This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/ZhkHANnwp0wI55F5kUZAa2xMrE0.roa File: ZhkHANnwp0wI55F5kUZAa2xMrE0.roa (raw, json) Hash identifier: UMOnz6djXz4C+wt70K102Br84XLLMdwFlF/5hZkaKPg= Subject key identifier: 66:19:07:00:D9:F0:A7:4C:08:E7:91:79:91:46:40:6B:6C:4C:AC:4D Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813 Certificate serial: 019B7EA728A9D8745EDD18FBE6A319E1F41E Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/ZhkHANnwp0wI55F5kUZAa2xMrE0.roa Signing time: Fri 02 Jan 2026 12:20:42 +0000 ROA not before: Fri 02 Jan 2026 12:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.76.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:28:a9:d8:74:5e:dd:18:fb:e6:a3:19:e1:f4:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813 Validity Not Before: Jan 2 12:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66190700d9f0a74c08e791799146406b6c4cac4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0f:ff:51:5c:9a:27:3e:72:4a:57:f6:cf:fe: ef:22:3f:3b:e7:69:c1:70:2b:89:1b:4f:45:b5:08: 64:52:a5:d3:6c:34:5e:88:f1:84:89:28:6e:01:c6: 7c:8b:db:13:bb:20:76:50:e4:07:5d:bf:e7:d0:2f: 2c:28:b7:2d:d7:ee:56:72:4a:89:40:29:5a:1b:6a: 5a:61:f1:6c:ec:76:18:e2:3a:ff:14:ec:7b:17:c5: eb:ca:88:2f:3b:54:ba:ca:88:eb:4c:21:75:c3:27: 93:1b:52:4a:ef:17:e0:fe:eb:14:0f:c9:c7:8f:37: cf:fc:06:2e:9d:61:d5:67:c5:2b:00:bd:28:56:15: ad:31:70:2f:ff:55:9e:7d:2b:f0:d9:15:45:22:b1: 0a:bb:bf:94:3c:7b:79:cd:2b:8e:9b:ae:a5:f9:29: 88:0d:0f:a0:6f:76:d8:f0:1a:98:00:f9:28:b8:19: 6b:16:56:80:66:35:e6:70:7e:06:84:0b:75:55:53: 43:26:66:a5:8a:a5:2d:7f:32:fd:3e:22:f2:cb:94: 2f:a3:6d:f1:9d:42:6c:8f:52:bb:10:4a:e2:05:f7: 5a:07:62:32:72:a3:3c:ba:6f:d3:52:75:93:6f:e5: e3:a3:2f:2c:c2:27:ab:e6:6a:7e:73:1f:3c:8e:94: 96:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:19:07:00:D9:F0:A7:4C:08:E7:91:79:91:46:40:6B:6C:4C:AC:4D X509v3 Authority Key Identifier: keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/ZhkHANnwp0wI55F5kUZAa2xMrE0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.76.38.0/24 Signature Algorithm: sha256WithRSAEncryption 81:ab:2b:2d:4b:6e:3a:fc:f8:57:ea:ef:0a:d6:16:93:df:bd: cf:bc:42:89:d4:da:e7:93:db:3b:73:fa:02:df:4f:7e:08:5f: c0:4b:54:27:1f:24:ae:37:63:84:d5:3c:16:5d:47:10:c0:e5: 32:f7:3b:17:73:3a:4a:f2:f1:64:65:81:dd:43:b4:6d:77:cd: 62:fc:da:24:31:5e:f7:ca:a7:19:14:78:23:b2:f0:d1:c9:07: bb:10:15:47:36:ee:a5:c0:77:1e:e3:16:f2:33:14:88:e0:e2: bb:cd:b4:98:0b:99:4c:2a:65:22:3c:ce:18:e4:40:96:a3:80: b8:38:46:f7:f5:ca:1c:b5:d5:59:a5:89:90:f5:40:8a:03:73: e7:80:3a:b2:95:8f:1c:0d:9a:40:6e:c1:0a:b4:fd:bb:90:fb: b8:0e:b6:52:99:76:d2:d9:21:33:55:e1:49:fb:14:24:9d:43: ba:3d:20:d1:f1:c6:4f:df:2f:e6:27:03:b0:83:0f:f8:27:2c: 0d:46:e3:b4:90:c8:b3:40:71:2f:63:bb:1a:7e:6d:f6:e0:8b: a2:32:b0:2b:80:01:ae:95:8b:97:9e:7e:25:59:2b:98:1f:64: 73:c0:63:1f:95:59:5d:f7:58:35:09:aa:2d:2e:8d:b1:11:ec: 84:4a:4c:7c -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+pyip2HRe3Rj75qMZ4fQeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5YzllMDMwNWNmZWQ1Nzk0NDQ4NzMyYThiMGJkODQyNzQ1 MGQ4MTMwHhcNMjYwMTAyMTIyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjE5MDcwMGQ5ZjBhNzRjMDhlNzkxNzk5MTQ2NDA2YjZjNGNhYzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw//UVyaJz5ySlf2z/7vIj8752nB cCuJG09FtQhkUqXTbDReiPGEiShuAcZ8i9sTuyB2UOQHXb/n0C8sKLct1+5WckqJ QClaG2paYfFs7HYY4jr/FOx7F8XryogvO1S6yojrTCF1wyeTG1JK7xfg/usUD8nH jzfP/AYunWHVZ8UrAL0oVhWtMXAv/1WefSvw2RVFIrEKu7+UPHt5zSuOm66l+SmI DQ+gb3bY8BqYAPkouBlrFlaAZjXmcH4GhAt1VVNDJmaliqUtfzL9PiLyy5Qvo23x nUJsj1K7EEriBfdaB2IycqM8um/TUnWTb+Xjoy8swier5mp+cx88jpSW7wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFGYZBwDZ8KdMCOeReZFGQGtsTKxNMB8GA1UdIwQY MBaAFPnJ4DBc/tV5REhzKosL2EJ0UNgTMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1jbmdNRnotMVhsRVNITXFpd3ZZUW5SUTJCTS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvMzYxOTBkLTFjNmMtNDhjNi1hNDE0 LTJmYmIyMDhhZDE4Mi8xL1poa0hBTm53cDB3STU1RjVrVVpBYTJ4TXJFMC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMzcvMzYxOTBkLTFjNmMtNDhjNi1hNDE0LTJmYmIyMDhhZDE4 Mi8xLzEtY25nTUZ6LTFYbEVTSE1xaXd2WVFuUlEyQk0uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5TCYw DQYJKoZIhvcNAQELBQADggEBAIGrKy1Lbjr8+Ffq7wrWFpPfvc+8QonU2ueT2ztz +gLfT34IX8BLVCcfJK43Y4TVPBZdRxDA5TL3OxdzOkry8WRlgd1DtG13zWL82iQx XvfKpxkUeCOy8NHJB7sQFUc27qXAdx7jFvIzFIjg4rvNtJgLmUwqZSI8zhjkQJaj gLg4Rvf1yhy11VmliZD1QIoDc+eAOrKVjxwNmkBuwQq0/buQ+7gOtlKZdtLZITNV 4Un7FCSdQ7o9INHxxk/fL+YnA7CDD/gnLA1G47SQyLNAcS9juxp+bfbgi6IysCuA Aa6Vi5eefiVZK5gfZHPAYx+VWV33WDUJqi0ujbER7IRKTHw= -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:22 2026 by rpki-client