This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/zV8GWPUHNwGTQG5raiin3OTpl3Q.roa File: zV8GWPUHNwGTQG5raiin3OTpl3Q.roa (raw, json) Hash identifier: qn3NV9lIq1h/YqEcxO5jUOfNfQtEgWeeSn2fXHWtsYM= Subject key identifier: CD:5F:06:58:F5:07:37:01:93:40:6E:6B:6A:28:A7:DC:E4:E9:97:74 Certificate issuer: /CN=79d565f99ff5e0ffb5bdf9995ed7a808d41406e5 Certificate serial: 019B7A5B9D0032D586979110BB9A9788D392 Authority key identifier: 79:D5:65:F9:9F:F5:E0:FF:B5:BD:F9:99:5E:D7:A8:08:D4:14:06:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/zV8GWPUHNwGTQG5raiin3OTpl3Q.roa Signing time: Thu 01 Jan 2026 16:19:42 +0000 ROA not before: Thu 01 Jan 2026 16:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202468 IP address blocks: 130.185.120.0/23 maxlen: 23 185.204.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.crl rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.mft rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:9d:00:32:d5:86:97:91:10:bb:9a:97:88:d3:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79d565f99ff5e0ffb5bdf9995ed7a808d41406e5 Validity Not Before: Jan 1 16:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd5f0658f507370193406e6b6a28a7dce4e99774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:84:0c:8f:af:8e:d7:a2:f3:35:95:d3:d2:00: 71:b2:73:e5:d2:a8:62:69:68:8b:44:67:c1:9c:aa: 64:1a:79:d5:f4:62:d4:e9:24:8d:94:dc:37:a6:d2: 4e:09:3d:27:9e:be:0f:65:a1:6a:0d:64:a1:cb:73: b8:7e:3d:69:4c:e6:c7:6c:02:4d:24:0a:6f:f3:30: e4:fb:db:c6:71:a5:ac:7a:bf:40:d9:29:f9:52:1e: ce:00:fd:90:57:e6:68:3c:b4:9a:07:96:34:e8:bd: 5f:07:f3:c7:67:4a:00:a1:95:36:eb:58:1f:ea:d2: 30:25:b0:7c:d8:f7:92:c0:80:7e:23:e8:bc:a2:74: fe:65:ab:6b:c7:93:12:a0:28:e1:78:cd:25:29:cd: e4:3e:c5:af:60:2b:d2:0d:da:2b:ee:b6:ff:c9:ba: ed:fd:c8:8b:28:13:a3:87:1f:3a:db:fa:1b:ca:72: fa:15:cb:0c:5e:ab:4b:a6:e7:69:f7:fe:3b:a8:eb: 0f:f9:a1:68:f8:43:96:1d:0f:40:c1:8e:5e:b8:08: b3:b1:3d:f1:cc:e7:0a:51:aa:a9:3c:d5:15:a8:8f: 57:8a:a3:68:09:c0:f5:05:d3:b4:b6:64:85:f6:46: 25:27:7c:c0:13:5d:ca:69:22:30:32:3c:cc:ea:28: 39:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5F:06:58:F5:07:37:01:93:40:6E:6B:6A:28:A7:DC:E4:E9:97:74 X509v3 Authority Key Identifier: keyid:79:D5:65:F9:9F:F5:E0:FF:B5:BD:F9:99:5E:D7:A8:08:D4:14:06:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/zV8GWPUHNwGTQG5raiin3OTpl3Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.185.120.0/23 185.204.168.