This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/zlePSr6zYlrhgCFQW-qZhuoxEwk.roa File: zlePSr6zYlrhgCFQW-qZhuoxEwk.roa (raw, json) Hash identifier: ebo4B4GxIfR5oraws5Tn/cPpRYE1VsqUuELBHVvUXok= Subject key identifier: CE:57:8F:4A:BE:B3:62:5A:E1:80:21:50:5B:EA:99:86:EA:31:13:09 Certificate issuer: /CN=d5f5e7dddc47c71044865bc5cdc2587efdab0b9c Certificate serial: 019B79ECEEA9D971573D8BE600500BAB9539 Authority key identifier: D5:F5:E7:DD:DC:47:C7:10:44:86:5B:C5:CD:C2:58:7E:FD:AB:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/zlePSr6zYlrhgCFQW-qZhuoxEwk.roa Signing time: Thu 01 Jan 2026 14:18:49 +0000 ROA not before: Thu 01 Jan 2026 14:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212881 IP address blocks: 185.40.107.0/24 maxlen: 24 2a0c:ef00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ee:a9:d9:71:57:3d:8b:e6:00:50:0b:ab:95:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f5e7dddc47c71044865bc5cdc2587efdab0b9c Validity Not Before: Jan 1 14:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce578f4abeb3625ae18021505bea9986ea311309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:83:5a:53:f5:4a:17:cb:4e:5b:13:7b:9f:46: 59:b8:16:b1:03:04:d5:52:ee:e7:0d:9d:f0:8f:3c: 76:9b:87:ee:ed:f1:5f:54:2d:e5:81:20:4e:6d:33: 24:bd:ba:5b:64:59:0e:cc:b6:67:00:f7:12:8e:5f: 9c:d0:d7:c1:1c:b7:e6:c0:a4:82:9c:aa:68:80:e3: 32:d7:27:1d:ae:1c:6e:06:2e:d2:05:f3:51:60:ab: d5:d5:b0:14:ab:28:aa:ff:dc:fb:fb:cf:91:4f:0d: f4:ef:c3:18:44:1b:68:19:2a:cd:07:1a:db:fa:61: 93:02:93:17:c8:6e:81:dc:59:98:76:8d:65:8b:e6: fd:69:d1:17:04:2c:8c:a2:c9:e9:42:4b:89:ac:0a: d4:d9:ca:68:76:5a:58:e3:42:b0:25:e2:b3:68:78: bc:f3:df:20:94:00:9e:35:06:e3:fe:4a:3e:21:d8: 24:02:fc:e3:10:30:70:8d:e2:81:82:01:e1:84:8a: 65:aa:a0:4c:18:f7:a4:b7:1c:43:20:c6:c9:80:64: 86:a3:f9:8d:bd:85:1c:f4:11:94:2f:13:c0:da:2f: 21:72:c4:09:13:f4:0e:93:25:ec:d8:4c:50:35:2f: 12:e7:a7:1a:6a:78:03:a1:de:19:ff:3f:32:bf:f0: 46:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:57:8F:4A:BE:B3:62:5A:E1:80:21:50:5B:EA:99:86:EA:31:13:09 X509v3 Authority Key Identifier: keyid:D5:F5:E7:DD:DC:47:C7:10:44:86:5B:C5:CD:C2:58:7E:FD:AB:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/zlePSr6zYlrhgCFQW-qZhuoxEwk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.40.107.0/24 IPv6: 2a0c:ef00::/32 Signature Algorithm: sha256WithRSAEncryption 1e:42:c2:73:54:32:24:f7:b3:34:4a:a1:73:8b:3e:b9:81:1c: 33:2f:96:aa:a2:68:d3:71:6e:e3:a7:c2:36:d2:8a:b1:b4:bc: