This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/Z0WVwWptGEGRyg-sh820wNyCLqg.roa File: Z0WVwWptGEGRyg-sh820wNyCLqg.roa (raw, json) Hash identifier: +yXI8Hiac4a98uMpERPin9vZe08d6SLlySsDllVTAlM= Subject key identifier: 67:45:95:C1:6A:6D:18:41:91:CA:0F:AC:87:CD:B4:C0:DC:82:2E:A8 Certificate issuer: /CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482 Certificate serial: 019B7C12479CBBF27944D7EE0D0A56179BEA Authority key identifier: ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/Z0WVwWptGEGRyg-sh820wNyCLqg.roa Signing time: Fri 02 Jan 2026 00:18:51 +0000 ROA not before: Fri 02 Jan 2026 00:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207216 IP address blocks: 185.162.160.0/22 maxlen: 24 2a0b:a000::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:47:9c:bb:f2:79:44:d7:ee:0d:0a:56:17:9b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482 Validity Not Before: Jan 2 00:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=674595c16a6d184191ca0fac87cdb4c0dc822ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d5:bb:b8:85:f8:dd:3d:f6:42:cc:57:e9:82: 7a:0a:6e:9d:42:43:62:08:6f:63:28:c3:12:5a:fe: a8:d3:5b:81:b1:dd:0d:3e:02:11:a4:9f:74:5e:14: aa:39:2a:c3:97:78:9d:96:bb:6c:07:a2:62:07:11: a0:b5:a9:3f:07:da:af:11:13:4a:ee:29:06:16:c3: cd:82:94:85:a5:2c:5e:8a:61:39:af:8f:86:f4:50: c4:14:51:81:c7:7e:cd:ec:5e:5c:5f:92:65:be:4e: ee:56:a5:73:00:43:c2:42:d2:76:80:ff:41:1f:66: cc:cf:d5:15:9f:f5:4f:af:e1:35:3c:44:b3:fb:f0: 30:ec:f5:50:4e:8f:50:50:0f:4b:bd:c6:05:5f:7e: a0:56:c3:a4:18:f1:f3:b3:02:fd:91:b1:d2:8a:ca: d5:93:f8:74:1f:73:a6:4e:53:f8:99:bd:6e:30:a0: 2e:ce:8a:02:d0:85:7e:42:b5:6f:f3:db:e7:9a:d0: e3:66:13:47:54:3e:34:dd:bc:b9:5a:50:8e:4f:6e: 06:31:ce:ba:fb:81:d7:34:b2:cb:e0:13:51:14:cb: 8c:90:ad:1b:1b:2f:0b:48:1a:bf:f0:0c:61:8d:10: fc:9a:fc:d5:a7:f0:4f:81:1c:5e:eb:c4:cb:97:d4: 6a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:45:95:C1:6A:6D:18:41:91:CA:0F:AC:87:CD:B4:C0:DC:82:2E:A8 X509v3 Authority Key Identifier: keyid:ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/Z0WVwWptGEGRyg-sh820wNyCLqg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.162.160.0/22 IPv6: 2a0b:a000::/29 Signature Algorithm: sha256WithRSAEncryption 4b:c4:a0:5a:58:86:7c:e2:6e:c7:b8:75:3c:be:ec:28:73:ac: 4a:ab:2a:86:b0:cb:ef:cf:3a:c7:a2:d2:6f:2a:b1:73:e8:f3: 57:1e:9f:f6:d0:c9:22:1e:8b:39:20:6b:4c:ae:1b:c1:69:09: 