This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/ZfuIJyg5k_rC_JXuCFjK5lHQ6NY.roa File: ZfuIJyg5k_rC_JXuCFjK5lHQ6NY.roa (raw, json) Hash identifier: pI03BBxCldhBPz/GTk6F4ZuWtSBUeKLjh/Pr3vyIh58= Subject key identifier: 65:FB:88:27:28:39:93:FA:C2:FC:95:EE:08:58:CA:E6:51:D0:E8:D6 Certificate issuer: /CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57 Certificate serial: 019B78A2A1E61181357E28CB57686F21B4FB Authority key identifier: C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/ZfuIJyg5k_rC_JXuCFjK5lHQ6NY.roa Signing time: Thu 01 Jan 2026 08:18:02 +0000 ROA not before: Thu 01 Jan 2026 08:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3245 IP address blocks: 185.143.80.0/22 maxlen: 22 192.92.129.0/24 maxlen: 24 193.68.0.0/19 maxlen: 19 193.68.96.0/19 maxlen: 19 193.68.128.0/17 maxlen: 17 2a02:6a80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.crl rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:a1:e6:11:81:35:7e:28:cb:57:68:6f:21:b4:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57 Validity Not Before: Jan 1 08:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65fb8827283993fac2fc95ee0858cae651d0e8d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9f:3e:76:fb:fc:ea:77:50:87:f9:82:57:cc: 10:02:7b:eb:6c:72:6e:3a:87:84:ce:57:fa:42:1a: cf:db:05:63:30:0b:a7:1c:80:e3:c9:91:ff:ef:66: 3c:7d:66:73:7a:a7:95:97:38:8f:c7:0a:ce:f8:9c: 12:ee:31:07:d7:75:d7:fa:00:37:2a:95:e0:31:36: 15:d7:31:90:e4:d6:47:96:54:6c:dd:e4:8f:f9:94: a2:33:a0:9c:7b:1e:40:d2:17:33:56:49:5c:a5:90: b3:8c:82:62:76:6b:39:60:9d:fd:9e:8e:84:f1:52: 47:2b:04:13:c2:bd:8d:78:5b:01:b5:d4:53:0c:64: 56:ee:aa:28:f7:f2:93:ff:5e:9e:1d:ef:27:69:00: 91:0e:37:63:1e:68:04:d6:67:00:14:32:45:15:ab: 8a:74:94:6a:db:e4:58:04:29:bc:ae:43:74:e5:4d: bb:ec:ad:7e:f0:e3:c0:62:55:cf:b1:96:9c:47:40: 89:77:e1:d3:f1:e3:2f:6d:7b:06:34:db:47:64:2d: 0f:38:76:7e:5c:e3:14:ed:33:14:ba:ad:05:85:b5: d7:96:6c:e6:13:ca:14:7e:c0:b0:a0:4c:1f:c1:22: be:b3:73:1c:2f:23:d0:5d:b1:e0:d2:e5:a4:c1:c6: 4c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FB:88:27:28:39:93:FA:C2:FC:95:EE:08:58:CA:E6:51:D0:E8:D6 X509v3 Authority Key Identifier: keyid:C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/ZfuIJyg5k_rC_JXuCFjK5lHQ6NY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.143.80.0/22 192.92.129.0/24 193.68.0.0/19 193.68.96.0-193.68.255.255 IPv6: 2a02:6a80::/32 Signature Algorithm: sha256WithRSAEncryption 7e:68:91:42:bf:12:27:64:05:27:34:fc:5c:7e:f6:31:63:61: 