This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/zZyI4xvkwJixdxg_pCLk7a1BUdw.roa File: zZyI4xvkwJixdxg_pCLk7a1BUdw.roa (raw, json) Hash identifier: zpCoEd9p2O+8DPIDxhP2gPNS4VcEBvo6F6BavOxBd5Q= Subject key identifier: CD:9C:88:E3:1B:E4:C0:98:B1:77:18:3F:A4:22:E4:ED:AD:41:51:DC Certificate issuer: /CN=2a94c7df8557b653447c3e06fb4b372d5120a222 Certificate serial: 019B7DCAF5F6618DB81E3D59509C7E3C5F39 Authority key identifier: 2A:94:C7:DF:85:57:B6:53:44:7C:3E:06:FB:4B:37:2D:51:20:A2:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpTH34VXtlNEfD4G-0s3LVEgoiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/zZyI4xvkwJixdxg_pCLk7a1BUdw.roa Signing time: Fri 02 Jan 2026 08:20:11 +0000 ROA not before: Fri 02 Jan 2026 08:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196854 IP address blocks: 185.121.0.0/24 maxlen: 24 185.121.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.crl rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft rsync://rpki.ripe.net/repository/DEFAULT/KpTH34VXtlNEfD4G-0s3LVEgoiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:f5:f6:61:8d:b8:1e:3d:59:50:9c:7e:3c:5f:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94c7df8557b653447c3e06fb4b372d5120a222 Validity Not Before: Jan 2 08:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd9c88e31be4c098b177183fa422e4edad4151dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3b:40:b5:1e:73:a9:79:95:72:3c:81:24:d9: 6b:11:cb:64:1e:ef:14:d5:54:65:bf:eb:bd:e8:94: e3:ee:ff:0d:19:23:c3:e0:7f:a7:49:5a:75:fe:5d: 56:f3:e0:46:51:20:f7:53:c6:db:80:ba:76:94:30: e8:93:d4:f4:07:be:1b:1d:5a:d0:ca:33:b0:bc:23: e1:cd:a6:c6:53:7e:de:8e:9c:f5:63:f2:9c:4c:a2: ad:2b:55:1d:09:6c:b2:23:32:04:c4:c7:a1:c3:52: 09:48:1d:05:6c:d0:da:d2:59:93:b2:cd:3c:73:38: 53:56:f9:63:b6:52:c9:e8:72:f9:d8:c1:b4:c1:0d: 6a:99:0b:a6:0d:c7:d6:da:eb:0a:a2:ed:71:87:52: 49:d3:dc:5d:9e:98:80:4d:64:c0:26:76:a2:04:e5: 8a:53:0b:56:dc:67:94:da:a6:05:10:7a:8a:3d:52: 64:af:66:84:c6:29:42:c9:1c:7c:5b:0a:57:07:ee: c7:5a:a0:8e:92:2b:15:29:a5:49:75:93:43:7d:ea: 68:60:57:1e:cf:2d:4c:0e:f9:ed:2b:e4:ed:82:ab: c5:5f:b1:37:ce:9c:0c:29:cf:56:21:4d:b0:07:a3: 74:8c:9c:bb:3c:ec:bd:95:74:43:39:02:14:28:e0: 57:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:9C:88:E3:1B:E4:C0:98:B1:77:18:3F:A4:22:E4:ED:AD:41:51:DC X509v3 Authority Key Identifier: keyid:2A:94:C7:DF:85:57:B6:53:44:7C:3E:06:FB:4B:37:2D:51:20:A2:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpTH34VXtlNEfD4G-0s3LVEgoiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/zZyI4xvkwJixdxg_pCLk7a1BUdw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.0.