This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/ZUzp4nG8b_8duILz9z67tKXG2-Y.roa File: ZUzp4nG8b_8duILz9z67tKXG2-Y.roa (raw, json) Hash identifier: 5pvftRh2C60fmYF1NRG6tbQYcfk3SxCSFl7LYSO0W7g= Subject key identifier: 65:4C:E9:E2:71:BC:6F:FF:1D:B8:82:F3:F7:3E:BB:B4:A5:C6:DB:E6 Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019B76EB09E74A8C4231D65C9FC1BDFBE50C Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/ZUzp4nG8b_8duILz9z67tKXG2-Y.roa Signing time: Thu 01 Jan 2026 00:17:53 +0000 ROA not before: Thu 01 Jan 2026 00:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43160 IP address blocks: 185.44.233.0/24 maxlen: 24 185.130.24.0/23 maxlen: 24 185.130.26.0/23 maxlen: 24 185.196.202.0/23 maxlen: 24 185.196.202.0/24 maxlen: 24 185.202.166.0/23 maxlen: 24 185.235.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:09:e7:4a:8c:42:31:d6:5c:9f:c1:bd:fb:e5:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Jan 1 00:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=654ce9e271bc6fff1db882f3f73ebbb4a5c6dbe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a8:76:9a:27:d6:65:eb:c8:e0:6b:4c:02:f9: 34:6b:fa:9e:29:c0:8d:5d:74:89:6d:18:9c:c6:a1: 08:08:f9:b2:80:47:98:e6:83:32:3d:64:12:e7:89: be:84:97:68:49:69:ab:85:91:a9:93:81:7b:03:08: 6a:1c:1c:06:fc:81:29:0c:ed:94:06:f6:5a:43:80: 17:97:32:5b:80:52:02:fb:30:b1:7d:18:b6:17:ed: 99:30:0a:66:61:b3:4f:7c:64:8e:4c:f8:bb:87:db: 61:f1:1f:fc:ea:34:fa:48:9f:a0:1a:c7:f6:bd:94: 69:77:b4:fd:3b:28:88:b8:3e:ee:7c:bf:ac:00:a9: 28:c7:a2:90:b2:d4:ba:90:f5:cf:73:58:1b:bb:2d: c5:60:5d:e5:44:34:57:0a:ef:5b:51:cd:4b:56:cc: 56:2d:d2:e8:f1:90:78:bc:44:96:6b:09:05:22:93: d9:45:3a:b1:1c:66:ab:c2:de:ba:f4:94:f4:ad:74: 9c:dd:73:2c:71:40:67:74:bb:8c:d1:f1:33:a0:78: c6:b1:5f:79:d5:6e:fa:55:57:46:e0:2b:b2:aa:2f: 1b:5f:b7:da:50:91:01:8d:6c:9e:40:22:85:bd:52: e5:c6:16:b7:3c:57:10:ce:97:d2:10:83:f9:55:3b: 0a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4C:E9:E2:71:BC:6F:FF:1D:B8:82:F3:F7:3E:BB:B4:A5:C6:DB:E6 X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/ZUzp4nG8b_8duILz9z67tKXG2-Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.44.233.0/24 185.130.24.0/22 185.196.202.0/23 185.202.166.0/23 185.235.103.0/24 Signature Algorithm: sha256WithRSAEncryption 30:01:3e:02:97:0f:eb:6b:c7:26:b5:28:e0:85:1d:95:4b:db: ce:cb:09:25:a5:f5:66:7b:7a:bc:d9:82:60:a5:5a:89:9c:8a: fa:dc:64:7e:3c:2d:16:24:1b:31:ac:36:5b:4f:7b:ae:25:b8: a0:43:48:6b:39:e3:5e:83:d4:38:51:fc:be:a9:30:dc:a5:03: 6f:d3:5b:c3:9d:19:41:7a:82:71:91:9e:93:50:a5:65:ad:28: 73:a4:cf:fa:5c:d6:64:d8:92:84:bf:16:cc:21:26:84:fb:f8: fa:d4:8a:17:d4:82:33:1b:55:af:4f:ac:9f:de:a5:07:b4:66: d4:59:7e:b9:39:54:90:e9:c0:1e:18:ee:82:37:aa:ed:e4:ca: 04:ea:96:4f:a4:fc:cd:be:5a:06:66:d8:48:1b:7c:1c:9e:60: 05:9e:a2:b7:e0:fb:2d:82:37:9b:af:77:c4:14:10:34:0f:4e: 31:07:a0:ac:9e:de:31:14:30:e0:f6:0b:67:8c:cf:cd:a9:27: 9b:e6:cb:1a:15:33:87:bf:6e:78:86:dc:97:98:79:0d:34:55: d5:45:b4:a4:16:7f:f2:7f:4a:27:59:9f:cd:48:e8:67:0c:42: 42:e1:2b:68:86:ab:44:fe:ba:53:03:b6:90:52:cc:51:11:1c: 9a:f3:96:57 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt26wnnSoxCMdZcn8G9++UMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwMTAxMDAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTRjZTllMjcxYmM2ZmZmMWRiODgyZjNmNzNlYmJiNGE1YzZkYmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6h2mifWZevI4GtMAvk0a/qeKcCN XXSJbRicxqEICPmygEeY5oMyPWQS54m+hJdoSWmrhZGpk4F7AwhqHBwG/IEpDO2U BvZaQ4AXlzJbgFIC+zCxfRi2F+2ZMApmYbNPfGSOTPi7h9th8R/86jT6SJ+gGsf2 vZRpd7T9OyiIuD7ufL+sAKkox6KQstS6kPXPc1gbuy3FYF3lRDRXCu9bUc1LVsxW LdLo8ZB4vESWawkFIpPZRTqxHGarwt669JT0rXSc3XMscUBndLuM0fEzoHjGsV95 1W76VVdG4Cuyqi8bX7faUJEBjWyeQCKFvVLlxha3PFcQzpfSEIP5VTsKSwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFGVM6eJxvG//HbiC8/c+u7SlxtvmMB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvWlV6cDRuRzhiXzhkdUlMejl6Njd0S1hHMi1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAuSzpAwQC uYIYAwQBucTKAwQBucqmAwQAuetnMA0GCSqGSIb3DQEBCwUAA4IBAQAwAT4Clw/r a8cmtSjghR2VS9vOywklpfVme3q82YJgpVqJnIr63GR+PC0WJBsxrDZbT3uuJbig Q0hrOeNeg9Q4Ufy+qTDcpQNv01vDnRlBeoJxkZ6TUKVlrShzpM/6XNZk2JKEvxbM ISaE+/j61IoX1IIzG1WvT6yf3qUHtGbUWX65OVSQ6cAeGO6CN6rt5MoE6pZPpPzN vloGZthIG3wcnmAFnqK34Pstgjebr3fEFBA0D04xB6Csnt4xFDDg9gtnjM/NqSeb 5ssaFTOHv254htyXmHkNNFXVRbSkFn/yf0onWZ/NSOhnDEJC4StohqtE/rpTA7aQ UsxRERya85ZX -----END CERTIFICATE-----Generated at Sun Jan 25 16:27:36 2026 by rpki-client