This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/zkiUnt3u3gM-pY3nw2418jZ96as.roa File: zkiUnt3u3gM-pY3nw2418jZ96as.roa (raw, json) Hash identifier: cBWCrLkL25DqG+qiWavgwQLJKknM3yr54OTG4QErhfM= Subject key identifier: CE:48:94:9E:DD:EE:DE:03:3E:A5:8D:E7:C3:6E:35:F2:36:7D:E9:AB Certificate issuer: /CN=04bec7578450f945d4f334df600c61a6f47232f2 Certificate serial: 019B797EDA7DE144117570D47CD2A113512A Authority key identifier: 04:BE:C7:57:84:50:F9:45:D4:F3:34:DF:60:0C:61:A6:F4:72:32:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/zkiUnt3u3gM-pY3nw2418jZ96as.roa Signing time: Thu 01 Jan 2026 12:18:35 +0000 ROA not before: Thu 01 Jan 2026 12:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212904 IP address blocks: 185.100.229.0/24 maxlen: 24 185.100.230.0/24 maxlen: 24 185.192.100.0/24 maxlen: 24 185.192.101.0/24 maxlen: 24 185.192.103.0/24 maxlen: 24 185.243.28.0/24 maxlen: 24 185.243.29.0/24 maxlen: 24 185.243.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:da:7d:e1:44:11:75:70:d4:7c:d2:a1:13:51:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04bec7578450f945d4f334df600c61a6f47232f2 Validity Not Before: Jan 1 12:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce48949eddeede033ea58de7c36e35f2367de9ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ee:a0:10:09:b0:c3:19:79:78:37:c7:d3:58: 76:56:5a:00:99:0c:09:ab:8c:f7:0e:06:fc:d3:8b: 0b:a5:35:49:74:27:69:9d:62:d1:40:b2:f3:06:d8: c6:07:1a:e0:af:f8:f7:d1:ac:01:a1:7d:d4:c2:9d: f1:be:cf:d8:8c:56:df:1a:c5:38:36:0e:15:6f:52: 56:97:e9:77:40:02:5d:e6:97:af:58:80:d6:c8:65: 46:f7:7a:2c:b9:3d:84:60:04:2b:f7:39:ad:f6:83: 52:e9:e9:29:8d:46:2e:44:26:80:a5:67:67:b5:1b: a9:8c:13:57:14:c5:50:5f:0d:56:66:d7:31:1e:e6: a4:ed:91:a6:6f:8d:59:e6:71:51:a5:59:7a:30:b7: 17:ad:dc:2f:43:a3:b5:17:97:17:0c:3c:c0:7a:1e: e8:ee:0d:17:8e:42:57:67:25:6b:da:1a:49:1c:dd: 33:d6:d5:64:6d:20:4b:18:08:dd:a7:c7:58:69:f8: 4d:47:14:6a:9a:d8:27:c5:fa:12:60:da:98:c7:24: 79:06:f7:69:b2:0f:53:b2:cf:92:41:e3:69:f9:1f: 60:fa:20:89:4b:d9:a1:f7:b4:ba:e3:2d:e7:e8:78: 48:78:56:f4:66:31:50:b9:ed:5e:c6:48:b9:8f:3f: a5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:48:94:9E:DD:EE:DE:03:3E:A5:8D:E7:C3:6E:35:F2:36:7D:E9:AB X509v3 Authority Key Identifier: keyid:04:BE:C7:57:84:50:F9:45:D4:F3:34:DF:60:0C:61:A6:F4:72:32:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/zkiUnt3u3gM-pY3nw2418jZ96as.