This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/Zx_5tP2jFEhTq6MgQIAH7OLDeG0.roa File: Zx_5tP2jFEhTq6MgQIAH7OLDeG0.roa (raw, json) Hash identifier: kGORWAX4JZQpp1zftluvvyW3B2PFf7CnlAdwIGmwd68= Subject key identifier: 67:1F:F9:B4:FD:A3:14:48:53:AB:A3:20:40:80:07:EC:E2:C3:78:6D Certificate issuer: /CN=f724109f217702e6980db9053a8f4710fc0a0a7a Certificate serial: 019B7AC8158EA904844B573ECDF143E421B1 Authority key identifier: F7:24:10:9F:21:77:02:E6:98:0D:B9:05:3A:8F:47:10:FC:0A:0A:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yQQnyF3AuaYDbkFOo9HEPwKCno.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/Zx_5tP2jFEhTq6MgQIAH7OLDeG0.roa Signing time: Thu 01 Jan 2026 18:18:11 +0000 ROA not before: Thu 01 Jan 2026 18:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200355 IP address blocks: 185.250.12.0/24 maxlen: 24 185.250.13.0/24 maxlen: 24 185.250.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft rsync://rpki.ripe.net/repository/DEFAULT/9yQQnyF3AuaYDbkFOo9HEPwKCno.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:15:8e:a9:04:84:4b:57:3e:cd:f1:43:e4:21:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f724109f217702e6980db9053a8f4710fc0a0a7a Validity Not Before: Jan 1 18:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=671ff9b4fda3144853aba320408007ece2c3786d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3d:d1:8c:39:b3:66:7c:f0:ff:c6:45:f5:97: 08:94:db:39:3f:af:e1:81:00:84:d3:ea:92:1f:f0: 72:ee:a6:6c:51:9a:11:40:c3:70:5a:29:10:32:7e: 3b:d6:ce:26:f0:3e:e4:cb:3e:27:d9:62:b0:79:ba: ca:01:ab:e8:6e:67:a2:cf:26:b8:4d:b7:c9:b6:0d: 59:bd:cc:58:4b:8c:eb:99:8a:a2:0a:3b:fa:74:cf: 02:98:60:78:ba:ed:e2:e1:72:f2:46:91:5a:4f:26: a5:1b:73:8a:31:18:44:33:89:38:8c:11:93:8f:89: 14:3d:e8:3d:2c:2e:7d:32:f9:31:89:ad:a4:95:90: 42:21:37:27:f6:a7:cc:e6:90:51:73:4c:2f:e6:a1: a5:9b:82:e1:5a:03:54:27:5f:08:fe:be:fe:d2:07: 85:ef:21:f9:b0:85:d2:67:42:b2:9e:52:8e:55:33: 65:92:03:44:cf:e1:06:d5:24:5f:d6:91:e9:03:6c: a1:84:f1:68:f5:0e:c2:5f:d3:56:ed:31:f5:2b:2e: 4c:f8:02:8c:5c:b1:01:5b:95:ec:31:1f:46:cb:88: a2:2e:a9:d9:5f:83:66:97:68:c0:1c:b9:de:85:9a: df:7b:1c:7b:51:77:99:ef:a6:42:50:cf:97:35:4f: 16:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1F:F9:B4:FD:A3:14:48:53:AB:A3:20:40:80:07:EC:E2:C3:78:6D X509v3 Authority Key Identifier: keyid:F7:24:10:9F:21:77:02:E6:98:0D:B9:05:3A:8F:47:10:FC:0A:0A:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yQQnyF3AuaYDbkFOo9HEPwKCno.