This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/ZYl6ESz21UDdQZw4Hjvhkd1lgHY.roa File: ZYl6ESz21UDdQZw4Hjvhkd1lgHY.roa (raw, json) Hash identifier: hTe98wrF5Is2LpZlippHQxkwg4vfk6P0kKe93SwPadc= Subject key identifier: 65:89:7A:11:2C:F6:D5:40:DD:41:9C:38:1E:3B:E1:91:DD:65:80:76 Certificate issuer: /CN=44ceb61e71a619f2314e9d9846ec67bc88a1244c Certificate serial: 019B7C7FF83B954A825E0AF8A10200BE4381 Authority key identifier: 44:CE:B6:1E:71:A6:19:F2:31:4E:9D:98:46:EC:67:BC:88:A1:24:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/ZYl6ESz21UDdQZw4Hjvhkd1lgHY.roa Signing time: Fri 02 Jan 2026 02:18:39 +0000 ROA not before: Fri 02 Jan 2026 02:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211510 IP address blocks: 85.193.189.0/24 maxlen: 24 85.193.190.0/24 maxlen: 24 85.193.191.0/24 maxlen: 24 185.54.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.crl rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.mft rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:f8:3b:95:4a:82:5e:0a:f8:a1:02:00:be:43:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44ceb61e71a619f2314e9d9846ec67bc88a1244c Validity Not Before: Jan 2 02:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65897a112cf6d540dd419c381e3be191dd658076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f7:d8:6a:2b:ed:1d:d1:03:cb:45:10:63:57: aa:fb:b0:af:1f:1f:fc:4c:62:2a:c7:fe:07:9f:87: 39:2b:8f:23:84:25:fb:74:6a:b3:1b:19:f4:cb:62: be:a3:e4:65:57:b3:51:bf:86:fc:7e:10:97:a2:49: 6f:1f:f1:e6:e1:68:00:f1:99:59:99:72:af:b1:1b: 0a:44:a9:a2:6e:61:98:fc:53:ba:4a:30:b4:94:c2: 6a:00:67:66:e5:7e:3d:33:98:09:85:df:0b:b6:57: e8:df:77:b7:03:17:70:4f:c2:27:70:70:da:64:79: 97:bb:f8:13:f9:9c:2e:dd:a3:48:a4:b2:e9:75:d4: 8d:d1:3c:9d:58:b2:7e:fa:00:34:67:f5:d6:ca:28: 65:47:73:f8:64:f4:36:1c:0d:e2:32:c8:eb:42:16: 71:80:7c:b7:02:3f:5a:42:85:4f:ab:a0:78:d4:56: 01:90:bb:98:28:4f:fa:1e:ab:43:ff:f9:bf:e2:ef: 33:0c:c6:04:57:44:9d:50:ff:9d:e2:d7:a9:97:00: 0d:7f:8e:83:34:fd:65:4b:37:b9:d1:2d:f4:2d:25: b9:69:a0:88:76:5b:32:2b:5c:51:00:ec:5c:fc:22: 77:56:2f:95:3e:9d:0f:b8:21:95:aa:01:65:98:6f: 79:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:89:7A:11:2C:F6:D5:40:DD:41:9C:38:1E:3B:E1:91:DD:65:80:76 X509v3 Authority Key Identifier: keyid:44:CE:B6:1E:71:A6:19:F2:31:4E:9D:98:46:EC:67:BC:88:A1:24:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/ZYl6ESz21UDdQZw4Hjvhkd1lgHY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.193.189.0-85.193.191.255 185.54.211.0/24 Signature Algorithm: sha256WithRSAEncryption 