This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/Z8UyJlJrz_tPx2Lzi2wtF6sRSoY.roa File: Z8UyJlJrz_tPx2Lzi2wtF6sRSoY.roa (raw, json) Hash identifier: pZEmU7QBOi+LmI67NMxNilqE5KRHfsee+sRCVmykeWE= Subject key identifier: 67:C5:32:26:52:6B:CF:FB:4F:C7:62:F3:8B:6C:2D:17:AB:11:4A:86 Certificate issuer: /CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Certificate serial: 019B7A5B32883E7695D8E3501AEE14D1287D Authority key identifier: 23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/Z8UyJlJrz_tPx2Lzi2wtF6sRSoY.roa Signing time: Thu 01 Jan 2026 16:19:15 +0000 ROA not before: Thu 01 Jan 2026 16:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39791 IP address blocks: 185.115.182.0/24 maxlen: 24 2a07:7a00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:32:88:3e:76:95:d8:e3:50:1a:ee:14:d1:28:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Validity Not Before: Jan 1 16:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67c53226526bcffb4fc762f38b6c2d17ab114a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:52:e7:98:e1:c2:00:ae:ad:ca:84:70:b3:29: c6:fd:b7:57:2c:8e:8d:c2:c0:40:24:81:8a:bf:ac: e4:47:eb:56:b1:45:8e:0d:8d:4d:f2:dd:6f:7e:77: 1b:d6:d1:b3:43:46:45:e8:1f:96:a7:95:f3:f8:27: 70:b3:d7:d6:5a:f7:3f:75:ef:81:b0:10:1f:fe:ca: 63:59:22:83:e5:ba:46:b6:b5:cc:87:50:05:1d:65: 0c:8a:a0:5a:5b:f2:34:a3:fb:88:c9:64:ef:71:52: d9:c8:88:70:b0:dd:04:c2:1f:6f:63:45:60:c4:c0: ba:54:21:2d:2d:8c:0b:5b:32:60:70:84:12:15:b9: c3:ad:17:3b:0c:ca:3a:fa:ed:9a:c2:32:f4:6b:ee: f3:20:59:00:22:41:85:58:cf:81:34:db:4e:51:27: 1b:2b:50:94:45:d5:89:99:63:5f:b6:19:4b:89:0d: ae:ba:81:02:e6:f9:8c:bf:d0:0e:92:c7:d0:84:03: 09:76:17:cf:04:b6:a9:ac:65:8f:62:57:c5:d4:33: 2f:f5:ea:07:c8:06:d5:e6:94:97:fc:46:c8:1f:92: 7a:b7:35:b7:ee:b5:b5:94:68:c2:a0:1b:04:b1:c7: 24:3d:56:e4:cd:a8:55:fc:70:19:a1:44:57:68:95: 78:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C5:32:26:52:6B:CF:FB:4F:C7:62:F3:8B:6C:2D:17:AB:11:4A:86 X509v3 Authority Key Identifier: keyid:23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/Z8UyJlJrz_tPx2Lzi2wtF6sRSoY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.115.182.0/24 IPv6: 2a07:7a00::/48 Signature Algorithm: sha256WithRSAEncryption 7e:f6:9b:92:0e:d2:4e:9f:0c:49:09:cb:c9:1b:39:a6:22:d7: ca:40:67:d8:d6:d4:c8:93:cd:fb:f3:69:25:e9:28:f6:3f:c5: 2c:e6:51:45:d0:c5:6d:53:0c:e6:ad:db:8e:6b:1b:5a:cc:72: ea:4a:37:d7:c0:f3:cd:ec:3e:63:21:73:d9:10:07:12:fe:d9: 8b:40:84:46:78:af:2f:b2:9e:be:0a:ef:2f:fe:e8:ae:c5:ce: fc:b2:ce:1c:6c:0c:cb:d4:0b:3f:12:a4:83:42:b4:4f:18:f6: 92:74:b1:d2:30:8d:2d:e5:14:f4:37:d3:45:3f:ca:a8:ff:bb: ca:d3:3a:d1:09:be:15:e8:77:52:07:fc:ba:6a:10:cd:f7:94: d4:3b:1f:66:82:b0:da:71:91:b2:4c:61:62:1d:0e:75:22:be: 41:64:97:d3:09:d4:a9:f1:f6:10:50:fb:ad:0e:5b:bc:cb:03: 33:5c:58:e2:64:1e:14:5d:38:f2:98:88:5d:d8:f8:44:29:12: 03:50:44:4c:49:94:f0:38:05:35:a7:33:75:35:1e:70:a4:10: 0b:17:93:12:39:63:bc:94:e1:f5:85:71:0b:42:a3:8e:df:77: 06:b7:4e:fc:59:ce:bb:9c:ae:e6:f3:1b:2a:b7:85:53:42:b0: ac:ec:dd:68 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6WzKIPnaV2ONQGu4U0Sh9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMjU5ZGEzYjFiMzhjYTA5MzlmNDkwZmI5MDQzZmNkODlj ZmQwNjIwHhcNMjYwMTAxMTYxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2M1MzIyNjUyNmJjZmZiNGZjNzYyZjM4YjZjMmQxN2FiMTE0YTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlLnmOHCAK6tyoRwsynG/bdXLI6N wsBAJIGKv6zkR+tWsUWODY1N8t1vfncb1tGzQ0ZF6B+Wp5Xz+Cdws9fWWvc/de+B sBAf/spjWSKD5bpGtrXMh1AFHWUMiqBaW/I0o/uIyWTvcVLZyIhwsN0Ewh9vY0Vg xMC6VCEtLYwLWzJgcIQSFbnDrRc7DMo6+u2awjL0a+7zIFkAIkGFWM+BNNtOUScb K1CURdWJmWNfthlLiQ2uuoEC5vmMv9AOksfQhAMJdhfPBLaprGWPYlfF1DMv9eoH yAbV5pSX/EbIH5J6tzW37rW1lGjCoBsEscckPVbkzahV/HAZoURXaJV4VQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGfFMiZSa8/7T8di84tsLRerEUqGMB8GA1UdIwQY MBaAFCMlnaOxs4ygk59JD7kEP82Jz9BiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUt NjU0ZGQ2NDQyY2U0LzEvWjhVeUpsSnJ6X3RQeDJMemkyd3RGNnNSU29ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUtNjU0ZGQ2NDQyY2U0 LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuXO2MA8E AgACMAkDBwAqB3oAAAAwDQYJKoZIhvcNAQELBQADggEBAH72m5IO0k6fDEkJy8kb OaYi18pAZ9jW1MiTzfvzaSXpKPY/xSzmUUXQxW1TDOat245rG1rMcupKN9fA883s PmMhc9kQBxL+2YtAhEZ4ry+ynr4K7y/+6K7FzvyyzhxsDMvUCz8SpINCtE8Y9pJ0 sdIwjS3lFPQ300U/yqj/u8rTOtEJvhXod1IH/LpqEM33lNQ7H2aCsNpxkbJMYWId DnUivkFkl9MJ1Knx9hBQ+60OW7zLAzNcWOJkHhRdOPKYiF3Y+EQpEgNQRExJlPA4 BTWnM3U1HnCkEAsXkxI5Y7yU4fWFcQtCo47fdwa3TvxZzrucrubzGyq3hVNCsKzs 3Wg= -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:55 2026 by rpki-client