This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/zBhmRyi3KpJKMZKH1_lQRYUf9SQ.roa File: zBhmRyi3KpJKMZKH1_lQRYUf9SQ.roa (raw, json) Hash identifier: 2bsZDaJMn75/pG+XjUpjbPVCYXUEJ/cJ76HZaxtGWu0= Subject key identifier: CC:18:66:47:28:B7:2A:92:4A:31:92:87:D7:F9:50:45:85:1F:F5:24 Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Certificate serial: 019B7834524A2E57B3960099D8DF91682B1C Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/zBhmRyi3KpJKMZKH1_lQRYUf9SQ.roa Signing time: Thu 01 Jan 2026 06:17:33 +0000 ROA not before: Thu 01 Jan 2026 06:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60144 IP address blocks: 185.222.219.0/24 maxlen: 24 2a09:0:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:52:4a:2e:57:b3:96:00:99:d8:df:91:68:2b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Validity Not Before: Jan 1 06:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc18664728b72a924a319287d7f95045851ff524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:07:c8:69:6f:ab:5e:19:7c:ae:1f:a2:71:7b: 22:a0:68:c2:d9:96:b8:a4:b9:ca:55:21:c0:fc:db: 3b:d4:76:e8:22:fa:c6:9b:4c:63:cd:3f:49:22:2e: b1:f3:f0:bb:f5:00:91:37:ad:07:74:fd:e4:e1:27: 5b:63:47:a7:d5:2a:b8:a4:8d:80:85:dd:b9:a7:12: 3a:14:b7:9c:15:ca:d4:d4:c1:0e:54:b9:af:54:a8: 85:9b:5a:73:2f:93:de:46:fa:97:e9:48:7b:d5:d3: f5:fd:5c:d7:c2:99:e2:0e:d0:12:64:1d:a6:4c:88: 28:78:32:9f:1d:c0:31:c1:07:67:e0:ce:a8:fd:4b: ea:d3:90:f3:cc:10:f3:f2:a8:1d:aa:1d:25:35:3d: 89:4d:44:de:e1:f8:1f:e8:97:e2:d7:b1:d2:cf:7b: e2:a8:53:cc:50:99:38:32:1e:69:cd:c6:fd:ac:6a: a2:b7:27:2a:29:cb:6d:b9:64:40:68:d1:df:da:29: 88:8d:d2:37:4f:ad:f2:02:59:01:e8:b7:3b:d3:84: 0a:ef:26:52:ff:10:2e:67:91:bc:98:76:f9:60:80: 19:fd:53:8a:99:8c:b1:dc:ff:1e:22:e4:af:f1:9e: 6d:50:0d:23:03:4f:58:0b:fc:fa:5e:0a:67:82:e6: 63:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:18:66:47:28:B7:2A:92:4A:31:92:87:D7:F9:50:45:85:1F:F5:24 X509v3 Authority Key Identifier: keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/zBhmRyi3KpJKMZKH1_lQRYUf9SQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.222.219.0/24 IPv6: 2a09:0:12::/48 Signature Algorithm: sha256WithRSAEncryption 1f:b3:f6:7d:dd:72:6b:ab:66:a1:1d:62:b4:57:dc:2c:11:ee: a2:43:a9:e8:c1:ce:ef:52:78:32:c5:a9:f2:ff:d9:1e:4e:a0: 04:7a:a9:df:89:0a:17:9b:f4:c1:bd:92:5e:03:7b:11:2c:2f: b5:95:bd:b0:95:41:22:d0:9f:35:49:56:92:af:97:b7:1e:39: 05:b9:f9:82:dc:fa:3b:d9:38:a3:5d:01:d1:a9:e8:69:cf:5f: 32:3b:90:66:ab:64:08:bd:67:72:13:f5:e5:bb:20:2b:d8:d8: 19:5f:de:01:45:e2:02:1a:fd:a0:8f:42:25:9a:4d:cd:8c:a4: b6:b3:57:8b:04:cc:1c:40:e3:19:59:e8:b2:89:98:3a:d8:5f: 43:87:83:29:33:bf:77:d4:8e:26:e1:c4:fc:0c:e1:ed:70:21: 50:1c:7e:8a:67:8c:1e:49:49:5e:80:a2:fb:be:f2:57:25:b2: 68:44:df:5c:e6:00:e1:49:ae:d7:4b:dc:48:bb:20:66:4b:6f: 58:e2:73:10:3b:7b:83:52:aa:d4:94:aa:04:33:82:34:08:32: 0a:41:e5:0c:15:2c:49:23:a1:b2:92:e8:2e:1a:b3:95:0a:ef: e1:9a:f5:c8:5e:17:25:84:e8:03:1c:66:7b:da:9e:ea:f3:df: 89:c8:2f:1c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4NFJKLlezlgCZ2N+RaCscMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi YmFhZTIwHhcNMjYwMTAxMDYxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzE4NjY0NzI4YjcyYTkyNGEzMTkyODdkN2Y5NTA0NTg1MWZmNTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gfIaW+rXhl8rh+icXsioGjC2Za4 pLnKVSHA/Ns71HboIvrGm0xjzT9JIi6x8/C79QCRN60HdP3k4SdbY0en1Sq4pI2A hd25pxI6FLecFcrU1MEOVLmvVKiFm1pzL5PeRvqX6Uh71dP1/VzXwpniDtASZB2m TIgoeDKfHcAxwQdn4M6o/Uvq05DzzBDz8qgdqh0lNT2JTUTe4fgf6Jfi17HSz3vi qFPMUJk4Mh5pzcb9rGqitycqKcttuWRAaNHf2imIjdI3T63yAlkB6Lc704QK7yZS /xAuZ5G8mHb5YIAZ/VOKmYyx3P8eIuSv8Z5tUA0jA09YC/z6XgpnguZjWwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMwYZkcotyqSSjGSh9f5UEWFH/UkMB8GA1UdIwQY MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt MjU0YWNkOTJiNGUxLzEvekJobVJ5aTNLcEpLTVpLSDFfbFFSWVVmOVNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAud7bMA8E AgACMAkDBwAqCQAAABIwDQYJKoZIhvcNAQELBQADggEBAB+z9n3dcmurZqEdYrRX 3CwR7qJDqejBzu9SeDLFqfL/2R5OoAR6qd+JCheb9MG9kl4DexEsL7WVvbCVQSLQ nzVJVpKvl7ceOQW5+YLc+jvZOKNdAdGp6GnPXzI7kGarZAi9Z3IT9eW7ICvY2Blf 3gFF4gIa/aCPQiWaTc2MpLazV4sEzBxA4xlZ6LKJmDrYX0OHgykzv3fUjibhxPwM 4e1wIVAcfopnjB5JSV6Aovu+8lclsmhE31zmAOFJrtdL3Ei7IGZLb1jicxA7e4NS qtSUqgQzgjQIMgpB5QwVLEkjobKS6C4as5UK7+Ga9cheFyWE6AMcZnvanurz34nI Lxw= -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:49 2026 by rpki-client