This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/ZU9seCnxefzljVm0zuNsOk7GIDQ.roa File: ZU9seCnxefzljVm0zuNsOk7GIDQ.roa (raw, json) Hash identifier: /DOENfB26ckd4WqAOCfSHmslCQF/eXd4V7OPNLLt9Mw= Subject key identifier: 65:4F:6C:78:29:F1:79:FC:E5:8D:59:B4:CE:E3:6C:3A:4E:C6:20:34 Certificate issuer: /CN=0a73778fb1bec28c9982652aede86a004c2682f1 Certificate serial: 019B7835142FABD1E54555B630853BB8D0DD Authority key identifier: 0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/ZU9seCnxefzljVm0zuNsOk7GIDQ.roa Signing time: Thu 01 Jan 2026 06:18:23 +0000 ROA not before: Thu 01 Jan 2026 06:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 185.30.28.0/22 maxlen: 22 185.38.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:14:2f:ab:d1:e5:45:55:b6:30:85:3b:b8:d0:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a73778fb1bec28c9982652aede86a004c2682f1 Validity Not Before: Jan 1 06:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=654f6c7829f179fce58d59b4cee36c3a4ec62034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fa:06:72:59:1b:52:33:d8:c1:32:75:af:1e: c4:80:0e:52:33:3a:a6:c3:51:04:d5:36:c5:34:85: ff:eb:6a:93:fb:c7:1e:9a:c8:41:06:8a:9e:d9:7a: c6:56:44:99:48:6b:d7:9e:64:0c:84:3b:92:7a:89: 41:fc:54:31:ac:3d:32:fd:9d:60:1b:2e:17:e1:99: 2e:31:00:96:ab:3a:d4:2a:6c:44:8b:7c:9c:ca:fe: 7d:ea:36:ff:57:6f:6f:01:f8:02:92:5c:f0:69:ee: 37:67:b0:12:4a:41:0d:da:6e:f8:91:17:9c:f4:c0: 2d:e0:c6:71:70:e1:34:81:4c:4d:2b:44:2f:ca:1b: 34:e7:b3:84:ad:46:da:d1:cc:ef:54:8c:11:02:04: c1:35:01:7a:7d:89:ab:ed:0a:1d:e8:23:55:e5:36: b2:5c:c2:39:5f:ea:bf:a8:69:b1:0f:60:45:aa:1c: 61:af:b0:f4:63:1e:3b:02:27:c0:84:a2:a9:f9:0f: 01:0f:4b:0a:8f:5b:a8:35:c8:49:92:33:0c:b4:18: b2:23:82:04:4c:3a:05:b6:6d:9a:8c:9f:65:78:04: b4:35:3a:d6:c8:08:7a:22:2e:9d:08:ec:a3:a6:a8: c3:75:ef:31:ec:7c:55:05:f8:18:a2:1d:6d:b6:ed: 59:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4F:6C:78:29:F1:79:FC:E5:8D:59:B4:CE:E3:6C:3A:4E:C6:20:34 X509v3 Authority Key Identifier: keyid:0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/ZU9seCnxefzljVm0zuNsOk7GIDQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.30.28.0/22 185.38.196.0/22 Signature Algorithm: sha256WithRSAEncryption 46:18:50:cb:46:9b:af:29:93:24:62:11:ba:03:2c:98:b2:e4: 33:cd:18:d1:a0:e3:2a:9d:62:57:91:22:90:a8:aa:a6:16:c3: a5:5a:7c:32:9f:60:36:d4:53:30:7a:0e:67:da:3c:8c:f1:bc: