This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/zHx4SptI2tUU_j8Mkd8Tk06BII0.roa File: zHx4SptI2tUU_j8Mkd8Tk06BII0.roa (raw, json) Hash identifier: tWNlo8QgxYZ/7AKQgcvdlNsW8RQC+Ct2O3NbmFTyQSs= Subject key identifier: CC:7C:78:4A:9B:48:DA:D5:14:FE:3F:0C:91:DF:13:93:4E:81:20:8D Certificate issuer: /CN=a6a88b0887c32de5966f81ff915d6b5ff31532dd Certificate serial: 019B7F83B453244A376478F0A56FB5F83CDE Authority key identifier: A6:A8:8B:08:87:C3:2D:E5:96:6F:81:FF:91:5D:6B:5F:F3:15:32:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqiLCIfDLeWWb4H_kV1rX_MVMt0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/zHx4SptI2tUU_j8Mkd8Tk06BII0.roa Signing time: Fri 02 Jan 2026 16:21:36 +0000 ROA not before: Fri 02 Jan 2026 16:21:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206730 IP address blocks: 185.166.48.0/22 maxlen: 22 2a0a:8a00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.crl rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft rsync://rpki.ripe.net/repository/DEFAULT/pqiLCIfDLeWWb4H_kV1rX_MVMt0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:b4:53:24:4a:37:64:78:f0:a5:6f:b5:f8:3c:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6a88b0887c32de5966f81ff915d6b5ff31532dd Validity Not Before: Jan 2 16:21:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc7c784a9b48dad514fe3f0c91df13934e81208d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ec:2c:8a:ac:57:0a:2c:c5:0f:32:f6:9c:be: ef:08:c9:2f:96:e0:46:02:74:6c:26:a0:f9:d8:8e: a1:b9:b5:12:13:53:17:46:e8:82:88:6b:2b:13:13: f1:b4:7a:44:38:41:62:eb:1c:47:c9:b4:b1:92:3e: c6:2a:b0:2a:8e:09:f9:64:e4:42:a2:f3:ca:ee:16: 85:ff:1b:64:59:a3:fb:fb:62:79:8b:fd:f1:03:da: db:46:e4:94:03:7a:71:6e:c3:f5:c7:f0:c5:40:8e: 15:f6:7b:83:21:45:8a:1b:26:9f:28:9d:16:cf:fd: 32:1e:c3:bd:9f:f0:65:5b:d4:dc:7a:3e:56:41:a0: 40:c3:18:0a:ba:6f:a6:2a:a0:0d:30:89:de:82:10: 96:bc:21:12:08:19:a1:26:00:41:ea:2e:95:a8:76: df:ca:6b:d6:13:08:f6:a9:c1:cf:92:04:d7:c5:1f: ee:14:e2:7f:c7:ec:84:e4:5c:d9:36:35:a6:21:1c: 2b:a1:a8:27:3e:4a:87:3a:0c:aa:5d:aa:f1:d8:9c: 6f:9f:23:66:39:1e:33:9a:71:be:4c:3f:6a:d0:12: f3:e3:11:23:11:96:6c:37:38:7d:9c:d6:ca:31:62: a9:f4:3a:7a:46:0e:2d:0f:c8:e3:52:4a:d8:c0:5c: e6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:7C:78:4A:9B:48:DA:D5:14:FE:3F:0C:91:DF:13:93:4E:81:20:8D X509v3 Authority Key Identifier: keyid:A6:A8:8B:08:87:C3:2D:E5:96:6F:81:FF:91:5D:6B:5F:F3:15:32:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqiLCIfDLeWWb4H_kV1rX_MVMt0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/zHx4SptI2tUU_j8Mkd8Tk06BII0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.166.48.0/22 