This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/zJjfRJOT22lkDtk4Md7fI6mwZxg.roa File: zJjfRJOT22lkDtk4Md7fI6mwZxg.roa (raw, json) Hash identifier: hqAeygJ8Uol5cY/fADfXwnwvoVyU7MDQFKGg1laAxik= Subject key identifier: CC:98:DF:44:93:93:DB:69:64:0E:D9:38:31:DE:DF:23:A9:B0:67:18 Certificate issuer: /CN=84f430d9ad9cb9c42c4bd6690e9f5812a457a02f Certificate serial: 019B78A2106A2AAEBB789BEAAC54AC760DA7 Authority key identifier: 84:F4:30:D9:AD:9C:B9:C4:2C:4B:D6:69:0E:9F:58:12:A4:57:A0:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/zJjfRJOT22lkDtk4Md7fI6mwZxg.roa Signing time: Thu 01 Jan 2026 08:17:25 +0000 ROA not before: Thu 01 Jan 2026 08:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39396 IP address blocks: 85.187.216.0/23 maxlen: 24 185.138.176.0/22 maxlen: 23 185.138.176.0/23 maxlen: 23 185.138.178.0/23 maxlen: 23 185.218.64.0/22 maxlen: 23 185.251.39.0/24 maxlen: 24 2a10:bac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:10:6a:2a:ae:bb:78:9b:ea:ac:54:ac:76:0d:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84f430d9ad9cb9c42c4bd6690e9f5812a457a02f Validity Not Before: Jan 1 08:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc98df449393db69640ed93831dedf23a9b06718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2e:95:d8:9b:eb:71:da:cb:e8:a7:f7:7c:a6: 31:05:13:4c:f1:52:7f:91:c7:b6:fe:e6:9c:5a:dc: eb:b4:97:8d:ac:b2:ba:64:b0:92:bf:07:f3:ae:fd: bf:8d:fb:f3:b6:97:4d:0a:02:e3:c2:86:3e:f6:c6: c4:31:2a:bb:b5:f5:dd:fb:a0:c6:11:1c:3c:5b:e3: 15:c5:9e:0f:90:1b:f1:c9:f1:5d:2a:69:6a:85:b6: 01:6e:a0:81:f1:ac:d6:47:60:17:24:8f:93:ac:5b: f4:13:2f:d1:4f:c8:53:c6:7c:e2:bb:e2:18:92:63: 9c:27:39:82:76:53:9d:e6:16:46:ee:44:65:2d:e8: c1:92:5b:23:60:f9:08:b9:da:c3:89:12:c3:e0:2a: 69:95:d5:a5:07:7e:f0:e5:a1:0d:e2:60:6b:30:14: 1c:60:0a:30:15:00:50:a5:6b:06:c1:99:1e:59:64: fa:de:9d:23:40:a5:ad:9d:e8:fa:96:14:0d:cc:d7: 5a:f6:82:00:5a:29:dc:2a:76:5e:75:15:4b:73:5f: 36:97:ed:f9:64:3d:12:6b:a6:7e:b5:18:2f:de:ff: 48:72:f8:4e:6f:93:93:50:d0:8e:f0:05:46:fc:ba: 88:cb:da:f0:9f:d9:58:90:d0:a3:b4:8d:92:36:c2: d0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:98:DF:44:93:93:DB:69:64:0E:D9:38:31:DE:DF:23:A9:B0:67:18 X509v3 Authority Key Identifier: keyid:84:F4:30:D9:AD:9C:B9:C4:2C:4B:D6:69:0E:9F:58:12:A4:57:A0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/zJjfRJOT22lkDtk4Md7fI6mwZxg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.187.216.0/23 185.138.176.0/22 185.218.64.0/22 185.251.39.0/24 IPv6: 2a10:bac0::/32 Signature Algorithm: sha256WithRSAEncryption 