This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/zvWrg-epv6Kuwwbr_YnppFR5eP4.roa File: zvWrg-epv6Kuwwbr_YnppFR5eP4.roa (raw, json) Hash identifier: CXU1oUM5pH2/lckg4eVPlPBRQqsoIp6BUfj73FNZ/wQ= Subject key identifier: CE:F5:AB:83:E7:A9:BF:A2:AE:C3:06:EB:FD:89:E9:A4:54:79:78:FE Certificate issuer: /CN=57e2b86a33c9f97214536d8ca2919d7f3c3800ce Certificate serial: 019B7C134757FB6D2F8FC93481861785721C Authority key identifier: 57:E2:B8:6A:33:C9:F9:72:14:53:6D:8C:A2:91:9D:7F:3C:38:00:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/zvWrg-epv6Kuwwbr_YnppFR5eP4.roa Signing time: Fri 02 Jan 2026 00:19:56 +0000 ROA not before: Fri 02 Jan 2026 00:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28878 IP address blocks: 185.42.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.crl rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.mft rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:47:57:fb:6d:2f:8f:c9:34:81:86:17:85:72:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57e2b86a33c9f97214536d8ca2919d7f3c3800ce Validity Not Before: Jan 2 00:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cef5ab83e7a9bfa2aec306ebfd89e9a4547978fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2b:a3:99:38:58:31:ec:fa:e1:ec:21:7d:af: a4:81:1c:67:0a:d3:56:74:dd:2f:7f:bc:c7:e9:01: 04:62:d7:88:d1:4b:07:6c:84:e6:df:00:ac:e8:e5: 03:45:b4:54:4f:5c:de:ec:d4:5f:c5:61:27:67:d5: e9:e3:bf:44:ff:08:92:76:da:63:fc:3f:2f:ac:18: 8d:b0:c3:6d:c3:42:89:b8:50:37:da:cd:5a:3b:1b: 22:c5:d0:90:91:b9:c8:79:fb:91:e7:c7:c3:d2:d8: 35:52:06:da:be:1f:e5:7a:9d:06:51:b7:56:7e:51: 86:02:51:f8:e9:71:c5:e4:3d:11:ca:ea:93:3e:28: 0b:f9:44:67:3f:b2:e0:6c:f1:24:9f:13:08:4c:6b: fc:d5:83:95:bc:11:fa:d6:2a:e1:db:f0:45:55:82: 4c:59:fe:b6:79:9b:e8:d3:c0:5e:a7:77:17:41:34: 1e:20:7d:fa:ae:5b:8b:62:31:9c:48:4e:4f:3e:a5: fa:51:2c:e8:ea:f0:db:63:b0:46:a0:93:e3:6a:c5: 02:39:a4:9f:cd:1d:47:2e:e8:f7:ce:68:04:3e:32: 85:83:88:29:1e:91:b3:fe:34:c7:9b:16:6d:5a:e8: af:48:49:1c:21:6e:e1:31:87:67:06:5d:74:03:59: 97:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F5:AB:83:E7:A9:BF:A2:AE:C3:06:EB:FD:89:E9:A4:54:79:78:FE X509v3 Authority Key Identifier: keyid:57:E2:B8:6A:33:C9:F9:72:14:53:6D:8C:A2:91:9D:7F:3C:38:00:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/zvWrg-epv6Kuwwbr_YnppFR5eP4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.42.72.