This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Z9pOd0BrIh2-yrpOGziW3qU0bzM.roa File: Z9pOd0BrIh2-yrpOGziW3qU0bzM.roa (raw, json) Hash identifier: DK7WsqvFz/IWwsIiFvqQnW7hFYzjbv/j3ET+oJXfbWY= Subject key identifier: 67:DA:4E:77:40:6B:22:1D:BE:CA:BA:4E:1B:38:96:DE:A5:34:6F:33 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EACD6274ED30676B0470ABA2284396 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Z9pOd0BrIh2-yrpOGziW3qU0bzM.roa Signing time: Thu 01 Jan 2026 00:17:37 +0000 ROA not before: Thu 01 Jan 2026 00:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202673 IP address blocks: 85.208.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:cd:62:74:ed:30:67:6b:04:70:ab:a2:28:43:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67da4e77406b221dbecaba4e1b3896dea5346f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9e:f3:40:6a:4a:e7:7c:39:87:69:32:cf:6a: f5:de:a4:7c:2b:59:23:f3:6f:c6:fa:46:aa:3e:fe: a2:6e:dc:b3:42:7f:20:33:9e:59:9b:eb:ac:b5:83: fe:77:5f:ef:bc:1b:45:cd:40:be:46:4c:b5:40:80: c8:91:ea:7e:60:b9:4d:79:7f:e8:17:97:6b:cc:a4: d1:34:87:de:e1:4a:5e:89:70:58:1a:b0:29:d2:14: 11:d4:71:6e:15:ef:7f:d2:5b:7c:cc:68:b8:41:58: 35:5c:cd:50:86:5d:e0:ef:08:36:49:56:99:49:f4: 84:ee:6d:3e:74:15:43:5e:15:a6:25:37:70:37:27: 32:f1:74:97:6e:bf:db:bf:71:7f:b3:b7:f3:da:c0: 6d:df:bb:66:35:d0:61:5d:17:ba:10:5a:17:61:2a: a0:66:7e:68:92:15:ca:cf:fe:80:1e:02:e6:f4:09: 50:50:66:dc:94:50:1b:06:6a:c2:07:e2:9e:23:60: a7:0a:8d:11:0b:46:e3:97:01:4d:4f:77:ca:a6:cb: 80:d2:74:6a:f7:d2:9b:cb:a4:76:b6:f7:15:9d:fe: 78:05:88:7e:b0:97:d8:20:4b:32:4b:a6:74:2b:77: 11:d8:7f:7c:a6:11:27:45:2f:f1:7b:be:c6:5f:99: 8c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:DA:4E:77:40:6B:22:1D:BE:CA:BA:4E:1B:38:96:DE:A5:34:6F:33 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Z9pOd0BrIh2-yrpOGziW3qU0bzM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.208.114.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:4a:5e:a7:72:5c:92:34:1c:d0:7e:8e:5f:97:ca:36:21:b6: a0:e2:a9:cc:f5:77:7b:43:b2:4b:84:fc:61:9c:20:14:44:c9: 31:04:ac:e4:4f:76:ce:16:6e:92:65:91:8f:2f:7d:06:58:7f: e4:e5:60:21:7e:b2:7a:40:23:eb:64:6e:58:42:83:85:47:c0: b3:3c:9d:84:1d:fe:09:cf:e1:f4:d4:29:1e:07:0f:6b:e9:bc: e8:63:1d:8e:6c:83:90:f9:61:a7:f8:1c:a8:b1:32:3e:33:6e: 6d:94:fe:f1:86:da:9f:72:50:51:7a:17:87:93:03:ea:b2:f9: fc:f7:f3:86:b5:cc:b0:2d:63:9b:f5:77:77:70:5f:64:11:1a: fb:ca:8b:3a:2b:93:f9:e4:05:32:9a:81:ee:1a:3d:f7:da:a7: 49:50:59:e7:10:56:09:44:7a:23:7b:36:f5:ce:29:09:13:78: 1b:ed:9a:bf:b0:91:12:c5:99:66:ba:34:c0:fc:bc:74:01:7e: 18:4b:11:b3:6a:b8:db:42:c7:76:ab:f3:9f:cb:c8:d7:4b:1d: f8:96:00:3e:07:cb:43:ea:c6:c9:c1:ec:70:06:37:1b:2f:9d: 25:c6:48:4a:bc:d6:bd:15:b9:66:5e:ef:47:a9:0c:9f:ee:04: f5:59:2a:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26s1idO0wZ2sEcKuiKEOWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2RhNGU3NzQwNmIyMjFkYmVjYWJhNGUxYjM4OTZkZWE1MzQ2ZjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn57zQGpK53w5h2kyz2r13qR8K1kj 82/G+kaqPv6ibtyzQn8gM55Zm+ustYP+d1/vvBtFzUC+Rky1QIDIkep+YLlNeX/o F5drzKTRNIfe4UpeiXBYGrAp0hQR1HFuFe9/0lt8zGi4QVg1XM1Qhl3g7wg2SVaZ SfSE7m0+dBVDXhWmJTdwNycy8XSXbr/bv3F/s7fz2sBt37tmNdBhXRe6EFoXYSqg Zn5okhXKz/6AHgLm9AlQUGbclFAbBmrCB+KeI2CnCo0RC0bjlwFNT3fKpsuA0nRq 99Kby6R2tvcVnf54BYh+sJfYIEsyS6Z0K3cR2H98phEnRS/xe77GX5mMDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGfaTndAayIdvsq6Ths4lt6lNG8zMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvWjlwT2QwQnJJaDIteXJwT0d6aVczcVUwYnpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdByMA0G CSqGSIb3DQEBCwUAA4IBAQCLSl6nclySNBzQfo5fl8o2Ibag4qnM9Xd7Q7JLhPxh nCAURMkxBKzkT3bOFm6SZZGPL30GWH/k5WAhfrJ6QCPrZG5YQoOFR8CzPJ2EHf4J z+H01CkeBw9r6bzoYx2ObIOQ+WGn+ByosTI+M25tlP7xhtqfclBReheHkwPqsvn8 9/OGtcywLWOb9Xd3cF9kERr7yos6K5P55AUymoHuGj332qdJUFnnEFYJRHojezb1 zikJE3gb7Zq/sJESxZlmujTA/Lx0AX4YSxGzarjbQsd2q/Ofy8jXSx34lgA+B8tD 6sbJwexwBjcbL50lxkhKvNa9FblmXu9HqQyf7gT1WSrT -----END CERTIFICATE-----Generated at Sun Jan 25 07:15:39 2026 by rpki-client