This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/zW8nttVSxzQC9vPeCiBB2Fi43Bw.roa File: zW8nttVSxzQC9vPeCiBB2Fi43Bw.roa (raw, json) Hash identifier: BlLZPwRJ87Mpdgf8WIPNTg5b23WBV+U7XBJtnee3wHY= Subject key identifier: CD:6F:27:B6:D5:52:C7:34:02:F6:F3:DE:0A:20:41:D8:58:B8:DC:1C Certificate issuer: /CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f Certificate serial: 019B7BA54240D6AB349BAE74ADE4E2B4C31F Authority key identifier: 08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/zW8nttVSxzQC9vPeCiBB2Fi43Bw.roa Signing time: Thu 01 Jan 2026 22:19:46 +0000 ROA not before: Thu 01 Jan 2026 22:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205494 IP address blocks: 185.212.228.0/22 maxlen: 22 2a0b:7dc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:42:40:d6:ab:34:9b:ae:74:ad:e4:e2:b4:c3:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f Validity Not Before: Jan 1 22:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd6f27b6d552c73402f6f3de0a2041d858b8dc1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e1:86:4c:26:d7:62:de:8e:d1:ce:4b:80:6b: d5:ce:c1:f5:8b:38:5f:b7:88:64:0e:de:87:3c:a4: 39:45:71:21:04:49:1f:37:e9:96:c5:83:04:ff:89: 78:8f:f6:81:24:f7:a1:69:03:13:85:b5:33:73:75: f1:6b:15:f6:d9:58:66:eb:65:7b:78:76:f3:07:a1: 5f:9b:98:9f:b4:76:28:db:0b:dc:f5:5e:3f:4e:54: 1d:69:02:53:f0:62:ab:e9:d4:f9:08:1e:49:7c:53: 7a:4a:b2:3d:5f:25:85:6f:be:66:c9:8d:64:81:11: 06:56:7d:6c:fd:4d:a8:a1:e5:d2:95:a7:2b:9c:99: 28:c1:13:93:c5:70:21:da:2f:5a:c1:66:63:98:37: c7:ba:01:41:41:a8:18:9f:a9:94:ad:93:b5:26:c2: 70:a3:bf:be:78:8b:32:99:9d:25:4c:ab:ee:18:83: 21:11:3d:f2:35:99:e8:8c:7d:df:d7:68:76:47:85: 8f:e1:69:f4:62:4c:5f:da:dc:31:0f:08:a8:28:73: 70:92:31:3b:99:85:7c:db:67:b3:97:b5:56:3a:41: d0:62:57:52:fb:54:b8:14:68:05:c8:dc:4c:96:0a: d1:18:9c:3f:43:18:92:1a:6a:4b:15:1a:bf:61:42: 10:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:6F:27:B6:D5:52:C7:34:02:F6:F3:DE:0A:20:41:D8:58:B8:DC:1C X509v3 Authority Key Identifier: keyid:08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/zW8nttVSxzQC9vPeCiBB2Fi43Bw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.212.228.0/22 IPv6: 2a0b:7dc0::/32 Signature Algorithm: sha256WithRSAEncryption 8d:6e:82:48:89:de:a9:bb:52:b3:89:3d:0d:01:6b:2e:24:f4: c1:50:e8:5f:2f:2a:79:bb:cc:60:26:ae:01:19:5b:ae:52:09: 83:fb:6a:4b:68:8a:f1:43:a2:b1:7f:c7:16:6e:0c:12:00:5d: 69:c8:37:b2:a5:7d:9c:44:bf:65:90:0f:3a:43:72:52:19:44: 11:00:02:f2:2d:63:50:73:55:5d:f7:36:43:7e:d6:72:39:e1: 55:ad:28:4b:16:77:de:19:ee:74:35:60:16:4e:2f:dc:1f:6c: 77:12:8c:6d:65:63:0c:c9:a3:ed:7c:37:e3:a3:d6:3a:27:a7: 43:93:94:9b:c3:a5:b3:5a:b4:bc:12:a4:6f:e3:1c:1d:f4:3a: e8:9b:6e:3c:3b:a2:0a:77:6f:bc:c0:f5:fc:0b:20:2f:1b:36: a2:11:07:9b:97:a6:27:d3:f9:b8:cb:77:b4:3f:be:d8:d2:1a: 97:c7:56:e1:27:1c:df:af:ea:19:73:3c:51:3b:37:52:09:f2: ff:c4:83:b6:1a:38:40:08:48:63:2d:16:fb:99:50:75:b7:74: 69:77:4e:29:13:e8:ac:9a:e9:54:25:bb:d7:6d:11:f9:f5:d5: aa:a8:79:ef:b7:36:7a:e1:f0:c5:6b:23:5c:66:02:b4:29:7f: 4c:3b:c8:49 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7pUJA1qs0m650reTitMMfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4OWZjZjJhYjZlNmRiYzE2MzRlZTU5MWZjMWI3NGE0MWRl M2VhNWYwHhcNMjYwMTAxMjIxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDZmMjdiNmQ1NTJjNzM0MDJmNmYzZGUwYTIwNDFkODU4YjhkYzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeGGTCbXYt6O0c5LgGvVzsH1izhf t4hkDt6HPKQ5RXEhBEkfN+mWxYME/4l4j/aBJPehaQMThbUzc3XxaxX22Vhm62V7 eHbzB6Ffm5iftHYo2wvc9V4/TlQdaQJT8GKr6dT5CB5JfFN6SrI9XyWFb75myY1k gREGVn1s/U2ooeXSlacrnJkowROTxXAh2i9awWZjmDfHugFBQagYn6mUrZO1JsJw o7++eIsymZ0lTKvuGIMhET3yNZnojH3f12h2R4WP4Wn0Ykxf2twxDwioKHNwkjE7 mYV822ezl7VWOkHQYldS+1S4FGgFyNxMlgrRGJw/QxiSGmpLFRq/YUIQSQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFM1vJ7bVUsc0Avbz3gogQdhYuNwcMB8GA1UdIwQY MBaAFAifzyq25tvBY07lkfwbdKQd4+pfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0pfUEtyYm0yOEZqVHVXUl9CdDBwQjNqNmw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80YTI3M2MtZjA1My00MWY4LTg3MTUt M2MwYjkyNTRhNmY4LzEvelc4bnR0VlN4elFDOXZQZUNpQkIyRmk0M0J3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi80YTI3M2MtZjA1My00MWY4LTg3MTUtM2MwYjkyNTRhNmY4 LzEvQ0pfUEtyYm0yOEZqVHVXUl9CdDBwQjNqNmw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudTkMA0E AgACMAcDBQAqC33AMA0GCSqGSIb3DQEBCwUAA4IBAQCNboJIid6pu1KziT0NAWsu JPTBUOhfLyp5u8xgJq4BGVuuUgmD+2pLaIrxQ6Kxf8cWbgwSAF1pyDeypX2cRL9l kA86Q3JSGUQRAALyLWNQc1Vd9zZDftZyOeFVrShLFnfeGe50NWAWTi/cH2x3Eoxt ZWMMyaPtfDfjo9Y6J6dDk5Sbw6WzWrS8EqRv4xwd9Drom248O6IKd2+8wPX8CyAv GzaiEQebl6Yn0/m4y3e0P77Y0hqXx1bhJxzfr+oZczxROzdSCfL/xIO2GjhACEhj LRb7mVB1t3Rpd04pE+ismulUJbvXbRH59dWqqHnvtzZ64fDFayNcZgK0KX9MO8hJ -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:56 2026 by rpki-client