This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/Zidt70uR7EwA_jgMGhMKRePnDVY.roa File: Zidt70uR7EwA_jgMGhMKRePnDVY.roa (raw, json) Hash identifier: 6vXv6cZr8X2Vui/UxLz5jRQ2ypTWx8KVaQj2Aal4KCc= Subject key identifier: 66:27:6D:EF:4B:91:EC:4C:00:FE:38:0C:1A:13:0A:45:E3:E7:0D:56 Certificate issuer: /CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b Certificate serial: 019B7CEE6F4C62903F38AB4D3D09D9414F37 Authority key identifier: F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/Zidt70uR7EwA_jgMGhMKRePnDVY.roa Signing time: Fri 02 Jan 2026 04:19:19 +0000 ROA not before: Fri 02 Jan 2026 04:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60486 IP address blocks: 83.143.72.0/24 maxlen: 24 85.184.244.0/24 maxlen: 24 85.184.245.0/24 maxlen: 24 85.184.246.0/24 maxlen: 24 85.184.247.0/24 maxlen: 24 185.29.152.0/22 maxlen: 22 185.29.152.0/23 maxlen: 23 185.29.154.0/24 maxlen: 24 2a00:a920::/32 maxlen: 32 2a00:a920::/40 maxlen: 40 2a00:a920:100::/40 maxlen: 40 2a00:a920:200::/40 maxlen: 40 2a00:a920:300::/40 maxlen: 40 2a00:a920:400::/40 maxlen: 40 2a00:a920:700::/40 maxlen: 40 2a00:a920:800::/40 maxlen: 40 2a00:a920:900::/40 maxlen: 40 2a00:a920:c00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:6f:4c:62:90:3f:38:ab:4d:3d:09:d9:41:4f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b Validity Not Before: Jan 2 04:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66276def4b91ec4c00fe380c1a130a45e3e70d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d5:62:6e:95:af:ef:cf:0a:06:15:50:bb:38: 63:bf:00:a9:4b:60:da:bf:ad:6a:8d:55:f0:14:ce: 97:4e:16:5a:7b:9a:6a:a0:13:27:3b:6c:b4:ad:3c: 06:5f:77:ec:91:60:c3:55:6d:19:29:ed:2a:c5:7e: 6a:6f:97:3c:6b:31:d7:11:d2:72:cc:08:53:9c:77: 01:db:e4:3b:78:4b:ff:d8:06:69:2f:4c:db:ed:80: 2d:88:78:c2:64:6a:60:c3:84:0d:6c:db:63:46:53: 59:14:ef:37:01:90:0e:1d:12:cf:13:d0:9e:ca:68: cb:69:40:7d:b5:1d:06:a7:d4:17:da:c6:06:2d:ec: f4:64:b8:75:51:4e:11:6e:93:d2:bb:2b:3c:15:12: 3f:c0:69:07:9f:11:4e:5f:76:53:30:09:ba:60:dc: 51:03:aa:c5:31:83:bf:eb:3a:a2:68:d7:d7:55:94: a9:25:52:b7:0a:04:d0:f7:92:32:47:ea:96:4a:ad: 79:8e:27:b2:c1:3e:0f:ea:6a:f5:ed:64:ba:49:26: ee:fc:83:ac:65:63:44:d5:11:a4:cf:8c:f6:b9:17: b7:74:7f:f7:b5:c0:88:0a:dc:1a:78:98:fa:3c:06: 85:85:9e:58:e4:3f:26:25:1f:0c:1c:e8:44:41:c7: d0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:27:6D:EF:4B:91:EC:4C:00:FE:38:0C:1A:13:0A:45:E3:E7:0D:56 X509v3 Authority Key Identifier: keyid:F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/Zidt70uR7EwA_jgMGhMKRePnDVY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.143.72.0/24 85.184.244.0/22 