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:6b:ae:61:a6:2e:44:30:81:7e:9d:af:5f:ec:e7:41:b0:f1: 34:32:9c:93:38:f7:91:a7:5b:3d:50:24:4b:34:31:a4:2f:fc: 0f:ea:e2:d4:24:9d:ca:1d:0a:27:b8:ef:83:d9:98:af:49:74: d8:3c:94:95:ca:25:5e:b9:b4:58:6d:63:2c:27:20:b1:27:b6: 0c:4f:b5:52:c5:98:29:fd:50:9a:46:44:ad:31:3f:65:24:c2: 22:ab:ff:02:ee:bc:c3:56:03:a0:ba:c9:74:7f:50:99:42:70: 92:dc:2e:49:6a:08:a1:53:e6:f4:60:06:40:b9:ac:89:98:3a: c0:4f:f4:a2:55:69:45:ce:f4:6f:58:8f:fd:d4:97:c0:6c:bf: 7f:8a:b8:fe:e9:a7:c4:b8:b0:4b:f6:88:0c:32:7a:4d:18:00: ab:ed:c1:98:22:90:17:64:ff:92:c8:0a:3b:73:3a:f3:f1:59: 9c:53:16:6f:ee:00:28:2f:d3:56:b5:3b:cb:a0:3b:85:9d:61: be:1a:c4:e7:9b:da:51:c8:06:54:80:40:72:02:3d:14:82:7d: 74:5c:78:d6:a8:54:d1:68:40:08:07:4b:d5:a5:05:f9:5b:6c: 57:4f:5e:b9:bc:ba:22:29:80:76:0e:f0:db:55:82:8c:ea:67: 5b:54:9b:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yvX2YY24Hj1ZUJx+PF85MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRjN2RmODU1N2I2NTM0NDdjM2UwNmZiNGIzNzJkNTEy MGEyMjIwHhcNMjYwMTAyMDgyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDljODhlMzFiZTRjMDk4YjE3NzE4M2ZhNDIyZTRlZGFkNDE1MWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDtAtR5zqXmVcjyBJNlrEctkHu8U 1VRlv+u96JTj7v8NGSPD4H+nSVp1/l1W8+BGUSD3U8bbgLp2lDDok9T0B74bHVrQ yjOwvCPhzabGU37ejpz1Y/KcTKKtK1UdCWyyIzIExMehw1IJSB0FbNDa0lmTss08 czhTVvljtlLJ6HL52MG0wQ1qmQumDcfW2usKou1xh1JJ09xdnpiATWTAJnaiBOWK UwtW3GeU2qYFEHqKPVJkr2aExilCyRx8WwpXB+7HWqCOkisVKaVJdZNDfepoYFce zy1MDvntK+TtgqvFX7E3zpwMKc9WIU2wB6N0jJy7POy9lXRDOQIUKOBXcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM2ciOMb5MCYsXcYP6Qi5O2tQVHcMB8GA1UdIwQY MBaAFCqUx9+FV7ZTRHw+BvtLNy1RIKIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3BUSDM0Vlh0bE5FZkQ0Ry0wczNMVkVnb2lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82N2NhZWUtNGMxMS00YTZmLWJmNjMt NTUxOGIwZTg2NTY2LzEvelp5STR4dmt3Sml4ZHhnX3BDTGs3YTFCVWR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC82N2NhZWUtNGMxMS00YTZmLWJmNjMtNTUxOGIwZTg2NTY2 LzEvS3BUSDM0Vlh0bE5FZkQ0Ry0wczNMVkVnb2lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuXkAMA0G CSqGSIb3DQEBCwUAA4IBAQA9a65hpi5EMIF+na9f7OdBsPE0MpyTOPeRp1s9UCRL NDGkL/wP6uLUJJ3KHQonuO+D2ZivSXTYPJSVyiVeubRYbWMsJyCxJ7YMT7VSxZgp /VCaRkStMT9lJMIiq/8C7rzDVgOgusl0f1CZQnCS3C5JagihU+b0YAZAuayJmDrA T/SiVWlFzvRvWI/91JfAbL9/irj+6afEuLBL9ogMMnpNGACr7cGYIpAXZP+SyAo7 czrz8VmcUxZv7gAoL9NWtTvLoDuFnWG+GsTnm9pRyAZUgEByAj0Ugn10XHjWqFTR aEAIB0vVpQX5W2xXT165vLoiKYB2DvDbVYKM6mdbVJtx -----END CERTIFICATE-----Generated at Tue Feb 10 05:48:04 2026 by rpki-client