This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/zvW2BXG_KR2tH5wPFjzByZu5Wic.roa File: zvW2BXG_KR2tH5wPFjzByZu5Wic.roa (raw, json) Hash identifier: aJKDQB0eC1MIkoZBUkIu5PMs0EeE5CsftG39rD94VMI= Subject key identifier: CE:F5:B6:05:71:BF:29:1D:AD:1F:9C:0F:16:3C:C1:C9:9B:B9:5A:27 Certificate issuer: /CN=77b8cf454b0962d16a4855808fd3abc15852bbd8 Certificate serial: 019B7C125CEBB91DAFFB2B3B4F0CC5D93F56 Authority key identifier: 77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/zvW2BXG_KR2tH5wPFjzByZu5Wic.roa Signing time: Fri 02 Jan 2026 00:18:56 +0000 ROA not before: Fri 02 Jan 2026 00:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199269 IP address blocks: 185.22.164.0/22 maxlen: 22 185.22.164.0/23 maxlen: 23 185.22.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:5c:eb:b9:1d:af:fb:2b:3b:4f:0c:c5:d9:3f:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77b8cf454b0962d16a4855808fd3abc15852bbd8 Validity Not Before: Jan 2 00:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cef5b60571bf291dad1f9c0f163cc1c99bb95a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a8:ef:74:fc:59:43:86:2e:be:48:f0:84:4e: c6:91:e0:25:ef:56:ce:ad:d8:d8:2e:db:f5:da:22: 66:55:1d:d1:62:14:60:75:02:99:00:4c:cf:c6:e6: bc:1f:d7:bd:36:1e:f9:cd:0f:aa:57:0b:99:f4:f4: 57:83:d6:f3:d7:85:10:73:83:21:d0:bd:67:02:23: 65:10:1d:f3:6c:ac:4d:d7:b3:68:d6:4c:05:32:f3: e0:c9:23:26:91:55:4e:a4:0f:2b:78:9a:c7:b4:88: 79:e2:5d:3e:7d:90:3f:f7:c0:b1:da:48:cf:21:2d: 56:fe:d6:2c:f2:5d:6b:f6:6e:77:c4:82:33:f1:fe: e8:8d:30:7c:16:2d:f0:8d:73:01:37:86:66:87:46: 65:35:ad:0c:ac:f6:67:fc:ab:42:37:5b:b3:8c:a2: d4:0e:56:69:0f:9c:46:74:51:b2:55:34:76:a9:08: 7a:cd:2b:54:88:50:ef:11:cb:99:83:3e:68:8e:b8: 12:40:0c:52:1e:2e:b0:6e:35:58:2d:a4:3c:c8:52: 18:84:80:09:c3:9c:cf:7d:af:7c:b8:d9:38:ac:6a: 16:24:07:19:c8:ae:46:5a:4b:82:ac:f9:46:0c:d3: 3d:d6:64:4f:34:5d:e0:d3:9d:ac:2e:d6:a3:44:78: 2b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F5:B6:05:71:BF:29:1D:AD:1F:9C:0F:16:3C:C1:C9:9B:B9:5A:27 X509v3 Authority Key Identifier: keyid:77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/zvW2BXG_KR2tH5wPFjzByZu5Wic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.22.164.0/22 Signature Algorithm: sha256WithRSAEncryption 57:89:65:49:49:28:c4:8c:a3:59:6e:ea:f5:16:2f:f3:4d:18: 48:ad:5f:ed:02:f4:d5:ba:5b:cf:e0:7a:13:e3:04:2d:27:ce: