This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/zfvsegXog0j8iHhgS6fpZB-7wA0.roa File: zfvsegXog0j8iHhgS6fpZB-7wA0.roa (raw, json) Hash identifier: bFu3gDNhMpBoThiANf0cCs15MmxVpxeF1StwYMxxHlM= Subject key identifier: CD:FB:EC:7A:05:E8:83:48:FC:88:78:60:4B:A7:E9:64:1F:BB:C0:0D Certificate issuer: /CN=7f56f28948c832f2d434bb44d5de0ea122601b05 Certificate serial: 019B7D5D1B935A96CAD99804A68B84C9C1E6 Authority key identifier: 7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/zfvsegXog0j8iHhgS6fpZB-7wA0.roa Signing time: Fri 02 Jan 2026 06:20:12 +0000 ROA not before: Fri 02 Jan 2026 06:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.40.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 09:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:1b:93:5a:96:ca:d9:98:04:a6:8b:84:c9:c1:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f56f28948c832f2d434bb44d5de0ea122601b05 Validity Not Before: Jan 2 06:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cdfbec7a05e88348fc8878604ba7e9641fbbc00d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6c:98:f2:84:c5:81:60:0d:8c:e1:dd:35:a0: 0f:18:bc:49:b7:be:d9:a0:95:bd:0d:57:86:86:b4: 1d:05:67:79:49:94:01:c1:19:40:c6:c3:f0:58:c8: db:ce:62:c8:f0:a4:27:05:13:56:29:05:18:f7:f7: 6e:e8:17:8a:52:ec:26:d1:c9:5d:67:05:ca:05:c5: ab:9a:5e:8f:a3:e1:55:4b:67:17:1d:e7:5d:07:22: dd:56:f2:3f:1b:54:c1:27:b5:f7:ba:83:37:a3:49: d0:25:e2:13:a3:a5:9c:f7:bf:60:b6:24:7d:b0:b5: 7e:a6:56:db:6e:a2:48:64:34:b7:82:2e:a1:bd:db: b9:c3:f9:22:55:bc:bb:b6:2e:ec:c0:4a:77:5a:fa: ad:0a:23:8a:77:9d:c5:72:a6:b1:d7:9e:7e:68:d5: b7:1b:3d:d6:85:34:9e:97:55:cf:6f:2c:5d:c2:9b: db:a5:c7:11:fc:f4:05:54:16:18:fe:59:6b:56:67: 82:44:30:b6:e5:54:4e:d0:25:6e:19:8e:b4:5c:2d: 4b:d7:85:32:6c:b1:40:68:aa:6f:76:97:9e:ef:65: f4:57:76:ab:45:c7:77:ee:fc:f3:e6:65:5c:4c:ee: 73:1b:f3:d6:d6:c6:5d:44:7e:8e:a1:cf:8a:87:5f: 93:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:FB:EC:7A:05:E8:83:48:FC:88:78:60:4B:A7:E9:64:1F:BB:C0:0D X509v3 Authority Key Identifier: keyid:7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/zfvsegXog0j8iHhgS6fpZB-7wA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.40.110.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:76:07:bf:34:75:5c:f1:bd:1f:66:cc:1a:aa:7c:56:65:3d: c4:e1:cd:d2:23:56:a1:82:6f:ef:ae:2e:ae:ae:1b:72:3c:ea: 8b:96:2e:56:15:f0:c5:bb:bb:99:30:3c:99:fd:9a:d8:40:50: 5d:4d:67:68:eb:79:57:29:fa:95:a0:8d:9d:1f:e5:41:4b:d0: 45:49:27:2c:e8:2a:75:54:72:96:51:5a:a7:4d:6f:68:40:9f: 42:d5:5f:9d:93:c9:e4:99:46:25:9e:06:f4:99:c6:f6:db:a0: 68:38:6d:07:92:53:1c:ee:0b:7e:71:53:69:8e:ff:91:c6:7c: a5:2b:b9:95:b1:7b:b7:f4:a0:37:c1:21:be:1a:b5:ae:e2:c0: 07:d5:df:f9:e2:68:4d:cf:d7:c4:40:e1:3a:fb:2b:0b:b3:ec: 3f:7d:17:44:79:7f:3c:be:ad:a9:83:39:cd:c2:fc:2a:d7:09: 54:a6:6a:2a:25:de:ff:83:08:50:21:1e:18:a7:82:3e:28:1c: a8:7a:87:8c:53:d4:71:56:0c:fb:df:8e:cf:99:c6:df:8d:0a: 51:b9:8f:b2:65:45:87:86:9b:e9:ad:88:ab:53:7e:66:d9:fe: 65:80:b0:37:53:0a:7c:21:a3:43:cb:55:39:dc:ca:a6:02:db: e7:da:4a:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XRuTWpbK2ZgEpouEycHmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNTZmMjg5NDhjODMyZjJkNDM0YmI0NGQ1ZGUwZWExMjI2 MDFiMDUwHhcNMjYwMTAyMDYyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGZiZWM3YTA1ZTg4MzQ4ZmM4ODc4NjA0YmE3ZTk2NDFmYmJjMDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGyY8oTFgWANjOHdNaAPGLxJt77Z oJW9DVeGhrQdBWd5SZQBwRlAxsPwWMjbzmLI8KQnBRNWKQUY9/du6BeKUuwm0cld ZwXKBcWrml6Po+FVS2cXHeddByLdVvI/G1TBJ7X3uoM3o0nQJeITo6Wc979gtiR9 sLV+plbbbqJIZDS3gi6hvdu5w/kiVby7ti7swEp3WvqtCiOKd53Fcqax155+aNW3 Gz3WhTSel1XPbyxdwpvbpccR/PQFVBYY/llrVmeCRDC25VRO0CVuGY60XC1L14Uy bLFAaKpvdpee72X0V3arRcd37vzz5mVcTO5zG/PW1sZdRH6Ooc+Kh1+T2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM377HoF6INI/Ih4YEun6WQfu8ANMB8GA1UdIwQY MBaAFH9W8olIyDLy1DS7RNXeDqEiYBsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjFieWlVaklNdkxVTkx0RTFkNE9vU0pnR3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yMWZiY2EtODBlMC00YjhjLTg2MjIt NGU4NmFkNjRmNzc0LzEvemZ2c2VnWG9nMGo4aUhoZ1M2ZnBaQi03d0EwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yMWZiY2EtODBlMC00YjhjLTg2MjItNGU4NmFkNjRmNzc0 LzEvZjFieWlVaklNdkxVTkx0RTFkNE9vU0pnR3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuShuMA0G CSqGSIb3DQEBCwUAA4IBAQBvdge/NHVc8b0fZswaqnxWZT3E4c3SI1ahgm/vri6u rhtyPOqLli5WFfDFu7uZMDyZ/ZrYQFBdTWdo63lXKfqVoI2dH+VBS9BFSScs6Cp1 VHKWUVqnTW9oQJ9C1V+dk8nkmUYlngb0mcb226BoOG0HklMc7gt+cVNpjv+Rxnyl K7mVsXu39KA3wSG+GrWu4sAH1d/54mhNz9fEQOE6+ysLs+w/fRdEeX88vq2pgznN wvwq1wlUpmoqJd7/gwhQIR4Yp4I+KByoeoeMU9RxVgz7347PmcbfjQpRuY+yZUWH hpvprYirU35m2f5lgLA3Uwp8IaNDy1U53MqmAtvn2kpk -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:28 2026 by rpki-client