This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/ZF0nGmPtxtkDUZtYeSMT07Pwz_c.roa File: ZF0nGmPtxtkDUZtYeSMT07Pwz_c.roa (raw, json) Hash identifier: q2DrD4GQJdtgGN/2Czf9hDRS5eBg2LiwOsSKK4NE0Ks= Subject key identifier: 64:5D:27:1A:63:ED:C6:D9:03:51:9B:58:79:23:13:D3:B3:F0:CF:F7 Certificate issuer: /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16 Certificate serial: 019B79ED2268C36077F63846DD5E542DB903 Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/ZF0nGmPtxtkDUZtYeSMT07Pwz_c.roa Signing time: Thu 01 Jan 2026 14:19:02 +0000 ROA not before: Thu 01 Jan 2026 14:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35197 IP address blocks: 185.100.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:22:68:c3:60:77:f6:38:46:dd:5e:54:2d:b9:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16 Validity Not Before: Jan 1 14:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=645d271a63edc6d903519b58792313d3b3f0cff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:09:37:cc:89:2b:19:1e:ab:6d:1d:7d:7d:e8: 1b:8f:97:b7:58:bc:17:30:61:22:e9:fc:68:a0:9a: 41:ec:c4:5e:f4:28:40:90:65:7c:66:c3:5b:e1:e9: 7e:74:4e:8a:ff:c6:3a:67:05:9a:18:f4:15:09:e4: a5:c6:77:c6:3a:4a:b7:9d:9b:1a:ee:49:17:aa:90: cf:64:34:ff:4d:08:28:e2:6b:bf:31:7e:25:f5:30: 25:d2:09:22:d6:0b:8c:39:3b:4a:3b:07:2c:06:03: 9c:8a:07:59:34:c7:3c:5f:82:9b:b5:42:0d:21:a9: f2:ab:9b:81:08:3b:26:5d:a9:2b:04:5e:b6:44:78: 04:5b:12:3f:de:87:3b:b9:e9:30:c3:3b:7c:4e:43: 9a:5b:d0:de:f9:17:a9:04:f8:29:a8:74:a4:ed:5f: 8e:02:76:12:3f:47:f0:84:ed:dc:16:9c:a1:83:9e: 37:65:dd:b9:f4:5b:3f:4e:91:82:aa:83:f0:80:c4: 84:d6:50:4a:bd:f0:59:cb:c6:ef:04:3a:19:36:1f: a2:c6:d4:e2:99:42:36:5c:5a:d6:58:6f:63:94:dc: 10:a8:39:fc:cd:a9:de:a9:72:b9:48:e6:5f:af:5b: e3:ce:0d:4b:0c:c5:b3:ce:a0:ee:e0:c7:49:09:6d: 52:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5D:27:1A:63:ED:C6:D9:03:51:9B:58:79:23:13:D3:B3:F0:CF:F7 X509v3 Authority Key Identifier: keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/ZF0nGmPtxtkDUZtYeSMT07Pwz_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.100.203.0/24 Signature Algorithm: sha256WithRSAEncryption af:a2:d8:a7:de:01:67:a4:d8:8d:db:86:88:bd:47:69:33:a0: b1:94:49:28:bb:4e:52:96:5a:a6:99:77:85:47:9d:e5:df:b2: 25:58:4a:c0:39:cb:bd:26:01:92:c3:fb:63:a8:72:8b:60:40: 39:43:f5:67:fd:96:32:54:b8:70:cb:21:c2:aa:1c:67:b4:e5: c1:3f:1d:d2:08:43:8d:bd:ea:46:7e:04:40:05:52:54:62:f9: cd:45:a7:ef:61:2a:74:09:c6:4f:f7:ac:0d:50:e9:27:f7:19: ae:a7:c4:a3:7e:cf:ea:f0:ab:38:e8:5e:29:88:9f:97:c8:00: 97:39:f8:20:d7:c6:28:16:f5:9f:4a:c3:54:2b:19:c7:39:57: e2:86:98:42:52:45:e2:b2:61:23:e6:06:13:b9:86:ba:06:9f: a4:16:eb:39:0e:8f:bf:b4:d4:75:69:03:9a:4f:1d:79:db:f7: 67:2e:a8:29:e5:37:d5:c5:24:e6:e7:0b:f9:2e:a7:96:b4:31: 66:52:42:cf:b7:c4:a4:70:4e:9c:91:40:f0:ba:1a:b0:cd:73: 4a:33:bf:ad:95:0a:04:18:08:c9:35:b1:c0:08:b0:91:6f:11: 70:d3:f8:fd:88:e2:75:eb:73:73:8f:db:81:d3:a7:97:ab:f0: 80:f0:bb:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57SJow2B39jhG3V5ULbkDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MWE2Y2JiMmRmNmU3ZmFjY2M1ODUzYmE1NDAwZjFmNDcw ZWFiMTYwHhcNMjYwMTAxMTQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDVkMjcxYTYzZWRjNmQ5MDM1MTliNTg3OTIzMTNkM2IzZjBjZmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwk3zIkrGR6rbR19fegbj5e3WLwX MGEi6fxooJpB7MRe9ChAkGV8ZsNb4el+dE6K/8Y6ZwWaGPQVCeSlxnfGOkq3nZsa 7kkXqpDPZDT/TQgo4mu/MX4l9TAl0gki1guMOTtKOwcsBgOcigdZNMc8X4KbtUIN Ianyq5uBCDsmXakrBF62RHgEWxI/3oc7uekwwzt8TkOaW9De+RepBPgpqHSk7V+O AnYSP0fwhO3cFpyhg543Zd259Fs/TpGCqoPwgMSE1lBKvfBZy8bvBDoZNh+ixtTi mUI2XFrWWG9jlNwQqDn8zaneqXK5SOZfr1vjzg1LDMWzzqDu4MdJCW1SlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGRdJxpj7cbZA1GbWHkjE9Oz8M/3MB8GA1UdIwQY MBaAFJcabLst9uf6zMWFO6VADx9HDqsWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHhwc3V5MzI1X3JNeFlVN3BVQVBIMGNPcXhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS83ZDNmMDAtZDQ4Yy00MTZmLTkxOWUt ZGMwMzg5ZjkxNjdkLzEvWkYwbkdtUHR4dGtEVVp0WWVTTVQwN1B3el9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS83ZDNmMDAtZDQ4Yy00MTZmLTkxOWUtZGMwMzg5ZjkxNjdk LzEvbHhwc3V5MzI1X3JNeFlVN3BVQVBIMGNPcXhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWTLMA0G CSqGSIb3DQEBCwUAA4IBAQCvotin3gFnpNiN24aIvUdpM6CxlEkou05SllqmmXeF R53l37IlWErAOcu9JgGSw/tjqHKLYEA5Q/Vn/ZYyVLhwyyHCqhxntOXBPx3SCEON vepGfgRABVJUYvnNRafvYSp0CcZP96wNUOkn9xmup8Sjfs/q8Ks46F4piJ+XyACX Ofgg18YoFvWfSsNUKxnHOVfihphCUkXismEj5gYTuYa6Bp+kFus5Do+/tNR1aQOa Tx152/dnLqgp5TfVxSTm5wv5LqeWtDFmUkLPt8SkcE6ckUDwuhqwzXNKM7+tlQoE GAjJNbHACLCRbxFw0/j9iOJ163Nzj9uB06eXq/CA8Lsl -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:11 2026 by rpki-client