This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/zFQaWtM5PgZgQ7lLGiUdAyDYFlk.roa File: zFQaWtM5PgZgQ7lLGiUdAyDYFlk.roa (raw, json) Hash identifier: T++koCK9BmrUNL9Ums78HVke+W3UNP2l17fVLv+FlR0= Subject key identifier: CC:54:1A:5A:D3:39:3E:06:60:43:B9:4B:1A:25:1D:03:20:D8:16:59 Certificate issuer: /CN=c784128505f7f99c7570442980adeb8af90cc270 Certificate serial: 019B797F4EFFF9A4D3FF4A2C437F34C75AA9 Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/zFQaWtM5PgZgQ7lLGiUdAyDYFlk.roa Signing time: Thu 01 Jan 2026 12:19:04 +0000 ROA not before: Thu 01 Jan 2026 12:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205184 IP address blocks: 23.19.48.0/22 maxlen: 22 185.84.200.0/23 maxlen: 23 185.129.40.0/22 maxlen: 22 185.151.204.0/24 maxlen: 24 185.230.36.0/23 maxlen: 23 185.230.38.0/24 maxlen: 24 2a0b:14c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:4e:ff:f9:a4:d3:ff:4a:2c:43:7f:34:c7:5a:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270 Validity Not Before: Jan 1 12:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc541a5ad3393e066043b94b1a251d0320d81659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4b:47:07:d2:9b:99:9a:d6:55:5c:89:9b:a4: 27:68:91:f9:07:08:bf:4a:4e:10:b8:69:29:f7:c8: 1f:1b:3e:b4:68:b7:57:50:cc:90:e7:50:80:4b:78: d3:90:98:83:b9:3a:21:ea:6e:15:9c:b4:0b:ec:3b: 2f:01:cc:43:39:7d:13:ba:f8:17:21:98:3e:5f:f6: 58:30:89:6e:3e:7f:8d:52:0a:10:00:8b:e7:f2:56: 09:63:03:81:f7:d6:c3:00:79:ae:ce:ad:6a:8e:1f: b0:6f:e7:e9:4d:db:dd:f7:e0:10:61:13:2d:b0:bb: 7b:85:7c:91:93:09:25:09:39:c9:bd:d7:04:62:e7: 28:6a:58:ba:44:5f:d0:13:23:46:7f:98:fa:75:64: a7:33:f3:3d:b2:7e:b2:4d:e2:a8:59:81:ac:22:b8: a8:b1:87:ca:eb:71:86:c8:e4:63:ec:3d:76:33:e7: cb:75:5f:ef:0a:60:46:19:ca:aa:24:30:32:01:2a: 4a:a0:2a:1d:ad:b1:10:56:66:c5:ce:9a:a6:86:68: 1b:98:33:91:f1:53:ec:07:3d:8a:42:ad:2b:5b:a0: 58:9a:ce:29:a7:47:10:ec:60:ab:0b:e6:e8:f5:70: 7c:ec:8a:21:e2:04:51:3e:a4:17:71:03:e0:a3:9c: a4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:54:1A:5A:D3:39:3E:06:60:43:B9:4B:1A:25:1D:03:20:D8:16:59 X509v3 Authority Key Identifier: keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/zFQaWtM5PgZgQ7lLGiUdAyDYFlk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.19.48.0/22 185.84.200.0/23 185.129.40.0/22 185.151.204.0/24 185.230.36.0-185.230.38.255 IPv6: 2a0b:14c0:1::/48 Signature Algorithm: sha256WithRSAEncryption 00:99:75:13:17:b3:90:c8:3e:7c:2e:d7:73:4a:ce:72:98:b2: 3f:3d:65:2e:3a:91:6e:ae:ab:2b:9b:94:63:25:82:3e:82:43: 