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/Zx_5tP2jFEhTq6MgQIAH7OLDeG0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.250.12.0/22 Signature Algorithm: sha256WithRSAEncryption 77:d9:25:4b:ba:c9:c4:5a:58:55:2b:b4:2e:b9:c2:31:86:d0: 17:d6:a5:93:9e:99:bc:fc:4d:75:a5:65:d9:8b:3a:dd:92:37: cb:5a:b2:a1:a9:dc:a9:51:36:15:68:fa:a5:a0:9b:43:96:ad: ab:14:2b:ab:c1:e3:36:0e:66:75:48:77:63:90:8b:38:c4:32: 6b:84:b7:7d:36:80:23:d1:55:c1:36:e7:d0:06:9b:63:97:c3: a4:c8:d8:89:84:f2:70:ee:62:2f:9c:55:11:ef:ff:2c:e5:72: 65:1d:23:e4:bd:67:37:a3:38:cf:15:95:60:93:c5:d6:4a:3e: cd:e5:7b:a1:ed:5a:37:9e:bd:c9:a6:2a:d1:d2:5e:4b:18:df: c7:bb:89:e4:81:07:5e:36:84:ed:e1:75:d8:e7:f8:d4:6e:aa: b6:34:eb:e5:24:30:3d:88:14:a4:81:c1:e6:24:f0:78:2c:4d: cf:6e:d2:2b:d7:d5:b3:65:5c:db:25:68:84:66:05:4a:11:75: c3:b1:69:e9:aa:45:76:9c:1a:4e:11:ce:0c:31:40:4a:84:b2: b1:54:d8:64:45:5f:12:c3:2f:9e:d1:89:c2:e7:16:51:61:55: b0:72:3b:54:6d:a6:b0:c6:69:d7:f5:a9:1f:19:8b:b3:be:02: bb:31:e6:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yBWOqQSES1c+zfFD5CGxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MjQxMDlmMjE3NzAyZTY5ODBkYjkwNTNhOGY0NzEwZmMw YTBhN2EwHhcNMjYwMTAxMTgxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzFmZjliNGZkYTMxNDQ4NTNhYmEzMjA0MDgwMDdlY2UyYzM3ODZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz3RjDmzZnzw/8ZF9ZcIlNs5P6/h gQCE0+qSH/By7qZsUZoRQMNwWikQMn471s4m8D7kyz4n2WKwebrKAavobmeizya4 TbfJtg1ZvcxYS4zrmYqiCjv6dM8CmGB4uu3i4XLyRpFaTyalG3OKMRhEM4k4jBGT j4kUPeg9LC59Mvkxia2klZBCITcn9qfM5pBRc0wv5qGlm4LhWgNUJ18I/r7+0geF 7yH5sIXSZ0KynlKOVTNlkgNEz+EG1SRf1pHpA2yhhPFo9Q7CX9NW7TH1Ky5M+AKM XLEBW5XsMR9Gy4iiLqnZX4Nml2jAHLnehZrfexx7UXeZ76ZCUM+XNU8WLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGcf+bT9oxRIU6ujIECAB+ziw3htMB8GA1UdIwQY MBaAFPckEJ8hdwLmmA25BTqPRxD8Cgp6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXlRUW55RjNBdWFZRGJrRk9vOUhFUHdLQ25vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZDY3NjgtMDJlOS00M2RjLTgyZDgt YjJmNmJjM2UwYjM1LzEvWnhfNXRQMmpGRWhUcTZNZ1FJQUg3T0xEZUcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8wZDY3NjgtMDJlOS00M2RjLTgyZDgtYjJmNmJjM2UwYjM1 LzEvOXlRUW55RjNBdWFZRGJrRk9vOUhFUHdLQ25vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufoMMA0G CSqGSIb3DQEBCwUAA4IBAQB32SVLusnEWlhVK7QuucIxhtAX1qWTnpm8/E11pWXZ izrdkjfLWrKhqdypUTYVaPqloJtDlq2rFCurweM2DmZ1SHdjkIs4xDJrhLd9NoAj 0VXBNufQBptjl8OkyNiJhPJw7mIvnFUR7/8s5XJlHSPkvWc3ozjPFZVgk8XWSj7N 5Xuh7Vo3nr3JpirR0l5LGN/Hu4nkgQdeNoTt4XXY5/jUbqq2NOvlJDA9iBSkgcHm JPB4LE3PbtIr19WzZVzbJWiEZgVKEXXDsWnpqkV2nBpOEc4MMUBKhLKxVNhkRV8S wy+e0YnC5xZRYVWwcjtUbaawxmnX9akfGYuzvgK7MeZz -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:35 2026 by rpki-client