This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/zwEN9uXJIcPFmn7KPc1-IXqrqo8.roa File: zwEN9uXJIcPFmn7KPc1-IXqrqo8.roa (raw, json) Hash identifier: sU2LF6J4RVpFiTvBB34Yw73TFiEWHXzXbqHGVVrF5jw= Subject key identifier: CF:01:0D:F6:E5:C9:21:C3:C5:9A:7E:CA:3D:CD:7E:21:7A:AB:AA:8F Certificate issuer: /CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f Certificate serial: 019B7D5ACFDE75F2F681AD924EECB3F51702 Authority key identifier: 65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/zwEN9uXJIcPFmn7KPc1-IXqrqo8.roa Signing time: Fri 02 Jan 2026 06:17:42 +0000 ROA not before: Fri 02 Jan 2026 06:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210021 IP address blocks: 185.100.22.0/24 maxlen: 24 185.100.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:cf:de:75:f2:f6:81:ad:92:4e:ec:b3:f5:17:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f Validity Not Before: Jan 2 06:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf010df6e5c921c3c59a7eca3dcd7e217aabaa8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3b:c1:fe:25:0b:82:6b:18:9b:b3:f2:78:13: 56:42:5b:4c:62:fc:33:db:2d:bb:c8:cf:81:23:ce: f6:07:36:6d:0e:2f:1c:e7:60:95:25:e7:de:82:63: 6c:5c:cd:8e:6c:ae:de:6b:8f:a0:6a:30:ac:43:21: b2:5d:33:9b:1c:a8:3a:ed:23:76:0c:b5:ca:f2:e9: 67:99:b9:34:45:08:e3:40:8f:0c:83:d0:3a:28:35: 53:28:7f:a2:d2:85:4a:d5:66:d0:3a:4a:19:39:09: db:b0:e8:ea:a6:32:1c:df:7e:61:ec:54:df:cf:29: 09:a2:33:df:ad:f4:bc:00:0f:50:ae:27:11:ad:ba: c0:db:37:69:f4:c0:80:26:18:df:82:38:75:23:10: 15:7a:2a:c6:7c:ae:73:dd:36:90:bd:d8:de:de:44: 85:6c:57:f5:d3:ff:4b:9e:c8:1f:1d:02:b1:c7:b3: 39:9c:3e:fd:71:8f:39:0d:5e:67:b7:31:f7:c7:4f: d9:f7:a5:8f:09:17:3c:a1:b5:2a:d0:ba:5a:9b:6c: 6d:8c:a0:a5:66:c6:7e:0d:3a:49:33:4e:4b:34:5f: b9:b5:f4:ab:fd:a2:d8:b7:b6:8d:7d:b9:8e:43:2b: d1:79:76:6d:70:38:87:26:b9:ea:0c:df:83:bd:df: 14:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:01:0D:F6:E5:C9:21:C3:C5:9A:7E:CA:3D:CD:7E:21:7A:AB:AA:8F X509v3 Authority Key Identifier: keyid:65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/zwEN9uXJIcPFmn7KPc1-IXqrqo8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.100.22.0/23 Signature Algorithm: sha256WithRSAEncryption 63:d1:0f:81:1c:e1:3d:ac:40:50:4d:0c:40:6a:a4:d1:19:8d: da:ae:71:01:67:59:e3:ef:cb:c5:21:0e:45:af:0b:43:e4:7f: 44:7e:21:43:6b:ef:41:c4:55:ae:4c:ec:a1:eb:d4:39:58:10: 4d:02:73:cb:49:a6:bc:20:5a:6b:fb:a4:48:20:d7:2e:1c:fa: 86:4c:56:1d:91:51:3a:bf:ce:f9:56:71:85:1a:16:0a:c4:82: cd:6b:d2:a0:ac:29:9c:25:16:df:7e:1f:ab:ed:0e:dc:d9:0e: de:67:b6:75:02:aa:2a:cf:8a:91:9c:27:19:61:9f:4e:f4:a6: d4:cf:22:1e:1f:71:b2:c7:8b:96:e1:90:62:cf:5f:8a:37:bd: 52:7b:f8:e3:c9:07:5d:a9:5b:27:93:cd:ca:d0:45:70:98:b3: f8:4b:aa:66:59:b0:77:3f:3a:3f:2d:b8:cc:cf:60:a1:ae:76: 36:44:f8:08:b0:41:28:cb:30:9c:af:61:a4:46:18:b6:76:8f: e1:7e:eb:46:43:05:d2:2c:50:c5:6e:94:94:ef:27:d8:39:8a: 66:3f:fd:a4:62:82:41:ac:07:16:d9:16:8d:6d:74:a9:49:b5: 81:0d:d6:a7:44:ed:71:35:0d:3e:f9:08:79:08:9d:33:c6:d8: 4e:93:64:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9Ws/edfL2ga2STuyz9RcCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NWFlZjNjZWYzZDlhZmEwMjdkYjMzNTc5ZjRhMWZlOGFk OTFjNmYwHhcNMjYwMTAyMDYxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjAxMGRmNmU1YzkyMWMzYzU5YTdlY2EzZGNkN2UyMTdhYWJhYThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTvB/iULgmsYm7PyeBNWQltMYvwz 2y27yM+BI872BzZtDi8c52CVJefegmNsXM2ObK7ea4+gajCsQyGyXTObHKg67SN2 DLXK8ulnmbk0RQjjQI8Mg9A6KDVTKH+i0oVK1WbQOkoZOQnbsOjqpjIc335h7FTf zykJojPfrfS8AA9QricRrbrA2zdp9MCAJhjfgjh1IxAVeirGfK5z3TaQvdje3kSF bFf10/9LnsgfHQKxx7M5nD79cY85DV5ntzH3x0/Z96WPCRc8obUq0Lpam2xtjKCl ZsZ+DTpJM05LNF+5tfSr/aLYt7aNfbmOQyvReXZtcDiHJrnqDN+Dvd8UWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM8BDfblySHDxZp+yj3NfiF6q6qPMB8GA1UdIwQY MBaAFGVa7zzvPZr6An2zNXn0of6K2RxvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlZydlBPODltdm9DZmJNMWVmU2hfb3JaSEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lMmVlNTEtMTUyMy00MzZlLWFjNzUt ZWY2YmQyNmEwMzA1LzEvendFTjl1WEpJY1BGbW43S1BjMS1JWHFycW84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9lMmVlNTEtMTUyMy00MzZlLWFjNzUtZWY2YmQyNmEwMzA1 LzEvWlZydlBPODltdm9DZmJNMWVmU2hfb3JaSEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuWQWMA0G CSqGSIb3DQEBCwUAA4IBAQBj0Q+BHOE9rEBQTQxAaqTRGY3arnEBZ1nj78vFIQ5F rwtD5H9EfiFDa+9BxFWuTOyh69Q5WBBNAnPLSaa8IFpr+6RIINcuHPqGTFYdkVE6 v875VnGFGhYKxILNa9KgrCmcJRbffh+r7Q7c2Q7eZ7Z1Aqoqz4qRnCcZYZ9O9KbU zyIeH3Gyx4uW4ZBiz1+KN71Se/jjyQddqVsnk83K0EVwmLP4S6pmWbB3Pzo/LbjM z2ChrnY2RPgIsEEoyzCcr2GkRhi2do/hfutGQwXSLFDFbpSU7yfYOYpmP/2kYoJB rAcW2RaNbXSpSbWBDdanRO1xNQ0++Qh5CJ0zxthOk2Rq -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:54 2026 by rpki-client