185.29.152.0/22 IPv6: 2a00:a920::/32 Signature Algorithm: sha256WithRSAEncryption 86:07:2d:b1:e0:14:8e:fd:38:3a:a0:55:2f:67:68:33:2a:41: 4d:15:25:d6:72:e9:ba:69:1c:a9:ca:0f:54:d8:b9:2b:d1:1a: 34:3e:7e:9b:8e:d9:87:c2:92:92:10:f9:f3:f8:e5:b8:b5:9d: 54:44:4b:ec:ff:34:61:a5:7b:98:8c:0a:c9:9a:0d:93:62:13: be:a6:6e:c0:67:17:26:5a:e5:1d:fd:fe:d0:7c:cc:17:60:92: 88:9d:c9:e6:a4:60:aa:0f:7a:02:d5:88:39:16:b0:a3:d8:68: 76:1e:7b:c1:4a:74:b7:4c:d4:3c:af:62:e4:a4:9f:42:06:6b: 2d:ec:2d:25:96:c5:98:31:06:88:88:b8:16:4f:98:26:16:34: cc:bf:0b:bf:8a:b8:c2:49:e5:d2:1b:64:b4:c9:4b:4d:ca:d7: 8c:3b:43:91:b7:b0:a8:0b:21:68:f8:34:94:56:42:47:40:8b: ab:71:47:c9:2a:60:76:34:63:8b:68:7c:ed:53:de:27:03:cf: 80:ed:84:00:9e:e3:0d:a5:71:10:88:c8:f3:bc:b0:08:20:6f: 50:df:80:f0:8e:f5:72:60:12:75:b6:4f:c9:08:97:ba:3b:42: 39:83:26:01:90:8f:a4:b2:94:fa:9e:9f:94:3a:31:e5:cf:cf: 1f:4c:11:87 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt87m9MYpA/OKtNPQnZQU83MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZGE2NzEzNWI3MzdjYTlkMmRmZDdiOTdmZTU5NzhiOGYz MDBkNmIwHhcNMjYwMTAyMDQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjI3NmRlZjRiOTFlYzRjMDBmZTM4MGMxYTEzMGE0NWUzZTcwZDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotVibpWv788KBhVQuzhjvwCpS2Da v61qjVXwFM6XThZae5pqoBMnO2y0rTwGX3fskWDDVW0ZKe0qxX5qb5c8azHXEdJy zAhTnHcB2+Q7eEv/2AZpL0zb7YAtiHjCZGpgw4QNbNtjRlNZFO83AZAOHRLPE9Ce ymjLaUB9tR0Gp9QX2sYGLez0ZLh1UU4RbpPSuys8FRI/wGkHnxFOX3ZTMAm6YNxR A6rFMYO/6zqiaNfXVZSpJVK3CgTQ95IyR+qWSq15jieywT4P6mr17WS6SSbu/IOs ZWNE1RGkz4z2uRe3dH/3tcCICtwaeJj6PAaFhZ5Y5D8mJR8MHOhEQcfQ1QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFGYnbe9LkexMAP44DBoTCkXj5w1WMB8GA1UdIwQY MBaAFPHaZxNbc3yp0t/XuX/ll4uPMA1rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRwbkUxdHpmS25TMzllNWYtV1hpNDh3RFdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hMmNjYjEtYTcyOC00ZjA0LTk2NDEt ZmMxMTJhZTYzZWE0LzEvWmlkdDcwdVI3RXdBX2pnTUdoTUtSZVBuRFZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9hMmNjYjEtYTcyOC00ZjA0LTk2NDEtZmMxMTJhZTYzZWE0 LzEvOGRwbkUxdHpmS25TMzllNWYtV1hpNDh3RFdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAU49IAwQC Vbj0AwQCuR2YMA0EAgACMAcDBQAqAKkgMA0GCSqGSIb3DQEBCwUAA4IBAQCGBy2x 4BSO/Tg6oFUvZ2gzKkFNFSXWcum6aRypyg9U2Lkr0Ro0Pn6bjtmHwpKSEPnz+OW4 tZ1UREvs/zRhpXuYjArJmg2TYhO+pm7AZxcmWuUd/f7QfMwXYJKIncnmpGCqD3oC 1Yg5FrCj2Gh2HnvBSnS3TNQ8r2LkpJ9CBmst7C0llsWYMQaIiLgWT5gmFjTMvwu/ irjCSeXSG2S0yUtNyteMO0ORt7CoCyFo+DSUVkJHQIurcUfJKmB2NGOLaHztU94n A8+A7YQAnuMNpXEQiMjzvLAIIG9Q34DwjvVyYBJ1tk/JCJe6O0I5gyYBkI+kspT6 np+UOjHlz88fTBGH -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:11 2026 by rpki-client