This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/zY6-TSsM-n0cGeuR4MC7O4QKpZU.roa File: zY6-TSsM-n0cGeuR4MC7O4QKpZU.roa (raw, json) Hash identifier: pDF4f+98qM6dWbtI9D665+bMv7kt2epaA+MQQ2O8Qdc= Subject key identifier: CD:8E:BE:4D:2B:0C:FA:7D:1C:19:EB:91:E0:C0:BB:3B:84:0A:A5:95 Certificate issuer: /CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64 Certificate serial: 019B78A21E492B7B604073CA5242978EB117 Authority key identifier: 12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/zY6-TSsM-n0cGeuR4MC7O4QKpZU.roa Signing time: Thu 01 Jan 2026 08:17:29 +0000 ROA not before: Thu 01 Jan 2026 08:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47254 IP address blocks: 185.9.148.0/22 maxlen: 22 185.9.148.0/24 maxlen: 24 185.9.149.0/24 maxlen: 24 185.9.150.0/24 maxlen: 24 185.9.151.0/24 maxlen: 24 2a02:d1c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:1e:49:2b:7b:60:40:73:ca:52:42:97:8e:b1:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64 Validity Not Before: Jan 1 08:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd8ebe4d2b0cfa7d1c19eb91e0c0bb3b840aa595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:90:59:59:7f:68:04:76:b7:fc:63:64:8a:01: 82:25:f7:32:7f:c5:a0:64:57:18:30:43:67:cc:79: a9:c1:21:7b:98:ec:a8:a7:24:03:17:f7:8a:ca:42: 0f:45:24:c4:fe:50:5b:8e:1f:ec:6d:77:50:84:6f: 4e:58:c0:22:91:2a:bd:47:83:5b:64:3f:4d:e1:47: 81:8a:99:75:42:11:39:d6:63:98:4c:bb:86:8e:db: 06:c2:d5:4e:41:f6:22:fe:d8:04:25:5c:b6:fc:b2: f9:d9:70:77:a5:77:b6:8a:3b:6b:1f:88:9b:76:56: e2:4c:69:b6:37:8b:1f:2f:87:c3:c2:f1:50:2e:bf: e8:88:11:81:8d:88:4c:8e:62:80:22:5f:e9:79:03: df:dc:35:05:ed:f3:0f:1d:62:a7:95:19:3a:81:1f: a1:25:37:55:0f:06:95:98:54:4b:dd:c8:44:5e:c4: 90:55:39:3e:16:1a:74:c3:13:04:ae:24:32:1a:9c: 1c:03:00:59:6a:60:64:20:48:b6:ec:7d:26:19:c3: ff:85:3a:14:76:d1:b1:08:7c:37:05:57:52:cf:ad: 90:f1:77:2c:19:a5:61:53:24:ee:c8:d6:1c:4f:6e: e6:f4:0c:39:86:e1:37:20:27:3b:68:f6:6f:e8:2b: 0e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8E:BE:4D:2B:0C:FA:7D:1C:19:EB:91:E0:C0:BB:3B:84:0A:A5:95 X509v3 Authority Key Identifier: keyid:12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/zY6-TSsM-n0cGeuR4MC7O4QKpZU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.9.148.0/22 IPv6: 2a02:d1c0::/29 Signature Algorithm: sha256WithRSAEncryption a4:34:57:3b:28:2c:2b:db:62:0e:ad:57:7c:b9:17:bd:f1:38: cc:48:dd:e7:7e:d9:b5:1b:55:2d:9e:db:b5:e0:d1:29:c8:8b: