This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/zLtpRSkwBaEeDbTwaD6T5utFTwo.roa File: zLtpRSkwBaEeDbTwaD6T5utFTwo.roa (raw, json) Hash identifier: SBHcL2OtAzM2LvNd+W8Dn+LVXeCDUc5xiuOmwRuEFKo= Subject key identifier: CC:BB:69:45:29:30:05:A1:1E:0D:B4:F0:68:3E:93:E6:EB:45:4F:0A Certificate issuer: /CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4 Certificate serial: 019B7DCADC041A7B37C5D41556E255E4080D Authority key identifier: 6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/zLtpRSkwBaEeDbTwaD6T5utFTwo.roa Signing time: Fri 02 Jan 2026 08:20:05 +0000 ROA not before: Fri 02 Jan 2026 08:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212574 IP address blocks: 185.153.232.0/24 maxlen: 24 2a10:7240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:dc:04:1a:7b:37:c5:d4:15:56:e2:55:e4:08:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4 Validity Not Before: Jan 2 08:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ccbb6945293005a11e0db4f0683e93e6eb454f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:38:08:34:25:8e:3d:b6:a7:d8:47:fa:0c:a0: 13:d9:09:42:09:e9:d8:d6:b4:78:6d:2f:f4:78:df: 2f:66:6e:a9:63:ad:50:08:37:14:37:ed:8a:c2:72: 2d:cd:12:a4:13:87:10:0e:af:f4:fe:c0:96:81:80: b5:48:22:32:aa:88:22:cc:58:7f:89:51:96:ea:f6: c7:32:e8:6d:3a:0f:0d:79:2c:51:52:78:d3:0a:a1: 7f:b6:a0:6e:da:67:81:9c:8f:0a:35:9b:d8:ae:af: 9c:d9:43:69:7b:54:68:e4:40:16:8d:36:7c:80:12: d3:a6:b0:1e:74:e3:05:65:70:4b:a0:4d:25:9b:ca: ae:8a:46:89:f9:0d:51:3b:68:6b:48:0b:80:50:4c: 0a:85:af:a8:f4:f6:34:e9:a2:1b:86:e3:8d:8b:a6: b6:73:50:ea:3e:0b:80:eb:74:89:50:91:ed:cf:53: 55:73:03:90:ae:4d:a0:6f:f8:a2:fd:35:cf:27:f0: 07:3e:37:5e:74:ae:fe:fd:c5:7b:3a:2d:31:fd:14: 62:da:4e:8f:ff:3c:2d:c8:fe:6d:12:71:9a:e5:0c: 60:6e:55:43:f3:15:d5:02:08:b2:3b:ec:44:69:11: 32:e2:5a:98:73:82:1a:82:8f:f3:ea:59:a5:3f:c9: a6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BB:69:45:29:30:05:A1:1E:0D:B4:F0:68:3E:93:E6:EB:45:4F:0A X509v3 Authority Key Identifier: keyid:6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/zLtpRSkwBaEeDbTwaD6T5utFTwo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.153.232.0/24 IPv6: 2a10:7240::/32 Signature Algorithm: sha256WithRSAEncryption af:6a:2e:55:0a:bb:b6:35:ea:fa:9d:f0:d1:6d:0e:6c:c4:3a: de:8d:1b:d0:21:ab:f4:1a:fd:1a:ca:4a:87:c4:07:1a:28:8c: ae:f2:08:37:31:17:5e:e7:31:40:b3:b5:b5:d4:c5:4e:d4:34: 70:b6:02:d3:4a:d0:9f:d8:57:e9:9b:eb:6f:4a:ec:35:08:a7: 24:35:5b:cd:45:68:74:07:ca:4e:fe:d9:ae:41:20:84:08:e2: a7:a7:11:5b:f1:0d:0a:4a:6d:23:27:60:b7:dc:56:33:a3:eb: 7a:50:55:9e:d9:66:6e:9e:c7:f9:15:a4:e6:9e:63:a2:fc:d4: d5:c1:d0:d7:13:59:00:e8:a6:8d:a2:40:e0:ea:cd:85:0b:00: d7:e3:5d:f8:a2:81:c5:45:60:70:f7:10:16:d1:52:19:9a:a9: f7:32:15:9d:cf:d8:9d:20:a2:8e:c2:bc:12:37:0f:44:89:3a: 4e:c2:1b:e6:cb:fe:37:c0:2a:56:1c:46:b9:93:3a:1b:46:f0: 30:ef:67:ee:ab:3d:5c:63:af:5b:b8:61:34:13:60:66:ad:1b: c6:c2:9f:54:a3:75:19:b7:f3:4f:9a:2d:a2:9c:87:6e:b8:8f: e8:35:f0:22:20:5a:3c:88:94:a1:05:8c:6f:d3:71:e8:38:30: c7:7b:38:9a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9ytwEGns3xdQVVuJV5AgNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhYzcyYTczNDM5MmY2Y2Y3OTJiM2QwYzNlZDExODIwMjg2 ZjE5ZjQwHhcNMjYwMTAyMDgyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2JiNjk0NTI5MzAwNWExMWUwZGI0ZjA2ODNlOTNlNmViNDU0ZjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjgINCWOPban2Ef6DKAT2QlCCenY 1rR4bS/0eN8vZm6pY61QCDcUN+2KwnItzRKkE4cQDq/0/sCWgYC1SCIyqogizFh/ iVGW6vbHMuhtOg8NeSxRUnjTCqF/tqBu2meBnI8KNZvYrq+c2UNpe1Ro5EAWjTZ8 gBLTprAedOMFZXBLoE0lm8quikaJ+Q1RO2hrSAuAUEwKha+o9PY06aIbhuONi6a2 c1DqPguA63SJUJHtz1NVcwOQrk2gb/ii/TXPJ/AHPjdedK7+/cV7Oi0x/RRi2k6P /zwtyP5tEnGa5QxgblVD8xXVAgiyO+xEaREy4lqYc4Iago/z6lmlP8mmBwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMy7aUUpMAWhHg208Gg+k+brRU8KMB8GA1UdIwQY MBaAFGrHKnNDkvbPeSs9DD7RGCAobxn0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXNjcWMwT1M5czk1S3owTVB0RVlJQ2h2R2ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mY2Q1MTYtODhmNS00ZTQ4LTlhYjQt OTNkZjQ1MDAzZTdlLzEvekx0cFJTa3dCYUVlRGJUd2FENlQ1dXRGVHdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9mY2Q1MTYtODhmNS00ZTQ4LTlhYjQtOTNkZjQ1MDAzZTdl LzEvYXNjcWMwT1M5czk1S3owTVB0RVlJQ2h2R2ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuZnoMA0E AgACMAcDBQAqEHJAMA0GCSqGSIb3DQEBCwUAA4IBAQCvai5VCru2Ner6nfDRbQ5s xDrejRvQIav0Gv0aykqHxAcaKIyu8gg3MRde5zFAs7W11MVO1DRwtgLTStCf2Ffp m+tvSuw1CKckNVvNRWh0B8pO/tmuQSCECOKnpxFb8Q0KSm0jJ2C33FYzo+t6UFWe 2WZunsf5FaTmnmOi/NTVwdDXE1kA6KaNokDg6s2FCwDX4134ooHFRWBw9xAW0VIZ mqn3MhWdz9idIKKOwrwSNw9EiTpOwhvmy/43wCpWHEa5kzobRvAw72fuqz1cY69b uGE0E2BmrRvGwp9Uo3UZt/NPmi2inIduuI/oNfAiIFo8iJShBYxv03HoODDHezia -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:33 2026 by rpki-client