This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/zVm1lqtYpLPgcCC6R2FQhhyeTpw.roa File: zVm1lqtYpLPgcCC6R2FQhhyeTpw.roa (raw, json) Hash identifier: Mr6zA1SBW1abbeTreFoPgkXQSAh5HCSCpxdgGGoFjUM= Subject key identifier: CD:59:B5:96:AB:58:A4:B3:E0:70:20:BA:47:61:50:86:1C:9E:4E:9C Certificate issuer: /CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb Certificate serial: 019B7BA4CD08E2C41227D41CBCDBF71A86FC Authority key identifier: 8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/zVm1lqtYpLPgcCC6R2FQhhyeTpw.roa Signing time: Thu 01 Jan 2026 22:19:16 +0000 ROA not before: Thu 01 Jan 2026 22:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200612 IP address blocks: 185.100.208.0/22 maxlen: 22 185.100.208.0/24 maxlen: 24 185.100.209.0/24 maxlen: 24 185.100.210.0/24 maxlen: 24 185.100.211.0/24 maxlen: 24 2a07:4340::/29 maxlen: 29 2a07:4340::/32 maxlen: 32 2a07:4341::/32 maxlen: 32 2a07:4342::/32 maxlen: 32 2a07:4343::/32 maxlen: 32 2a07:4344::/32 maxlen: 32 2a07:4345::/32 maxlen: 32 2a07:4346::/32 maxlen: 32 2a07:4347::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:cd:08:e2:c4:12:27:d4:1c:bc:db:f7:1a:86:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb Validity Not Before: Jan 1 22:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd59b596ab58a4b3e07020ba476150861c9e4e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b6:25:b8:e9:84:6d:ef:e2:cf:f9:18:28:40: 07:b9:1d:39:ee:1c:f9:55:52:f9:be:4e:12:f1:a8: 31:5d:97:f6:de:42:64:6d:47:aa:ab:fd:59:af:db: 21:f3:77:a2:8e:56:a1:b2:1c:51:2b:42:7e:3d:b3: 9f:9c:15:6b:3c:fd:02:1f:33:09:08:2b:7e:6e:47: d9:f9:40:df:6f:f9:4f:df:2a:9d:7a:a7:cb:6d:ff: b9:d2:33:5f:9b:1e:78:b8:0c:66:d8:ab:6a:dc:e9: f0:67:3a:69:7e:a2:8b:b6:d0:dd:2c:10:59:52:4c: cf:da:00:28:59:b5:91:26:9f:0f:50:3e:d1:88:2e: 73:9a:0d:5d:33:87:67:a7:5e:9a:c1:52:3d:f2:c7: b3:6d:73:0b:19:95:2b:97:47:63:23:76:7c:72:b9: fd:80:e7:49:bf:a2:79:5c:10:c5:a0:55:87:cd:2d: e0:bc:88:f6:a5:0d:4f:55:0b:8d:12:43:e1:51:4a: f4:73:93:df:55:33:26:ab:2c:97:7a:a6:d0:d1:08: 8f:52:21:5a:c9:74:42:1d:b3:7a:c2:59:33:d6:93: 13:8f:e6:72:74:2a:23:31:f7:b8:1d:74:73:e7:4f: 3b:0f:af:67:73:8c:69:fb:c1:ee:e5:eb:e6:a8:9b: fa:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:59:B5:96:AB:58:A4:B3:E0:70:20:BA:47:61:50:86:1C:9E:4E:9C X509v3 Authority Key Identifier: keyid:8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/zVm1lqtYpLPgcCC6R2FQhhyeTpw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.100.208.0/22 IPv6: 2a07:4340::/29 Signature Algorithm: sha256WithRSAEncryption 