This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/zyjvREkWFF6X7pbwt-H3M-ZqZks.roa File: zyjvREkWFF6X7pbwt-H3M-ZqZks.roa (raw, json) Hash identifier: HtAgtb461giJt36H40FvVS9Xbx1kevgnUEyHwD9fYBI= Subject key identifier: CF:28:EF:44:49:16:14:5E:97:EE:96:F0:B7:E1:F7:33:E6:6A:66:4B Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 019B7F830BD2271131E9D6DC89E469D70E4F Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/zyjvREkWFF6X7pbwt-H3M-ZqZks.roa Signing time: Fri 02 Jan 2026 16:20:53 +0000 ROA not before: Fri 02 Jan 2026 16:20:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200533 IP address blocks: 185.117.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:0b:d2:27:11:31:e9:d6:dc:89:e4:69:d7:0e:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: Jan 2 16:20:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf28ef444916145e97ee96f0b7e1f733e66a664b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:c4:b4:7e:be:d8:11:37:d8:d7:6d:69:f1:18: 0e:a8:3b:cb:56:a1:75:08:e2:70:46:07:e7:0a:d5: fc:19:e4:ea:ce:aa:91:07:78:91:fe:22:7b:a5:da: 90:96:85:6c:96:4b:5f:d4:38:10:a2:0a:ec:0f:6a: a6:18:28:5a:cb:bf:00:40:4a:85:a3:21:f3:1b:02: 0d:7b:ab:79:82:cc:4c:24:3f:59:fa:3c:fc:70:46: ef:a8:2a:02:d3:18:e7:5a:dc:15:64:6e:0e:78:bf: c6:69:3d:cb:60:c9:f9:6f:de:9a:6e:3f:00:cc:77: 42:7b:ff:da:52:9c:93:aa:a6:91:8c:b1:c5:10:56: 0b:42:2b:21:87:95:82:6e:be:37:a9:40:06:92:04: ae:0c:b5:59:9d:34:f2:8e:c4:b2:1f:d5:42:8a:0f: c3:ba:14:7f:55:67:d8:9f:46:98:a6:ba:8d:67:aa: af:8f:29:53:80:bc:69:64:65:2a:35:6e:27:d8:3e: df:a2:80:ad:0c:f3:65:f8:4b:48:6d:48:0c:ee:8b: bc:38:ad:e5:19:60:b6:27:db:ef:34:98:b3:2e:70: 9d:16:c4:e7:35:d2:6c:15:b6:7d:4d:9b:31:d4:72: 1b:70:56:ac:b5:0c:36:6b:4e:42:4e:5d:48:f0:18: 25:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:28:EF:44:49:16:14:5E:97:EE:96:F0:B7:E1:F7:33:E6:6A:66:4B X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/zyjvREkWFF6X7pbwt-H3M-ZqZks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.82.0/24 Signature Algorithm: sha256WithRSAEncryption 44:80:ce:e2:3c:37:ab:c5:3f:e9:ac:c9:31:e3:43:3f:f8:a5: c9:55:f7:1d:5f:26:fc:40:9a:9e:5b:59:94:75:17:e5:05:4a: 83:9e:a4:3b:a9:90:d6:6d:ad:5a:14:9b:87:bc:8f:03:c1:09: 11:1e:ab:61:82:e6:3c:71:cd:f2:1d:47:ee:5b:4b:bf:93:ca: 6c:c5:9c:0b:a4:44:38:b5:d4:fd:8a:af:2b:08:2e:87:4a:6d: 91:35:d5:01:87:3c:8e:a5:c6:9d:5c:ff:0c:02:4b:a1:73:60: 5d:fd:b9:de:bb:4c:01:fc:f3:e4:3e:79:1e:2d:4f:9f:54:6c: 1e:69:03:2b:82:57:43:55:3d:06:bb:22:d2:51:d8:91:84:57: b4:47:0f:db:a2:0e:69:09:26:b4:2f:13:47:a8:06:24:f6:ac: b7:e7:e1:b1:e6:4c:30:72:49:f2:4d:4d:d8:af:dd:3b:f7:1b: 88:a8:29:55:b6:0a:9d:ae:90:86:56:0c:08:02:4a:30:88:af: a9:c5:0d:55:33:c3:dc:c5:f8:6d:27:f8:84:c1:04:d8:93:0d: 5f:02:9e:28:44:db:f2:3b:e5:39:55:0a:1e:0f:71:d4:7f:79: e0:4f:49:0b:70:e9:32:51:9b:ff:df:b7:79:1c:41:e7:d9:01: 89:33:56:cc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gwvSJxEx6dbcieRp1w5PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjYwMTAyMTYyMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjI4ZWY0NDQ5MTYxNDVlOTdlZTk2ZjBiN2UxZjczM2U2NmE2NjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+cS0fr7YETfY121p8RgOqDvLVqF1 COJwRgfnCtX8GeTqzqqRB3iR/iJ7pdqQloVslktf1DgQogrsD2qmGChay78AQEqF oyHzGwINe6t5gsxMJD9Z+jz8cEbvqCoC0xjnWtwVZG4OeL/GaT3LYMn5b96abj8A zHdCe//aUpyTqqaRjLHFEFYLQishh5WCbr43qUAGkgSuDLVZnTTyjsSyH9VCig/D uhR/VWfYn0aYprqNZ6qvjylTgLxpZGUqNW4n2D7fooCtDPNl+EtIbUgM7ou8OK3l GWC2J9vvNJizLnCdFsTnNdJsFbZ9TZsx1HIbcFastQw2a05CTl1I8BglsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM8o70RJFhRel+6W8Lfh9zPmamZLMB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEvenlqdlJFa1dGRjZYN3Bid3QtSDNNLVpxWmtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXVSMA0G CSqGSIb3DQEBCwUAA4IBAQBEgM7iPDerxT/prMkx40M/+KXJVfcdXyb8QJqeW1mU dRflBUqDnqQ7qZDWba1aFJuHvI8DwQkRHqthguY8cc3yHUfuW0u/k8psxZwLpEQ4 tdT9iq8rCC6HSm2RNdUBhzyOpcadXP8MAkuhc2Bd/bneu0wB/PPkPnkeLU+fVGwe aQMrgldDVT0GuyLSUdiRhFe0Rw/bog5pCSa0LxNHqAYk9qy35+Gx5kwwcknyTU3Y r9079xuIqClVtgqdrpCGVgwIAkowiK+pxQ1VM8PcxfhtJ/iEwQTYkw1fAp4oRNvy O+U5VQoeD3HUf3ngT0kLcOkyUZv/37d5HEHn2QGJM1bM -----END CERTIFICATE-----Generated at Sun Jan 25 15:29:04 2026 by rpki-client