This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/zYgAkQEZ_3KbBbpb8eeekWBJNsM.roa File: zYgAkQEZ_3KbBbpb8eeekWBJNsM.roa (raw, json) Hash identifier: adtaF+5W4MxrQ+0iffQsTYlJHGFBvciDfETz57Ec0LI= Subject key identifier: CD:88:00:91:01:19:FF:72:9B:05:BA:5B:F1:E7:9E:91:60:49:36:C3 Certificate issuer: /CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c Certificate serial: 019B7F15157BC507743A5D69314BD5FACD1A Authority key identifier: 67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/zYgAkQEZ_3KbBbpb8eeekWBJNsM.roa Signing time: Fri 02 Jan 2026 14:20:46 +0000 ROA not before: Fri 02 Jan 2026 14:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57358 IP address blocks: 185.236.50.0/23 maxlen: 23 2001:67c:5f8::/48 maxlen: 48 2a13:9d40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:15:7b:c5:07:74:3a:5d:69:31:4b:d5:fa:cd:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c Validity Not Before: Jan 2 14:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd8800910119ff729b05ba5bf1e79e91604936c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:55:20:48:7c:56:83:6e:36:bb:76:b1:e1:61: 20:6d:b9:7e:92:73:ff:79:fe:44:5f:b9:3a:29:93: 01:0f:ce:a2:27:29:fc:17:95:6f:d4:83:c6:8f:a3: 5f:ba:05:09:3d:ce:e7:10:d0:e5:a2:48:03:86:6e: b5:0f:35:6d:fe:ea:cb:9c:05:0d:8e:94:8a:d0:ba: 17:82:4a:5d:fd:4b:93:ea:8b:93:1f:f2:0a:7e:4f: ea:32:a8:88:37:05:e1:58:3d:49:2d:2f:e6:6e:57: 6f:e9:d2:be:5a:65:64:2e:0a:0c:c8:06:97:db:40: 91:21:82:d4:d8:cc:e2:29:25:7f:5f:2b:c8:5b:b4: 8c:17:96:09:8c:30:2c:89:63:c0:b3:a1:7f:bf:31: 5e:b6:c4:d3:76:84:88:0b:20:4c:79:de:2a:49:4f: ed:a6:42:1e:e2:f6:a2:a6:6e:2c:4a:df:f9:56:f0: e0:00:a6:40:f3:22:ad:8e:63:78:d6:c0:b8:68:6b: fe:4c:e7:0a:6f:7b:fd:a9:49:54:f9:34:74:79:be: f9:35:4a:e9:ca:1c:3f:bc:a1:a3:55:3e:5f:90:dd: 82:f2:91:88:a8:cb:9c:74:8d:d2:3f:9c:77:6b:b9: 68:e3:bf:90:3f:85:c8:58:f1:6c:c6:17:d9:c2:41: 46:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:88:00:91:01:19:FF:72:9B:05:BA:5B:F1:E7:9E:91:60:49:36:C3 X509v3 Authority Key Identifier: keyid:67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/zYgAkQEZ_3KbBbpb8eeekWBJNsM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.236.50.0/23 IPv6: 2001:67c:5f8::/48 2a13:9d40::/29 Signature Algorithm: sha256WithRSAEncryption 93:d2:fd:47:45:75:2b:b2:19:fc:dc:8c:bc:21:2a:50:0d:77: ff:aa:0c:46:a6:6b:ac:a8:2f:79:33:b4:49:3a:cc:bc:1f:32: 