31:7b:63:d7:48:d5:b6:f3:75:96:e8:6b:0e:c8:1c:a9:c1:0f: 42:2f:44:1c:5a:5f:26:0d:ff:14:53:b4:e8:21:77:12:c0:33: b0:db:ce:ec:ca:c7:4f:df:03:87:02:62:8d:60:14:b8:52:81: 76:e0:17:5c:36:37:6a:9c:20:4a:21:b4:66:6f:39:2e:83:0e: 81:4e:03:29:b1:27:ca:3c:bd:b0:87:7e:5e:96:a9:5b:43:81: f1:e0:94:fe:5b:fd:06:2b:ae:e4:12:f3:16:e0:80:8b:de:e2: 4e:2e:f6:82:34:a9:08:cd:5f:6b:c4:c5:cf:7b:82:8e:3f:cc: 93:c1:29:e2:51:b5:9b:8a:f1:32:e9:91:30:2b:9f:e6:fb:38: d7:7b:20:fa:67:4c:96:f8:4b:a9:88:47:bc:77:ef:18:01:dc: 31:e6:76:98:82:31:a5:97:52:ec:43:2a:15:89:3c:1e:88:cd: 75:fd:fb:97:2f:ce:bb:d3:d7:8d:72:df:5a:6c:f1:0b:55:84: 2a:74:f5:e5:a2:9c:a0:2f:a9:d3:0c:46:66:3c:19:9d:11:62: b5:2c:3b:cf:7a:18:b9:92:e2:51:ec:4e:4f:e2:34:2f:53:a4: 70:9b:98:2d:dc:95:b4:db:2d:e3:0c:36:1c:4e:0c:5b:02:d0: e4:6e:af:b9 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7pM0I4sQSJ9QcvNv3Gob8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNzAwM2M3YzY3N2NjM2JkNjg2MDMxNzY5OTJhM2ViZDAy ZjQ2Y2IwHhcNMjYwMTAxMjIxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDU5YjU5NmFiNThhNGIzZTA3MDIwYmE0NzYxNTA4NjFjOWU0ZTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rYluOmEbe/iz/kYKEAHuR057hz5 VVL5vk4S8agxXZf23kJkbUeqq/1Zr9sh83eijlahshxRK0J+PbOfnBVrPP0CHzMJ CCt+bkfZ+UDfb/lP3yqdeqfLbf+50jNfmx54uAxm2Ktq3OnwZzppfqKLttDdLBBZ UkzP2gAoWbWRJp8PUD7RiC5zmg1dM4dnp16awVI98sezbXMLGZUrl0djI3Z8crn9 gOdJv6J5XBDFoFWHzS3gvIj2pQ1PVQuNEkPhUUr0c5PfVTMmqyyXeqbQ0QiPUiFa yXRCHbN6wlkz1pMTj+ZydCojMfe4HXRz5087D69nc4xp+8Hu5evmqJv6jQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFM1ZtZarWKSz4HAgukdhUIYcnk6cMB8GA1UdIwQY MBaAFI5wA8fGd8w71oYDF2mSo+vQL0bLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam5BRHg4WjN6RHZXaGdNWGFaS2o2OUF2UnNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84ZDM0MTktNzhlMC00MTc2LTgyMTMt ZjE3ZjAwNTYxMDhjLzEvelZtMWxxdFlwTFBnY0NDNlIyRlFoaHllVHB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi84ZDM0MTktNzhlMC00MTc2LTgyMTMtZjE3ZjAwNTYxMDhj LzEvam5BRHg4WjN6RHZXaGdNWGFaS2o2OUF2UnNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWTQMA0E AgACMAcDBQMqB0NAMA0GCSqGSIb3DQEBCwUAA4IBAQAxe2PXSNW283WW6GsOyByp wQ9CL0QcWl8mDf8UU7ToIXcSwDOw287sysdP3wOHAmKNYBS4UoF24BdcNjdqnCBK IbRmbzkugw6BTgMpsSfKPL2wh35elqlbQ4Hx4JT+W/0GK67kEvMW4ICL3uJOLvaC NKkIzV9rxMXPe4KOP8yTwSniUbWbivEy6ZEwK5/m+zjXeyD6Z0yW+EupiEe8d+8Y Adwx5naYgjGll1LsQyoViTweiM11/fuXL86709eNct9abPELVYQqdPXlopygL6nT DEZmPBmdEWK1LDvPehi5kuJR7E5P4jQvU6Rwm5gt3JW02y3jDDYcTgxbAtDkbq+5 -----END CERTIFICATE-----Generated at Sun Jan 25 16:59:23 2026 by rpki-client