This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/wEZZX0o5N8nlP47tu1RwoQ2y0AY.roa File: wEZZX0o5N8nlP47tu1RwoQ2y0AY.roa (raw, json) Hash identifier: ddJPky6VMI6qp8TK3QriFAzhCSzbyfK/JMSPvgj4FCE= Subject key identifier: C0:46:59:5F:4A:39:37:C9:E5:3F:8E:ED:BB:54:70:A1:0D:B2:D0:06 Certificate issuer: /CN=ccad68f7e8abadf4472623343a32561507224189 Certificate serial: 019B7CED2CD93D48FA803293C2D84B707FF1 Authority key identifier: CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/wEZZX0o5N8nlP47tu1RwoQ2y0AY.roa Signing time: Fri 02 Jan 2026 04:17:56 +0000 ROA not before: Fri 02 Jan 2026 04:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216463 IP address blocks: 185.241.207.0/24 maxlen: 24 2a02:f680::/29 maxlen: 29 2a02:f680::/48 maxlen: 48 2a02:f680:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:2c:d9:3d:48:fa:80:32:93:c2:d8:4b:70:7f:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccad68f7e8abadf4472623343a32561507224189 Validity Not Before: Jan 2 04:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c046595f4a3937c9e53f8eedbb5470a10db2d006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:88:08:7a:f9:c0:c9:ac:b6:ba:df:44:09:04: 89:90:c6:53:19:00:9a:c3:91:c4:d0:1c:2b:e9:ba: 4d:6f:4b:25:a4:6f:c0:ad:e3:ec:e1:84:e2:16:b8: 93:f2:65:72:48:6f:47:ab:f3:fd:a2:e2:94:3d:03: 57:40:c4:c3:d5:6b:0b:1b:bd:97:cd:3b:d1:4d:98: 2f:70:81:3d:f8:58:81:21:b3:38:6a:7b:6b:ba:e8: 0f:8c:26:7f:b5:6e:a4:9a:cd:3c:1f:6f:5e:d3:bc: 83:69:91:93:b8:bd:2a:81:4d:6a:8d:14:cd:d2:a9: ab:b1:46:cd:dc:fa:a8:95:46:a7:04:65:03:fa:c9: ed:94:a5:0c:4d:51:d6:a0:ef:92:1e:22:a6:f9:c3: 63:c0:09:67:de:04:5e:1d:be:f9:f7:84:67:60:c2: 81:76:7e:36:f0:21:a4:58:64:72:a0:c1:48:2b:48: 22:f6:25:7f:28:3d:bb:1d:91:20:79:c2:57:09:a6: 88:cb:b8:f1:f0:92:cc:b6:bd:24:03:f0:e0:a8:86: e9:19:cc:e1:2e:c7:c4:8e:34:4c:33:f1:e8:b5:a7: 5e:50:7c:7e:6f:df:e8:1d:10:ec:74:bc:9f:9d:81: a1:b2:fa:5f:67:d3:cb:fa:53:88:ab:da:3d:e9:3d: 8c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:46:59:5F:4A:39:37:C9:E5:3F:8E:ED:BB:54:70:A1:0D:B2:D0:06 X509v3 Authority Key Identifier: keyid:CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/wEZZX0o5N8nlP47tu1RwoQ2y0AY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.241.207.0/24 IPv6: 2a02:f680::/29 Signature Algorithm: sha256WithRSAEncryption 67:57:42:f7:b4:70:3d:7b:54:b8:c9:0d:d1:02:f2:00:ff:06: 51:93:be:cd:00:7b:3b:3b:8c:13:6b:bc:a9:b9:aa:38:0c:a6: 