This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ZG3wywvA41qfbz9i4FHPo7ZoiQY.roa File: ZG3wywvA41qfbz9i4FHPo7ZoiQY.roa (raw, json) Hash identifier: D9m8ewpfk0R2qV4OYq5Yah9WUER9Xli2U4ySGQlIqKI= Subject key identifier: 64:6D:F0:CB:0B:C0:E3:5A:9F:6F:3F:62:E0:51:CF:A3:B6:68:89:06 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019B7B36BC89BBEFDE3A827E2A79184A9C05 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ZG3wywvA41qfbz9i4FHPo7ZoiQY.roa Signing time: Thu 01 Jan 2026 20:19:03 +0000 ROA not before: Thu 01 Jan 2026 20:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 185.225.170.0/24 maxlen: 24 185.225.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:bc:89:bb:ef:de:3a:82:7e:2a:79:18:4a:9c:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Jan 1 20:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=646df0cb0bc0e35a9f6f3f62e051cfa3b6688906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ea:57:cc:88:6a:b9:1f:27:99:8f:3c:81:2f: f6:a5:30:70:9c:d7:3f:ca:6c:91:2f:59:b1:18:b8: ea:61:aa:90:fa:ab:a4:2e:c9:38:33:3c:fb:00:81: 2a:02:19:35:09:40:e1:41:d4:f2:ba:a2:4d:c2:10: df:7f:bb:2a:e2:a9:1c:b0:8a:71:c4:95:b7:81:46: b3:44:29:c4:ce:b5:a6:d7:1f:b0:19:7b:26:58:1a: f4:c5:f5:8d:67:78:c0:92:98:ec:ac:ca:24:20:24: 65:89:20:65:b9:ef:82:b4:ca:6f:85:08:3e:80:76: d7:2d:64:bb:fa:a0:59:c4:fa:7b:93:00:49:42:fd: 2d:00:af:87:09:01:4b:70:26:49:47:45:5c:f5:98: 7a:c9:f8:63:06:98:90:39:bc:fd:5d:29:e3:7f:54: f8:c8:52:d9:0e:e3:f1:e7:32:dc:5e:bc:92:7d:7d: 49:89:7f:74:71:19:a5:69:b3:c2:8f:33:97:b7:35: 64:b7:f5:6f:e8:4a:76:05:3a:40:b9:57:e0:72:b3: 71:34:39:3d:65:c1:b3:15:2d:87:8d:d7:0c:b4:8c: a4:a8:70:4a:3d:9a:4d:1b:8a:74:d2:8a:38:56:b9: fb:86:c5:a7:03:35:3b:c2:c3:01:46:4e:1e:0c:00: 9c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6D:F0:CB:0B:C0:E3:5A:9F:6F:3F:62:E0:51:CF:A3:B6:68:89:06 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ZG3wywvA41qfbz9i4FHPo7ZoiQY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.170.0/23 Signature Algorithm: sha256WithRSAEncryption 09:a9:aa:e7:10:60:24:ca:98:dd:50:a3:c5:10:56:3d:15:19: 12:6e:a8:3e:2b:53:73:09:06:22:09:c6:97:26:fa:11:89:b2: b6:cb:cf:d2:31:dc:63:19:f8:ab:f0:7c:d5:3f:a8:c8:24:a3: 84:16:99:3d:96:72:73:ba:73:0d:36:ea:3d:70:87:62:21:08: 40:73:0f:80:21:73:64:5d:20:c0:4f:4f:c4:b4:00:74:31:85: d8:02:c8:53:da:bc:a7:ab:de:43:a4:ff:46:19:42:6e:50:2f: 6c:13:f4:2f:79:21:b5:94:5c:1e:14:44:b3:98:73:29:b7:a4: 4a:bf:df:74:a1:de:5c:b0:0f:36:8e:68:31:d8:4a:0e:0d:ee: 34:4f:bf:a0:c8:79:f2:a7:96:de:0a:a8:c9:98:74:7c:79:b3: ff:87:80:45:9a:ea:7f:74:de:89:69:5d:f8:ff:6d:35:c1:b4: 95:f1:f9:3b:90:a2:d0:a5:0e:19:27:ca:45:11:14:ad:6a:3c: fb:19:3a:10:29:26:f5:81:52:c8:ec:5a:eb:5b:76:97:eb:e0: f2:81:c6:ad:ae:48:18:7d:16:a9:09:d5:3b:5c:5a:7f:43:58: 99:0c:9f:4c:9b:94:14:e8:a3:21:a4:78:c0:74:63:4a:a8:03: 0c:a4:d9:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NryJu+/eOoJ+KnkYSpwFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwMTAxMjAxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDZkZjBjYjBiYzBlMzVhOWY2ZjNmNjJlMDUxY2ZhM2I2Njg4OTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsepXzIhquR8nmY88gS/2pTBwnNc/ ymyRL1mxGLjqYaqQ+qukLsk4Mzz7AIEqAhk1CUDhQdTyuqJNwhDff7sq4qkcsIpx xJW3gUazRCnEzrWm1x+wGXsmWBr0xfWNZ3jAkpjsrMokICRliSBlue+CtMpvhQg+ gHbXLWS7+qBZxPp7kwBJQv0tAK+HCQFLcCZJR0Vc9Zh6yfhjBpiQObz9XSnjf1T4 yFLZDuPx5zLcXrySfX1JiX90cRmlabPCjzOXtzVkt/Vv6Ep2BTpAuVfgcrNxNDk9 ZcGzFS2HjdcMtIykqHBKPZpNG4p00oo4Vrn7hsWnAzU7wsMBRk4eDACcWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGRt8MsLwONan28/YuBRz6O2aIkGMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvWkczd3l3dkE0MXFmYno5aTRGSFBvN1pvaVFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBueGqMA0G CSqGSIb3DQEBCwUAA4IBAQAJqarnEGAkypjdUKPFEFY9FRkSbqg+K1NzCQYiCcaX JvoRibK2y8/SMdxjGfir8HzVP6jIJKOEFpk9lnJzunMNNuo9cIdiIQhAcw+AIXNk XSDAT0/EtAB0MYXYAshT2rynq95DpP9GGUJuUC9sE/QveSG1lFweFESzmHMpt6RK v990od5csA82jmgx2EoODe40T7+gyHnyp5beCqjJmHR8ebP/h4BFmup/dN6JaV34 /201wbSV8fk7kKLQpQ4ZJ8pFERStajz7GToQKSb1gVLI7FrrW3aX6+DygcatrkgY fRapCdU7XFp/Q1iZDJ9Mm5QU6KMhpHjAdGNKqAMMpNmN -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:14 2026 by rpki-client