This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/zkgdKHScYcfkNf_hh7vlGDs0B88.roa File: zkgdKHScYcfkNf_hh7vlGDs0B88.roa (raw, json) Hash identifier: DtYW3iy119fpBsexhV56/OzVqBZUBd8eZdz8luW6zw4= Subject key identifier: CE:48:1D:28:74:9C:61:C7:E4:35:FF:E1:87:BB:E5:18:3B:34:07:CF Certificate issuer: /CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e Certificate serial: 019B7A5AFF5017A3B02B36F01711C89C5F70 Authority key identifier: D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/zkgdKHScYcfkNf_hh7vlGDs0B88.roa Signing time: Thu 01 Jan 2026 16:19:02 +0000 ROA not before: Thu 01 Jan 2026 16:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31898 IP address blocks: 185.195.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ff:50:17:a3:b0:2b:36:f0:17:11:c8:9c:5f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e Validity Not Before: Jan 1 16:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce481d28749c61c7e435ffe187bbe5183b3407cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d6:10:9d:3c:77:d6:0a:57:5d:19:2b:0b:15: 62:c5:ac:7e:b6:3c:27:45:b9:7e:d8:bb:0d:60:34: a2:75:08:e0:db:67:18:00:b3:ac:58:8d:d3:ad:57: 27:56:56:73:43:dc:56:20:df:0d:50:63:30:0e:cb: b8:56:9f:3c:b2:d7:a8:43:9e:20:cd:45:75:b1:c1: 12:ce:e8:45:6c:3b:0e:ed:79:c7:0b:2d:9f:0d:70: ee:00:ed:59:3a:2c:9d:cf:66:a0:c8:6f:b9:57:4d: a1:4b:1b:0f:3e:59:e9:b0:8c:13:69:1e:ad:7b:74: 94:27:59:6d:af:89:98:2f:b0:4c:a4:a5:20:fb:63: 45:1c:31:19:47:f9:e1:53:fa:91:20:01:32:0f:1c: e9:13:27:e5:14:61:c8:5e:b5:50:0a:fa:58:47:ed: bd:5b:7f:b5:15:01:8b:94:5a:26:f5:75:d2:4e:73: cd:72:14:11:c6:06:f8:4e:7f:9c:30:87:b9:7b:ac: c9:b3:73:17:16:3f:e8:0d:a5:34:8f:25:46:28:b0: c2:20:f9:c8:c8:d2:05:a8:c9:d7:e7:19:80:22:19: 54:5c:19:22:14:d3:a1:a8:76:40:fc:bc:fc:74:4b: 3f:5f:a2:1b:65:5d:f3:dc:25:46:b2:8d:4f:a0:a4: c0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:48:1D:28:74:9C:61:C7:E4:35:FF:E1:87:BB:E5:18:3B:34:07:CF X509v3 Authority Key Identifier: keyid:D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/zkgdKHScYcfkNf_hh7vlGDs0B88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.195.12.0/22 Signature Algorithm: sha256WithRSAEncryption 95:83:56:38:f3:99:fc:f0:7c:cb:ad:3e:29:4c:3c:e8:c7:32: 94:e5:41:35:b4:1b:42:d8:81:5b:76:56:7a:ee:e8:01:b0:c5: 2c:06:b7:be:54:f5:62:07:a7:3b:40:dc:01:cb:98:5b:21:fe: 45:85:66:19:53:6b:68:36:5f:0f:50:0d:0b:ec:98:a5:6b:e2: 2b:01:d8:09:d0:34:62:b4:6f:1a:d1:bd:3e:90:67:d1:e3:15: da:1d:97:50:48:2f:ee:04:24:d6:08:9b:8d:d1:c2:17:84:38: b8:03:d5:2a:fd:09:4f:59:13:b6:9b:73:cc:4e:c6:4c:fe:88: 8e:c2:29:24:0f:13:89:87:e0:34:1a:28:fe:38:2d:ff:cd:c3: 2a:56:c5:f8:dd:61:b8:47:e7:50:be:6c:9a:68:e3:5f:c2:23: 3d:59:1a:6a:da:f0:c1:3c:5e:34:63:8a:cc:a1:7f:a4:59:17: e3:c5:5c:63:c6:dd:a8:9c:62:f0:60:63:21:80:57:b8:6f:a5: 59:7a:45:cf:31:0d:be:f2:05:90:b3:d1:b2:57:a1:b1:2a:28: 17:96:e6:f5:37:0f:ce:8c:2d:ad:3d:63:98:9d:a0:84:a5:b5: 1a:a9:94:7e:4f:d2:2d:23:a7:df:41:06:ef:ad:43:ff:92:bb: 89:da:b0:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wv9QF6OwKzbwFxHInF9wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxN2FlOWRjOWY0M2EyNjllYjBhY2NmMzQ4OGU4NjFmNGZm MGU4OWUwHhcNMjYwMTAxMTYxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTQ4MWQyODc0OWM2MWM3ZTQzNWZmZTE4N2JiZTUxODNiMzQwN2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNYQnTx31gpXXRkrCxVixax+tjwn Rbl+2LsNYDSidQjg22cYALOsWI3TrVcnVlZzQ9xWIN8NUGMwDsu4Vp88steoQ54g zUV1scESzuhFbDsO7XnHCy2fDXDuAO1ZOiydz2agyG+5V02hSxsPPlnpsIwTaR6t e3SUJ1ltr4mYL7BMpKUg+2NFHDEZR/nhU/qRIAEyDxzpEyflFGHIXrVQCvpYR+29 W3+1FQGLlFom9XXSTnPNchQRxgb4Tn+cMIe5e6zJs3MXFj/oDaU0jyVGKLDCIPnI yNIFqMnX5xmAIhlUXBkiFNOhqHZA/Lz8dEs/X6IbZV3z3CVGso1PoKTA5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM5IHSh0nGHH5DX/4Ye75Rg7NAfPMB8GA1UdIwQY MBaAFNF66dyfQ6Jp6wrM80iOhh9P8OieMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFhycDNKOURvbW5yQ3N6elNJNkdIMF93Nko0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8zYzhkY2UtODM1Ni00NDIyLWJlODUt ZmRhNGU4YTViNDZlLzEvemtnZEtIU2NZY2ZrTmZfaGg3dmxHRHMwQjg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8zYzhkY2UtODM1Ni00NDIyLWJlODUtZmRhNGU4YTViNDZl LzEvMFhycDNKOURvbW5yQ3N6elNJNkdIMF93Nko0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucMMMA0G CSqGSIb3DQEBCwUAA4IBAQCVg1Y485n88HzLrT4pTDzoxzKU5UE1tBtC2IFbdlZ6 7ugBsMUsBre+VPViB6c7QNwBy5hbIf5FhWYZU2toNl8PUA0L7Jila+IrAdgJ0DRi tG8a0b0+kGfR4xXaHZdQSC/uBCTWCJuN0cIXhDi4A9Uq/QlPWRO2m3PMTsZM/oiO wikkDxOJh+A0Gij+OC3/zcMqVsX43WG4R+dQvmyaaONfwiM9WRpq2vDBPF40Y4rM oX+kWRfjxVxjxt2onGLwYGMhgFe4b6VZekXPMQ2+8gWQs9GyV6GxKigXlub1Nw/O jC2tPWOYnaCEpbUaqZR+T9ItI6ffQQbvrUP/kruJ2rD4 -----END CERTIFICATE-----Generated at Sat Jan 10 20:49:52 2026 by rpki-client