83:ff:2f:b0:d1:f2:90:03:f7:70:98:39:81:5e:8b:fa:df:8a: 12:2e:d1:eb:32:bd:24:9e:7c:ee:a5:ac:44:65:74:a3:62:7e: c5:b6:4c:11:fb:ae:68:77:26:46:5b:0e:2b:8c:24:20:d8:88: 3b:74:65:cf:30:81:ea:af:d0:c7:05:be:dc:9e:14:96:e3:94: 99:bf:e2:26:b6:a2:07:7f:d6:80:1b:91:dd:1c:35:4f:da:38: 84:9b:19:85:4d:f1:80:cd:19:b5:42:d4:3b:05:d7:83:08:f1: 6e:5b:1d:32:1c:cd:92:3f:8b:b8:32:b9:dc:bf:b5:6f:c3:11: 74:8b:76:0d:9a:37:a5:1b:e9:dc:34:1a:21:54:ae:3a:72:98: 44:15:12:57:e0:7a:8e:94:23:24:af:97:12:f3:f6:0f:4a:1d: ba:5d:3d:27:e5:4f:e4:5d:a3:7f:96:b0:d4:4d:9d:84:3b:e7: 55:9d:e5:b7:b9:66:32:76:04:d9:77:03:a5:49:b6:a3:9b:df: 93:ca:5b:96:4e:68:1c:00:51:e9:59:b8:ef:93:ee:3c:ae:a3: 5e:4a:9a:29 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/FRV7xQd0Ol1pMUvV+s0aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDNlNWRlMzljMjFmOGE3OGJlNmE0NTdhM2I4NmQ1ODIy YmMxN2MwHhcNMjYwMTAyMTQyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDg4MDA5MTAxMTlmZjcyOWIwNWJhNWJmMWU3OWU5MTYwNDkzNmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFUgSHxWg242u3ax4WEgbbl+knP/ ef5EX7k6KZMBD86iJyn8F5Vv1IPGj6NfugUJPc7nENDlokgDhm61DzVt/urLnAUN jpSK0LoXgkpd/UuT6ouTH/IKfk/qMqiINwXhWD1JLS/mbldv6dK+WmVkLgoMyAaX 20CRIYLU2MziKSV/XyvIW7SMF5YJjDAsiWPAs6F/vzFetsTTdoSICyBMed4qSU/t pkIe4vaipm4sSt/5VvDgAKZA8yKtjmN41sC4aGv+TOcKb3v9qUlU+TR0eb75NUrp yhw/vKGjVT5fkN2C8pGIqMucdI3SP5x3a7lo47+QP4XIWPFsxhfZwkFGlwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFM2IAJEBGf9ymwW6W/HnnpFgSTbDMB8GA1UdIwQY MBaAFGdD5d45wh+KeL5qRXo7htWCK8F8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBQbDNqbkNINHA0dm1wRmVqdUcxWUlyd1h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8zOWU1YzUtNDMxYy00Mzc1LWI3ZTEt N2FhZTUyMTc2ZDhiLzEvellnQWtRRVpfM0tiQmJwYjhlZWVrV0JKTnNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8zOWU1YzUtNDMxYy00Mzc1LWI3ZTEtN2FhZTUyMTc2ZDhi LzEvWjBQbDNqbkNINHA0dm1wRmVqdUcxWUlyd1h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQBuewyMBYE AgACMBADBwAgAQZ8BfgDBQMqE51AMA0GCSqGSIb3DQEBCwUAA4IBAQCT0v1HRXUr shn83Iy8ISpQDXf/qgxGpmusqC95M7RJOsy8HzKD/y+w0fKQA/dwmDmBXov634oS LtHrMr0knnzupaxEZXSjYn7FtkwR+65odyZGWw4rjCQg2Ig7dGXPMIHqr9DHBb7c nhSW45SZv+ImtqIHf9aAG5HdHDVP2jiEmxmFTfGAzRm1QtQ7BdeDCPFuWx0yHM2S P4u4Mrncv7VvwxF0i3YNmjelG+ncNBohVK46cphEFRJX4HqOlCMkr5cS8/YPSh26 XT0n5U/kXaN/lrDUTZ2EO+dVneW3uWYydgTZdwOlSbajm9+TyluWTmgcAFHpWbjv k+48rqNeSpop -----END CERTIFICATE-----Generated at Mon Jan 26 11:39:53 2026 by rpki-client