This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/z_xt-CQRAhsXnLTqgnCrMmbMP58.roa File: z_xt-CQRAhsXnLTqgnCrMmbMP58.roa (raw, json) Hash identifier: eIIyzQzJYmbZdcrWUO9WH+pCc1dJXijLjPuV4Vr1ti0= Subject key identifier: CF:FC:6D:F8:24:11:02:1B:17:9C:B4:EA:82:70:AB:32:66:CC:3F:9F Certificate issuer: /CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0 Certificate serial: 019B7C805DD1EC19E9083A02935354F9F5F7 Authority key identifier: C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/z_xt-CQRAhsXnLTqgnCrMmbMP58.roa Signing time: Fri 02 Jan 2026 02:19:05 +0000 ROA not before: Fri 02 Jan 2026 02:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42000 IP address blocks: 185.160.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:5d:d1:ec:19:e9:08:3a:02:93:53:54:f9:f5:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0 Validity Not Before: Jan 2 02:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cffc6df82411021b179cb4ea8270ab3266cc3f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:87:86:6d:29:45:ed:21:a0:40:fb:a6:60:60: 4f:03:44:62:46:23:ef:40:88:ce:4d:d7:d9:c3:a5: 8c:df:7f:82:b8:fe:ea:a7:67:40:6a:da:1a:98:90: 9e:68:f4:ff:57:07:29:8e:2e:85:98:cb:b1:28:e7: ad:55:d3:a8:57:a9:fb:4b:6f:45:3c:89:0c:a3:e7: 1a:b1:4c:de:f7:b7:e9:c2:14:ec:3c:51:ab:aa:76: 32:2c:66:15:36:4c:df:8a:af:46:cc:de:26:f2:c5: 4a:2b:6c:04:d7:9d:46:41:31:6e:be:86:19:66:a4: 1f:6f:ec:83:4a:ee:ec:20:58:78:78:6d:80:cb:64: de:cc:c7:f4:0e:cc:0a:1c:53:f0:22:40:39:32:75: bd:52:61:5d:77:93:bd:b4:9c:91:04:b6:cf:fd:f6: a7:75:84:61:dd:71:9f:8b:8f:c2:12:15:2b:72:82: ac:f7:5c:70:93:b3:b1:e8:2a:99:25:45:eb:15:7e: 8f:dc:8b:b9:a7:3a:c7:92:4f:55:76:c6:73:53:0d: 23:c4:10:57:bb:b1:a0:d5:2f:96:ba:53:1e:06:0a: 4d:89:24:ea:15:32:b2:12:b0:7a:a4:7a:02:84:d5: 98:19:42:46:e3:d9:0d:a0:03:e2:2b:aa:83:2b:a3: b9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:FC:6D:F8:24:11:02:1B:17:9C:B4:EA:82:70:AB:32:66:CC:3F:9F X509v3 Authority Key Identifier: keyid:C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/z_xt-CQRAhsXnLTqgnCrMmbMP58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.160.20.0/22 Signature Algorithm: sha256WithRSAEncryption 49:2b:89:2b:47:c3:f5:18:d4:b2:be:b3:a8:e6:32:03:55:03: 2a:61:d5:09:b6:ea:0d:0f:4d:bd:c7:f7:bf:ac:cf:c5:10:88: 2a:2b:e4:a4:44:7f:65:19:76:ac:c6:20:9c:b8:45:26:39:97: 2c:02:9b:78:a3:ea:c0:b5:79:d6:89:da:23:15:68:54:12:ef: 32:df:0b:8f:e0:1f:df:c0:98:21:2c:be:d0:4c:d4:44:58:5e: a4:2c:9e:26:23:f1:ad:7a:08:7b:7f:e3:af:07:8a:3c:cd:60: d7:9e:93:4f:ae:2c:a2:9a:6b:6b:22:54:e8:3f:9a:27:ab:0f: 66:30:91:49:08:6e:42:5b:73:2a:a3:89:95:ac:69:f9:98:d5: 74:69:fc:dc:c3:ee:a3:a1:ea:56:9a:f5:53:f7:fc:75:c2:06: 86:c3:86:92:dd:8a:8a:cf:c4:59:95:ef:7c:fc:c7:9e:68:e2: 75:e7:cb:59:45:d2:74:fe:65:4a:2a:b2:71:a8:ea:34:09:87: 52:5c:fb:f6:2d:4d:1d:d6:b4:10:5a:73:3c:6e:01:e6:fe:4d: 66:00:09:09:ed:a2:4f:c6:b9:be:b3:e5:d7:0d:b9:70:78:68: e0:7d:6f:c9:1a:ca:01:78:13:36:a8:2b:e7:01:cc:9a:b7:f3: 79:04:a4:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gF3R7BnpCDoCk1NU+fX3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NzQ3NGNlYjg1YWYzMTEyMmVkZTU4NmQ0ZDY1YjBmNWI0 ZDk3ZjAwHhcNMjYwMTAyMDIxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmZjNmRmODI0MTEwMjFiMTc5Y2I0ZWE4MjcwYWIzMjY2Y2MzZjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4eGbSlF7SGgQPumYGBPA0RiRiPv QIjOTdfZw6WM33+CuP7qp2dAatoamJCeaPT/Vwcpji6FmMuxKOetVdOoV6n7S29F PIkMo+casUze97fpwhTsPFGrqnYyLGYVNkzfiq9GzN4m8sVKK2wE151GQTFuvoYZ ZqQfb+yDSu7sIFh4eG2Ay2TezMf0DswKHFPwIkA5MnW9UmFdd5O9tJyRBLbP/fan dYRh3XGfi4/CEhUrcoKs91xwk7Ox6CqZJUXrFX6P3Iu5pzrHkk9VdsZzUw0jxBBX u7Gg1S+WulMeBgpNiSTqFTKyErB6pHoChNWYGUJG49kNoAPiK6qDK6O55wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM/8bfgkEQIbF5y06oJwqzJmzD+fMB8GA1UdIwQY MBaAFMh0dM64WvMRIu3lhtTWWw9bTZfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUhSMHpyaGE4eEVpN2VXRzFOWmJEMXRObF9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81MmQ3NWMtZThhMC00ZWM4LWIwMGYt MDM1ODY1MjNiMTMzLzEvel94dC1DUVJBaHNYbkxUcWduQ3JNbWJNUDU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi81MmQ3NWMtZThhMC00ZWM4LWIwMGYtMDM1ODY1MjNiMTMz LzEveUhSMHpyaGE4eEVpN2VXRzFOWmJEMXRObF9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaAUMA0G CSqGSIb3DQEBCwUAA4IBAQBJK4krR8P1GNSyvrOo5jIDVQMqYdUJtuoND029x/e/ rM/FEIgqK+SkRH9lGXasxiCcuEUmOZcsApt4o+rAtXnWidojFWhUEu8y3wuP4B/f wJghLL7QTNREWF6kLJ4mI/Gtegh7f+OvB4o8zWDXnpNPriyimmtrIlToP5onqw9m MJFJCG5CW3Mqo4mVrGn5mNV0afzcw+6joepWmvVT9/x1wgaGw4aS3YqKz8RZle98 /MeeaOJ158tZRdJ0/mVKKrJxqOo0CYdSXPv2LU0d1rQQWnM8bgHm/k1mAAkJ7aJP xrm+s+XXDblweGjgfW/JGsoBeBM2qCvnAcyat/N5BKQK -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:06 2026 by rpki-client