This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/ZAE6MNreQklHodS-dzXcd8WUAHI.roa File: ZAE6MNreQklHodS-dzXcd8WUAHI.roa (raw, json) Hash identifier: a8xDwtFoUM04jxVU5IPyWh2mredIKSt7iSKSS+DBztA= Subject key identifier: 64:01:3A:30:DA:DE:42:49:47:A1:D4:BE:77:35:DC:77:C5:94:00:72 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 019B7CECE157AB669717ACBFAFC7FAA2CE53 Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/ZAE6MNreQklHodS-dzXcd8WUAHI.roa Signing time: Fri 02 Jan 2026 04:17:37 +0000 ROA not before: Fri 02 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41869 IP address blocks: 185.12.58.0/24 maxlen: 24 193.28.7.0/24 maxlen: 24 194.127.198.0/24 maxlen: 24 217.197.164.0/22 maxlen: 24 217.197.165.0/24 maxlen: 24 217.197.166.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:e1:57:ab:66:97:17:ac:bf:af:c7:fa:a2:ce:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Jan 2 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64013a30dade424947a1d4be7735dc77c5940072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e5:1d:46:0d:d8:fa:a9:b4:1e:60:8b:8a:8b: 39:bd:78:85:36:c8:e1:0c:25:67:8c:80:ba:70:ca: 0f:34:70:e4:e8:71:35:b7:07:c5:98:75:ad:0d:ef: 07:41:69:03:4f:a7:ef:79:59:76:b5:fd:c0:97:e5: 6a:72:fb:51:65:2e:b7:5d:e2:25:e9:bc:eb:f3:3f: b0:83:eb:37:6c:34:30:32:22:fe:fd:dc:a2:13:a1: 0b:f9:26:ad:aa:a8:2f:63:60:dd:86:9d:16:28:6d: 82:d5:d0:1e:19:0f:31:d8:63:6c:07:fd:c4:10:70: a1:70:12:b9:e6:47:d6:31:d4:e1:91:8d:9b:ac:7b: 7c:cf:f5:7a:28:11:1e:ba:a4:cf:5c:0c:17:05:27: 8a:a7:ea:76:b5:8f:56:cb:7a:f3:6d:9d:3a:b8:97: a6:8c:38:49:31:23:2a:79:e2:84:b0:54:6b:2b:bc: 60:68:bb:fb:e5:7a:d0:82:7b:0e:c7:6b:6b:6a:b3: 30:9b:7b:8e:d7:f2:73:ed:1a:18:c0:69:8a:2f:3d: c6:bd:fc:f8:40:ba:76:a9:9a:c1:86:bd:5f:98:ea: a8:d4:83:dc:66:e2:b3:74:bd:d7:39:17:d7:b0:62: 26:68:98:48:7c:66:e3:bf:a2:cc:1b:58:d7:0e:93: fb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:01:3A:30:DA:DE:42:49:47:A1:D4:BE:77:35:DC:77:C5:94:00:72 X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/ZAE6MNreQklHodS-dzXcd8WUAHI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.12.58.0/24 193.28.7.0/24 194.127.198.0/24 217.197.164.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:ac:33:fb:89:d0:30:9c:ba:13:01:f2:cc:c7:d5:7b:49:3a: 50:55:3f:69:09:24:55:72:b1:28:7c:4d:b3:95:30:20:2d:f4: 67:60:2b:62:79:9c:d1:ab:40:7b:ca:90:7c:8c:4a:3e:3e:8c: c7:76:7f:62:73:6a:0b:a7:54:0a:be:38:b9:3a:37:28:7a:6f: 13:74:4b:64:28:bc:2a:48:df:5e:5d:44:40:1a:8b:33:4c:5f: 8f:56:a5:44:00:50:04:f1:c5:f4:83:5e:b6:a3:9c:4e:13:b8: 9b:88:b1:5d:13:37:ce:9f:2e:c2:1b:cb:b4:86:ee:24:dd:30: d2:8b:ee:b8:e8:2f:04:a0:08:cc:44:36:f4:cf:05:7e:f4:3f: 8a:01:01:02:35:7a:e5:7e:15:fb:6c:0c:2e:18:01:15:d4:0e: ec:09:2b:52:b4:c6:fc:3a:dd:e1:18:c8:a4:c2:9a:47:e0:5a: 23:ce:42:09:8d:b5:90:8a:72:cd:2a:a4:02:a8:d7:9f:70:11: 57:bc:a3:2c:a9:a3:8c:ea:15:d1:cc:17:de:49:37:03:69:b8: a5:8d:99:ab:ee:54:ec:1a:1a:02:fc:03:5d:72:4b:62:e7:5a: ea:5d:c8:79:c0:dc:01:7a:ff:5f:3c:f0:6c:84:d5:8d:15:76: eb:6f:11:7b -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt87OFXq2aXF6y/r8f6os5TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjYwMTAyMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDAxM2EzMGRhZGU0MjQ5NDdhMWQ0YmU3NzM1ZGM3N2M1OTQwMDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeUdRg3Y+qm0HmCLios5vXiFNsjh DCVnjIC6cMoPNHDk6HE1twfFmHWtDe8HQWkDT6fveVl2tf3Al+VqcvtRZS63XeIl 6bzr8z+wg+s3bDQwMiL+/dyiE6EL+SatqqgvY2Ddhp0WKG2C1dAeGQ8x2GNsB/3E EHChcBK55kfWMdThkY2brHt8z/V6KBEeuqTPXAwXBSeKp+p2tY9Wy3rzbZ06uJem jDhJMSMqeeKEsFRrK7xgaLv75XrQgnsOx2trarMwm3uO1/Jz7RoYwGmKLz3Gvfz4 QLp2qZrBhr1fmOqo1IPcZuKzdL3XORfXsGImaJhIfGbjv6LMG1jXDpP7qwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGQBOjDa3kJJR6HUvnc13HfFlAByMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWkFFNk1OcmVRa2xIb2RTLWR6WGNkOFdVQUhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAuQw6AwQA wRwHAwQAwn/GAwQC2cWkMA0GCSqGSIb3DQEBCwUAA4IBAQBerDP7idAwnLoTAfLM x9V7STpQVT9pCSRVcrEofE2zlTAgLfRnYCtieZzRq0B7ypB8jEo+PozHdn9ic2oL p1QKvji5Ojcoem8TdEtkKLwqSN9eXURAGoszTF+PVqVEAFAE8cX0g162o5xOE7ib iLFdEzfOny7CG8u0hu4k3TDSi+646C8EoAjMRDb0zwV+9D+KAQECNXrlfhX7bAwu GAEV1A7sCStStMb8Ot3hGMikwppH4FojzkIJjbWQinLNKqQCqNefcBFXvKMsqaOM 6hXRzBfeSTcDabiljZmr7lTsGhoC/ANdckti51rqXch5wNwBev9fPPBshNWNFXbr bxF7 -----END CERTIFICATE-----Generated at Sun Jan 25 20:01:25 2026 by rpki-client