This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/zvEFlkT2M3mxdWqxNCK3NYC9yq0.roa File: zvEFlkT2M3mxdWqxNCK3NYC9yq0.roa (raw, json) Hash identifier: 76Wd5ccMPcmdx13UbO6HkhI0IhT17jbY/G+vma64Rgg= Subject key identifier: CE:F1:05:96:44:F6:33:79:B1:75:6A:B1:34:22:B7:35:80:BD:CA:AD Certificate issuer: /CN=22f35c611c29234bf4b40b35990ddfa293a537f9 Certificate serial: 019B76EABD27337D59D785A4144812583598 Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/zvEFlkT2M3mxdWqxNCK3NYC9yq0.roa Signing time: Thu 01 Jan 2026 00:17:33 +0000 ROA not before: Thu 01 Jan 2026 00:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44217 IP address blocks: 185.181.110.0/24 maxlen: 24 185.181.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:bd:27:33:7d:59:d7:85:a4:14:48:12:58:35:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9 Validity Not Before: Jan 1 00:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cef1059644f63379b1756ab13422b73580bdcaad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fb:41:cf:8e:45:41:1b:a7:fd:9f:02:bd:7a: d3:c2:26:dc:6e:78:d8:c4:4d:33:02:0c:ba:b1:f6: dc:d0:70:d8:5d:cf:84:d7:19:ff:cb:23:c2:d1:a8: e9:57:48:53:5a:2b:6c:40:50:34:be:b9:e3:de:ec: 1b:65:33:e5:d5:a7:3c:cf:04:d7:04:64:00:92:00: 71:a7:2c:e0:2a:c1:3c:c9:d1:55:e0:5e:c2:55:40: 2c:38:50:cd:22:d8:44:b9:a4:fe:9c:55:c7:1e:11: cb:90:b5:2d:0b:58:14:b3:ab:f6:39:ac:5c:e6:36: f9:f1:3a:47:7e:04:9c:46:e2:8f:11:28:85:7f:e4: fc:99:05:78:74:84:89:f4:fb:74:ff:5b:7a:26:43: 03:16:ce:53:4a:5d:84:19:6f:6c:9f:ad:eb:a9:bf: e8:e7:3b:92:e9:7e:4f:8a:dd:a6:5a:23:5a:b2:57: 29:32:ac:f1:fd:90:41:65:d0:4a:4d:9e:15:2d:b2: 23:ae:03:7f:ed:14:0e:d3:f5:92:e1:0b:41:01:9f: 56:fb:4b:de:d4:43:0b:41:b6:c6:34:0c:d0:33:69: 49:ad:90:fc:20:4d:b0:b0:44:85:77:c8:ca:4e:2c: cb:ec:f6:d5:a5:08:29:49:27:50:61:63:79:bc:3a: 37:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F1:05:96:44:F6:33:79:B1:75:6A:B1:34:22:B7:35:80:BD:CA:AD X509v3 Authority Key Identifier: keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/zvEFlkT2M3mxdWqxNCK3NYC9yq0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.181.110.0/23 Signature Algorithm: sha256WithRSAEncryption 85:2c:bf:3b:7e:de:65:29:64:2c:77:99:d2:c6:9e:3d:ae:3f: 5a:59:c7:ee:2e:ae:da:5d:df:69:48:8e:78:c4:a5:eb:cf:a5: 5d:e7:cb:b2:80:bd:5e:ff:55:ef:cd:53:8d:f1:b3:f4:a8:3d: e6:73:dc:58:9b:4e:c7:ea:59:81:8e:31:86:38:b5:c6:88:e3: 75:ea:47:c1:dc:46:78:ee:ff:94:4a:bc:e6:db:00:07:8d:42: de:69:b2:da:9c:1c:8c:1f:f7:f1:58:9f:94:12:74:7f:2c:e9: 7c:8f:66:38:00:b2:19:dd:db:7f:73:d0:c2:83:0e:5f:76:a5: 22:4b:b9:f0:0c:5b:1b:20:92:e6:89:a2:54:64:84:67:4e:5e: 51:1b:49:f7:48:38:ce:77:56:a1:32:d7:ae:e4:31:f8:1b:20: d6:fd:1f:3e:bf:da:79:8c:57:14:b3:ec:9d:92:72:fe:78:30: 44:62:b5:c3:4f:39:56:eb:38:53:aa:7f:eb:f7:7a:82:e8:a3: 38:83:8b:3a:7f:58:dc:15:6c:71:e5:25:af:53:85:90:f5:ef: c9:b5:7c:02:5b:03:eb:f4:6e:a3:f6:6d:31:5e:e3:9a:df:e2: 5b:50:94:a3:8b:c8:31:e7:86:80:58:73:3d:f9:8b:c4:aa:ce: 34:d5:85:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26r0nM31Z14WkFEgSWDWYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM1YzYxMWMyOTIzNGJmNGI0MGIzNTk5MGRkZmEyOTNh NTM3ZjkwHhcNMjYwMTAxMDAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWYxMDU5NjQ0ZjYzMzc5YjE3NTZhYjEzNDIyYjczNTgwYmRjYWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/tBz45FQRun/Z8CvXrTwibcbnjY xE0zAgy6sfbc0HDYXc+E1xn/yyPC0ajpV0hTWitsQFA0vrnj3uwbZTPl1ac8zwTX BGQAkgBxpyzgKsE8ydFV4F7CVUAsOFDNIthEuaT+nFXHHhHLkLUtC1gUs6v2Oaxc 5jb58TpHfgScRuKPESiFf+T8mQV4dISJ9Pt0/1t6JkMDFs5TSl2EGW9sn63rqb/o 5zuS6X5Pit2mWiNaslcpMqzx/ZBBZdBKTZ4VLbIjrgN/7RQO0/WS4QtBAZ9W+0ve 1EMLQbbGNAzQM2lJrZD8IE2wsESFd8jKTizL7PbVpQgpSSdQYWN5vDo3wwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM7xBZZE9jN5sXVqsTQitzWAvcqtMB8GA1UdIwQY MBaAFCLzXGEcKSNL9LQLNZkN36KTpTf5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mOGNkYTQtYzgxOC00ZGMwLWI2MDUt MTYzMjQ3ZWIwZTA3LzEvenZFRmxrVDJNM214ZFdxeE5DSzNOWUM5eXEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mOGNkYTQtYzgxOC00ZGMwLWI2MDUtMTYzMjQ3ZWIwZTA3 LzEvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBubVuMA0G CSqGSIb3DQEBCwUAA4IBAQCFLL87ft5lKWQsd5nSxp49rj9aWcfuLq7aXd9pSI54 xKXrz6Vd58uygL1e/1XvzVON8bP0qD3mc9xYm07H6lmBjjGGOLXGiON16kfB3EZ4 7v+USrzm2wAHjULeabLanByMH/fxWJ+UEnR/LOl8j2Y4ALIZ3dt/c9DCgw5fdqUi S7nwDFsbIJLmiaJUZIRnTl5RG0n3SDjOd1ahMteu5DH4GyDW/R8+v9p5jFcUs+yd knL+eDBEYrXDTzlW6zhTqn/r93qC6KM4g4s6f1jcFWxx5SWvU4WQ9e/JtXwCWwPr 9G6j9m0xXuOa3+JbUJSji8gx54aAWHM9+YvEqs401YW6 -----END CERTIFICATE-----Generated at Tue Jan 20 07:34:41 2026 by rpki-client