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.100.229.0-185.100.230.255 185.192.100.0/23 185.192.103.0/24 185.243.28.0-185.243.30.255 Signature Algorithm: sha256WithRSAEncryption 5a:f3:34:59:28:a6:e7:26:dc:72:4f:88:9d:d3:8c:b3:d7:84: 13:44:b3:fc:3c:3a:79:8e:1d:73:72:42:0c:0d:7c:c1:bc:ea: bb:94:d4:46:33:52:36:1d:7e:56:01:1c:b5:35:2e:26:8b:e3: cc:e6:6e:77:24:17:16:0c:d2:51:06:f6:4c:80:b1:59:52:cd: 23:ec:d7:b0:d7:6a:f0:3d:92:d7:a0:0b:f0:cb:dc:9e:e4:e9: d8:f3:21:ac:fe:85:4e:20:ae:5b:64:e7:fc:e1:f0:7b:e0:5c: 5c:66:25:37:a8:5c:53:b6:4c:cf:28:30:ec:30:bc:54:42:d2: 5b:bd:04:6e:ba:7e:a1:51:c0:e7:71:1c:df:cd:2d:d7:b0:5c: a6:5d:58:0e:8b:7e:01:30:60:54:06:30:d5:8d:86:09:6d:0f: 53:86:92:bd:3d:9a:97:e8:df:c7:fd:63:eb:08:3c:91:8c:d9: 90:2b:4b:67:f7:b6:a8:9a:f6:c3:5b:c3:bc:a6:a2:81:34:64: de:f4:35:01:e9:14:46:c7:c9:ba:11:89:86:28:21:ab:58:b3: ad:2e:f1:e3:dc:62:d9:c4:db:a1:f0:25:21:55:8e:2e:ee:3b: 70:cc:b3:dd:57:93:c6:97:34:18:21:9e:a6:16:a7:66:78:9c: b9:16:77:d0 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt5ftp94UQRdXDUfNKhE1EqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YmVjNzU3ODQ1MGY5NDVkNGYzMzRkZjYwMGM2MWE2ZjQ3 MjMyZjIwHhcNMjYwMTAxMTIxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTQ4OTQ5ZWRkZWVkZTAzM2VhNThkZTdjMzZlMzVmMjM2N2RlOWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3O6gEAmwwxl5eDfH01h2VloAmQwJ q4z3Dgb804sLpTVJdCdpnWLRQLLzBtjGBxrgr/j30awBoX3Uwp3xvs/YjFbfGsU4 Ng4Vb1JWl+l3QAJd5pevWIDWyGVG93osuT2EYAQr9zmt9oNS6ekpjUYuRCaApWdn tRupjBNXFMVQXw1WZtcxHuak7ZGmb41Z5nFRpVl6MLcXrdwvQ6O1F5cXDDzAeh7o 7g0XjkJXZyVr2hpJHN0z1tVkbSBLGAjdp8dYafhNRxRqmtgnxfoSYNqYxyR5Bvdp sg9Tss+SQeNp+R9g+iCJS9mh97S64y3n6HhIeFb0ZjFQue1exki5jz+lOQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFM5IlJ7d7t4DPqWN58NuNfI2femrMB8GA1UdIwQY MBaAFAS+x1eEUPlF1PM032AMYab0cjLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkw3SFY0UlEtVVhVOHpUZllBeGhwdlJ5TXZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iNDI4ZTctNjUzYy00NmM3LTk3M2Yt OWRiNjE0Y2IxMjdhLzEvemtpVW50M3UzZ00tcFkzbncyNDE4alo5NmFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9iNDI4ZTctNjUzYy00NmM3LTk3M2YtOWRiNjE0Y2IxMjdh LzEvQkw3SFY0UlEtVVhVOHpUZllBeGhwdlJ5TXZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAC5ZOUD BAC5ZOYDBAG5wGQDBAC5wGcwDAMEArnzHAMEALnzHjANBgkqhkiG9w0BAQsFAAOC AQEAWvM0WSim5ybcck+IndOMs9eEE0Sz/Dw6eY4dc3JCDA18wbzqu5TURjNSNh1+ VgEctTUuJovjzOZudyQXFgzSUQb2TICxWVLNI+zXsNdq8D2S16AL8MvcnuTp2PMh rP6FTiCuW2Tn/OHwe+BcXGYlN6hcU7ZMzygw7DC8VELSW70Ebrp+oVHA53Ec380t 17Bcpl1YDot+ATBgVAYw1Y2GCW0PU4aSvT2al+jfx/1j6wg8kYzZkCtLZ/e2qJr2 w1vDvKaigTRk3vQ1AekURsfJuhGJhighq1izrS7x49xi2cTbofAlIVWOLu47cMyz 3VeTxpc0GCGephanZnicuRZ30A== -----END CERTIFICATE-----Generated at Sun Jan 25 21:07:00 2026 by rpki-client