1f:03:65:ca:c9:1a:a8:58:26:25:18:61:00:6a:99:51:56:3e: 04:8a:fd:96:19:4c:60:bb:91:7d:91:36:1f:df:a8:2e:e7:8f: 61:ab:24:ad:11:9d:e3:87:82:20:91:a2:ac:3c:ad:31:0e:35: ed:15:51:16:7d:ad:4f:85:4f:aa:d7:99:f7:ee:d1:33:d2:fc: e0:90:52:b0:49:4c:4e:35:fc:63:7a:0e:13:39:ed:ba:47:fe: c7:12:d5:ba:56:d9:f3:d0:91:0e:7c:7c:87:67:1a:d8:58:1e: 55:02:32:a8:13:c2:d5:94:15:d7:f2:ea:91:82:1d:6d:f4:0d: e2:cd:b7:47:d5:a7:12:0b:aa:76:04:62:97:5c:de:80:12:3f: 64:26:86:27:1f:06:6e:94:23:39:f9:c0:7c:cc:53:6c:5d:e4: fa:e0:db:85:e8:14:76:ff:dd:87:0c:f3:7b:19:d9:b3:a4:a1: ba:f9:f3:01:44:e1:95:35:a4:d7:68:66:b4:be:f4:b9:11:b9: a0:22:66:1e:79:4d:78:3e:47:82:21:28:c5:66:70:02:34:60: 64:e5:da:66:74:cd:69:c6:92:c0:42:bb:2d:31:83:2b:cc:14: 15:71:6d:8c:23:ba:74:12:95:c2:8f:52:2d:4f:cb:40:b1:6b: 51:6d:70:9b -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt4ohBqKq67eJvqrFSsdg2nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZjQzMGQ5YWQ5Y2I5YzQyYzRiZDY2OTBlOWY1ODEyYTQ1 N2EwMmYwHhcNMjYwMTAxMDgxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzk4ZGY0NDkzOTNkYjY5NjQwZWQ5MzgzMWRlZGYyM2E5YjA2NzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2C6V2JvrcdrL6Kf3fKYxBRNM8VJ/ kce2/uacWtzrtJeNrLK6ZLCSvwfzrv2/jfvztpdNCgLjwoY+9sbEMSq7tfXd+6DG ERw8W+MVxZ4PkBvxyfFdKmlqhbYBbqCB8azWR2AXJI+TrFv0Ey/RT8hTxnziu+IY kmOcJzmCdlOd5hZG7kRlLejBklsjYPkIudrDiRLD4CppldWlB37w5aEN4mBrMBQc YAowFQBQpWsGwZkeWWT63p0jQKWtnej6lhQNzNda9oIAWincKnZedRVLc182l+35 ZD0Sa6Z+tRgv3v9IcvhOb5OTUNCO8AVG/LqIy9rwn9lYkNCjtI2SNsLQVwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFMyY30STk9tpZA7ZODHe3yOpsGcYMB8GA1UdIwQY MBaAFIT0MNmtnLnELEvWaQ6fWBKkV6AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFBRdzJhMmN1Y1FzUzlacERwOVlFcVJYb0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hYmQwMDQtYzY4Zi00OWIxLWEyYzQt YjkwNTZlYmJjNTc2LzEvekpqZlJKT1QyMmxrRHRrNE1kN2ZJNm13WnhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hYmQwMDQtYzY4Zi00OWIxLWEyYzQtYjkwNTZlYmJjNTc2 LzEvaFBRdzJhMmN1Y1FzUzlacERwOVlFcVJYb0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBVbvYAwQC uYqwAwQCudpAAwQAufsnMA0EAgACMAcDBQAqELrAMA0GCSqGSIb3DQEBCwUAA4IB AQAfA2XKyRqoWCYlGGEAaplRVj4Eiv2WGUxgu5F9kTYf36gu549hqyStEZ3jh4Ig kaKsPK0xDjXtFVEWfa1PhU+q15n37tEz0vzgkFKwSUxONfxjeg4TOe26R/7HEtW6 Vtnz0JEOfHyHZxrYWB5VAjKoE8LVlBXX8uqRgh1t9A3izbdH1acSC6p2BGKXXN6A Ej9kJoYnHwZulCM5+cB8zFNsXeT64NuF6BR2/92HDPN7GdmzpKG6+fMBROGVNaTX aGa0vvS5EbmgImYeeU14PkeCISjFZnACNGBk5dpmdM1pxpLAQrstMYMrzBQVcW2M I7p0EpXCj1ItT8tAsWtRbXCb -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:33 2026 by rpki-client