This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/ZzkZbeBVmlrhqGGKs6Yd3AeUvaE.roa File: ZzkZbeBVmlrhqGGKs6Yd3AeUvaE.roa (raw, json) Hash identifier: IagFhxwf07PxkdXjevXoZdw0hvj+5sj4zJXs1+hlG/o= Subject key identifier: 67:39:19:6D:E0:55:9A:5A:E1:A8:61:8A:B3:A6:1D:DC:07:94:BD:A1 Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768 Certificate serial: 019B7DCA53DD45EFFFEB2E5168005BB6AFBF Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/ZzkZbeBVmlrhqGGKs6Yd3AeUvaE.roa Signing time: Fri 02 Jan 2026 08:19:30 +0000 ROA not before: Fri 02 Jan 2026 08:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213002 IP address blocks: 185.210.92.0/24 maxlen: 24 185.210.93.0/24 maxlen: 24 185.210.94.0/24 maxlen: 24 185.210.95.0/24 maxlen: 24 2a0b:5540::/33 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:53:dd:45:ef:ff:eb:2e:51:68:00:5b:b6:af:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768 Validity Not Before: Jan 2 08:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6739196de0559a5ae1a8618ab3a61ddc0794bda1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:30:39:c2:e4:0d:32:37:68:04:6e:57:58:65: db:bf:c9:b2:4c:a3:28:19:a7:06:42:ed:b3:f4:a6: a3:88:05:49:3b:f8:bf:56:16:f2:19:7a:6f:8b:db: 2a:ff:d7:35:20:b9:ae:2a:68:6b:08:b1:ff:19:98: 8a:9a:fb:5a:b6:88:58:4f:aa:d3:7b:87:3c:23:1d: 12:94:33:79:5f:a3:a4:d2:b3:e4:a5:ba:88:d8:10: e2:4f:3e:1f:e4:a3:12:df:e0:1b:4b:dd:4f:66:33: f5:7e:a4:c3:51:62:19:f1:96:95:d7:10:f6:2e:17: 64:b7:4a:d3:7b:09:ea:8f:b0:a1:0c:81:bd:b2:13: 7c:2c:d4:00:c5:44:76:86:1d:44:47:94:72:96:4b: 57:a3:a0:d1:2d:e0:b7:ad:35:2f:dd:e9:62:52:b9: 84:58:f8:e7:96:2c:18:2f:ad:5a:66:33:a5:86:2e: 19:b1:98:0a:1c:41:85:e4:83:a9:26:1d:07:5c:38: 22:df:e5:8c:23:dc:5a:26:ec:d7:cf:d4:cf:97:e1: 3d:a0:a2:67:89:42:21:2c:aa:b1:7a:87:91:cc:32: 22:c7:9d:19:15:31:1e:88:b8:24:72:97:85:61:38: f9:05:a2:23:21:28:22:1e:0a:ec:f5:b0:d1:c0:4f: 06:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:39:19:6D:E0:55:9A:5A:E1:A8:61:8A:B3:A6:1D:DC:07:94:BD:A1 X509v3 Authority Key Identifier: keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/ZzkZbeBVmlrhqGGKs6Yd3AeUvaE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.210.92.0/22 IPv6: 2a0b:5540::/33 Signature Algorithm: sha256WithRSAEncryption 1a:81:e9:87:e6:8e:fb:20:64:62:fc:4f:10:53:82:82:2e:55: 2f:58:6c:24:18:13:0d:40:04:ae:27:7d:ec:dc:0b:36:7a:8a: