This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/zVexCvkSNXzSQ_4jRtVV_rcjPGE.roa File: zVexCvkSNXzSQ_4jRtVV_rcjPGE.roa (raw, json) Hash identifier: how96F3OMhXkq8E95kXfSQSmzCi80yeTXVsw9qWAjXo= Subject key identifier: CD:57:B1:0A:F9:12:35:7C:D2:43:FE:23:46:D5:55:FE:B7:23:3C:61 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 019B797EE4CDB9E8ECF0DE4AE7230D309EA7 Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/zVexCvkSNXzSQ_4jRtVV_rcjPGE.roa Signing time: Thu 01 Jan 2026 12:18:37 +0000 ROA not before: Thu 01 Jan 2026 12:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208660 IP address blocks: 185.226.252.0/22 maxlen: 22 185.226.254.0/24 maxlen: 24 185.226.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e4:cd:b9:e8:ec:f0:de:4a:e7:23:0d:30:9e:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: Jan 1 12:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd57b10af912357cd243fe2346d555feb7233c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:62:8f:91:ef:ed:ce:0a:d4:c9:99:16:c8:2a: 6c:df:da:39:e9:a3:81:d8:35:21:2f:0b:63:35:6f: c9:3d:bf:ad:54:81:a1:46:24:87:e1:01:13:b2:4f: 59:74:71:8e:08:21:75:67:9c:1b:95:bb:ce:79:7a: 2f:33:b7:43:fb:1c:66:b6:cf:a9:72:80:b9:95:cd: 26:49:51:42:61:6a:c5:cb:a8:99:7b:5b:62:96:bb: 0b:ff:44:d7:1a:0e:cb:40:dc:2b:bf:70:9b:90:f4: 71:47:6c:e7:54:d6:24:bc:d8:5d:19:97:72:07:2a: ec:c0:86:e8:62:4f:9f:c6:7f:5d:03:ed:f7:3e:d4: de:9c:b6:6c:21:75:98:d9:f5:de:2b:93:fb:f4:7c: 6a:c5:7a:3b:ed:47:41:74:a5:dc:6a:56:09:d0:ca: 94:1c:24:40:fd:27:b2:a2:e7:91:12:f2:1d:03:19: ba:c0:5b:66:e9:22:b6:c0:61:b2:1e:36:df:8e:72: 3a:5f:d5:56:f6:e5:55:cf:7c:c0:26:c4:f9:2e:79: 58:37:c3:7b:2d:3b:76:07:35:b0:96:66:16:12:3c: 25:c9:ab:46:56:38:92:45:0d:85:39:26:84:63:b2: 3f:13:36:a2:f6:85:88:50:1b:b5:2b:5f:ee:9e:a4: f0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:57:B1:0A:F9:12:35:7C:D2:43:FE:23:46:D5:55:FE:B7:23:3C:61 X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/zVexCvkSNXzSQ_4jRtVV_rcjPGE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.226.252.0/22 Signature Algorithm: sha256WithRSAEncryption 04:6a:2e:79:01:ef:e3:40:cd:4e:2f:61:c8:36:88:03:55:a5: e1:c2:0d:fb:68:67:5b:bf:a4:9d:c6:9a:17:83:52:de:74:3d: bb:a5:1f:06:91:85:9c:88:d9:b6:11:9b:e9:a7:1c:00:a2:19: f1:85:9b:c9:ca:b8:66:33:26:56:17:bb:35:f3:c7:1d:96:77: ee:60:ca:a9:d8:9f:b0:05:6e:ce:7c:88:66:6f:ae:10:e2:f7: bb:f7:53:2a:18:99:f4:38:b4:a2:6c:ca:92:03:46:7c:25:26: 30:80:1b:77:84:d0:e0:aa:1c:3e:30:dc:48:77:03:19:12:0a: 5d:ac:83:c8:58:27:53:88:28:69:5e:c6:9a:e2:c6:d5:ed:05: cd:d3:52:d4:e4:93:df:2f:ca:28:19:bc:9f:96:48:b4:93:7f: a9:0d:5f:d2:d7:1c:0c:f3:b5:a2:4d:d8:90:fb:31:a3:2d:a1: 29:fc:91:22:4c:63:a8:59:a2:8c:90:3e:17:b0:47:7c:93:65: 73:1b:29:82:60:54:06:16:94:27:6a:27:67:71:fd:4f:aa:e6: c5:9b:65:84:3b:32:23:87:e1:3e:20:45:d0:67:7e:8c:31:93: 91:74:d9:48:47:b4:94:c0:09:e2:28:25:2f:c6:7a:cc:bd:1b: 6b:b4:77:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fuTNuejs8N5K5yMNMJ6nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjYwMTAxMTIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDU3YjEwYWY5MTIzNTdjZDI0M2ZlMjM0NmQ1NTVmZWI3MjMzYzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mKPke/tzgrUyZkWyCps39o56aOB 2DUhLwtjNW/JPb+tVIGhRiSH4QETsk9ZdHGOCCF1Z5wblbvOeXovM7dD+xxmts+p coC5lc0mSVFCYWrFy6iZe1tilrsL/0TXGg7LQNwrv3CbkPRxR2znVNYkvNhdGZdy ByrswIboYk+fxn9dA+33PtTenLZsIXWY2fXeK5P79HxqxXo77UdBdKXcalYJ0MqU HCRA/SeyoueREvIdAxm6wFtm6SK2wGGyHjbfjnI6X9VW9uVVz3zAJsT5LnlYN8N7 LTt2BzWwlmYWEjwlyatGVjiSRQ2FOSaEY7I/Ezai9oWIUBu1K1/unqTwfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM1XsQr5EjV80kP+I0bVVf63IzxhMB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvelZleEN2a1NOWHpTUV80alJ0VlZfcmNqUEdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueL8MA0G CSqGSIb3DQEBCwUAA4IBAQAEai55Ae/jQM1OL2HINogDVaXhwg37aGdbv6SdxpoX g1LedD27pR8GkYWciNm2EZvppxwAohnxhZvJyrhmMyZWF7s188cdlnfuYMqp2J+w BW7OfIhmb64Q4ve791MqGJn0OLSibMqSA0Z8JSYwgBt3hNDgqhw+MNxIdwMZEgpd rIPIWCdTiChpXsaa4sbV7QXN01LU5JPfL8ooGbyflki0k3+pDV/S1xwM87WiTdiQ +zGjLaEp/JEiTGOoWaKMkD4XsEd8k2VzGymCYFQGFpQnaidncf1PqubFm2WEOzIj h+E+IEXQZ36MMZORdNlIR7SUwAniKCUvxnrMvRtrtHfP -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:38 2026 by rpki-client