This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/zrtaoEiavdgjJ45IAZF5NnPo3Rs.roa File: zrtaoEiavdgjJ45IAZF5NnPo3Rs.roa (raw, json) Hash identifier: z2iZziOE5JN+RJazqLZp00E5SjB0TdkmZt0o09ieR34= Subject key identifier: CE:BB:5A:A0:48:9A:BD:D8:23:27:8E:48:01:91:79:36:73:E8:DD:1B Certificate issuer: /CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05 Certificate serial: 019B7EA6575A2C5D1E4AA1E2DD1C3CE2F02C Authority key identifier: 09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/zrtaoEiavdgjJ45IAZF5NnPo3Rs.roa Signing time: Fri 02 Jan 2026 12:19:49 +0000 ROA not before: Fri 02 Jan 2026 12:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31175 IP address blocks: 185.117.204.0/22 maxlen: 24 185.117.204.0/24 maxlen: 24 185.117.205.0/24 maxlen: 24 185.117.206.0/24 maxlen: 24 185.117.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:57:5a:2c:5d:1e:4a:a1:e2:dd:1c:3c:e2:f0:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05 Validity Not Before: Jan 2 12:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cebb5aa0489abdd823278e480191793673e8dd1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2a:66:9a:e4:2d:fc:8d:4f:0c:13:ad:e4:fd: 90:34:2f:78:09:49:46:f7:0c:81:0c:d4:06:79:44: b2:3f:86:73:fe:2b:7e:b9:c1:52:74:09:06:b7:93: c7:ed:fb:8f:be:f1:db:29:50:40:93:18:c5:c1:c7: 10:2c:bd:b9:83:bc:fd:57:f3:dd:71:b5:08:27:50: 28:ce:ce:dd:cc:9d:3a:24:f1:ac:74:93:4a:8c:a8: fa:77:59:ff:f9:00:69:1b:c0:cd:59:a3:22:bd:bb: 8f:40:15:48:04:67:3b:2a:af:81:f2:19:8f:46:cd: 67:78:ea:38:97:b5:ee:59:1b:ab:77:19:ee:b4:23: cc:c2:11:c6:b4:14:a2:72:a0:2e:41:fd:69:8f:48: a6:de:87:ac:d5:37:aa:fd:9c:4b:8b:9c:fd:81:ab: dd:ca:e6:3c:62:38:08:5f:b1:87:27:68:6c:48:27: 67:22:7b:af:cf:53:15:e0:ae:a9:3e:36:23:6d:72: 21:bc:30:90:41:2e:17:bf:b8:e7:47:76:62:a7:26: 07:4c:7b:9a:40:73:88:74:c1:a5:48:89:00:9e:bd: 6b:2d:cc:2f:71:fd:14:e5:31:23:ab:20:6f:33:5f: e6:d8:80:e7:5c:fe:58:f1:13:c8:69:cd:1e:69:fd: fb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BB:5A:A0:48:9A:BD:D8:23:27:8E:48:01:91:79:36:73:E8:DD:1B X509v3 Authority Key Identifier: keyid:09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/zrtaoEiavdgjJ45IAZF5NnPo3Rs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.204.0/22 Signature Algorithm: sha256WithRSAEncryption 14:a7:d8:2d:13:c7:bd:ff:7a:f9:ca:99:b4:3f:97:a9:d8:d6: e3:ea:b2:4f:50:71:60:07:86:f0:74:7c:29:0c:7d:06:9d:c1: 62:2c:b5:67:d5:dc:46:94:fa:26:c3:8a:11:2a:2a:be:99:3e: b1:28:8b:7e:4a:4c:2c:1e:44:01:50:d8:7d:fe:88:4a:db:13: 64:90:b6:ba:96:d8:e8:5c:e8:96:62:f4:dd:51:c7:1d:91:77: 4f:06:e6:82:6d:ef:c8:93:ca:29:82:0d:6e:79:db:4f:68:91: db:6f:61:26:ae:77:89:d4:70:ce:de:b8:5b:f5:e9:c5:a8:06: f9:c6:00:fc:90:9d:a3:44:a0:c8:d4:c9:ba:a1:57:98:0a:41: 13:fb:24:bf:c9:97:a6:28:29:82:2a:50:da:04:74:af:5b:4a: 59:1d:a8:6e:90:f5:2f:b5:a4:7b:9f:f4:2a:32:34:8f:f4:bb: 86:77:5e:cf:12:f2:6c:0a:7c:65:c3:6a:bc:64:b3:c5:65:80: 04:0c:33:56:78:80:16:c2:63:93:50:09:0f:e7:c4:3b:0e:87: 5c:d4:bc:67:d3:ad:f5:5e:e5:6a:81:f3:32:03:1a:8b:60:59: b2:03:1a:b4:94:2e:79:af:a5:6b:54:40:c9:e2:f4:ac:c7:fe: cf:b2:c2:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pldaLF0eSqHi3Rw84vAsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MWNjNWQ5MGM5YjY4MWE2Y2I0ZTc3MmNjYWViZWMzNDJm YjliMDUwHhcNMjYwMTAyMTIxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWJiNWFhMDQ4OWFiZGQ4MjMyNzhlNDgwMTkxNzkzNjczZThkZDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSpmmuQt/I1PDBOt5P2QNC94CUlG 9wyBDNQGeUSyP4Zz/it+ucFSdAkGt5PH7fuPvvHbKVBAkxjFwccQLL25g7z9V/Pd cbUIJ1Aozs7dzJ06JPGsdJNKjKj6d1n/+QBpG8DNWaMivbuPQBVIBGc7Kq+B8hmP Rs1neOo4l7XuWRurdxnutCPMwhHGtBSicqAuQf1pj0im3oes1Teq/ZxLi5z9gavd yuY8YjgIX7GHJ2hsSCdnInuvz1MV4K6pPjYjbXIhvDCQQS4Xv7jnR3ZipyYHTHua QHOIdMGlSIkAnr1rLcwvcf0U5TEjqyBvM1/m2IDnXP5Y8RPIac0eaf37+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM67WqBImr3YIyeOSAGReTZz6N0bMB8GA1UdIwQY MBaAFAkcxdkMm2gabLTncsyuvsNC+5sFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1J6RjJReWJhQnBzdE9keXpLNi13MEw3bXdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny83MzhmNzgtNDM4Yy00YmZkLTgwNmIt NzNiZmFkODMyZDJkLzEvenJ0YW9FaWF2ZGdqSjQ1SUFaRjVOblBvM1JzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny83MzhmNzgtNDM4Yy00YmZkLTgwNmItNzNiZmFkODMyZDJk LzEvQ1J6RjJReWJhQnBzdE9keXpLNi13MEw3bXdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXXMMA0G CSqGSIb3DQEBCwUAA4IBAQAUp9gtE8e9/3r5ypm0P5ep2Nbj6rJPUHFgB4bwdHwp DH0GncFiLLVn1dxGlPomw4oRKiq+mT6xKIt+SkwsHkQBUNh9/ohK2xNkkLa6ltjo XOiWYvTdUccdkXdPBuaCbe/Ik8opgg1uedtPaJHbb2EmrneJ1HDO3rhb9enFqAb5 xgD8kJ2jRKDI1Mm6oVeYCkET+yS/yZemKCmCKlDaBHSvW0pZHahukPUvtaR7n/Qq MjSP9LuGd17PEvJsCnxlw2q8ZLPFZYAEDDNWeIAWwmOTUAkP58Q7Dodc1Lxn0631 XuVqgfMyAxqLYFmyAxq0lC55r6VrVEDJ4vSsx/7PssLK -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:32 2026 by rpki-client