This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/ZPg85NSytJPlUN2d6j_NXo_7uvU.roa File: ZPg85NSytJPlUN2d6j_NXo_7uvU.roa (raw, json) Hash identifier: Pbud9IP1em4ESN5azJLfVrpiDWDyb86aua1cseQFv0g= Subject key identifier: 64:F8:3C:E4:D4:B2:B4:93:E5:50:DD:9D:EA:3F:CD:5E:8F:FB:BA:F5 Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Certificate serial: 019B7E37EE4B86C9AD58FDE2212937023431 Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/ZPg85NSytJPlUN2d6j_NXo_7uvU.roa Signing time: Fri 02 Jan 2026 10:19:13 +0000 ROA not before: Fri 02 Jan 2026 10:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58203 IP address blocks: 195.87.18.0/24 maxlen: 24 195.87.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ee:4b:86:c9:ad:58:fd:e2:21:29:37:02:34:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Validity Not Before: Jan 2 10:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64f83ce4d4b2b493e550dd9dea3fcd5e8ffbbaf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a6:f0:70:e7:be:d1:91:7f:62:80:d4:b6:1a: b7:c4:62:08:b9:e0:c1:e9:ff:c0:3d:81:47:38:b9: 2c:ab:93:8d:61:e8:b3:f3:0c:cc:e6:19:23:41:b0: e2:23:3d:f7:55:dd:87:f7:40:f5:24:fe:ef:dd:46: e8:40:db:20:06:f0:32:2f:d4:d8:d2:0a:33:e9:be: 16:9e:c8:3f:e9:cc:bf:78:7d:f3:f8:61:9a:b6:60: 70:a5:e8:b4:e6:25:f5:85:cf:76:64:29:ab:1d:f9: 3f:56:ce:05:9b:01:d8:c8:4d:62:28:aa:bd:6c:ec: bc:f5:3b:c1:81:96:d0:62:49:ec:a3:c7:aa:ea:f3: bf:fe:f1:4d:39:ea:da:b1:38:5c:0e:43:f0:71:61: bd:23:e4:4a:17:8d:e5:39:53:08:c2:9c:29:4c:0c: 9f:20:d3:1d:b1:f4:5c:cc:65:b7:82:0d:b1:8c:57: fa:7b:27:8f:1f:14:c3:6e:e0:c3:83:c4:33:44:c3: 6f:42:00:5c:fd:fb:5e:ff:db:c8:a9:85:6b:90:20: 94:dc:27:d2:4a:a6:c1:b0:30:18:1b:43:2f:f1:f4: 2d:70:69:76:60:13:cb:fe:a0:91:ba:1e:2c:b3:52: 27:fb:6b:a8:26:1c:40:67:4d:93:50:37:78:7e:6c: 78:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F8:3C:E4:D4:B2:B4:93:E5:50:DD:9D:EA:3F:CD:5E:8F:FB:BA:F5 X509v3 Authority Key Identifier: keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/ZPg85NSytJPlUN2d6j_NXo_7uvU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.87.18.0/24 195.87.239.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:10:2c:c0:25:a9:47:17:25:0f:29:28:a6:87:1e:2f:ca:2f: 4f:74:2e:d3:6c:5e:25:1b:7d:68:89:a5:fb:34:2e:d4:3e:11: f7:52:31:75:d3:b8:13:01:6a:b0:26:19:24:b2:97:46:f6:64: 86:ba:62:9a:d4:e6:05:6d:d2:1a:7c:26:3a:37:3a:6b:7a:e2: 30:3d:a3:e9:c9:82:f6:37:99:3e:c0:a4:4b:c7:69:3a:d7:13: f1:43:35:bf:91:95:68:1c:4e:b6:8c:af:e8:6c:4a:f3:57:b9: 21:2d:e5:1a:83:ea:fa:7c:43:ab:85:a0:51:eb:c9:f8:48:b0: 22:66:6a:14:8b:6f:0e:ab:e3:a4:1c:74:91:76:a5:4a:88:54: 62:2a:6c:68:f9:b1:27:3d:03:19:93:ce:0a:6e:7b:5b:5b:e7: 05:b9:6d:e1:62:36:c9:3b:81:02:73:df:ed:15:6b:ca:44:4b: c7:bd:31:13:2c:d7:74:77:e4:a0:6a:12:4b:0b:ae:80:74:39: 9a:5e:fd:63:cf:75:5b:04:46:c5:77:d0:e7:02:88:66:ae:68: dc:01:de:9f:b3:b6:20:31:00:e1:91:54:38:e3:d1:65:99:1c: ce:5b:a4:5f:f7:8d:9b:01:a1:77:e0:e8:c3:80:ef:82:e8:df: ef:9b:dd:f1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N+5LhsmtWP3iISk3AjQxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw MWY0YzkwHhcNMjYwMTAyMTAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGY4M2NlNGQ0YjJiNDkzZTU1MGRkOWRlYTNmY2Q1ZThmZmJiYWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KbwcOe+0ZF/YoDUthq3xGIIueDB 6f/APYFHOLksq5ONYeiz8wzM5hkjQbDiIz33Vd2H90D1JP7v3UboQNsgBvAyL9TY 0goz6b4Wnsg/6cy/eH3z+GGatmBwpei05iX1hc92ZCmrHfk/Vs4FmwHYyE1iKKq9 bOy89TvBgZbQYknso8eq6vO//vFNOerasThcDkPwcWG9I+RKF43lOVMIwpwpTAyf INMdsfRczGW3gg2xjFf6eyePHxTDbuDDg8QzRMNvQgBc/fte/9vIqYVrkCCU3CfS SqbBsDAYG0Mv8fQtcGl2YBPL/qCRuh4ss1In+2uoJhxAZ02TUDd4fmx4rQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGT4POTUsrST5VDdneo/zV6P+7r1MB8GA1UdIwQY MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt ODNkNjQ4Zjc5NzQ2LzEvWlBnODVOU3l0SlBsVU4yZDZqX05Yb183dXZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2 LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw1cSAwQA w1fvMA0GCSqGSIb3DQEBCwUAA4IBAQAdECzAJalHFyUPKSimhx4vyi9PdC7TbF4l G31oiaX7NC7UPhH3UjF107gTAWqwJhkkspdG9mSGumKa1OYFbdIafCY6NzpreuIw PaPpyYL2N5k+wKRLx2k61xPxQzW/kZVoHE62jK/obErzV7khLeUag+r6fEOrhaBR 68n4SLAiZmoUi28Oq+OkHHSRdqVKiFRiKmxo+bEnPQMZk84KbntbW+cFuW3hYjbJ O4ECc9/tFWvKREvHvTETLNd0d+SgahJLC66AdDmaXv1jz3VbBEbFd9DnAohmrmjc Ad6fs7YgMQDhkVQ449FlmRzOW6Rf942bAaF34OjDgO+C6N/vm93x -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:14 2026 by rpki-client