59:be:3e:5d:e4:45:4e:4b:bf:76:56:34:af:8d:c1:bc:09:51: 5b:9e:fa:d1:45:ba:04:55:a1:11:ec:b3:89:fc:0f:d9:4e:28: 40:81:c9:f4:e8:4b:02:b9:24:d9:99:98:ab:12:01:95:c8:d8: ca:c7:03:32:e8:cd:f9:08:03:a2:16:dd:d6:2a:97:aa:f7:96: 32:cc:df:d0:d8:51:81:65:d7:80:b3:99:2e:24:bc:43:47:14: 4f:92:69:c6:42:a8:5f:a8:36:1a:a6:79:74:45:d0:f8:f2:81: 58:11:14:18:7c:6d:16:78:d2:54:57:58:ed:14:03:89:4f:af: 6a:b3:cf:35:c2:2b:e8:1e:0d:0b:af:a7:a0:bd:88:92:fb:ec: db:49:56:cf:75:73:d2:1d:4d:05:46:0c:d1:71:ac:30:ec:a2: 68:83:7e:23:56:63:b7:ae:5a:d0:07:3f:9a:d6:d2:53:0e:47: e5:dc:4c:34:f2:4f:6b:97:cb:6d:f2:5e:e8:9f:68:22:6b:d6: 0f:13:3d:c9:dc:d3:60:c8:27:8e:ca:55:c3:87:2c:4f:4c:0e: c9:fb:5b:e1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87SzZPUj6gDKTwthLcH/xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYWQ2OGY3ZThhYmFkZjQ0NzI2MjMzNDNhMzI1NjE1MDcy MjQxODkwHhcNMjYwMTAyMDQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDQ2NTk1ZjRhMzkzN2M5ZTUzZjhlZWRiYjU0NzBhMTBkYjJkMDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIgIevnAyay2ut9ECQSJkMZTGQCa w5HE0Bwr6bpNb0slpG/ArePs4YTiFriT8mVySG9Hq/P9ouKUPQNXQMTD1WsLG72X zTvRTZgvcIE9+FiBIbM4antruugPjCZ/tW6kms08H29e07yDaZGTuL0qgU1qjRTN 0qmrsUbN3PqolUanBGUD+sntlKUMTVHWoO+SHiKm+cNjwAln3gReHb7594RnYMKB dn428CGkWGRyoMFIK0gi9iV/KD27HZEgecJXCaaIy7jx8JLMtr0kA/DgqIbpGczh LsfEjjRMM/HotadeUHx+b9/oHRDsdLyfnYGhsvpfZ9PL+lOIq9o96T2MawIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMBGWV9KOTfJ5T+O7btUcKENstAGMB8GA1UdIwQY MBaAFMytaPfoq630RyYjNDoyVhUHIkGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveksxbzktaXJyZlJISmlNME9qSldGUWNpUVlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80YmJhMDgtYmUzNi00N2ViLWFiMmMt NjM1OWY5MmUxZDJmLzEvd0VaWlgwbzVOOG5sUDQ3dHUxUndvUTJ5MEFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS80YmJhMDgtYmUzNi00N2ViLWFiMmMtNjM1OWY5MmUxZDJm LzEveksxbzktaXJyZlJISmlNME9qSldGUWNpUVlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAufHPMA0E AgACMAcDBQMqAvaAMA0GCSqGSIb3DQEBCwUAA4IBAQBnV0L3tHA9e1S4yQ3RAvIA /wZRk77NAHs7O4wTa7ypuao4DKZZvj5d5EVOS792VjSvjcG8CVFbnvrRRboEVaER 7LOJ/A/ZTihAgcn06EsCuSTZmZirEgGVyNjKxwMy6M35CAOiFt3WKpeq95YyzN/Q 2FGBZdeAs5kuJLxDRxRPkmnGQqhfqDYapnl0RdD48oFYERQYfG0WeNJUV1jtFAOJ T69qs881wivoHg0Lr6egvYiS++zbSVbPdXPSHU0FRgzRcaww7KJog34jVmO3rlrQ Bz+a1tJTDkfl3Ew08k9rl8tt8l7on2gia9YPEz3J3NNgyCeOylXDhyxPTA7J+1vh -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:39 2026 by rpki-client