2f:fc:61:57:a6:9e:73:37:bd:cc:39:71:d9:7f:e6:ba:f7:d6: 70:eb:a5:87:ef:74:ad:84:c6:11:11:06:c9:f4:4b:cf:b8:5f: 2e:8e:5b:0d:4b:84:d0:bd:e0:6f:06:d5:00:10:1c:77:16:90: 59:e8:7a:26:1c:af:0a:ee:f0:f0:84:f9:93:6b:4b:9a:37:98: b8:29:cf:eb:12:0c:12:3d:5f:97:8b:f2:92:53:4a:93:72:56: 56:9f:09:42:49:44:99:84:9c:2f:39:0c:9b:25:bf:90:42:65: 73:3c:8f:9a:4a:ff:53:16:38:a7:40:94:48:9f:11:ef:c4:0d: 12:14:f9:01:43:1c:d7:54:3e:c4:c2:83:4c:fc:b8:96:dc:87: 22:19:5f:46:e2:d2:d1:f2:25:8e:48:7e:a5:30:eb:cf:44:d4: ff:f5:34:b6:85:67:23:65:03:a9:54:d2:a0:ff:02:4d:79:26: e3:16:ad:8a:72:6b:a1:e2:d6:f7:3d:bc:d5:a8:d3:1c:6d:15: f8:a8:c5:dc:44:ed:73:f3:e1:e6:22:d3:c4:fb:ba:18:d2:da: 2d:5c:f0:3c:5e:2f:3b:ec:a3:a1:89:f6:44:5b:19:ce:a4:ee: c8:fa:01:67 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt4oqHmEYE1fijLV2hvIbT7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNWNiNzEzMmMxOWY3ZDUxZjAwMmVkNGFkODExYWVjZjVi MjBmNTcwHhcNMjYwMTAxMDgxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWZiODgyNzI4Mzk5M2ZhYzJmYzk1ZWUwODU4Y2FlNjUxZDBlOGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp8+dvv86ndQh/mCV8wQAnvrbHJu OoeEzlf6QhrP2wVjMAunHIDjyZH/72Y8fWZzeqeVlziPxwrO+JwS7jEH13XX+gA3 KpXgMTYV1zGQ5NZHllRs3eSP+ZSiM6Ccex5A0hczVklcpZCzjIJidms5YJ39no6E 8VJHKwQTwr2NeFsBtdRTDGRW7qoo9/KT/16eHe8naQCRDjdjHmgE1mcAFDJFFauK dJRq2+RYBCm8rkN05U277K1+8OPAYlXPsZacR0CJd+HT8eMvbXsGNNtHZC0POHZ+ XOMU7TMUuq0FhbXXlmzmE8oUfsCwoEwfwSK+s3McLyPQXbHg0uWkwcZMPwIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFGX7iCcoOZP6wvyV7ghYyuZR0OjWMB8GA1UdIwQY MBaAFMJctxMsGffVHwAu1K2BGuz1sg9XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2x5M0V5d1o5OVVmQUM3VXJZRWE3UFd5RDFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9iMjcyMDMtOWQ0OC00OWE1LWFmMjUt NDlkNDBhMTNjYmMyLzEvWmZ1SUp5ZzVrX3JDX0pYdUNGaks1bEhRNk5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9iMjcyMDMtOWQ0OC00OWE1LWFmMjUtNDlkNDBhMTNjYmMy LzEvd2x5M0V5d1o5OVVmQUM3VXJZRWE3UFd5RDFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAlBAIAATAfAwQCuY9QAwQA wFyBAwQFwUQAMAsDBAXBRGADAwDBRDANBAIAAjAHAwUAKgJqgDANBgkqhkiG9w0B AQsFAAOCAQEAfmiRQr8SJ2QFJzT8XH72MWNhL/xhV6aecze9zDlx2X/muvfWcOul h+90rYTGEREGyfRLz7hfLo5bDUuE0L3gbwbVABAcdxaQWeh6JhyvCu7w8IT5k2tL mjeYuCnP6xIMEj1fl4vyklNKk3JWVp8JQklEmYScLzkMmyW/kEJlczyPmkr/UxY4 p0CUSJ8R78QNEhT5AUMc11Q+xMKDTPy4ltyHIhlfRuLS0fIljkh+pTDrz0TU//U0 toVnI2UDqVTSoP8CTXkm4xatinJroeLW9z281ajTHG0V+KjF3ETtc/Ph5iLTxPu6 GNLaLVzwPF4vO+yjoYn2RFsZzqTuyPoBZw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:42:18 2026 by rpki-client