This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/ZOFyPBwt8QO_D6k6vls9KwZEJqg.roa File: ZOFyPBwt8QO_D6k6vls9KwZEJqg.roa (raw, json) Hash identifier: ghPprPgyeEsEGC4qjCDlZ4Fca6j12Z0yKgY66MXGmzM= Subject key identifier: 64:E1:72:3C:1C:2D:F1:03:BF:0F:A9:3A:BE:5B:3D:2B:06:44:26:A8 Certificate issuer: /CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df Certificate serial: 019B7B35E0D131F8F8115E825B9C5CAAB8EB Authority key identifier: 69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/ZOFyPBwt8QO_D6k6vls9KwZEJqg.roa Signing time: Thu 01 Jan 2026 20:18:06 +0000 ROA not before: Thu 01 Jan 2026 20:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40987 IP address blocks: 185.223.44.0/24 maxlen: 24 185.223.45.0/24 maxlen: 24 185.223.46.0/24 maxlen: 24 185.223.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.crl rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:e0:d1:31:f8:f8:11:5e:82:5b:9c:5c:aa:b8:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df Validity Not Before: Jan 1 20:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64e1723c1c2df103bf0fa93abe5b3d2b064426a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:89:8d:ab:6a:86:47:5e:ba:0d:f9:90:38:2e: ec:32:40:af:21:6e:20:f1:c7:be:07:3f:cb:8c:51: 06:f9:24:5b:b7:5c:b9:10:26:8c:5c:c7:2e:0e:ca: 5f:a2:f0:c6:3d:9b:e8:1a:2e:d1:35:63:45:46:21: 41:64:ae:6e:15:70:be:f1:35:e9:e4:ad:df:ee:a5: 8f:91:01:e5:9c:ff:cc:4c:76:3f:33:58:ce:91:4d: a4:0e:0b:78:3a:68:a4:6b:fd:9e:61:93:fd:c4:2d: 38:0d:e9:e3:f2:5a:a2:ec:42:20:b5:dc:9a:39:81: 22:e5:ae:e4:03:4e:89:9f:df:00:7b:57:34:0f:fb: 41:f7:3f:d0:5a:bc:c4:7f:99:db:05:de:8b:63:61: f5:82:fe:b8:3e:e3:92:d3:06:3e:ca:d4:89:5e:64: 51:f2:69:e3:aa:14:8b:d4:84:a9:e1:4a:8c:c7:05: 6c:92:da:07:c7:d9:bf:18:23:b8:13:0e:62:d7:a8: 84:00:0e:7f:57:a0:fa:60:46:f3:0f:3c:3a:f7:f2: d5:e7:f4:5c:ab:44:bd:b5:18:26:ce:61:92:d7:ce: c8:bd:55:85:0a:2c:5e:ba:7d:be:91:e2:d3:ee:21: 74:36:83:8c:bd:25:46:03:24:9a:17:45:e3:c8:47: 0b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E1:72:3C:1C:2D:F1:03:BF:0F:A9:3A:BE:5B:3D:2B:06:44:26:A8 X509v3 Authority Key Identifier: keyid:69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/ZOFyPBwt8QO_D6k6vls9KwZEJqg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.223.44.0/22 Signature Algorithm: sha256WithRSAEncryption 66:23:74:16:62:5e:18:5d:a8:e0:89:2c:7e:8c:54:e3:af:e8: 10:8c:3f:db:ed:15:14:42:0c:cd:f0:1e:6d:68:d6:e2:2c:14: 