06:44:93:a8:56:c2:39:f0:e6:86:b6:6f:9c:23:ce:ae:c6:df: fb:3a:68:e3:5f:59:cd:a6:77:ef:8b:c8:ea:05:40:b6:b7:fe: 7e:1c:58:95:47:c2:7f:45:35:14:90:2d:59:41:6c:60:92:fb: 83:65:84:4d:e2:96:3c:e3:4c:bd:ed:ce:2f:0c:6f:52:a1:07: ef:89:2a:02:c1:02:62:94:65:22:fb:cb:05:36:4e:29:66:87: 75:73:02:3a:e6:11:11:7c:94:e7:a1:86:d7:5a:04:8d:a6:34: 9e:91:09:93:35:f0:e6:33:a3:a3:28:60:2d:19:11:f1:d3:9b: 3a:7a:4e:71:d6:73:4c:49:6a:8e:a3:17:7c:a7:b4:fe:68:be: b5:64:a3:b0:cd:f9:06:01:c8:0d:4f:91:ae:a7:86:aa:41:36: 9d:2f:df:c5:b9:90:53:b5:58:6d:05:00:5d:f8:0e:ec:70:f4: ca:62:bb:75:d5:85:8d:4f:86:8c:80:d5:e9:6e:c1:0d:33:5c: 12:94:99:eb:ee:fa:0e:82:32:04:3b:98:85:5c:55:a6:23:2e: 6d:fb:3e:4c -----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgISAZt5f07/+aTT/0osQ380x1qpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ODQxMjg1MDVmN2Y5OWM3NTcwNDQyOTgwYWRlYjhhZjkw Y2MyNzAwHhcNMjYwMTAxMTIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzU0MWE1YWQzMzkzZTA2NjA0M2I5NGIxYTI1MWQwMzIwZDgxNjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtktHB9KbmZrWVVyJm6QnaJH5Bwi/ Sk4QuGkp98gfGz60aLdXUMyQ51CAS3jTkJiDuToh6m4VnLQL7DsvAcxDOX0TuvgX IZg+X/ZYMIluPn+NUgoQAIvn8lYJYwOB99bDAHmuzq1qjh+wb+fpTdvd9+AQYRMt sLt7hXyRkwklCTnJvdcEYucoali6RF/QEyNGf5j6dWSnM/M9sn6yTeKoWYGsIrio sYfK63GGyORj7D12M+fLdV/vCmBGGcqqJDAyASpKoCodrbEQVmbFzpqmhmgbmDOR 8VPsBz2KQq0rW6BYms4pp0cQ7GCrC+bo9XB87Ioh4gRRPqQXcQPgo5yk+QIDAQAB o4ICOjCCAjYwHQYDVR0OBBYEFMxUGlrTOT4GYEO5SxolHQMg2BZZMB8GA1UdIwQY MBaAFMeEEoUF9/mcdXBEKYCt64r5DMJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDRRU2hRWDMtWngxY0VRcGdLM3JpdmtNd25BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80YzVjM2QtMjFiMC00MDU4LTg5ZmQt NmMxYjQ0NzFmN2VlLzEvekZRYVd0TTVQZ1pnUTdsTEdpVWRBeURZRmxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC80YzVjM2QtMjFiMC00MDU4LTg5ZmQtNmMxYjQ0NzFmN2Vl LzEveDRRU2hRWDMtWngxY0VRcGdLM3JpdmtNd25BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzAsBAIAATAmAwQCFxMwAwQB uVTIAwQCuYEoAwQAuZfMMAwDBAK55iQDBAC55iYwDwQCAAIwCQMHACoLFMAAATAN BgkqhkiG9w0BAQsFAAOCAQEAAJl1ExezkMg+fC7Xc0rOcpiyPz1lLjqRbq6rK5uU YyWCPoJDBkSTqFbCOfDmhrZvnCPOrsbf+zpo419ZzaZ374vI6gVAtrf+fhxYlUfC f0U1FJAtWUFsYJL7g2WETeKWPONMve3OLwxvUqEH74kqAsECYpRlIvvLBTZOKWaH dXMCOuYREXyU56GG11oEjaY0npEJkzXw5jOjoyhgLRkR8dObOnpOcdZzTElqjqMX fKe0/mi+tWSjsM35BgHIDU+RrqeGqkE2nS/fxbmQU7VYbQUAXfgO7HD0ymK7ddWF jU+GjIDV6W7BDTNcEpSZ6+76DoIyBDuYhVxVpiMubfs+TA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:26 2026 by rpki-client