This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/ZLG2d-EvI3tDHtNjQT_sDlpWBXM.roa File: ZLG2d-EvI3tDHtNjQT_sDlpWBXM.roa (raw, json) Hash identifier: bTLO/he/cwtOoUf2Miq0EAEbluFDqTVodZfbg6upreQ= Subject key identifier: 64:B1:B6:77:E1:2F:23:7B:43:1E:D3:63:41:3F:EC:0E:5A:56:05:73 Certificate issuer: /CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7 Certificate serial: 019B7F8408DFE970784DA86DAE1E5EBFCC08 Authority key identifier: 92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/ZLG2d-EvI3tDHtNjQT_sDlpWBXM.roa Signing time: Fri 02 Jan 2026 16:21:58 +0000 ROA not before: Fri 02 Jan 2026 16:21:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211331 IP address blocks: 185.119.10.0/24 maxlen: 24 185.119.11.0/24 maxlen: 24 2a10:80c0::/48 maxlen: 48 2a10:80c0:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:08:df:e9:70:78:4d:a8:6d:ae:1e:5e:bf:cc:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7 Validity Not Before: Jan 2 16:21:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64b1b677e12f237b431ed363413fec0e5a560573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cd:7e:e7:cb:53:19:56:09:e8:72:dc:c9:54: c5:23:df:68:93:69:ab:c3:d4:f0:89:ff:bb:93:66: 82:f1:fd:85:19:76:f2:16:6d:37:79:34:76:65:a9: d1:86:7f:dd:23:31:5a:4f:6f:47:fb:a9:c2:50:92: f3:68:69:51:cd:c7:52:02:17:cf:05:09:b5:53:dd: 6a:75:68:0e:06:ed:e0:1c:1a:b4:f0:34:2b:ac:1c: 26:ff:4c:98:c7:72:27:13:23:b8:f2:3d:1e:bb:e9: 32:22:9f:4f:a6:d6:de:63:06:e4:ad:cb:2a:59:2e: fd:e3:79:48:ef:c0:b5:b1:4f:81:e4:2d:5f:d0:ff: 46:6a:91:13:6f:a9:08:c4:27:d2:31:d1:7c:4b:45: de:03:b2:da:aa:2b:f1:e3:13:97:c1:b8:fe:62:65: b2:b7:a1:50:50:e6:d2:f2:88:15:18:69:bd:3e:bc: ab:99:3e:10:45:b8:80:89:cd:2b:c6:7d:25:e2:5b: eb:25:3e:b6:e6:2a:83:ce:17:11:71:d7:df:93:b2: d2:f9:9c:9b:97:2b:ad:ab:ca:c0:2c:84:33:5f:2a: 28:cf:ae:60:da:32:57:f3:b2:53:b6:20:e4:c6:16: e2:6d:7a:cb:49:ef:38:e8:30:9a:78:d2:92:88:2d: 9b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B1:B6:77:E1:2F:23:7B:43:1E:D3:63:41:3F:EC:0E:5A:56:05:73 X509v3 Authority Key Identifier: keyid:92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/ZLG2d-EvI3tDHtNjQT_sDlpWBXM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.119.10.0/23 IPv6: 2a10:80c0::/48 2a10:80c0:1000::/48 Signature Algorithm: sha256WithRSAEncryption 0f:75:73:73:d3:da:7c:df:f3:b1:da:ec:97:89:8a:b9:5b:6c: ce:92:b0:7e:33:18:70:97:3f:05:0e:f0:44:84:b9:8f:28:cd: 