fa:11:20:a6:97:0b:ec:7d:15:ef:a9:64:e3:4f:ca:3a:b7:e5: 47:42:15:3d:fa:6c:19:9c:4b:28:18:d2:17:c3:67:3f:1b:52: ff:e0:81:41:a0:e6:6c:b1:35:2b:8a:02:7e:c8:56:11:a2:28: 5a:95:4d:58:c1:84:d8:11:c0:66:bf:3a:f1:d4:58:5c:54:55: d6:e0:2f:fa:4a:8d:fd:1b:24:1a:e1:a2:ac:5f:86:84:c2:5c: 4d:f1:ab:ec:54:ee:32:9c:10:6f:fe:b3:3a:87:82:62:f0:0b: 00:01:c3:1f:b1:71:01:40:e6:16:1e:44:a5:ec:7f:31:8c:67: 1e:ea:d1:3c:a9:e4:c3:01:fa:74:78:4d:ab:8f:6b:bf:fb:4d: 36:37:34:62:9f:03:bc:ab:47:6b:65:c8:29:23:09:5a:92:a9: a8:9f:46:04:59:76:92:f5:70:05:18:fc:bb:b6:b4:43:a8:fa: d9:be:0e:1e:2f:63:ab:85:21:6c:8b:99:cc:ee:91:50:ad:b8: 5b:9d:b7:51 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NRQvq9HlRVW2MIU7uNDdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzM3NzhmYjFiZWMyOGM5OTgyNjUyYWVkZTg2YTAwNGMy NjgyZjEwHhcNMjYwMTAxMDYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTRmNmM3ODI5ZjE3OWZjZTU4ZDU5YjRjZWUzNmMzYTRlYzYyMDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0foGclkbUjPYwTJ1rx7EgA5SMzqm w1EE1TbFNIX/62qT+8cemshBBoqe2XrGVkSZSGvXnmQMhDuSeolB/FQxrD0y/Z1g Gy4X4ZkuMQCWqzrUKmxEi3ycyv596jb/V29vAfgCklzwae43Z7ASSkEN2m74kRec 9MAt4MZxcOE0gUxNK0Qvyhs057OErUba0czvVIwRAgTBNQF6fYmr7Qod6CNV5Tay XMI5X+q/qGmxD2BFqhxhr7D0Yx47AifAhKKp+Q8BD0sKj1uoNchJkjMMtBiyI4IE TDoFtm2ajJ9leAS0NTrWyAh6Ii6dCOyjpqjDde8x7HxVBfgYoh1ttu1ZjQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGVPbHgp8Xn85Y1ZtM7jbDpOxiA0MB8GA1UdIwQY MBaAFApzd4+xvsKMmYJlKu3oagBMJoLxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25OM2o3Ry13b3laZ21VcTdlaHFBRXdtZ3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9lNmUxNWMtMTJiMC00MGJlLThiYzEt NTcwOGY1ODBlMzZhLzEvWlU5c2VDbnhlZnpsalZtMHp1TnNPazdHSURRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9lNmUxNWMtMTJiMC00MGJlLThiYzEtNTcwOGY1ODBlMzZh LzEvQ25OM2o3Ry13b3laZ21VcTdlaHFBRXdtZ3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuR4cAwQC uSbEMA0GCSqGSIb3DQEBCwUAA4IBAQBGGFDLRpuvKZMkYhG6AyyYsuQzzRjRoOMq nWJXkSKQqKqmFsOlWnwyn2A21FMweg5n2jyM8bz6ESCmlwvsfRXvqWTjT8o6t+VH QhU9+mwZnEsoGNIXw2c/G1L/4IFBoOZssTUrigJ+yFYRoihalU1YwYTYEcBmvzrx 1FhcVFXW4C/6So39GyQa4aKsX4aEwlxN8avsVO4ynBBv/rM6h4Ji8AsAAcMfsXEB QOYWHkSl7H8xjGce6tE8qeTDAfp0eE2rj2u/+002NzRinwO8q0drZcgpIwlakqmo n0YEWXaS9XAFGPy7trRDqPrZvg4eL2OrhSFsi5nM7pFQrbhbnbdR -----END CERTIFICATE-----Generated at Fri Jan 9 06:25:37 2026 by rpki-client