This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/Z-DruXNSD3ojQuyP0eX2dyvzUPw.roa File: Z-DruXNSD3ojQuyP0eX2dyvzUPw.roa (raw, json) Hash identifier: lMQFG5A2ZEM00HvhF0MbgWXroNtVKP+zZ/D7DoKQ2cs= Subject key identifier: 67:E0:EB:B9:73:52:0F:7A:23:42:EC:8F:D1:E5:F6:77:2B:F3:50:FC Certificate issuer: /CN=69042c1f27a7d7862475087023dc97c3330f73c6 Certificate serial: 019B7F15C6076CF4639BCFE89B97DE9BEDC2 Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/Z-DruXNSD3ojQuyP0eX2dyvzUPw.roa Signing time: Fri 02 Jan 2026 14:21:31 +0000 ROA not before: Fri 02 Jan 2026 14:21:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3176 IP address blocks: 185.104.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:c6:07:6c:f4:63:9b:cf:e8:9b:97:de:9b:ed:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6 Validity Not Before: Jan 2 14:21:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67e0ebb973520f7a2342ec8fd1e5f6772bf350fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ef:94:cd:9d:44:3a:7c:f0:1b:e7:0a:5d:49: df:0e:86:f6:d0:13:d3:63:1e:21:4b:91:49:02:8d: ff:e9:bd:7e:c2:d4:14:f4:cd:22:a6:72:4d:13:72: f9:90:6d:af:89:fa:a3:c7:ed:7e:9f:81:b7:ac:24: 42:00:6d:d5:40:eb:a7:72:51:c7:23:27:0c:5b:33: 8c:16:83:4f:c2:7a:44:86:b1:6f:bc:d1:ef:13:ee: c7:8f:63:e0:c1:fd:da:fe:0a:ef:d2:84:46:66:94: ce:30:e3:1b:b7:5c:73:d3:27:34:7d:a4:c0:ef:91: 7b:02:a6:41:66:a4:8d:da:03:b9:4c:60:9c:90:1b: d4:82:94:de:a3:8f:89:25:fc:60:12:b7:35:1e:a3: 58:21:82:80:02:7a:7e:bf:f5:91:6d:d3:59:8b:fa: af:ff:61:ab:aa:2e:6b:78:87:1d:f1:d9:ba:48:63: 7d:d9:6d:39:33:d2:cd:dc:83:ab:d6:e1:7b:34:61: 55:aa:95:9e:09:de:f3:d6:98:da:ca:1a:f9:4a:52: 24:6d:9e:b6:dd:99:c3:46:30:de:32:03:25:b6:03: cb:51:d6:d2:cd:81:7f:d6:18:18:76:80:6a:b5:a6: 45:8c:20:8e:47:80:02:ca:12:76:e0:61:01:6b:c5: 47:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E0:EB:B9:73:52:0F:7A:23:42:EC:8F:D1:E5:F6:77:2B:F3:50:FC X509v3 Authority Key Identifier: keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/Z-DruXNSD3ojQuyP0eX2dyvzUPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.104.69.0/24 Signature Algorithm: sha256WithRSAEncryption 89:68:c6:ea:2c:dd:18:1d:2e:a5:e6:83:42:d4:dc:eb:2a:4f: 02:b9:69:2b:b7:54:a4:fb:25:65:56:5c:68:b4:af:ba:e1:4e: 22:41:0a:b3:ac:c2:99:4a:24:e7:09:fa:f7:b7:b7:65:ad:fd: cf:55:ea:70:88:89:16:c1:e5:67:21:1f:52:95:fe:fb:b0:c0: 6c:2d:5b:80:d1:9a:1b:07:b9:65:f9:92:ea:d8:3a:ee:e8:b1: c1:cd:c7:56:8f:15:74:3e:24:ca:a5:26:55:94:f6:2c:aa:87: 18:8f:02:55:b6:c2:ee:c0:4f:9f:21:1c:df:a5:5d:d5:fd:fd: 68:22:f1:65:f1:24:2b:e6:67:fc:de:e4:97:6e:68:58:41:7a: 96:66:9a:a6:30:75:41:c7:fa:3f:34:36:2c:4d:1e:78:f0:c8: fc:24:f7:15:15:31:e4:02:9d:27:11:65:7e:b3:55:36:8b:d7: 20:43:8f:bc:b8:eb:e1:c7:48:18:9f:6a:f5:58:c2:e5:05:c8: 5c:ce:77:9b:04:b3:82:4a:b0:91:10:e8:42:df:bf:d8:42:4b: 8c:88:b3:14:9a:5f:d0:82:06:26:18:a7:c8:a3:95:f6:ba:da: df:a5:d7:ab:27:7f:b2:d7:a7:6c:c3:9d:53:44:28:f6:f6:75: 37:13:fd:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FcYHbPRjm8/om5fem+3CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MDQyYzFmMjdhN2Q3ODYyNDc1MDg3MDIzZGM5N2MzMzMw ZjczYzYwHhcNMjYwMTAyMTQyMTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2UwZWJiOTczNTIwZjdhMjM0MmVjOGZkMWU1ZjY3NzJiZjM1MGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO+UzZ1EOnzwG+cKXUnfDob20BPT Yx4hS5FJAo3/6b1+wtQU9M0ipnJNE3L5kG2vifqjx+1+n4G3rCRCAG3VQOunclHH IycMWzOMFoNPwnpEhrFvvNHvE+7Hj2Pgwf3a/grv0oRGZpTOMOMbt1xz0yc0faTA 75F7AqZBZqSN2gO5TGCckBvUgpTeo4+JJfxgErc1HqNYIYKAAnp+v/WRbdNZi/qv /2Grqi5reIcd8dm6SGN92W05M9LN3IOr1uF7NGFVqpWeCd7z1pjayhr5SlIkbZ62 3ZnDRjDeMgMltgPLUdbSzYF/1hgYdoBqtaZFjCCOR4ACyhJ24GEBa8VHuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGfg67lzUg96I0Lsj9Hl9ncr81D8MB8GA1UdIwQY MBaAFGkELB8np9eGJHUIcCPcl8MzD3PGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVFRc0h5ZW4xNFlrZFFod0k5eVh3ek1QYzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy80YWU2NGItZjczZS00MDhjLWI0YTgt Y2JiM2Q2MzVkODJmLzEvWi1EcnVYTlNEM29qUXV5UDBlWDJkeXZ6VVB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy80YWU2NGItZjczZS00MDhjLWI0YTgtY2JiM2Q2MzVkODJm LzEvYVFRc0h5ZW4xNFlrZFFod0k5eVh3ek1QYzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWhFMA0G CSqGSIb3DQEBCwUAA4IBAQCJaMbqLN0YHS6l5oNC1NzrKk8CuWkrt1Sk+yVlVlxo tK+64U4iQQqzrMKZSiTnCfr3t7dlrf3PVepwiIkWweVnIR9Slf77sMBsLVuA0Zob B7ll+ZLq2Dru6LHBzcdWjxV0PiTKpSZVlPYsqocYjwJVtsLuwE+fIRzfpV3V/f1o IvFl8SQr5mf83uSXbmhYQXqWZpqmMHVBx/o/NDYsTR548Mj8JPcVFTHkAp0nEWV+ s1U2i9cgQ4+8uOvhx0gYn2r1WMLlBchcznebBLOCSrCREOhC37/YQkuMiLMUml/Q ggYmGKfIo5X2utrfpderJ3+y16dsw51TRCj29nU3E/1B -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:43 2026 by rpki-client