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:2b:47:7d:60:62:54:a1:e7:3a:ee:90:1c:63:23:bd:5f:8e: 8b:c1:63:23:92:03:fd:e1:c9:e1:76:7f:8a:d5:22:ec:ba:d0: 56:d9:cd:b7:ba:f2:d8:35:c7:6f:c2:eb:20:e8:70:62:92:15: f7:5c:ce:d6:64:27:4d:70:3e:7a:4e:ac:95:23:d5:bc:1d:08: 81:8d:47:81:18:7b:2a:a8:a3:c1:b4:73:c8:5a:cb:bc:ec:2f: be:dd:22:94:f9:e2:81:80:08:59:e6:04:e7:cc:94:b6:a2:9f: aa:43:2e:55:a0:e1:a0:af:9f:59:3d:12:54:9a:e0:e4:18:cb: cb:39:39:57:65:14:f0:5f:77:cb:18:95:38:93:2a:6f:a8:72: 3d:4d:90:3f:5c:7e:fe:a6:bf:48:a0:71:0a:5e:ff:f1:f8:d6: 76:47:09:04:17:cb:03:b3:df:0d:53:3b:fe:08:b0:91:83:f0: 38:04:48:1a:fa:58:e8:ba:2e:f3:77:e6:25:f9:48:87:09:c2: 09:1f:2e:ae:40:27:27:b7:29:fc:62:9f:4a:f1:dd:be:35:11: f0:4a:2f:8e:8e:db:68:33:76:ce:07:44:0f:90:c4:66:89:3a: d4:8b:fb:66:30:07:78:51:07:43:b5:20:1f:6e:06:8f:53:5e: 25:ef:b9:b3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W50AMtWGl5EQu5qXiNOSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5ZDU2NWY5OWZmNWUwZmZiNWJkZjk5OTVlZDdhODA4ZDQx NDA2ZTUwHhcNMjYwMTAxMTYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDVmMDY1OGY1MDczNzAxOTM0MDZlNmI2YTI4YTdkY2U0ZTk5Nzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIQMj6+O16LzNZXT0gBxsnPl0qhi aWiLRGfBnKpkGnnV9GLU6SSNlNw3ptJOCT0nnr4PZaFqDWShy3O4fj1pTObHbAJN JApv8zDk+9vGcaWser9A2Sn5Uh7OAP2QV+ZoPLSaB5Y06L1fB/PHZ0oAoZU261gf 6tIwJbB82PeSwIB+I+i8onT+Zatrx5MSoCjheM0lKc3kPsWvYCvSDdor7rb/ybrt /ciLKBOjhx862/obynL6FcsMXqtLpudp9/47qOsP+aFo+EOWHQ9AwY5euAizsT3x zOcKUaqpPNUVqI9XiqNoCcD1BdO0tmSF9kYlJ3zAE13KaSIwMjzM6ig5QQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM1fBlj1BzcBk0Bua2oop9zk6Zd0MB8GA1UdIwQY MBaAFHnVZfmf9eD/tb35mV7XqAjUFAblMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWRWbC1aXzE0UC0xdmZtWlh0ZW9DTlFVQnVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9lZTVjZDctYjMwZS00NjZiLWFhYWQt NmMzYjg3NDQzZTA2LzEvelY4R1dQVUhOd0dUUUc1cmFpaW4zT1RwbDNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9lZTVjZDctYjMwZS00NjZiLWFhYWQtNmMzYjg3NDQzZTA2 LzEvZWRWbC1aXzE0UC0xdmZtWlh0ZW9DTlFVQnVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBgrl4AwQC ucyoMA0GCSqGSIb3DQEBCwUAA4IBAQA9K0d9YGJUoec67pAcYyO9X46LwWMjkgP9 4cnhdn+K1SLsutBW2c23uvLYNcdvwusg6HBikhX3XM7WZCdNcD56TqyVI9W8HQiB jUeBGHsqqKPBtHPIWsu87C++3SKU+eKBgAhZ5gTnzJS2op+qQy5VoOGgr59ZPRJU muDkGMvLOTlXZRTwX3fLGJU4kypvqHI9TZA/XH7+pr9IoHEKXv/x+NZ2RwkEF8sD s98NUzv+CLCRg/A4BEga+ljoui7zd+Yl+UiHCcIJHy6uQCcntyn8Yp9K8d2+NRHw Si+OjttoM3bOB0QPkMRmiTrUi/tmMAd4UQdDtSAfbgaPU14l77mz -----END CERTIFICATE-----Generated at Mon Jan 26 05:34:10 2026 by rpki-client