This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/zOPM5DQVOuL2gxGFfQ2OogcDlag.roa File: zOPM5DQVOuL2gxGFfQ2OogcDlag.roa (raw, json) Hash identifier: TZhWdIY554lkmlZSQhc2076I8ib8niBs3eBXmmFEKfY= Subject key identifier: CC:E3:CC:E4:34:15:3A:E2:F6:83:11:85:7D:0D:8E:A2:07:03:95:A8 Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Certificate serial: 019B7FF1EE1F611E7774E34E359F2022C199 Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/zOPM5DQVOuL2gxGFfQ2OogcDlag.roa Signing time: Fri 02 Jan 2026 18:21:59 +0000 ROA not before: Fri 02 Jan 2026 18:21:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206512 IP address blocks: 185.165.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:ee:1f:61:1e:77:74:e3:4e:35:9f:20:22:c1:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Validity Not Before: Jan 2 18:21:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cce3cce434153ae2f68311857d0d8ea2070395a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1e:1d:41:df:c6:a7:0e:c1:07:70:5e:64:6b: bc:e5:a6:96:11:90:52:76:e9:ef:41:a5:73:c8:f8: 43:53:aa:8c:90:54:cb:59:64:44:3e:ed:f0:33:d8: ef:f3:23:3c:aa:f8:88:a7:10:f8:80:88:1a:9a:22: 52:14:a5:59:2a:16:be:d5:9a:95:2f:1e:40:2b:74: a0:18:fc:fe:8f:52:5b:29:32:6e:32:56:35:c8:ce: ca:b1:b6:1d:54:22:d7:94:ec:25:4e:ac:d4:09:81: a6:a1:07:39:12:b3:31:05:9f:4b:50:bb:03:ee:9b: b7:67:d2:33:d8:5e:8f:d6:72:7b:ac:47:73:8b:80: 12:70:b2:e3:42:a7:0f:02:6a:c6:0c:c1:99:e6:c3: a0:e4:c2:d5:82:f5:09:b6:24:dc:8b:23:61:ea:dd: c8:b2:01:17:37:85:89:63:22:c1:c4:0a:bc:75:31: 48:ec:ca:15:0d:c3:15:bf:8f:ea:99:97:a7:fc:1c: f9:6b:6e:fd:23:38:c3:66:e6:c2:cd:74:fd:29:f7: 06:2d:aa:6a:bc:eb:08:d1:ef:af:51:38:33:4b:1d: 0e:2c:59:8e:59:8f:4f:4b:6e:ad:3e:b1:33:74:9c: 8f:72:4d:13:ad:c6:b1:28:6f:c4:15:61:ff:b9:40: 9b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E3:CC:E4:34:15:3A:E2:F6:83:11:85:7D:0D:8E:A2:07:03:95:A8 X509v3 Authority Key Identifier: keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/zOPM5DQVOuL2gxGFfQ2OogcDlag.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.165.79.0/24 Signature Algorithm: sha256WithRSAEncryption bf:80:5a:81:42:f2:28:e7:6f:d9:cf:6c:33:30:3d:d4:d0:67: 98:ac:52:8b:cf:47:09:de:cc:a0:a9:90:92:d1:96:f1:9b:35: a5:43:f3:0f:c1:04:7f:23:b7:d9:63:a1:2f:b5:8b:dc:99:a3: 9b:04:66:4f:f2:e0:30:92:d5:eb:85:58:f7:80:96:eb:65:4e: 18:f0:08:f3:9e:c3:90:3e:a8:33:57:45:6e:37:26:a7:46:55: db:eb:03:ca:99:4e:30:8b:78:5e:4c:d9:5a:84:7a:5b:6e:04: 06:18:24:c1:eb:2a:ef:92:7f:a4:30:92:e8:bd:0f:49:cf:7e: 3c:51:58:e9:50:fd:c8:0f:f2:18:62:70:a9:a8:ed:37:e6:9c: 65:36:66:00:8c:a3:37:8d:1f:86:b0:69:d8:11:0d:b0:7d:9e: 3a:0e:fc:d1:7b:2a:21:dd:3e:63:78:73:ab:7d:af:d1:4e:7c: 03:22:2d:41:6c:35:78:18:51:da:54:d1:04:8a:c8:2e:a6:65: bc:3a:9f:0a:3b:be:25:62:d9:3b:56:55:a6:88:a5:26:63:68: d1:fc:30:e6:97:e2:15:f3:06:5d:1e:d4:22:97:80:b7:65:65: e1:d3:28:e7:4a:ed:2b:6c:35:0b:61:0f:dd:97:92:a3:ef:d0: 33:9d:62:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8e4fYR53dONONZ8gIsGZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NmRkOWRhZDc1ODc3ZjdkMjhkMTRlMDhkYzU1YjEzMzBi ZDEzYjcwHhcNMjYwMTAyMTgyMTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2UzY2NlNDM0MTUzYWUyZjY4MzExODU3ZDBkOGVhMjA3MDM5NWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh4dQd/Gpw7BB3BeZGu85aaWEZBS dunvQaVzyPhDU6qMkFTLWWREPu3wM9jv8yM8qviIpxD4gIgamiJSFKVZKha+1ZqV Lx5AK3SgGPz+j1JbKTJuMlY1yM7KsbYdVCLXlOwlTqzUCYGmoQc5ErMxBZ9LULsD 7pu3Z9Iz2F6P1nJ7rEdzi4AScLLjQqcPAmrGDMGZ5sOg5MLVgvUJtiTciyNh6t3I sgEXN4WJYyLBxAq8dTFI7MoVDcMVv4/qmZen/Bz5a279IzjDZubCzXT9KfcGLapq vOsI0e+vUTgzSx0OLFmOWY9PS26tPrEzdJyPck0TrcaxKG/EFWH/uUCbgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMzjzOQ0FTri9oMRhX0NjqIHA5WoMB8GA1UdIwQY MBaAFKdt2drXWHf30o0U4I3FWxMwvRO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQt MmFjNmZmNzViZWIwLzEvek9QTTVEUVZPdUwyZ3hHRmZRMk9vZ2NEbGFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQtMmFjNmZmNzViZWIw LzEvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaVPMA0G CSqGSIb3DQEBCwUAA4IBAQC/gFqBQvIo52/Zz2wzMD3U0GeYrFKLz0cJ3sygqZCS 0ZbxmzWlQ/MPwQR/I7fZY6EvtYvcmaObBGZP8uAwktXrhVj3gJbrZU4Y8AjznsOQ PqgzV0VuNyanRlXb6wPKmU4wi3heTNlahHpbbgQGGCTB6yrvkn+kMJLovQ9Jz348 UVjpUP3ID/IYYnCpqO035pxlNmYAjKM3jR+GsGnYEQ2wfZ46DvzReyoh3T5jeHOr fa/RTnwDIi1BbDV4GFHaVNEEisgupmW8Op8KO74lYtk7VlWmiKUmY2jR/DDml+IV 8wZdHtQil4C3ZWXh0yjnSu0rbDULYQ/dl5Kj79AznWJU -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:14 2026 by rpki-client