This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/ZWUErCoRp6n3sDfUTwWNxFlFwkE.roa File: ZWUErCoRp6n3sDfUTwWNxFlFwkE.roa (raw, json) Hash identifier: 8RNREI6ryiba9fmNE0nRRUczZpr0WTS3WDo4j3F1+PE= Subject key identifier: 65:65:04:AC:2A:11:A7:A9:F7:B0:37:D4:4F:05:8D:C4:59:45:C2:41 Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62 Certificate serial: 019B7EA6B783C3781713DFDC4EAA77C4BFB5 Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/ZWUErCoRp6n3sDfUTwWNxFlFwkE.roa Signing time: Fri 02 Jan 2026 12:20:13 +0000 ROA not before: Fri 02 Jan 2026 12:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42160 IP address blocks: 185.18.148.0/23 maxlen: 23 2a04:b80:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:b7:83:c3:78:17:13:df:dc:4e:aa:77:c4:bf:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80043f23936622824111e8865a50002067d95a62 Validity Not Before: Jan 2 12:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=656504ac2a11a7a9f7b037d44f058dc45945c241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:14:4d:f4:55:a8:2d:4d:11:fa:54:35:a0:78: e0:b8:b7:8a:3f:5d:3d:ba:eb:43:40:f7:21:58:02: ab:1c:69:04:53:b3:7a:32:ea:eb:e5:d5:74:f2:d5: b6:12:88:7a:ab:dd:12:54:64:88:65:53:b5:a0:18: 4f:4a:d6:56:84:00:e3:51:bb:39:05:1d:6d:0b:63: b4:44:bb:17:05:97:2a:03:8f:bf:2a:97:5a:2d:71: 77:41:1f:9a:3d:89:be:99:6a:fd:4c:6d:6c:a5:7d: e6:f3:1f:1f:42:b5:a5:ef:6b:b1:10:a6:86:3d:3f: e9:9f:3f:7e:08:43:58:30:38:39:81:6a:3d:12:7a: eb:81:1e:f6:52:f2:bb:78:3f:80:bf:55:01:84:6a: 17:62:c5:31:bd:36:ca:df:b8:d3:c1:39:5c:e6:98: 5b:ed:12:7f:d2:af:0d:8c:49:33:5d:7d:24:81:00: 1c:d4:35:19:b6:d1:a1:1c:cb:9b:e3:6a:c3:b7:e3: 4c:cf:c6:7d:d3:ae:53:07:a6:44:37:a6:b8:24:34: 56:00:ab:6b:bd:fb:7c:f7:08:6d:be:d6:c5:50:b4: c6:37:4e:a8:02:d6:93:33:1a:1e:56:1f:d0:0f:b3: 6c:ff:58:a2:f9:67:d4:73:7c:35:06:60:dc:87:a8: 2f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:65:04:AC:2A:11:A7:A9:F7:B0:37:D4:4F:05:8D:C4:59:45:C2:41 X509v3 Authority Key Identifier: keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/ZWUErCoRp6n3sDfUTwWNxFlFwkE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.18.148.0/23 IPv6: 2a04:b80:1::/48 Signature Algorithm: sha256WithRSAEncryption 8f:45:d5:e6:73:be:6f:1d:22:2f:0d:c5:39:fd:37:2b:e7:17: 11:75:31:43:91:b8:ec:ea:fe:6d:d1:70:6c:e9:eb:2f:2c:05: fb:78:68:6f:a7:c1:a7:07:70:62:63:d9:65:6f:69:44:07:45: 92:5c:ad:e5:4f:4b:55:f4:0a:af:dd:6f:b7:84:7f:08:a5:71: d7:ef:ea:f1:2e:94:a1:4c:cf:f2:a7:06:c9:eb:96:83:0e:87: 76:d1:ba:1f:f0:95:91:04:aa:5f:fa:e1:7d:e3:09:b2:ba:91: 13:9c:06:ea:3b:f8:49:8c:46:f0:55:c8:cd:de:04:e6:12:84: 9c:2e:bf:56:e6:52:14:48:55:3c:cd:2d:09:1a:b7:ed:a0:ce: 11:9f:0d:ce:84:b0:60:fc:ad:eb:70:67:82:c3:bc:cc:1c:50: ed:7b:0a:c8:a4:2f:0a:1f:de:be:45:2b:96:0c:1b:a4:1e:b6: 67:1e:33:a3:2f:f5:d7:9c:d3:61:ce:19:f0:12:1e:0e:4a:b1: 50:29:69:22:96:b9:73:48:55:8f:4d:cc:40:74:a2:f4:7e:98: d2:cc:94:14:02:66:25:4c:84:2b:b8:19:fb:80:a4:f3:36:09: 93:2f:03:67:0a:26:17:6f:5d:b9:96:26:c9:e6:6e:23:ed:ac: 55:5a:55:eb -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+preDw3gXE9/cTqp3xL+1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwMDQzZjIzOTM2NjIyODI0MTExZTg4NjVhNTAwMDIwNjdk OTVhNjIwHhcNMjYwMTAyMTIyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTY1MDRhYzJhMTFhN2E5ZjdiMDM3ZDQ0ZjA1OGRjNDU5NDVjMjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xRN9FWoLU0R+lQ1oHjguLeKP109 uutDQPchWAKrHGkEU7N6Murr5dV08tW2Eoh6q90SVGSIZVO1oBhPStZWhADjUbs5 BR1tC2O0RLsXBZcqA4+/KpdaLXF3QR+aPYm+mWr9TG1spX3m8x8fQrWl72uxEKaG PT/pnz9+CENYMDg5gWo9EnrrgR72UvK7eD+Av1UBhGoXYsUxvTbK37jTwTlc5phb 7RJ/0q8NjEkzXX0kgQAc1DUZttGhHMub42rDt+NMz8Z9065TB6ZEN6a4JDRWAKtr vft89whtvtbFULTGN06oAtaTMxoeVh/QD7Ns/1ii+WfUc3w1BmDch6gvBwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGVlBKwqEaep97A31E8FjcRZRcJBMB8GA1UdIwQY MBaAFIAEPyOTZiKCQRHohlpQACBn2VpiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0FRX0k1Tm1Jb0pCRWVpR1dsQUFJR2ZaV21JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zOWYyOGMtOWViOC00Y2FlLThkOTgt NjhjZGM2OTJhZDA5LzEvWldVRXJDb1JwNm4zc0RmVVR3V054RmxGd2tFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8zOWYyOGMtOWViOC00Y2FlLThkOTgtNjhjZGM2OTJhZDA5 LzEvZ0FRX0k1Tm1Jb0pCRWVpR1dsQUFJR2ZaV21JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBuRKUMA8E AgACMAkDBwAqBAuAAAEwDQYJKoZIhvcNAQELBQADggEBAI9F1eZzvm8dIi8NxTn9 NyvnFxF1MUORuOzq/m3RcGzp6y8sBft4aG+nwacHcGJj2WVvaUQHRZJcreVPS1X0 Cq/db7eEfwilcdfv6vEulKFMz/KnBsnrloMOh3bRuh/wlZEEql/64X3jCbK6kROc Buo7+EmMRvBVyM3eBOYShJwuv1bmUhRIVTzNLQkat+2gzhGfDc6EsGD8retwZ4LD vMwcUO17CsikLwof3r5FK5YMG6QetmceM6Mv9dec02HOGfASHg5KsVApaSKWuXNI VY9NzEB0ovR+mNLMlBQCZiVMhCu4GfuApPM2CZMvA2cKJhdvXbmWJsnmbiPtrFVa Ves= -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:09 2026 by rpki-client