsOHV5aHEtUUlxc3VCYm9JdEVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDAUBAIAATAOMAwDBAC55rUD BAO55rAwRAQCAAIwPgMGACoTDQChAwcAKhMNAKaAAwcAKhMNAMGAAwcAKhMNAM8B AwcAKhMNANowAwcAKhMNANqAAwcAKhMNANyAMA0GCSqGSIb3DQEBCwUAA4IBAQBH c2GS16IV2x+eehP0Fl78+svnMd7VYTfgsCcmByav8mTErwUvar83xf/bSg+NyEcE A1iKCDTKo+ekBxpJrY/H/JsL/FBwqjvmWq2SSibTOz254EGiRt6jswQD+JUQdQYW DdrT8e8XRZbf+GWv0N9WelTxiQitTuO/8FqBZ9LihuQRASKHThwPhZz3jLr5G4pQ vZcpvlC53voe3aC7iPcDmZNUNcsiQ4q8/KXYH84u4TIQ/zJZS3Y5PcSNkC24li0J 0afyTFevrmj6XN5CmsCVDihlCJuW6OKIK1yqNVYiOSlfS7S41qQOD3gwssp2d91F fmOEzfAsA1TMtWpCemII -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:25 2026 by rpki-client