This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/zmHmr8WCuNt9mfUmQFlfn61CAp4.roa File: zmHmr8WCuNt9mfUmQFlfn61CAp4.roa (raw, json) Hash identifier: l9l6Lz/YcSv/xu2iN3OjnafnCtRi/2fI/Xjhuf9kVjY= Subject key identifier: CE:61:E6:AF:C5:82:B8:DB:7D:99:F5:26:40:59:5F:9F:AD:42:02:9E Certificate issuer: /CN=df7dd65966737ce8f65e40ef2fea1cffafb162b0 Certificate serial: 019B7F154FAE46C879E85AF7094FF68868B0 Authority key identifier: DF:7D:D6:59:66:73:7C:E8:F6:5E:40:EF:2F:EA:1C:FF:AF:B1:62:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/zmHmr8WCuNt9mfUmQFlfn61CAp4.roa Signing time: Fri 02 Jan 2026 14:21:01 +0000 ROA not before: Fri 02 Jan 2026 14:21:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50823 IP address blocks: 178.170.130.0/24 maxlen: 24 185.83.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:4f:ae:46:c8:79:e8:5a:f7:09:4f:f6:88:68:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7dd65966737ce8f65e40ef2fea1cffafb162b0 Validity Not Before: Jan 2 14:21:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce61e6afc582b8db7d99f52640595f9fad42029e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:87:3f:1a:d9:20:4b:dd:cd:13:c9:1f:c5:9e: 5f:c5:9d:47:a1:c1:b6:69:4c:ce:9a:98:58:a8:b4: 7f:af:4d:03:1f:93:af:0d:28:88:8b:2e:c6:21:fd: ca:b3:9a:6a:90:62:3e:72:ba:6b:a2:b2:8b:1d:8c: 0b:04:7d:d6:9d:9b:6c:6f:74:71:88:90:b0:26:94: 18:79:8e:b6:21:09:f4:ee:a6:f1:e1:01:ec:20:ec: 03:08:23:24:49:47:92:5b:db:d0:dd:0f:ee:00:0c: 40:ac:22:cf:16:b6:d1:6a:66:9d:a9:55:93:3a:38: 07:19:eb:fc:37:75:02:82:6f:6c:6a:e1:c7:65:d1: d4:8f:1a:00:0b:6a:df:b8:47:67:77:96:cf:e9:79: 9f:b0:3d:18:45:e4:97:38:2d:18:8c:99:ec:18:19: a8:d5:85:0a:7e:e9:5b:f2:9e:8b:97:51:cc:0d:2c: 37:99:11:51:c7:94:a4:be:c4:7e:3a:0b:5d:d4:e3: 06:81:74:94:f2:7e:a9:25:cb:ae:71:ee:d6:a3:98: e2:62:03:13:b5:9c:74:f4:fe:62:79:c8:1e:bc:4a: dc:db:f5:9d:fb:15:0c:d7:10:38:21:92:8f:fb:b9: 2e:53:7b:39:49:ec:ef:8a:63:d9:f0:6a:05:7c:1c: ed:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:61:E6:AF:C5:82:B8:DB:7D:99:F5:26:40:59:5F:9F:AD:42:02:9E X509v3 Authority Key Identifier: keyid:DF:7D:D6:59:66:73:7C:E8:F6:5E:40:EF:2F:EA:1C:FF:AF:B1:62:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/zmHmr8WCuNt9mfUmQFlfn61CAp4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.170.130.0/24 185.83.64.0/22 Signature Algorithm: sha256WithRSAEncryption 44:27:2e:1c:0a:43:66:d0:66:2b:de:7a:43:72:34:79:f9:0f: c1:03:e2:16:06:97:5c:a4:e1:88:6a:ad:3c:76:7a:01:38:35: b4:8c:63:d2:c9:5b:fe:f2:09:13:f7:cd:c2:a0:c8:2d:5f:ec: 25:08:fe:71:12:64:48:47:a6:4a:77:10:b3:b2:d3:69:a1:ea: b5:56:01:3c:09:c5:2a:f4:ec:f6:20:8b:a3:ad:58:60:18:25: cb:de:7c:14:2a:84:0b:83:bc:34:2f:73:2f:bb:8d:0f:03:fd: 53:81:97:e3:7f:1b:e8:c6:f2:c1:f1:38:8a:f2:50:4d:97:f4: 50:97:d5:d7:0a:cb:52:39:05:05:58:63:ae:98:23:5b:eb:58: 18:57:b0:1f:b3:a0:98:83:9d:27:a2:72:cf:30:2c:91:82:0d: 15:73:95:54:1f:9d:43:99:43:20:c6:5d:76:67:7e:69:93:3c: 4a:25:23:51:e9:6f:3c:cb:7f:7b:82:a5:1e:6c:0d:e2:81:5d: 12:3c:06:56:4d:29:10:fe:aa:97:9f:09:6e:5b:70:8a:18:66: 98:4e:7c:b6:ab:38:d0:96:ff:b7:a5:0d:96:6b:3e:c2:b3:69: 3c:81:38:3b:60:a8:77:01:ce:a3:a9:76:fa:05:a6:1d:db:5a: 2b:dd:4d:98 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FU+uRsh56Fr3CU/2iGiwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmN2RkNjU5NjY3MzdjZThmNjVlNDBlZjJmZWExY2ZmYWZi MTYyYjAwHhcNMjYwMTAyMTQyMTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTYxZTZhZmM1ODJiOGRiN2Q5OWY1MjY0MDU5NWY5ZmFkNDIwMjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Yc/GtkgS93NE8kfxZ5fxZ1HocG2 aUzOmphYqLR/r00DH5OvDSiIiy7GIf3Ks5pqkGI+crprorKLHYwLBH3WnZtsb3Rx iJCwJpQYeY62IQn07qbx4QHsIOwDCCMkSUeSW9vQ3Q/uAAxArCLPFrbRamadqVWT OjgHGev8N3UCgm9sauHHZdHUjxoAC2rfuEdnd5bP6XmfsD0YReSXOC0YjJnsGBmo 1YUKfulb8p6Ll1HMDSw3mRFRx5SkvsR+Ogtd1OMGgXSU8n6pJcuuce7Wo5jiYgMT tZx09P5iecgevErc2/Wd+xUM1xA4IZKP+7kuU3s5SezvimPZ8GoFfBztuwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM5h5q/FgrjbfZn1JkBZX5+tQgKeMB8GA1UdIwQY MBaAFN991llmc3zo9l5A7y/qHP+vsWKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzMzV1dXWnpmT2oyWGtEdkwtb2NfNi14WXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lMjgzYmItZDRkMy00YjNhLWIyYjMt OGFjODk2NTcwOGJjLzEvem1IbXI4V0N1TnQ5bWZVbVFGbGZuNjFDQXA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9lMjgzYmItZDRkMy00YjNhLWIyYjMtOGFjODk2NTcwOGJj LzEvMzMzV1dXWnpmT2oyWGtEdkwtb2NfNi14WXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsqqCAwQC uVNAMA0GCSqGSIb3DQEBCwUAA4IBAQBEJy4cCkNm0GYr3npDcjR5+Q/BA+IWBpdc pOGIaq08dnoBODW0jGPSyVv+8gkT983CoMgtX+wlCP5xEmRIR6ZKdxCzstNpoeq1 VgE8CcUq9Oz2IIujrVhgGCXL3nwUKoQLg7w0L3Mvu40PA/1TgZfjfxvoxvLB8TiK 8lBNl/RQl9XXCstSOQUFWGOumCNb61gYV7Afs6CYg50nonLPMCyRgg0Vc5VUH51D mUMgxl12Z35pkzxKJSNR6W88y397gqUebA3igV0SPAZWTSkQ/qqXnwluW3CKGGaY Tny2qzjQlv+3pQ2Waz7Cs2k8gTg7YKh3Ac6jqXb6BaYd21or3U2Y -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:01 2026 by rpki-client