a4:c1:dc:00:00:d1:e1:31:ca:87:04:32:f0:fa:ae:1c:f7:80: f8:f1:89:9b:fb:fe:00:9d:39:d0:f8:e5:f8:cf:5b:1a:ec:b8: 75:97:8c:06:82:2a:f4:e3:92:26:0a:85:a4:72:1d:4b:bd:32: f3:b0:7a:b3:ce:1d:28:bb:07:a8:6f:cc:ba:df:5c:aa:55:de: 5a:14:b1:e0:f4:1c:b0:ff:0d:1b:d5:24:a4:ab:97:62:67:7a: 6f:b4:78:c3:6a:ef:f3:46:9d:41:af:b5:a2:ca:33:f5:f3:99: eb:66:85:7a:15:c5:2c:45:d9:bb:0a:23:ec:9e:eb:40:60:af: 80:a7:9a:40:2a:c6:64:3a:94:ee:a6:75:ea:37:9e:a1:3c:90: 21:4c:69:30:15:93:39:88:29:79:25:ca:f6:ac:09:53:3f:14: 26:10:35:ad:52:8c:19:54:88:85:68:2d:35:69:91:c5:4f:d7: 11:96:3e:f9:03:4a:ac:f9:59:45:fe:fe:0d:0d:00:16:51:d3: 09:20:da:60:0e:55:4a:50:00:b2:9d:23:cf:fd:20:74:07:55: 6b:71:7a:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ElzruR2v+ys7TwzF2T9WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YjhjZjQ1NGIwOTYyZDE2YTQ4NTU4MDhmZDNhYmMxNTg1 MmJiZDgwHhcNMjYwMTAyMDAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWY1YjYwNTcxYmYyOTFkYWQxZjljMGYxNjNjYzFjOTliYjk1YTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKjvdPxZQ4YuvkjwhE7GkeAl71bO rdjYLtv12iJmVR3RYhRgdQKZAEzPxua8H9e9Nh75zQ+qVwuZ9PRXg9bz14UQc4Mh 0L1nAiNlEB3zbKxN17No1kwFMvPgySMmkVVOpA8reJrHtIh54l0+fZA/98Cx2kjP IS1W/tYs8l1r9m53xIIz8f7ojTB8Fi3wjXMBN4Zmh0ZlNa0MrPZn/KtCN1uzjKLU DlZpD5xGdFGyVTR2qQh6zStUiFDvEcuZgz5ojrgSQAxSHi6wbjVYLaQ8yFIYhIAJ w5zPfa98uNk4rGoWJAcZyK5GWkuCrPlGDNM91mRPNF3g052sLtajRHgrZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM71tgVxvykdrR+cDxY8wcmbuVonMB8GA1UdIwQY MBaAFHe4z0VLCWLRakhVgI/Tq8FYUrvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDdqUFJVc0pZdEZxU0ZXQWo5T3J3VmhTdTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jMTcxY2EtNGIxYi00MTg3LWJhNDYt YTRmYzllMjQ1OGVjLzEvenZXMkJYR19LUjJ0SDV3UEZqekJ5WnU1V2ljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9jMTcxY2EtNGIxYi00MTg3LWJhNDYtYTRmYzllMjQ1OGVj LzEvZDdqUFJVc0pZdEZxU0ZXQWo5T3J3VmhTdTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuRakMA0G CSqGSIb3DQEBCwUAA4IBAQBXiWVJSSjEjKNZbur1Fi/zTRhIrV/tAvTVulvP4HoT 4wQtJ86kwdwAANHhMcqHBDLw+q4c94D48Ymb+/4AnTnQ+OX4z1sa7Lh1l4wGgir0 45ImCoWkch1LvTLzsHqzzh0ouweob8y631yqVd5aFLHg9Byw/w0b1SSkq5diZ3pv tHjDau/zRp1Br7WiyjP185nrZoV6FcUsRdm7CiPsnutAYK+Ap5pAKsZkOpTupnXq N56hPJAhTGkwFZM5iCl5Jcr2rAlTPxQmEDWtUowZVIiFaC01aZHFT9cRlj75A0qs +VlF/v4NDQAWUdMJINpgDlVKUACynSPP/SB0B1VrcXo6 -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:09 2026 by rpki-client