This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ZQDzbR1tXesEtbaNpTXeR98UNSU.roa File: ZQDzbR1tXesEtbaNpTXeR98UNSU.roa (raw, json) Hash identifier: p/CZ3mMgPUysAR/2N4wlvUf4JRvyOPuugh7sAJNEfMo= Subject key identifier: 65:00:F3:6D:1D:6D:5D:EB:04:B5:B6:8D:A5:35:DE:47:DF:14:35:25 Certificate issuer: /CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0 Certificate serial: 019B7E38DF8FE7DDAAFFA56BD2F9367F7F88 Authority key identifier: 79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ZQDzbR1tXesEtbaNpTXeR98UNSU.roa Signing time: Fri 02 Jan 2026 10:20:15 +0000 ROA not before: Fri 02 Jan 2026 10:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13030 IP address blocks: 185.157.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:df:8f:e7:dd:aa:ff:a5:6b:d2:f9:36:7f:7f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0 Validity Not Before: Jan 2 10:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6500f36d1d6d5deb04b5b68da535de47df143525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:92:da:08:5d:9d:e7:f5:01:e6:5d:1f:53:53: 7a:a2:3c:78:7d:9c:20:1a:3d:f8:b4:fd:ff:3a:1d: 6f:39:2a:08:ab:16:54:34:37:cd:e5:85:f8:99:23: 99:e8:38:1f:48:6d:63:2c:a2:af:df:44:93:5d:9c: c8:3d:05:bc:75:73:03:16:61:e1:95:63:d5:9f:d7: 72:f8:e7:18:d1:6f:3e:e5:c9:5e:60:db:4b:e3:f6: 8b:4a:e5:24:54:5f:63:68:00:b1:60:5e:fb:7e:8e: 99:22:b3:d4:82:0e:d5:9c:cc:6f:af:e8:a5:9b:e0: ad:fe:56:63:49:69:50:c1:0c:e5:9a:08:64:29:6d: 32:79:02:0e:2f:4e:a7:d1:ca:de:8e:50:3a:7b:49: ec:51:98:22:59:f4:fe:5f:02:8f:46:4c:67:41:a4: 69:7e:c0:b1:6a:01:b7:58:b7:52:6e:65:44:f9:bb: ca:c7:30:24:23:ab:ee:dd:18:48:75:f7:0f:23:66: 1c:73:5f:80:75:d6:ed:c9:fd:4d:a7:42:2c:0c:55: 73:66:6d:14:0a:a5:fa:e1:53:70:b4:d4:cd:eb:6d: a3:48:d0:a6:98:d5:c9:98:79:c1:af:64:c6:6b:71: 2a:a8:5b:dc:3d:78:c5:13:c4:46:d1:d2:39:c1:27: 78:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:00:F3:6D:1D:6D:5D:EB:04:B5:B6:8D:A5:35:DE:47:DF:14:35:25 X509v3 Authority Key Identifier: keyid:79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ZQDzbR1tXesEtbaNpTXeR98UNSU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.157.3.0/24 Signature Algorithm: sha256WithRSAEncryption 73:31:39:75:28:ca:1f:56:bd:8a:57:b8:75:54:a0:ec:b4:60: a6:c8:c9:b8:90:fe:d9:64:5f:26:2e:09:ba:27:b6:f3:40:d4: c5:25:ba:55:89:94:2c:ef:c2:bb:eb:ec:f0:a1:67:4f:a3:b7: f1:02:88:94:63:c6:7d:10:05:1a:12:23:17:1e:57:52:3c:bd: 11:0c:c9:3c:1f:dd:87:26:44:c0:7c:a3:83:8c:a3:10:ed:71: d3:5d:02:59:01:17:ed:2d:a9:04:bf:4e:30:3c:d1:31:d1:ff: a9:03:30:93:25:2b:59:87:82:e9:c9:69:75:d0:b8:ec:76:a9: 1f:11:78:46:23:5e:aa:88:8c:47:26:8e:fe:8a:4d:4a:72:f8: 22:73:51:8b:81:32:e2:6e:0d:58:a8:2c:89:64:d4:e9:83:d8: 26:32:40:bb:3b:bc:cd:65:ba:ce:69:da:34:0b:d9:6e:61:f0: e4:72:b6:59:f4:85:7d:32:5f:cb:30:19:7f:cc:75:ad:19:df: dd:18:0e:8e:c0:4f:15:89:c0:21:43:a1:56:16:e7:0f:0a:47: 90:e2:8b:5d:63:c0:60:ed:d7:6c:e7:2f:4e:cb:b1:fc:7a:e2: 3c:7e:ba:e2:c6:28:81:a9:a5:05:74:5c:68:c3:42:62:47:08: f0:db:fd:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ON+P592q/6Vr0vk2f3+IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YmI3NzQ5YWJkZTZmNWRhNGViMWM2ZWQxYzU3NjgxNjE3 ODQ2YjAwHhcNMjYwMTAyMTAyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTAwZjM2ZDFkNmQ1ZGViMDRiNWI2OGRhNTM1ZGU0N2RmMTQzNTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pLaCF2d5/UB5l0fU1N6ojx4fZwg Gj34tP3/Oh1vOSoIqxZUNDfN5YX4mSOZ6DgfSG1jLKKv30STXZzIPQW8dXMDFmHh lWPVn9dy+OcY0W8+5cleYNtL4/aLSuUkVF9jaACxYF77fo6ZIrPUgg7VnMxvr+il m+Ct/lZjSWlQwQzlmghkKW0yeQIOL06n0crejlA6e0nsUZgiWfT+XwKPRkxnQaRp fsCxagG3WLdSbmVE+bvKxzAkI6vu3RhIdfcPI2Ycc1+Addbtyf1Np0IsDFVzZm0U CqX64VNwtNTN622jSNCmmNXJmHnBr2TGa3EqqFvcPXjFE8RG0dI5wSd4rQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGUA820dbV3rBLW2jaU13kffFDUlMB8GA1UdIwQY MBaAFHm7d0mr3m9dpOscbtHFdoFheEawMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWJ0M1NhdmViMTJrNnh4dTBjVjJnV0Y0UnJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yNWI3YjgtYzMwMi00ZGRhLTg5OGEt NDgyNWUxOGQ3MzAxLzEvWlFEemJSMXRYZXNFdGJhTnBUWGVSOThVTlNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yNWI3YjgtYzMwMi00ZGRhLTg5OGEtNDgyNWUxOGQ3MzAx LzEvZWJ0M1NhdmViMTJrNnh4dTBjVjJnV0Y0UnJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZ0DMA0G CSqGSIb3DQEBCwUAA4IBAQBzMTl1KMofVr2KV7h1VKDstGCmyMm4kP7ZZF8mLgm6 J7bzQNTFJbpViZQs78K76+zwoWdPo7fxAoiUY8Z9EAUaEiMXHldSPL0RDMk8H92H JkTAfKODjKMQ7XHTXQJZARftLakEv04wPNEx0f+pAzCTJStZh4LpyWl10Ljsdqkf EXhGI16qiIxHJo7+ik1Kcvgic1GLgTLibg1YqCyJZNTpg9gmMkC7O7zNZbrOado0 C9luYfDkcrZZ9IV9Ml/LMBl/zHWtGd/dGA6OwE8VicAhQ6FWFucPCkeQ4otdY8Bg 7dds5y9Oy7H8euI8frrixiiBqaUFdFxow0JiRwjw2/0Q -----END CERTIFICATE-----Generated at Sun Jan 25 21:58:15 2026 by rpki-client