This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/0ZEt5hO5jk8I5B1ric3lV5QOPjY.roa File: 0ZEt5hO5jk8I5B1ric3lV5QOPjY.roa (raw, json) Hash identifier: 2SzUB4ARPZ7+BuiAiToaYolTUFVyZHL4/odctgbUciE= Subject key identifier: D1:91:2D:E6:13:B9:8E:4F:08:E4:1D:6B:89:CD:E5:57:94:0E:3E:36 Certificate issuer: /CN=5f099f49978b960fa31f81acf54671273dc7ff61 Certificate serial: 019B7D5CEA679E77445C77BE62A0118E0EDC Authority key identifier: 5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/0ZEt5hO5jk8I5B1ric3lV5QOPjY.roa Signing time: Fri 02 Jan 2026 06:19:59 +0000 ROA not before: Fri 02 Jan 2026 06:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 185.22.68.0/22 maxlen: 24 185.70.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ea:67:9e:77:44:5c:77:be:62:a0:11:8e:0e:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f099f49978b960fa31f81acf54671273dc7ff61 Validity Not Before: Jan 2 06:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1912de613b98e4f08e41d6b89cde557940e3e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f0:79:94:60:de:7e:07:13:e8:b4:5f:27:4d: f5:36:cf:66:82:98:47:90:37:6c:c4:b0:84:b1:a9: cf:8b:1b:1a:51:94:f3:58:89:f3:a4:ee:16:71:46: b0:e7:cb:60:08:5b:67:8b:4f:91:2a:93:0e:a8:d9: e5:fb:e9:97:8e:9c:3a:85:6a:f1:49:a3:37:94:5e: 89:62:13:e4:f8:f0:a3:f9:bb:60:6e:3d:35:68:87: 6b:5b:88:5e:5c:46:ce:05:a2:d0:be:20:1c:23:d1: 8d:23:ba:46:98:af:cf:a1:e2:4a:ea:64:30:ba:6d: bb:63:03:82:93:5d:50:48:31:2b:02:83:89:44:b6: 9b:8f:08:9e:b7:b6:d9:36:65:2d:20:8e:ee:dc:f7: f8:ae:b9:fb:d3:eb:25:4d:17:56:d5:d1:75:6f:f3: f3:10:85:33:fc:f8:62:9e:87:47:5a:95:da:0d:d1: 11:fe:25:1e:d8:cb:6d:85:33:d7:c6:ec:d3:10:c6: ab:c0:a3:31:aa:33:e7:ad:b1:9f:2b:ad:cb:5d:62: 70:7e:a8:41:f4:21:34:51:1b:53:fc:c0:ad:7b:f4: e5:e8:14:be:7b:a9:f4:7e:87:07:61:a3:7f:ff:f2: 1f:c7:4d:1b:82:b0:53:d7:e7:45:d7:19:9a:ed:31: 49:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:91:2D:E6:13:B9:8E:4F:08:E4:1D:6B:89:CD:E5:57:94:0E:3E:36 X509v3 Authority Key Identifier: keyid:5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/0ZEt5hO5jk8I5B1ric3lV5QOPjY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.22.68.0/22 185.70.120.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:58:40:77:d8:97:62:a7:95:86:0e:f0:52:0d:6d:28:c8:c1: 75:83:a6:9d:d1:a3:bb:e4:8f:16:9b:9a:75:54:e1:c5:b4:05: 4a:bb:97:43:96:18:63:b5:9f:da:0e:e1:de:c4:02:0f:8c:47: eb:3b:6e:8e:0d:fa:17:fe:eb:c1:ed:d1:c9:72:9a:14:71:48: 8c:82:60:78:0a:a2:68:2c:1f:5d:c2:8e:74:96:33:f9:da:24: 76:51:25:ba:73:6e:3e:f7:db:2e:e1:ce:39:36:05:24:51:ba: fe:cb:77:05:eb:f1:71:69:76:6a:9d:94:6e:c8:cb:86:2f:4e: ab:31:f2:27:d5:25:c0:fc:c5:23:49:0b:06:d1:e5:f2:68:6e: 54:6a:3c:ec:43:12:4b:f6:99:fb:05:4f:fa:b9:f9:b5:df:20: fa:02:50:dc:8c:e6:06:61:e3:83:b8:c4:2f:7c:7f:1e:68:aa: b5:c1:87:cb:12:84:c6:6b:5e:97:89:ab:39:72:fa:06:24:10: 4f:73:78:83:88:d3:a6:cb:53:ea:70:fd:03:7f:5c:1e:8b:36: 9e:85:66:3e:b0:cf:e7:d8:c5:08:85:21:f1:88:0f:33:ad:be: a0:51:c7:66:0f:35:8b:61:98:58:bf:1c:b8:81:30:be:e9:18: ae:73:92:a3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XOpnnndEXHe+YqARjg7cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMDk5ZjQ5OTc4Yjk2MGZhMzFmODFhY2Y1NDY3MTI3M2Rj N2ZmNjEwHhcNMjYwMTAyMDYxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTkxMmRlNjEzYjk4ZTRmMDhlNDFkNmI4OWNkZTU1Nzk0MGUzZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvB5lGDefgcT6LRfJ031Ns9mgphH kDdsxLCEsanPixsaUZTzWInzpO4WcUaw58tgCFtni0+RKpMOqNnl++mXjpw6hWrx SaM3lF6JYhPk+PCj+btgbj01aIdrW4heXEbOBaLQviAcI9GNI7pGmK/PoeJK6mQw um27YwOCk11QSDErAoOJRLabjwiet7bZNmUtII7u3Pf4rrn70+slTRdW1dF1b/Pz EIUz/PhinodHWpXaDdER/iUe2MtthTPXxuzTEMarwKMxqjPnrbGfK63LXWJwfqhB 9CE0URtT/MCte/Tl6BS+e6n0focHYaN///Ifx00bgrBT1+dF1xma7TFJqQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNGRLeYTuY5PCOQda4nN5VeUDj42MB8GA1UdIwQY MBaAFF8Jn0mXi5YPox+BrPVGcSc9x/9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHdtZlNaZUxsZy1qSDRHczlVWnhKejNIXzJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hZDViZmQtODVjNy00N2I3LTk5N2Mt ZjVkMmNiNzk0NTZkLzEvMFpFdDVoTzVqazhJNUIxcmljM2xWNVFPUGpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hZDViZmQtODVjNy00N2I3LTk5N2MtZjVkMmNiNzk0NTZk LzEvWHdtZlNaZUxsZy1qSDRHczlVWnhKejNIXzJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuRZEAwQC uUZ4MA0GCSqGSIb3DQEBCwUAA4IBAQAPWEB32Jdip5WGDvBSDW0oyMF1g6ad0aO7 5I8Wm5p1VOHFtAVKu5dDlhhjtZ/aDuHexAIPjEfrO26ODfoX/uvB7dHJcpoUcUiM gmB4CqJoLB9dwo50ljP52iR2USW6c24+99su4c45NgUkUbr+y3cF6/FxaXZqnZRu yMuGL06rMfIn1SXA/MUjSQsG0eXyaG5UajzsQxJL9pn7BU/6ufm13yD6AlDcjOYG YeODuMQvfH8eaKq1wYfLEoTGa16Xias5cvoGJBBPc3iDiNOmy1PqcP0Df1weizae hWY+sM/n2MUIhSHxiA8zrb6gUcdmDzWLYZhYvxy4gTC+6Riuc5Kj -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:23 2026 by rpki-client