16:14:05:3d:7b:68:76:b7:1d:01:6f:4c:6e:61:81:6f:2e:4b: c2:a0:5c:d0:e7:5a:67:e2:2c:1f:58:2c:5f:b5:91:6a:38:d2: 70:76:1d:14:ef:ed:94:b4:85:6d:17:54:94:50:0e:25:56:23: a9:f5:75:94:30:64:04:b5:5f:0b:45:ab:8e:9b:75:9e:65:18: 41:85:44:29:8b:d7:fd:77:b5:9d:bb:94:a9:02:6f:8c:ac:72: 9e:07:66:45:f5:5e:b3:03:a0:f6:32:18:bf:54:fc:24:b4:49: 8b:e7:fd:e6:12:9a:d5:4c:49:06:8b:3d:4d:18:92:a7:17:be: d9:20:61:b8:43:21:80:4b:58:72:fb:e9:dd:31:ad:9e:e3:cc: 66:2b:34:8c:35:85:08:32:e7:69:65:17:16:61:04:88:e7:b0: 30:0e:97:cc:8b:a7:7d:fa:ec:99:ee:e9:28:b0:15:da:19:2e: f2:22:b2:5d:80:85:d1:f7:92:8c:be:77:68:32:49:fc:86:02: 25:d6:9e:87:64:dc:2b:8d:dd:be:a3:00:af:e3:b9:27:8b:bd: 15:57:f7:a6:0f:07:37:82:a7:14:e6:04:fe:b5:f0:4c:4b:87: 14:46:33:18:9b:04:3d:61:f7:aa:87:d0:51:03:e5:60:22:a0: 47:6f:a6:34 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt8f/g7lUqCXgr4oQIAvkOBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0Y2ViNjFlNzFhNjE5ZjIzMTRlOWQ5ODQ2ZWM2N2JjODhh MTI0NGMwHhcNMjYwMTAyMDIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTg5N2ExMTJjZjZkNTQwZGQ0MTljMzgxZTNiZTE5MWRkNjU4MDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvfYaivtHdEDy0UQY1eq+7CvHx/8 TGIqx/4Hn4c5K48jhCX7dGqzGxn0y2K+o+RlV7NRv4b8fhCXoklvH/Hm4WgA8ZlZ mXKvsRsKRKmibmGY/FO6SjC0lMJqAGdm5X49M5gJhd8Ltlfo33e3AxdwT8IncHDa ZHmXu/gT+Zwu3aNIpLLpddSN0TydWLJ++gA0Z/XWyihlR3P4ZPQ2HA3iMsjrQhZx gHy3Aj9aQoVPq6B41FYBkLuYKE/6HqtD//m/4u8zDMYEV0SdUP+d4teplwANf46D NP1lSze50S30LSW5aaCIdlsyK1xRAOxc/CJ3Vi+VPp0PuCGVqgFlmG95QwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFGWJehEs9tVA3UGcOB474ZHdZYB2MB8GA1UdIwQY MBaAFETOth5xphnyMU6dmEbsZ7yIoSRMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk02MkhuR21HZkl4VHAyWVJ1eG52SWloSkV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8wN2VhYzctNGQ1Mi00NmQ5LWJhNDQt ODk0NTg2MGQ1MjM4LzEvWllsNkVTejIxVURkUVp3NEhqdmhrZDFsZ0hZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8wN2VhYzctNGQ1Mi00NmQ5LWJhNDQtODk0NTg2MGQ1MjM4 LzEvUk02MkhuR21HZkl4VHAyWVJ1eG52SWloSkV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABVwb0D BAZVwYADBAC5NtMwDQYJKoZIhvcNAQELBQADggEBABYUBT17aHa3HQFvTG5hgW8u S8KgXNDnWmfiLB9YLF+1kWo40nB2HRTv7ZS0hW0XVJRQDiVWI6n1dZQwZAS1XwtF q46bdZ5lGEGFRCmL1/13tZ27lKkCb4yscp4HZkX1XrMDoPYyGL9U/CS0SYvn/eYS mtVMSQaLPU0YkqcXvtkgYbhDIYBLWHL76d0xrZ7jzGYrNIw1hQgy52llFxZhBIjn sDAOl8yLp3367Jnu6SiwFdoZLvIisl2AhdH3koy+d2gySfyGAiXWnodk3CuN3b6j AK/juSeLvRVX96YPBzeCpxTmBP618ExLhxRGMxibBD1h96qH0FED5WAioEdvpjQ= -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:33 2026 by rpki-client