This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/ZupcI2nbSj0kv3bOiTJw_7ju_nM.roa File: ZupcI2nbSj0kv3bOiTJw_7ju_nM.roa (raw, json) Hash identifier: 8lfURhp4+6wvfeyaLwrd59nHvD9zLaiHI+8CWa149w4= Subject key identifier: 66:EA:5C:23:69:DB:4A:3D:24:BF:76:CE:89:32:70:FF:B8:EE:FE:73 Certificate issuer: /CN=dc6917645d9d220435f91c7e46c8110cf89acbe4 Certificate serial: 019B7BA3475770531974F3CB4602AC725F17 Authority key identifier: DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/ZupcI2nbSj0kv3bOiTJw_7ju_nM.roa Signing time: Thu 01 Jan 2026 22:17:36 +0000 ROA not before: Thu 01 Jan 2026 22:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 185.172.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:47:57:70:53:19:74:f3:cb:46:02:ac:72:5f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc6917645d9d220435f91c7e46c8110cf89acbe4 Validity Not Before: Jan 1 22:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66ea5c2369db4a3d24bf76ce893270ffb8eefe73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b6:5b:5b:a0:d4:ca:b6:07:3c:14:c3:5a:1f: ef:cb:8c:7f:68:ae:3b:6a:47:cf:fe:57:23:27:05: 35:d4:d4:cb:be:bd:f5:86:6e:ec:50:45:7d:eb:b9: 99:74:31:e9:10:78:36:54:22:88:4d:03:29:5d:3d: 5a:cb:0e:7d:bb:de:44:d5:40:bd:e6:79:24:75:f4: cb:0f:0d:08:8d:3c:3b:87:11:bf:05:2f:1c:00:0e: af:8b:e0:29:22:73:9d:d9:4b:8a:ab:55:ca:fd:10: af:29:19:28:b4:74:c0:2a:75:99:46:fc:c7:42:a7: e2:b0:43:05:cc:06:dc:2a:c9:95:28:19:d0:21:86: 40:a9:24:57:e0:6b:39:4e:bb:fd:ac:a7:48:38:9a: 67:3f:4e:d7:92:d0:02:39:10:17:ca:63:c4:3b:7d: 30:65:13:14:a8:b3:9e:2b:01:05:a6:d0:1d:e6:43: 01:95:b0:99:72:a9:29:da:a2:af:84:38:bd:4a:c1: ae:11:fd:0d:1c:fc:3a:7c:fa:b5:78:c1:17:fe:7f: d6:74:b8:93:39:b1:b8:5b:11:bf:46:e2:6b:b3:5f: 28:8b:ce:ba:8e:37:24:d2:46:ff:47:00:66:3c:1c: 69:ed:6f:ce:1b:50:10:20:fb:ba:1e:bf:0e:51:91: 09:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:EA:5C:23:69:DB:4A:3D:24:BF:76:CE:89:32:70:FF:B8:EE:FE:73 X509v3 Authority Key Identifier: keyid:DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/ZupcI2nbSj0kv3bOiTJw_7ju_nM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.172.227.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:2a:72:71:6d:eb:56:2d:49:15:3b:c6:18:33:55:1e:c5:26: fd:d5:24:76:cb:b7:cb:76:0c:3d:94:1f:2c:4b:64:47:61:75: ac:5c:46:59:71:89:1d:ba:05:90:d9:cd:de:d3:6c:55:de:65: 3c:15:02:c7:92:db:bf:58:7f:22:81:bc:fa:56:8b:f9:09:ff: f2:2d:eb:2f:76:64:fb:36:a3:a0:aa:e4:5a:19:9a:e7:6a:8d: c8:d6:c5:7e:94:b8:10:e4:4c:8c:88:c0:1e:ab:e9:1f:e0:04: 1e:3f:bd:e4:50:8b:ca:90:c5:f1:7c:2d:54:23:6b:87:02:70: bc:d2:27:3c:82:1a:20:0d:97:47:dd:e6:69:f7:47:e8:6b:60: 43:80:97:b3:1d:7e:d2:b8:d0:bb:8a:fa:9f:e0:13:7d:a2:a4: 4c:28:ed:dc:c3:a7:7a:77:10:3a:a8:f7:95:5c:42:58:0e:31: 6a:e2:18:03:6b:07:c1:8c:86:a6:c8:91:90:4d:66:de:94:a1: cf:0e:66:fc:74:70:6a:ea:de:fd:97:25:31:ba:61:32:e1:3d: e3:df:47:a4:5e:54:72:81:dc:df:5d:33:e2:ae:c9:46:b9:d4: ab:ad:47:3e:d9:37:b6:97:bf:47:5f:94:7b:80:7b:4d:b2:3e: 3e:e4:d4:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o0dXcFMZdPPLRgKscl8XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNjkxNzY0NWQ5ZDIyMDQzNWY5MWM3ZTQ2YzgxMTBjZjg5 YWNiZTQwHhcNMjYwMTAxMjIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmVhNWMyMzY5ZGI0YTNkMjRiZjc2Y2U4OTMyNzBmZmI4ZWVmZTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LZbW6DUyrYHPBTDWh/vy4x/aK47 akfP/lcjJwU11NTLvr31hm7sUEV967mZdDHpEHg2VCKITQMpXT1ayw59u95E1UC9 5nkkdfTLDw0IjTw7hxG/BS8cAA6vi+ApInOd2UuKq1XK/RCvKRkotHTAKnWZRvzH QqfisEMFzAbcKsmVKBnQIYZAqSRX4Gs5Trv9rKdIOJpnP07XktACORAXymPEO30w ZRMUqLOeKwEFptAd5kMBlbCZcqkp2qKvhDi9SsGuEf0NHPw6fPq1eMEX/n/WdLiT ObG4WxG/RuJrs18oi866jjck0kb/RwBmPBxp7W/OG1AQIPu6Hr8OUZEJ0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGbqXCNp20o9JL92zokycP+47v5zMB8GA1UdIwQY MBaAFNxpF2RdnSIENfkcfkbIEQz4msvkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zNTQ0YTctZDU1Ni00NzAxLTk1N2Et NDI4YmU5MDA4ZmJhLzEvWnVwY0kybmJTajBrdjNiT2lUSndfN2p1X25NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zNTQ0YTctZDU1Ni00NzAxLTk1N2EtNDI4YmU5MDA4ZmJh LzEvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuazjMA0G CSqGSIb3DQEBCwUAA4IBAQAPKnJxbetWLUkVO8YYM1UexSb91SR2y7fLdgw9lB8s S2RHYXWsXEZZcYkdugWQ2c3e02xV3mU8FQLHktu/WH8igbz6Vov5Cf/yLesvdmT7 NqOgquRaGZrnao3I1sV+lLgQ5EyMiMAeq+kf4AQeP73kUIvKkMXxfC1UI2uHAnC8 0ic8ghogDZdH3eZp90foa2BDgJezHX7SuNC7ivqf4BN9oqRMKO3cw6d6dxA6qPeV XEJYDjFq4hgDawfBjIamyJGQTWbelKHPDmb8dHBq6t79lyUxumEy4T3j30ekXlRy gdzfXTPirslGudSrrUc+2Te2l79HX5R7gHtNsj4+5NQJ -----END CERTIFICATE-----Generated at Sat Jan 3 04:53:47 2026 by rpki-client