This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/zyPfwNzuMJJJDuYOn0Bgo058YW0.roa File: zyPfwNzuMJJJDuYOn0Bgo058YW0.roa (raw, json) Hash identifier: IKRTWNsdeOseZqcj2LOpmcRYiO5dx0jyp5Cgu9585p8= Subject key identifier: CF:23:DF:C0:DC:EE:30:92:49:0E:E6:0E:9F:40:60:A3:4E:7C:61:6D Certificate issuer: /CN=59392f91f43a67f50aa79a0116eaa4de9bd7351e Certificate serial: 019B77587E63F9CF8357BB62DCDE80731899 Authority key identifier: 59:39:2F:91:F4:3A:67:F5:0A:A7:9A:01:16:EA:A4:DE:9B:D7:35:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/zyPfwNzuMJJJDuYOn0Bgo058YW0.roa Signing time: Thu 01 Jan 2026 02:17:26 +0000 ROA not before: Thu 01 Jan 2026 02:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52049 IP address blocks: 185.128.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft rsync://rpki.ripe.net/repository/DEFAULT/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:7e:63:f9:cf:83:57:bb:62:dc:de:80:73:18:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59392f91f43a67f50aa79a0116eaa4de9bd7351e Validity Not Before: Jan 1 02:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf23dfc0dcee3092490ee60e9f4060a34e7c616d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6e:e9:da:5c:b5:84:67:f1:a7:88:a7:0c:b4: ca:b9:4b:26:89:a3:61:9a:0f:95:2b:2a:9f:2e:27: c3:71:ff:95:52:c1:81:9f:3a:0b:6a:13:82:5a:94: 6e:52:f7:4a:e9:b1:1f:39:a1:cf:cd:96:28:a7:e7: b5:cd:99:bb:9c:1f:f6:e3:8a:72:8f:00:dd:d0:35: 16:36:06:62:12:4a:df:54:ad:de:5b:6c:af:c7:1e: 19:11:c6:b6:d1:ab:b3:6a:11:b0:b8:36:a3:1a:fa: ae:eb:4a:9e:88:24:41:5c:6c:7d:fe:94:b2:0d:88: c5:91:96:1c:f0:9f:09:2c:84:8e:c7:d8:ed:b4:f8: a6:9f:9b:3c:53:f9:a1:a7:b4:70:5b:b4:2a:bd:21: 53:dd:8e:d8:b9:06:04:73:7b:be:44:18:47:3a:c1: 6b:f6:4e:1a:ad:47:4e:3a:5a:9c:9b:c0:0f:c3:b2: 7f:94:15:25:b9:3d:92:e2:c4:b7:88:16:dc:99:07: 2a:2c:c9:04:c6:3c:64:12:ba:d5:8d:d3:ea:db:06: 5b:f2:e6:02:ab:4f:09:e7:88:49:d6:ed:ea:ef:b3: e1:33:c7:4b:dd:90:a7:a3:b3:82:b6:ba:43:6d:03: 16:05:8d:85:ae:02:e5:9c:1e:e8:37:03:ce:0e:3f: 74:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:23:DF:C0:DC:EE:30:92:49:0E:E6:0E:9F:40:60:A3:4E:7C:61:6D X509v3 Authority Key Identifier: keyid:59:39:2F:91:F4:3A:67:F5:0A:A7:9A:01:16:EA:A4:DE:9B:D7:35:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/zyPfwNzuMJJJDuYOn0Bgo058YW0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.128.48.0/22 Signature Algorithm: sha256WithRSAEncryption 52:a9:ae:88:c0:0d:08:d9:d3:a1:d1:14:15:8b:27:0f:f7:1a: 43:22:fb:83:e6:56:4a:88:c7:8e:a1:30:02:4f:13:a9:6e:ca: 81:16:86:5f:30:ea:f7:db:99:20:25:a5:70:ae:8b:8e:85:92: 31:35:f9:77:be:