This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/ZyJM5BuiXRdQwp8CTGPeW7hXFhQ.roa File: ZyJM5BuiXRdQwp8CTGPeW7hXFhQ.roa (raw, json) Hash identifier: sJFYdvfIFI7XLe3RcotKCLHPJQZ5SZe+aPUoxKb9ID4= Subject key identifier: 67:22:4C:E4:1B:A2:5D:17:50:C2:9F:02:4C:63:DE:5B:B8:57:16:14 Certificate issuer: /CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd Certificate serial: 019B7AC8A5B092DCBECAD1A04EC6BA479105 Authority key identifier: 3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/ZyJM5BuiXRdQwp8CTGPeW7hXFhQ.roa Signing time: Thu 01 Jan 2026 18:18:48 +0000 ROA not before: Thu 01 Jan 2026 18:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206150 IP address blocks: 185.161.151.0/24 maxlen: 24 185.238.177.0/24 maxlen: 24 185.238.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a5:b0:92:dc:be:ca:d1:a0:4e:c6:ba:47:91:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd Validity Not Before: Jan 1 18:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67224ce41ba25d1750c29f024c63de5bb8571614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:71:b5:9f:9f:06:d3:7d:27:01:cf:3d:9f:7a: 60:90:97:de:e7:1a:f5:a2:40:ef:ca:bc:01:71:22: 01:b8:6b:f6:de:4e:b4:39:d0:ad:93:b7:5d:35:3f: 2e:62:05:d2:f3:ad:b4:91:d9:64:86:6b:f1:1a:20: 5d:37:6f:af:e0:fc:c8:11:24:8b:ed:36:fc:90:0b: 7b:86:c6:eb:de:b7:3e:9a:4a:03:95:1c:fc:e0:6b: 22:23:29:34:05:41:04:23:dc:9d:a7:d0:a3:f7:6f: c0:96:db:82:ad:ec:75:cf:11:7c:1b:83:a5:6c:48: 1c:8b:7f:59:bb:b0:30:c1:96:02:c8:8a:02:b7:be: ec:5a:96:bd:cd:e4:15:d8:f2:dd:b8:c5:9d:a1:1e: 56:41:ff:87:a3:db:0c:14:79:11:87:d4:93:59:1b: 4e:74:55:58:82:37:9f:99:23:90:cc:10:13:9f:03: f5:64:4d:4d:f0:9b:b8:36:07:b5:64:9c:5e:85:15: f3:e9:c8:cc:a2:3e:88:d6:e1:25:f2:d3:41:21:14: 8b:be:d5:fc:e2:2b:50:e6:b7:70:ca:c2:48:64:4b: a7:23:21:3c:e6:76:3f:5a:b7:07:6b:73:50:f7:0e: e8:0e:7d:8d:b3:d7:85:ff:1d:e0:fe:05:af:b5:e1: 38:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:22:4C:E4:1B:A2:5D:17:50:C2:9F:02:4C:63:DE:5B:B8:57:16:14 X509v3 Authority Key Identifier: keyid:3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/ZyJM5BuiXRdQwp8CTGPeW7hXFhQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.151.0/24 185.238.177.0/24 185.238.179.0/24 Signature Algorithm: sha256WithRSAEncryption 49:54:2a:27:f6:a2:21:35:73:11:91:0f:fa:59:d8:c7:a3:85: 0d:13:55:e1:93:7a:22:69:ba:85:98:19:b8:48:39:01:50:b9: c0:44:05:c5:09:70:88:ef:b3:ee:e4:2b:ec:08:48:11:30:57: 2a:e6:f9:56:59:f1:e8:73:f8:a3:0d:bd:5e:f1:a7:b1:3f:7a: 7e:df:bc:23:c5:b5:0b:ef:eb:4c:8f:ff:19:3b:db:6e:0b:a6: ca:3e:b4:62:19:d0:ba:36:02:cf:27:c6:9f:0d:b4:0b:04:ee: 60:28:71:93:5e:98:15:5a:68:b5:d7:a1:2b:cc:f4:15:e8:b5: ba:c3:37:f2:58:85:be:1d:cf:6b:f5:f6:46:f1:08:82:5e:cc: 74:50:40:a0:d2:e0:9c:5c:88:d9:95:1d:72:7a:0e:19:a4:16: e9:f6:1f:b0:bc:15:0b:75:c0:d1:b5:89:0c:13:5d:93:a6:73: 35:4b:09:09:77:4f:4f:2e:2f:9d:f8:d0:9c:59:11:da:14:63: ea:b5:84:61:f2:86:19:29:94:b7:98:a1:d7:e7:f6:31:dc:ca: 56:a1:30:5b:68:d8:e0:af:0c:cc:65:b5:78:8f:ba:40:3b:74: a4:90:2a:e1:3f:17:2e:5a:82:64:65:55:84:4b:08:40:81:f7: 5d:cf:92:d4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6yKWwkty+ytGgTsa6R5EFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNWVjMjhlODQxZjI5ZjM4MGE3Y2UyY2I1Y2Q1NjczNzAw ODIxZmQwHhcNMjYwMTAxMTgxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzIyNGNlNDFiYTI1ZDE3NTBjMjlmMDI0YzYzZGU1YmI4NTcxNjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnG1n58G030nAc89n3pgkJfe5xr1 okDvyrwBcSIBuGv23k60OdCtk7ddNT8uYgXS8620kdlkhmvxGiBdN2+v4PzIESSL 7Tb8kAt7hsbr3rc+mkoDlRz84GsiIyk0BUEEI9ydp9Cj92/AltuCrex1zxF8G4Ol bEgci39Zu7AwwZYCyIoCt77sWpa9zeQV2PLduMWdoR5WQf+Ho9sMFHkRh9STWRtO dFVYgjefmSOQzBATnwP1ZE1N8Ju4Nge1ZJxehRXz6cjMoj6I1uEl8tNBIRSLvtX8 4itQ5rdwysJIZEunIyE85nY/WrcHa3NQ9w7oDn2Ns9eF/x3g/gWvteE4QQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGciTOQbol0XUMKfAkxj3lu4VxYUMB8GA1UdIwQY MBaAFDpewo6EHynzgKfOLLXNVnNwCCH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2w3Q2pvUWZLZk9BcDg0c3RjMVdjM0FJSWYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jMTIwMjAtYTFhMS00MDBlLTkxZjMt ODM1NTk5MjYwZmY2LzEvWnlKTTVCdWlYUmRRd3A4Q1RHUGVXN2hYRmhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9jMTIwMjAtYTFhMS00MDBlLTkxZjMtODM1NTk5MjYwZmY2 LzEvT2w3Q2pvUWZLZk9BcDg0c3RjMVdjM0FJSWYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuaGXAwQA ue6xAwQAue6zMA0GCSqGSIb3DQEBCwUAA4IBAQBJVCon9qIhNXMRkQ/6WdjHo4UN E1Xhk3oiabqFmBm4SDkBULnARAXFCXCI77Pu5CvsCEgRMFcq5vlWWfHoc/ijDb1e 8aexP3p+37wjxbUL7+tMj/8ZO9tuC6bKPrRiGdC6NgLPJ8afDbQLBO5gKHGTXpgV Wmi116ErzPQV6LW6wzfyWIW+Hc9r9fZG8QiCXsx0UECg0uCcXIjZlR1yeg4ZpBbp 9h+wvBULdcDRtYkME12TpnM1SwkJd09PLi+d+NCcWRHaFGPqtYRh8oYZKZS3mKHX 5/Yx3MpWoTBbaNjgrwzMZbV4j7pAO3SkkCrhPxcuWoJkZVWESwhAgfddz5LU -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:16 2026 by rpki-client