IPv6: 2a0a:8a00::/32 Signature Algorithm: sha256WithRSAEncryption 0b:09:9c:08:d6:46:90:fa:6a:53:ee:bc:0f:9a:4d:4e:66:8f: f9:63:97:09:ac:f5:7f:c8:17:84:b9:cd:14:78:68:2c:eb:48: a0:2e:73:b4:81:56:48:31:db:3d:55:a4:07:85:fc:fe:5b:e3: f6:c7:34:88:e1:d0:55:35:ac:ce:48:14:57:61:97:64:e2:be: 81:3f:5e:ca:65:68:82:10:95:e8:c7:d2:af:47:e7:12:78:13: b8:8b:4a:48:1b:db:4e:a6:c9:15:7f:77:05:ce:3a:48:a9:2d: 68:3b:79:ff:19:2d:5b:17:01:7f:8d:96:19:e9:93:1e:f0:58: 49:00:9b:5c:2d:a6:b4:c3:e6:d5:f8:82:55:8d:40:f8:64:e1: 9f:e4:b3:04:37:66:55:1c:b1:97:0b:6b:a8:63:5b:d7:34:74: fc:17:f1:c6:f1:79:00:08:0c:12:39:04:e7:dd:06:f0:d4:ac: b3:17:07:85:5d:3b:ce:3a:d9:88:5b:c8:45:a0:62:a8:a5:46: 79:0e:7b:fd:8e:69:c1:78:5b:0c:25:a4:01:60:13:b9:fa:cd: aa:0d:99:c5:91:ba:d9:33:f9:01:f4:66:e0:a1:67:b0:01:84: 5e:b1:31:d4:a0:2a:7f:ff:4c:67:57:ad:df:73:11:a8:e4:71: 3f:6f:15:06 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/g7RTJEo3ZHjwpW+1+DzeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YTg4YjA4ODdjMzJkZTU5NjZmODFmZjkxNWQ2YjVmZjMx NTMyZGQwHhcNMjYwMTAyMTYyMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzdjNzg0YTliNDhkYWQ1MTRmZTNmMGM5MWRmMTM5MzRlODEyMDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+wsiqxXCizFDzL2nL7vCMkvluBG AnRsJqD52I6hubUSE1MXRuiCiGsrExPxtHpEOEFi6xxHybSxkj7GKrAqjgn5ZORC ovPK7haF/xtkWaP7+2J5i/3xA9rbRuSUA3pxbsP1x/DFQI4V9nuDIUWKGyafKJ0W z/0yHsO9n/BlW9Tcej5WQaBAwxgKum+mKqANMIneghCWvCESCBmhJgBB6i6VqHbf ymvWEwj2qcHPkgTXxR/uFOJ/x+yE5FzZNjWmIRwroagnPkqHOgyqXarx2JxvnyNm OR4zmnG+TD9q0BLz4xEjEZZsNzh9nNbKMWKp9Dp6Rg4tD8jjUkrYwFzmWwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMx8eEqbSNrVFP4/DJHfE5NOgSCNMB8GA1UdIwQY MBaAFKaoiwiHwy3llm+B/5Fda1/zFTLdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHFpTENJZkRMZVdXYjRIX2tWMXJYX01WTXQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85OGM2MDktMDdmYS00ZTJiLWI0NzYt NmEyOWJjOWY4YTc4LzEvekh4NFNwdEkydFVVX2o4TWtkOFRrMDZCSUkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi85OGM2MDktMDdmYS00ZTJiLWI0NzYtNmEyOWJjOWY4YTc4 LzEvcHFpTENJZkRMZVdXYjRIX2tWMXJYX01WTXQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaYwMA0E AgACMAcDBQAqCooAMA0GCSqGSIb3DQEBCwUAA4IBAQALCZwI1kaQ+mpT7rwPmk1O Zo/5Y5cJrPV/yBeEuc0UeGgs60igLnO0gVZIMds9VaQHhfz+W+P2xzSI4dBVNazO SBRXYZdk4r6BP17KZWiCEJXox9KvR+cSeBO4i0pIG9tOpskVf3cFzjpIqS1oO3n/ GS1bFwF/jZYZ6ZMe8FhJAJtcLaa0w+bV+IJVjUD4ZOGf5LMEN2ZVHLGXC2uoY1vX NHT8F/HG8XkACAwSOQTn3Qbw1KyzFweFXTvOOtmIW8hFoGKopUZ5Dnv9jmnBeFsM JaQBYBO5+s2qDZnFkbrZM/kB9GbgoWewAYResTHUoCp//0xnV63fcxGo5HE/bxUG -----END CERTIFICATE-----Generated at Tue Feb 10 00:01:59 2026 by rpki-client