ab:1b:f9:a1:b6:53:7d:35:7c:b2:6f:aa:95:4b:4d:ae:ab:15: 94:38:88:27:a8:9d:35:67:fd:80:f8:46:dd:6f:6b:49:a9:49: cb:71:5f:bc:42:f1:89:2e:1b:a3:2d:49:8c:b3:21:9c:8d:d8: 2d:99:f9:65:d7:18:ec:0c:36:5d:b3:cf:5b:8a:37:2a:01:12: e6:01:39:9d:5a:d0:b3:1b:ac:05:80:99:75:4b:d9:b3:69:9f: cb:2c:46:37:d2:79:ca:af:48:f4:c6:11:27:25:f1:7c:a6:ae: 54:81:97:8e:43:12:2c:e7:fd:da:0b:93:86:d5:8a:5c:70:ad: e6:dc:6b:4a:ca:01:43:f9:dd:bd:b4:48:97:2e:29:09:f3:f8: 70:cd:7d:8b:fe:93:16:ac:81:ee:6e:77:7e:f5:93:e6:e3:7b: 71:b5:54:84:55:f0:fe:98:71:06:70:e8:79:41:ef:c5:96:4a: 39:ca:e8:e8:e2:74:6e:00:65:56:0b:8c:15:03:4e:8c:ab:c5: 8f:b0:d8:eb:c4:5a:f5:ae:75:d2:10:5d:7b:40:63:ec:83:1c: 85:3a:df:79 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57O6p2XFXPYvmAFALq5U5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZjVlN2RkZGM0N2M3MTA0NDg2NWJjNWNkYzI1ODdlZmRh YjBiOWMwHhcNMjYwMTAxMTQxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTU3OGY0YWJlYjM2MjVhZTE4MDIxNTA1YmVhOTk4NmVhMzExMzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oNaU/VKF8tOWxN7n0ZZuBaxAwTV Uu7nDZ3wjzx2m4fu7fFfVC3lgSBObTMkvbpbZFkOzLZnAPcSjl+c0NfBHLfmwKSC nKpogOMy1ycdrhxuBi7SBfNRYKvV1bAUqyiq/9z7+8+RTw3078MYRBtoGSrNBxrb +mGTApMXyG6B3FmYdo1li+b9adEXBCyMosnpQkuJrArU2cpodlpY40KwJeKzaHi8 898glACeNQbj/ko+IdgkAvzjEDBwjeKBggHhhIplqqBMGPektxxDIMbJgGSGo/mN vYUc9BGULxPA2i8hcsQJE/QOkyXs2ExQNS8S56caangDod4Z/z8yv/BGVQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFM5Xj0q+s2Ja4YAhUFvqmYbqMRMJMB8GA1UdIwQY MBaAFNX1593cR8cQRIZbxc3CWH79qwucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWZYbjNkeEh4eEJFaGx2RnpjSllmdjJyQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84MjZmYWYtMzdiNC00MzhmLThmOTAt MjlmZTdjYzY2YzhkLzEvemxlUFNyNnpZbHJoZ0NGUVctcVpodW94RXdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy84MjZmYWYtMzdiNC00MzhmLThmOTAtMjlmZTdjYzY2Yzhk LzEvMWZYbjNkeEh4eEJFaGx2RnpjSllmdjJyQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuShrMA0E AgACMAcDBQAqDO8AMA0GCSqGSIb3DQEBCwUAA4IBAQAeQsJzVDIk97M0SqFziz65 gRwzL5aqomjTcW7jp8I20oqxtLyrG/mhtlN9NXyyb6qVS02uqxWUOIgnqJ01Z/2A +Ebdb2tJqUnLcV+8QvGJLhujLUmMsyGcjdgtmfll1xjsDDZds89bijcqARLmATmd WtCzG6wFgJl1S9mzaZ/LLEY30nnKr0j0xhEnJfF8pq5UgZeOQxIs5/3aC5OG1Ypc cK3m3GtKygFD+d29tEiXLikJ8/hwzX2L/pMWrIHubnd+9ZPm43txtVSEVfD+mHEG cOh5Qe/Flko5yujo4nRuAGVWC4wVA06Mq8WPsNjrxFr1rnXSEF17QGPsgxyFOt95 -----END CERTIFICATE-----Generated at Tue Jan 27 00:33:39 2026 by rpki-client