41:7c:d0:f8:93:02:e0:1c:64:7d:af:ea:c5:3f:2f:2d:9e:df: d7:5f:08:1d:83:d5:34:fe:99:f5:9c:46:05:17:16:e9:16:5d: eb:9e:d1:63:d0:6f:f8:90:77:22:64:2a:db:ec:4b:ad:4a:39: b2:b7:00:23:90:52:14:bf:61:8e:87:13:e5:73:0f:b8:6a:39: 42:b8:9a:ee:28:6b:7a:05:fe:e6:6e:e3:34:a9:0b:f4:6b:c3: f0:42:14:ff:a1:a0:10:bf:99:76:10:6c:89:c2:91:af:21:07: 0b:38:9d:ed:5d:a1:be:13:fd:fb:45:c3:e0:a0:4d:4f:b3:6e: 6a:83:ff:ad:9f:96:56:cd:75:e1:79:b6:07:b5:39:93:9b:98: e9:74:4e:ea:b4:b7:16:5c:aa:ac:32:b4:08:06:44:be:dd:bf: e8:13:8d:50:d0:3e:c5:e3:72:15:b9:39:25:0a:f8:6a:37:52: 1b:38:71:eb:b1:4e:1e:85:6d:0c:8f:c1:61:ef:03:54:e1:49: f6:a2:a1:71:6b:6e:16:fc:96:76:ee:4d:e8:4c:14:07:f4:84: 77:4c:2c:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NeDRMfj4EV6CW5xcqrjrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZjI5NWEzMTA4ZjVjZjFkMzI2ZmZlOWJmNjEwZmJjZjE4 ZDcyZGYwHhcNMjYwMTAxMjAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGUxNzIzYzFjMmRmMTAzYmYwZmE5M2FiZTViM2QyYjA2NDQyNmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvImNq2qGR166DfmQOC7sMkCvIW4g 8ce+Bz/LjFEG+SRbt1y5ECaMXMcuDspfovDGPZvoGi7RNWNFRiFBZK5uFXC+8TXp 5K3f7qWPkQHlnP/MTHY/M1jOkU2kDgt4Omika/2eYZP9xC04Denj8lqi7EIgtdya OYEi5a7kA06Jn98Ae1c0D/tB9z/QWrzEf5nbBd6LY2H1gv64PuOS0wY+ytSJXmRR 8mnjqhSL1ISp4UqMxwVsktoHx9m/GCO4Ew5i16iEAA5/V6D6YEbzDzw69/LV5/Rc q0S9tRgmzmGS187IvVWFCixeun2+keLT7iF0NoOMvSVGAySaF0XjyEcLMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGThcjwcLfEDvw+pOr5bPSsGRCaoMB8GA1UdIwQY MBaAFGnylaMQj1zx0yb/6b9hD7zxjXLfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWZLVm94Q1BYUEhUSnZfcHYyRVB2UEdOY3Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny80MzBjZjctNDQwNy00MjQ3LWIyZGEt NWExMGQxOWNmMWYzLzEvWk9GeVBCd3Q4UU9fRDZrNnZsczlLd1pFSnFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny80MzBjZjctNDQwNy00MjQ3LWIyZGEtNWExMGQxOWNmMWYz LzEvYWZLVm94Q1BYUEhUSnZfcHYyRVB2UEdOY3Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCud8sMA0G CSqGSIb3DQEBCwUAA4IBAQBmI3QWYl4YXajgiSx+jFTjr+gQjD/b7RUUQgzN8B5t aNbiLBRBfND4kwLgHGR9r+rFPy8tnt/XXwgdg9U0/pn1nEYFFxbpFl3rntFj0G/4 kHciZCrb7EutSjmytwAjkFIUv2GOhxPlcw+4ajlCuJruKGt6Bf7mbuM0qQv0a8Pw QhT/oaAQv5l2EGyJwpGvIQcLOJ3tXaG+E/37RcPgoE1Ps25qg/+tn5ZWzXXhebYH tTmTm5jpdE7qtLcWXKqsMrQIBkS+3b/oE41Q0D7F43IVuTklCvhqN1IbOHHrsU4e hW0Mj8Fh7wNU4Un2oqFxa24W/JZ27k3oTBQH9IR3TCxC -----END CERTIFICATE-----Generated at Tue Jan 27 01:14:24 2026 by rpki-client