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:1e:a3:cf:9f:5e:33:91:45:f0:e2:b5:52:28:4a:1c:96:11: 65:3d:b4:ed:cf:a1:5f:2b:38:0e:d5:91:c2:63:ec:ff:83:e1: d5:3c:1e:12:9b:4b:39:56:89:f2:d1:b4:18:30:35:6a:31:0e: a4:2f:79:0b:ba:94:0a:84:65:3c:6f:95:d7:f0:ab:10:79:86: e1:d7:e5:68:ad:67:ba:e4:28:54:6e:fc:3b:2f:29:82:76:4b: 89:71:7e:a6:2d:44:5c:3c:19:bb:d0:e0:4b:2d:1d:c2:ca:9e: 87:89:e7:b8:ab:19:47:dc:82:24:36:2d:ca:16:61:15:70:f9: b5:8d:67:55:73:55:11:6a:8d:b7:3a:f1:6d:77:4a:be:e7:d7: 2c:27:28:bb:3d:d7:48:4c:d3:d6:b1:e2:4f:ea:c4:ba:bf:98: 11:98:e9:f0:73:83:7c:60:ed:12:d2:0b:cd:76:fb:e6:aa:92: fe:7e:e3:f1:89:c4:aa:22:bb:a3:47:64:20:bc:1f:9c:30:87: 3d:62:18:c4:69:06:49:6f:2a:e3:c5:3d:f4:a6:e0:3a:33:d3: eb:de:a5:e3:33:61:3b:cf:b6:41:e2:d6:63:ac:e0:88:44:86: 90:db:4e:7f:62:3c:33:cb:d0:98:24:27:32:7b:5c:44:3a:5e: ad:09:b6:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E0dX+20vj8k0gYYXhXIcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3ZTJiODZhMzNjOWY5NzIxNDUzNmQ4Y2EyOTE5ZDdmM2Mz ODAwY2UwHhcNMjYwMTAyMDAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWY1YWI4M2U3YTliZmEyYWVjMzA2ZWJmZDg5ZTlhNDU0Nzk3OGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CujmThYMez64ewhfa+kgRxnCtNW dN0vf7zH6QEEYteI0UsHbITm3wCs6OUDRbRUT1ze7NRfxWEnZ9Xp479E/wiSdtpj /D8vrBiNsMNtw0KJuFA32s1aOxsixdCQkbnIefuR58fD0tg1Ugbavh/lep0GUbdW flGGAlH46XHF5D0RyuqTPigL+URnP7LgbPEknxMITGv81YOVvBH61irh2/BFVYJM Wf62eZvo08Bep3cXQTQeIH36rluLYjGcSE5PPqX6USzo6vDbY7BGoJPjasUCOaSf zR1HLuj3zmgEPjKFg4gpHpGz/jTHmxZtWuivSEkcIW7hMYdnBl10A1mXvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM71q4Pnqb+irsMG6/2J6aRUeXj+MB8GA1UdIwQY MBaAFFfiuGozyflyFFNtjKKRnX88OADOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVi1LNGFqUEotWElVVTIyTW9wR2Rmenc0QU00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi82MTQ5YTUtYzhkZS00YzYxLWJlYjct MjIwMTIwM2EwYmFiLzEvenZXcmctZXB2Nkt1d3dicl9ZbnBwRlI1ZVA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi82MTQ5YTUtYzhkZS00YzYxLWJlYjctMjIwMTIwM2EwYmFi LzEvVi1LNGFqUEotWElVVTIyTW9wR2Rmenc0QU00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSpIMA0G CSqGSIb3DQEBCwUAA4IBAQA/HqPPn14zkUXw4rVSKEoclhFlPbTtz6FfKzgO1ZHC Y+z/g+HVPB4Sm0s5Vony0bQYMDVqMQ6kL3kLupQKhGU8b5XX8KsQeYbh1+VorWe6 5ChUbvw7LymCdkuJcX6mLURcPBm70OBLLR3Cyp6Hiee4qxlH3IIkNi3KFmEVcPm1 jWdVc1URao23OvFtd0q+59csJyi7PddITNPWseJP6sS6v5gRmOnwc4N8YO0S0gvN dvvmqpL+fuPxicSqIrujR2QgvB+cMIc9YhjEaQZJbyrjxT30puA6M9Pr3qXjM2E7 z7ZB4tZjrOCIRIaQ205/Yjwzy9CYJCcye1xEOl6tCbaf -----END CERTIFICATE-----Generated at Sun Jan 25 16:36:32 2026 by rpki-client