45:6d:18:c8:db:3f:91:44:2d:e4:db:16:22:9c:f9:36:93:8c: 19:df:80:43:ee:54:1f:22:88:f7:e4:68:1a:b2:8b:93:59:c1: 54:b5:86:12:7b:f8:f0:54:2a:e6:51:56:d4:80:76:9b:4f:30: 83:04:fe:4d:8a:0b:d7:61:ae:79:f3:64:a1:d3:01:ef:22:75: 13:f8:f4:0d:f8:89:21:57:d8:16:41:c4:e7:1e:2b:23:ac:76: 55:4f:6c:93:fb:98:8f:69:b6:39:b1:c5:04:f1:82:87:56:5a: cc:52:f9:06:3a:55:2b:22:b0:d1:96:bc:31:ca:e7:21:6f:5f: 55:ec:bf:ab:0c:98:aa:fc:77:93:d4:7b:13:f3:f7:a8:87:48: ed:a5:ef:2c:8c:16:29:c0:01:f7:1f:39:5e:21:61:17:25:99: 97:c7:a6:f5:5e:13:f8:6e:9a:50:fe:50:2d:14:33:d0:44:13: 2f:6d:e7:e7:b9:ab:bb:cb:fd:d7:21:f8:81:62:8f:ce:5a:2d: c5:7b:a7:5b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8Ekecu/J5RNfuDQpWF5vqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkOGRkZjgyMTIwOGEzNzBlM2E1YjdlZjhjZDQ3OTdjZmM1 Nzc0ODIwHhcNMjYwMTAyMDAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzQ1OTVjMTZhNmQxODQxOTFjYTBmYWM4N2NkYjRjMGRjODIyZWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNW7uIX43T32QsxX6YJ6Cm6dQkNi CG9jKMMSWv6o01uBsd0NPgIRpJ90XhSqOSrDl3idlrtsB6JiBxGgtak/B9qvERNK 7ikGFsPNgpSFpSxeimE5r4+G9FDEFFGBx37N7F5cX5Jlvk7uVqVzAEPCQtJ2gP9B H2bMz9UVn/VPr+E1PESz+/Aw7PVQTo9QUA9LvcYFX36gVsOkGPHzswL9kbHSisrV k/h0H3OmTlP4mb1uMKAuzooC0IV+QrVv89vnmtDjZhNHVD403by5WlCOT24GMc66 +4HXNLLL4BNRFMuMkK0bGy8LSBq/8AxhjRD8mvzVp/BPgRxe68TLl9RqOwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGdFlcFqbRhBkcoPrIfNtMDcgi6oMB8GA1UdIwQY MBaAFO2N34ISCKNw46W374zUeXz8V3SCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1kzZmdoSUlvM0RqcGJmdmpOUjVmUHhYZElJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9hODMxODQtNWZjNS00NzI0LWJhZWMt ZTlkODFlM2Q4YjU0LzEvWjBXVndXcHRHRUdSeWctc2g4MjB3TnlDTHFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9hODMxODQtNWZjNS00NzI0LWJhZWMtZTlkODFlM2Q4YjU0 LzEvN1kzZmdoSUlvM0RqcGJmdmpOUjVmUHhYZElJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaKgMA0E AgACMAcDBQMqC6AAMA0GCSqGSIb3DQEBCwUAA4IBAQBLxKBaWIZ84m7HuHU8vuwo c6xKqyqGsMvvzzrHotJvKrFz6PNXHp/20MkiHos5IGtMrhvBaQlFbRjI2z+RRC3k 2xYinPk2k4wZ34BD7lQfIoj35GgasouTWcFUtYYSe/jwVCrmUVbUgHabTzCDBP5N igvXYa5582Sh0wHvInUT+PQN+IkhV9gWQcTnHisjrHZVT2yT+5iPabY5scUE8YKH VlrMUvkGOlUrIrDRlrwxyuchb19V7L+rDJiq/HeT1HsT8/eoh0jtpe8sjBYpwAH3 HzleIWEXJZmXx6b1XhP4bppQ/lAtFDPQRBMvbefnuau7y/3XIfiBYo/OWi3Fe6db -----END CERTIFICATE-----Generated at Tue Feb 10 06:00:41 2026 by rpki-client