bb:fc:d2:66:54:d2:db:c1:77:fe:bd:2d:ca:a4:d0:63:e8:80: f4:ae:0e:e3:06:b9:c3:2c:12:cb:83:21:7b:28:87:19:bc:88: 14:3f:bf:71:3e:c8:08:32:ac:ec:30:3d:23:29:b9:92:8f:70: 6b:1b:cc:96:42:e2:b0:91:51:8c:69:ee:3f:bb:60:3b:dd:5d: e1:43:05:52:57:e7:fb:c6:7c:f1:26:c1:a9:73:d1:a4:d9:47: d5:df:e1:ac:64:67:38:10:dc:1a:89:58:87:8b:07:d7:1f:86: 3f:4f:ac:72:ab:10:3b:9c:8d:c9:53:05:33:23:78:a6:e0:f0: 02:41:63:e4:ac:81:5f:f2:f9:0e:81:77:24:65:4f:f5:19:f7: 93:bb:a5:e4:c3:0b:3f:b7:00:6f:64:88:12:77:c2:76:33:76: d1:a2:95:9e:62:41:43:11:7b:3b:90:e3:0a:02:5c:6c:ce:d1: c1:8b:45:8a:52:36:ca:8d:49:8e:ea:df:0c:5b:b1:1b:72:39: ba:2f:59:79:a5:96:92:bb:21:05:b1:64:bd:7a:77:6c:e0:54: c6:f4:ae:27 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt9ylPdRe//6y5RaABbtq+/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMDE4MzNjN2VlNWYzNDNmZjA5M2I2YzRlNjE1MWQwZTM2 NDU3NjgwHhcNMjYwMTAyMDgxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzM5MTk2ZGUwNTU5YTVhZTFhODYxOGFiM2E2MWRkYzA3OTRiZGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzA5wuQNMjdoBG5XWGXbv8myTKMo GacGQu2z9KajiAVJO/i/VhbyGXpvi9sq/9c1ILmuKmhrCLH/GZiKmvtatohYT6rT e4c8Ix0SlDN5X6Ok0rPkpbqI2BDiTz4f5KMS3+AbS91PZjP1fqTDUWIZ8ZaV1xD2 Lhdkt0rTewnqj7ChDIG9shN8LNQAxUR2hh1ER5RylktXo6DRLeC3rTUv3eliUrmE WPjnliwYL61aZjOlhi4ZsZgKHEGF5IOpJh0HXDgi3+WMI9xaJuzXz9TPl+E9oKJn iUIhLKqxeoeRzDIix50ZFTEeiLgkcpeFYTj5BaIjISgiHgrs9bDRwE8GiQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFGc5GW3gVZpa4ahhirOmHdwHlL2hMB8GA1UdIwQY MBaAFMwBgzx+5fND/wk7bE5hUdDjZFdoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekFHRFBIN2w4MFBfQ1R0c1RtRlIwT05rVjJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9kNDA3NzMtY2YyZC00MTk4LThiM2Yt NzI3YWI2ZDA3ZmYyLzEvWnprWmJlQlZtbHJocUdHS3M2WWQzQWVVdmFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9kNDA3NzMtY2YyZC00MTk4LThiM2YtNzI3YWI2ZDA3ZmYy LzEvekFHRFBIN2w4MFBfQ1R0c1RtRlIwT05rVjJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCudJcMA4E AgACMAgDBgcqC1VAADANBgkqhkiG9w0BAQsFAAOCAQEAGoHph+aO+yBkYvxPEFOC gi5VL1hsJBgTDUAErid97NwLNnqKu/zSZlTS28F3/r0tyqTQY+iA9K4O4wa5wywS y4MheyiHGbyIFD+/cT7ICDKs7DA9Iym5ko9waxvMlkLisJFRjGnuP7tgO91d4UMF Ulfn+8Z88SbBqXPRpNlH1d/hrGRnOBDcGolYh4sH1x+GP0+scqsQO5yNyVMFMyN4 puDwAkFj5KyBX/L5DoF3JGVP9Rn3k7ul5MMLP7cAb2SIEnfCdjN20aKVnmJBQxF7 O5DjCgJcbM7RwYtFilI2yo1JjurfDFuxG3I5ui9ZeaWWkrshBbFkvXp3bOBUxvSu Jw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:31 2026 by rpki-client