This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/zw0K7nV5rFoohGmB_QReeV_MWo4.roa
File: zw0K7nV5rFoohGmB_QReeV_MWo4.roa (raw, json)
Hash identifier: +4Tq1HCMCb+QoxZB+TD463dZCZzHTNCgbaWpOcvCbtM=
Subject key identifier: CF:0D:0A:EE:75:79:AC:5A:28:84:69:81:FD:04:5E:79:5F:CC:5A:8E
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019B7BA40401B04BA036EC340F1CEA3237C8
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/zw0K7nV5rFoohGmB_QReeV_MWo4.roa
Signing time: Thu 01 Jan 2026 22:18:24 +0000
ROA not before: Thu 01 Jan 2026 22:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57380
IP address blocks: 185.103.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:04:01:b0:4b:a0:36:ec:34:0f:1c:ea:32:37:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jan 1 22:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf0d0aee7579ac5a28846981fd045e795fcc5a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:de:b7:2e:a8:b9:92:6c:cb:1e:cf:0b:77:f3:
c4:36:5c:02:a2:28:42:94:3b:31:4b:2a:74:ac:88:
37:9c:08:f4:ba:18:d8:d3:0a:39:09:e3:41:ae:da:
ed:c7:e9:b4:90:52:64:49:4b:4c:38:4c:25:4b:75:
12:d8:28:8f:03:52:eb:36:77:b7:9f:5c:ca:55:7a:
45:e6:95:e9:3c:0f:34:ff:bb:11:5f:a6:3b:3d:de:
4f:2b:a9:57:6c:2b:1c:d2:2e:02:d4:85:c5:6d:36:
b6:7f:da:7b:60:6d:09:98:08:fc:e3:a7:97:16:90:
ed:93:73:5a:0e:1b:d7:42:ef:b6:d9:b8:3b:23:12:
72:5f:34:16:fe:4f:ca:72:a6:80:24:0f:1f:76:ae:
16:57:35:70:7a:1f:71:3e:49:f1:8a:1e:a8:e0:54:
81:05:d4:88:6d:24:b8:c7:22:3b:20:fa:9c:f8:5a:
2d:0b:25:29:51:c4:9b:f3:36:40:ec:9f:b3:6d:fb:
7b:93:bc:fd:97:12:d5:d1:06:05:05:bc:15:96:5f:
8c:fb:19:ce:cc:8c:43:41:92:f2:12:99:2d:4b:20:
00:6b:52:29:51:dc:50:cc:56:fb:ca:8c:59:4c:bc:
75:a9:d7:27:1a:13:c4:a2:2d:1d:67:ee:70:46:ab:
bb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0D:0A:EE:75:79:AC:5A:28:84:69:81:FD:04:5E:79:5F:CC:5A:8E
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/zw0K7nV5rFoohGmB_QReeV_MWo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.108.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:a1:6e:c0:e5:32:53:94:71:48:e3:58:16:34:bb:17:c1:7d:
06:e7:92:83:25:e5:cb:28:6f:4f:d3:a2:df:35:bb:a1:7e:2a:
55:8d:53:a8:4f:52:ce:a6:fc:d8:52:7a:ae:91:23:ae:4e:6f:
8e:f3:0d:f7:06:bb:21:0b:e2:6b:70:42:ef:19:5e:3d:a7:cc:
7d:73:8c:25:e3:8d:16:2f:4f:69:92:d3:37:45:03:89:fc:2b:
96:b2:e4:3c:f8:6d:cd:aa:de:65:e3:b4:ee:33:87:99:f8:4c:
10:22:47:06:3c:38:28:4d:cc:4d:6e:a3:6c:d4:01:f0:be:57:
6c:70:4d:96:f2:5a:62:af:e6:81:35:a3:a2:a2:41:b9:36:b6:
9c:13:3c:d7:55:a5:c8:34:cd:76:15:ee:bf:5a:26:2b:65:40:
bf:4d:65:78:69:61:25:7a:39:84:4a:2c:85:48:d8:97:77:a2:
42:12:27:01:ee:60:9d:fd:14:c2:85:25:01:e7:a9:a8:5a:d8:
0e:80:89:1e:0a:b8:71:e5:50:60:47:c8:b3:ed:ca:3e:a3:35:
c2:73:83:0c:dc:6b:6c:7d:d3:8b:36:07:57:ff:d0:cc:6d:28:
06:f9:00:7c:56:a7:42:b5:80:69:fc:1a:6d:bc:68:ae:bb:45:
8f:a9:de:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7pAQBsEugNuw0DxzqMjfIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3
Mjc4MmEwHhcNMjYwMTAxMjIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjBkMGFlZTc1NzlhYzVhMjg4NDY5ODFmZDA0NWU3OTVmY2M1YThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr963Lqi5kmzLHs8Ld/PENlwCoihC
lDsxSyp0rIg3nAj0uhjY0wo5CeNBrtrtx+m0kFJkSUtMOEwlS3US2CiPA1LrNne3
n1zKVXpF5pXpPA80/7sRX6Y7Pd5PK6lXbCsc0i4C1IXFbTa2f9p7YG0JmAj846eX
FpDtk3NaDhvXQu+22bg7IxJyXzQW/k/KcqaAJA8fdq4WVzVweh9xPknxih6o4FSB
BdSIbSS4xyI7IPqc+FotCyUpUcSb8zZA7J+zbft7k7z9lxLV0QYFBbwVll+M+xnO
zIxDQZLyEpktSyAAa1IpUdxQzFb7yoxZTLx1qdcnGhPEoi0dZ+5wRqu7vwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM8NCu51eaxaKIRpgf0EXnlfzFqOMB8GA1UdIwQY
MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt
YjU3YTM2ZjJhZmNkLzEvencwSzduVjVyRm9vaEdtQl9RUmVlVl9NV280LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk
LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWdsMA0G
CSqGSIb3DQEBCwUAA4IBAQDGoW7A5TJTlHFI41gWNLsXwX0G55KDJeXLKG9P06Lf
NbuhfipVjVOoT1LOpvzYUnqukSOuTm+O8w33BrshC+JrcELvGV49p8x9c4wl440W
L09pktM3RQOJ/CuWsuQ8+G3Nqt5l47TuM4eZ+EwQIkcGPDgoTcxNbqNs1AHwvlds
cE2W8lpir+aBNaOiokG5NracEzzXVaXINM12Fe6/WiYrZUC/TWV4aWElejmESiyF
SNiXd6JCEicB7mCd/RTChSUB56moWtgOgIkeCrhx5VBgR8iz7co+ozXCc4MM3Gts
fdOLNgdX/9DMbSgG+QB8VqdCtYBp/BptvGiuu0WPqd5h
-----END CERTIFICATE-----
Generated at Tue Jan 20 02:47:42 2026 by rpki-client