89:11:e2:96:39:e1:f4:30:cd:2d:ef:e2:b9:55:ef:39:58:06: 62:fd:f5:8a:b8:c5:43:b2:28:a0:58:75:fc:ef:4e:97:3e:5d: 56:26:79:8c:72:85:38:c1:bd:b0:be:e1:18:9f:5e:d9:3a:2e: e1:54:89:36:b3:b3:16:91:21:ae:06:eb:59:93:7b:39:77:7a: 77:83:6b:54:a6:3e:46:25:d3:51:9b:5b:fd:92:3a:8c:68:1d: 61:1c:78:24:29:a7:df:be:56:e4:cb:f1:3e:bc:77:bc:43:b7: 51:ef:7c:d5:65:2a:55:bc:48:c3:4f:b0:c3:8e:3c:bb:22:62: 14:96:40:58:54:0c:c7:56:f4:55:30:8c:0c:c4:55:82:2d:6a: 11:ec:c2:9c:fd:37:f5:29:69:ee:c4:e9:88:c0:2b:89:27:45: 9e:1a:d6:96:90:9f:e0:ae:46:48:b4:8d:c9:55:b1:8b:52:38: 7a:c5:e4:a6:38:ef:27:95:80:36:0f:14:d0:ea:8d:54:db:8e: a8:8d:b2:f5:d7:5c:33:16:a9:b9:b8:b7:f3:ce:d9:46:e1:03: 37:99:76:8d -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt/hAjf6XB4Tahtrh5ev8wIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZmI4ZmExMGRmZjM0NzNlNjUzZGJmNjFjOWE4NjQzMjE4 MGE1YzcwHhcNMjYwMTAyMTYyMTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGIxYjY3N2UxMmYyMzdiNDMxZWQzNjM0MTNmZWMwZTVhNTYwNTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM1+58tTGVYJ6HLcyVTFI99ok2mr w9Twif+7k2aC8f2FGXbyFm03eTR2ZanRhn/dIzFaT29H+6nCUJLzaGlRzcdSAhfP BQm1U91qdWgOBu3gHBq08DQrrBwm/0yYx3InEyO48j0eu+kyIp9PptbeYwbkrcsq WS7943lI78C1sU+B5C1f0P9GapETb6kIxCfSMdF8S0XeA7Laqivx4xOXwbj+YmWy t6FQUObS8ogVGGm9PryrmT4QRbiAic0rxn0l4lvrJT625iqDzhcRcdffk7LS+Zyb lyutq8rALIQzXyooz65g2jJX87JTtiDkxhbibXrLSe846DCaeNKSiC2bPQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFGSxtnfhLyN7Qx7TY0E/7A5aVgVzMB8GA1UdIwQY MBaAFJL7j6EN/zRz5lPb9hyahkMhgKXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3Z1UG9RM19OSFBtVTl2MkhKcUdReUdBcGNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9jNjRkNTAtZmNkZC00YTlmLTkwNDct MjkzZjYxMjJhMTlkLzEvWkxHMmQtRXZJM3RESHROalFUX3NEbHBXQlhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9jNjRkNTAtZmNkZC00YTlmLTkwNDctMjkzZjYxMjJhMTlk LzEva3Z1UG9RM19OSFBtVTl2MkhKcUdReUdBcGNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQBuXcKMBgE AgACMBIDBwAqEIDAAAADBwAqEIDAEAAwDQYJKoZIhvcNAQELBQADggEBAA91c3PT 2nzf87Ha7JeJirlbbM6SsH4zGHCXPwUO8ESEuY8ozYkR4pY54fQwzS3v4rlV7zlY BmL99Yq4xUOyKKBYdfzvTpc+XVYmeYxyhTjBvbC+4RifXtk6LuFUiTazsxaRIa4G 61mTezl3eneDa1SmPkYl01GbW/2SOoxoHWEceCQpp9++VuTL8T68d7xDt1HvfNVl KlW8SMNPsMOOPLsiYhSWQFhUDMdW9FUwjAzEVYItahHswpz9N/Upae7E6YjAK4kn RZ4a1paQn+CuRki0jclVsYtSOHrF5KY47yeVgDYPFNDqjVTbjqiNsvXXXDMWqbm4 t/PO2UbhAzeZdo0= -----END CERTIFICATE-----Generated at Tue Jan 20 04:48:48 2026 by rpki-client