a2:06:54:62:7d:2b:c6:db:fc:af:cc:a6:16:34:1e:1f:3f:33: 20:23:a3:5b:72:61:6d:3a:d1:8f:3f:da:00:5d:75:d4:df:51: f5:c8:56:37:9b:4b:0b:cf:62:1a:cb:04:05:62:6f:6d:b9:a6: a1:8e:03:65:5d:98:d2:fa:fe:32:ff:f7:03:5e:3d:2f:9c:69: ef:cd:85:80:45:a4:4a:d1:14:ee:8b:e9:15:1d:e9:5e:53:ef: fd:3d:2e:18:ac:0d:de:df:32:41:73:ea:03:c0:63:ff:69:a9: ac:48:3f:c2:94:da:c5:d0:0e:3e:94:6e:bc:73:3d:d5:1d:10: 01:9d:5e:a6:23:0d:ec:ee:a9:ea:60:95:da:4d:b1:61:59:b3: 9e:d5:ee:c3:07:3b:46:8d:e9:02:b1:14:fc:ea:c6:9c:86:6a: 0f:04:60:95:22:1c:62:1c:42:d0:fc:fe:01:55:72:9d:39:2e: da:d3:68:54:fd:18:5f:1c:04:b5:4d:0d:7a:4f:c9:c9:ca:ac: dd:84:14:8d:03:f3:49:52:7c:0e:5c:74:53:e0:30:91:bb:57: a8:e2:ec:69 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4oh5JK3tgQHPKUkKXjrEXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMTMzYTY1MjNlMmVkMGEwYzlhMzZlYThhN2M2ZjBlNzJh NWRkNjQwHhcNMjYwMTAxMDgxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDhlYmU0ZDJiMGNmYTdkMWMxOWViOTFlMGMwYmIzYjg0MGFhNTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJBZWX9oBHa3/GNkigGCJfcyf8Wg ZFcYMENnzHmpwSF7mOyopyQDF/eKykIPRSTE/lBbjh/sbXdQhG9OWMAikSq9R4Nb ZD9N4UeBipl1QhE51mOYTLuGjtsGwtVOQfYi/tgEJVy2/LL52XB3pXe2ijtrH4ib dlbiTGm2N4sfL4fDwvFQLr/oiBGBjYhMjmKAIl/peQPf3DUF7fMPHWKnlRk6gR+h JTdVDwaVmFRL3chEXsSQVTk+Fhp0wxMEriQyGpwcAwBZamBkIEi27H0mGcP/hToU dtGxCHw3BVdSz62Q8XcsGaVhUyTuyNYcT27m9Aw5huE3ICc7aPZv6CsOWwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFM2Ovk0rDPp9HBnrkeDAuzuECqWVMB8GA1UdIwQY MBaAFBITOmUj4u0KDJo26op8bw5ypd1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhNNlpTUGk3UW9NbWpicWlueHZEbktsM1dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85MzRlYzMtYjc2YS00MGQwLThhM2Et ODI0NzI5YWI0YjlhLzEvelk2LVRTc00tbjBjR2V1UjRNQzdPNFFLcFpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85MzRlYzMtYjc2YS00MGQwLThhM2EtODI0NzI5YWI0Yjlh LzEvRWhNNlpTUGk3UW9NbWpicWlueHZEbktsM1dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuQmUMA0E AgACMAcDBQMqAtHAMA0GCSqGSIb3DQEBCwUAA4IBAQCkNFc7KCwr22IOrVd8uRe9 8TjMSN3nftm1G1Utntu14NEpyIuiBlRifSvG2/yvzKYWNB4fPzMgI6NbcmFtOtGP P9oAXXXU31H1yFY3m0sLz2IaywQFYm9tuaahjgNlXZjS+v4y//cDXj0vnGnvzYWA RaRK0RTui+kVHeleU+/9PS4YrA3e3zJBc+oDwGP/aamsSD/ClNrF0A4+lG68cz3V HRABnV6mIw3s7qnqYJXaTbFhWbOe1e7DBztGjekCsRT86sachmoPBGCVIhxiHELQ /P4BVXKdOS7a02hU/RhfHAS1TQ16T8nJyqzdhBSNA/NJUnwOXHRT4DCRu1eo4uxp -----END CERTIFICATE-----Generated at Mon Jan 26 14:21:43 2026 by rpki-client