This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/ZDpRY_KWNL6AZ9OnIDN7BtGPipc.roa File: ZDpRY_KWNL6AZ9OnIDN7BtGPipc.roa (raw, json) Hash identifier: 1DrZ+2ptHaqoBHGtimSHqvMKa2JLNNgAJEEeUlCf64I= Subject key identifier: 64:3A:51:63:F2:96:34:BE:80:67:D3:A7:20:33:7B:06:D1:8F:8A:97 Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85 Certificate serial: 019B7DCA6F1BB68471DC5F2E0C9136B0F172 Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/ZDpRY_KWNL6AZ9OnIDN7BtGPipc.roa Signing time: Fri 02 Jan 2026 08:19:37 +0000 ROA not before: Fri 02 Jan 2026 08:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133480 IP address blocks: 185.54.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:6f:1b:b6:84:71:dc:5f:2e:0c:91:36:b0:f1:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85 Validity Not Before: Jan 2 08:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=643a5163f29634be8067d3a720337b06d18f8a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:01:22:eb:f8:fc:44:79:aa:cc:d0:b2:67:12: 73:a2:94:db:d5:c8:61:8a:ba:06:b2:3d:95:b6:a6: 07:ca:da:cf:b7:58:2b:8f:f3:ef:88:10:85:16:c0: a9:6a:c5:33:76:66:4d:2c:08:90:4c:29:65:50:44: 50:01:2f:d3:78:17:b6:00:76:96:74:55:49:df:e1: bf:bc:0e:6f:78:17:9a:38:db:0e:ac:0d:77:3c:b2: 20:00:93:c3:3d:3e:24:f6:09:da:75:d9:e5:52:6e: 3f:84:9c:db:4e:69:f2:2d:da:2f:51:82:03:dc:f9: 68:0c:03:80:04:32:e1:37:2c:1f:46:e3:cd:69:18: 3f:f5:d0:6d:20:6f:83:cb:63:87:09:c2:75:a8:bb: ca:81:ea:ec:5e:d6:a7:b4:a1:e0:f4:81:6f:5c:54: c2:34:4a:33:40:7d:5f:69:a8:39:26:5f:f0:2f:58: f1:dc:b6:e0:89:cc:8d:82:52:45:e6:fe:2c:6f:65: 74:6a:38:05:cf:54:44:05:c3:e0:94:81:2d:92:e8: 2f:e8:56:5c:eb:66:5c:33:f7:ef:11:d4:c3:d1:fd: ac:1e:df:cc:bc:b0:22:05:69:7a:52:34:29:36:d6: 72:3c:4c:20:5e:79:37:2a:6c:53:24:ed:1c:4d:ca: d8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3A:51:63:F2:96:34:BE:80:67:D3:A7:20:33:7B:06:D1:8F:8A:97 X509v3 Authority Key Identifier: keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/ZDpRY_KWNL6AZ9OnIDN7BtGPipc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.228.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:09:01:d8:03:b6:da:d4:20:f2:2c:1f:0a:44:8b:9e:50:09: d0:b2:bb:43:d5:87:66:0b:e7:a7:5c:e9:47:54:f7:a2:23:83: 63:e4:9c:e9:b4:53:07:a0:88:05:40:5a:e8:a2:ef:2d:f4:9b: 83:87:29:6e:cd:fe:1b:38:e6:55:69:d4:df:da:ba:d1:fd:d4: 82:a3:cf:52:32:3d:cd:8b:1a:8c:9d:be:23:21:2d:f5:60:ec: 6e:e1:a6:1c:d5:84:d4:ed:8e:12:5e:0f:d6:08:5e:8c:ae:da: 5a:48:9e:1a:a8:aa:65:8d:99:72:6f:22:ec:bf:42:04:b2:99: cb:99:27:60:5a:cc:49:67:ae:e2:83:9b:ab:1e:be:4c:1a:35: ee:79:ac:87:92:09:7e:ba:f2:cb:13:3e:d3:35:c9:a9:33:9f: a7:17:31:23:f0:c2:ab:8e:d1:bb:37:46:6b:89:f5:8f:36:d7: 77:61:fc:35:42:22:25:e5:80:ca:a4:d5:ed:d6:23:c5:06:2b: 27:c8:d0:c9:03:37:d5:e9:9d:9a:9e:ae:10:a8:03:6d:2f:ec: 67:ed:5b:09:9a:d3:f8:0a:c7:9f:52:76:c4:29:ba:7d:db:bb: e7:2c:e6:66:b8:38:f9:a7:08:92:e7:ad:9d:ac:99:5d:7f:55: 97:92:3c:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ym8btoRx3F8uDJE2sPFyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMGQ5ZDZiNjk3Y2ExYzg2NTcwYzI1Njg2MmU2ODU4YjQ3 OTljODUwHhcNMjYwMTAyMDgxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDNhNTE2M2YyOTYzNGJlODA2N2QzYTcyMDMzN2IwNmQxOGY4YTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugEi6/j8RHmqzNCyZxJzopTb1chh iroGsj2VtqYHytrPt1grj/PviBCFFsCpasUzdmZNLAiQTCllUERQAS/TeBe2AHaW dFVJ3+G/vA5veBeaONsOrA13PLIgAJPDPT4k9gnaddnlUm4/hJzbTmnyLdovUYID 3PloDAOABDLhNywfRuPNaRg/9dBtIG+Dy2OHCcJ1qLvKgersXtantKHg9IFvXFTC NEozQH1faag5Jl/wL1jx3LbgicyNglJF5v4sb2V0ajgFz1REBcPglIEtkugv6FZc 62ZcM/fvEdTD0f2sHt/MvLAiBWl6UjQpNtZyPEwgXnk3KmxTJO0cTcrYEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGQ6UWPyljS+gGfTpyAzewbRj4qXMB8GA1UdIwQY MBaAFN4NnWtpfKHIZXDCVoYuaFi0eZyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2cyZGEybDhvY2hsY01KV2hpNW9XTFI1bklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy82OGRjM2MtZGYyZS00NDYxLWI3YTYt MDFjYmZjMGU5NGU3LzEvWkRwUllfS1dOTDZBWjlPbklETjdCdEdQaXBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy82OGRjM2MtZGYyZS00NDYxLWI3YTYtMDFjYmZjMGU5NGU3 LzEvM2cyZGEybDhvY2hsY01KV2hpNW9XTFI1bklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTbkMA0G CSqGSIb3DQEBCwUAA4IBAQAqCQHYA7ba1CDyLB8KRIueUAnQsrtD1YdmC+enXOlH VPeiI4Nj5JzptFMHoIgFQFroou8t9JuDhyluzf4bOOZVadTf2rrR/dSCo89SMj3N ixqMnb4jIS31YOxu4aYc1YTU7Y4SXg/WCF6MrtpaSJ4aqKpljZlybyLsv0IEspnL mSdgWsxJZ67ig5urHr5MGjXueayHkgl+uvLLEz7TNcmpM5+nFzEj8MKrjtG7N0Zr ifWPNtd3Yfw1QiIl5YDKpNXt1iPFBisnyNDJAzfV6Z2anq4QqANtL+xn7VsJmtP4 CsefUnbEKbp927vnLOZmuDj5pwiS562drJldf1WXkjz3 -----END CERTIFICATE-----Generated at Fri Jan 9 06:24:38 2026 by rpki-client