This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/zmWtBfLWV1C4E_Ul0FLVrMJuWoo.roa File: zmWtBfLWV1C4E_Ul0FLVrMJuWoo.roa (raw, json) Hash identifier: kAOYpoqyQoZGD/jSk2GIEGeyjuOKoKtl7EhFL3Rvnm8= Subject key identifier: CE:65:AD:05:F2:D6:57:50:B8:13:F5:25:D0:52:D5:AC:C2:6E:5A:8A Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B356B203DC0E13B00837D67A943E18F Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/zmWtBfLWV1C4E_Ul0FLVrMJuWoo.roa Signing time: Thu 01 Jan 2026 20:17:36 +0000 ROA not before: Thu 01 Jan 2026 20:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39668 IP address blocks: 85.120.24.0/22 maxlen: 22 193.230.215.0/24 maxlen: 24 217.156.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:6b:20:3d:c0:e1:3b:00:83:7d:67:a9:43:e1:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce65ad05f2d65750b813f525d052d5acc26e5a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:78:42:8d:6a:fe:96:0c:44:80:b8:63:6f:ca: 9e:f2:66:3f:66:f2:75:f0:08:ab:6b:bc:a9:4b:1e: ce:da:8a:24:90:17:d6:8a:89:53:72:b7:73:21:37: 76:d4:88:81:53:76:19:a9:81:9b:c1:46:41:28:b4: 4c:d4:7f:a1:fb:f5:e3:24:b6:cc:82:fa:26:8e:7d: e4:8b:51:72:3a:42:50:9f:d4:e3:8a:ee:44:68:0f: 38:52:ac:17:00:0c:18:32:4b:85:81:61:19:62:64: 02:71:8a:81:aa:c9:3f:83:de:47:98:20:77:e7:bc: fe:4e:0d:96:54:b7:42:bc:dc:6a:e7:b4:27:fb:46: 83:d9:29:4d:a9:e7:01:09:77:25:39:6b:0b:b0:13: e1:7b:28:a6:fa:29:e9:93:72:90:a4:14:45:c8:e7: 29:8e:0c:71:fa:ae:c3:0a:bb:6c:a9:24:07:5e:f7: 66:1a:c5:88:b8:09:69:7d:c3:23:3c:d8:af:51:05: 5c:53:5e:68:c9:dd:8a:ca:65:54:3a:03:eb:06:16: 0b:b7:43:85:c1:4e:10:71:3e:34:01:ea:b0:0b:90: 0d:2d:09:e8:cb:4e:91:e7:cb:d5:7d:cf:c4:64:31: 33:12:cb:9d:75:95:98:99:6d:15:d8:0f:de:28:53: 74:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:65:AD:05:F2:D6:57:50:B8:13:F5:25:D0:52:D5:AC:C2:6E:5A:8A X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/zmWtBfLWV1C4E_Ul0FLVrMJuWoo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.120.24.0/22 193.230.215.0/24 217.156.4.0/22 Signature Algorithm: sha256WithRSAEncryption 54:a9:6e:fc:cd:d2:24:44:20:5d:53:1e:1b:ee:df:98:05:31: fd:8d:e5:f2:6b:42:fc:28:d9:67:70:8d:59:f0:ad:ba:df:a7: 82:f2:ea:ed:95:ce:36:1c:74:04:33:08:31:5e:26:09:a6:9c: 56:bb:19:47:e9:ec:12:70:f7:cb:27:e7:85:f2:b8:fd:4c:b7: 3b:af:9a:80:ec:44:5f:73:c9:fc:fd:36:96:4f:49:d7:a5:ff: 6d:5e:92:68:53:7e:2f:56:65:09:77:2d:3c:eb:2a:71:a8:c9: 31:1a:ff:fd:08:8a:8d:91:2e:cb:46:62:39:90:11:f3:2e:1c: 3a:43:07:c3:8e:ba:d6:e9:f9:51:69:8e:0b:f8:b0:ae:82:46: 29:12:d0:6a:a6:ea:12:e9:36:a5:12:21:97:83:3b:37:1d:89: 72:54:82:36:8e:8b:7b:d7:08:79:ec:0d:93:14:78:b1:c2:9b: 75:1a:52:06:75:02:b4:7b:26:3b:76:26:44:8f:0d:7e:f0:03: 0d:08:b5:1e:0f:51:d5:fe:d9:45:67:1b:69:b9:29:dc:40:08: 57:11:69:98:ab:ef:c3:f9:81:b5:8a:88:bb:65:7d:2f:45:9c: 79:ba:7d:89:74:ec:1c:7d:9f:7a:a0:3b:0f:de:8e:85:f7:41: 75:81:b5:ac -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7NWsgPcDhOwCDfWepQ+GPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTY1YWQwNWYyZDY1NzUwYjgxM2Y1MjVkMDUyZDVhY2MyNmU1YThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHhCjWr+lgxEgLhjb8qe8mY/ZvJ1 8Aira7ypSx7O2ookkBfWiolTcrdzITd21IiBU3YZqYGbwUZBKLRM1H+h+/XjJLbM gvomjn3ki1FyOkJQn9Tjiu5EaA84UqwXAAwYMkuFgWEZYmQCcYqBqsk/g95HmCB3 57z+Tg2WVLdCvNxq57Qn+0aD2SlNqecBCXclOWsLsBPheyim+inpk3KQpBRFyOcp jgxx+q7DCrtsqSQHXvdmGsWIuAlpfcMjPNivUQVcU15oyd2KymVUOgPrBhYLt0OF wU4QcT40AeqwC5ANLQnoy06R58vVfc/EZDEzEsuddZWYmW0V2A/eKFN09wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFM5lrQXy1ldQuBP1JdBS1azCblqKMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvem1XdEJmTFdWMUM0RV9VbDBGTFZyTUp1V29vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCVXgYAwQA webXAwQC2ZwEMA0GCSqGSIb3DQEBCwUAA4IBAQBUqW78zdIkRCBdUx4b7t+YBTH9 jeXya0L8KNlncI1Z8K2636eC8urtlc42HHQEMwgxXiYJppxWuxlH6ewScPfLJ+eF 8rj9TLc7r5qA7ERfc8n8/TaWT0nXpf9tXpJoU34vVmUJdy086ypxqMkxGv/9CIqN kS7LRmI5kBHzLhw6QwfDjrrW6flRaY4L+LCugkYpEtBqpuoS6TalEiGXgzs3HYly VII2jot71wh57A2TFHixwpt1GlIGdQK0eyY7diZEjw1+8AMNCLUeD1HV/tlFZxtp uSncQAhXEWmYq+/D+YG1ioi7ZX0vRZx5un2JdOwcfZ96oDsP3o6F90F1gbWs -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:58 2026 by rpki-client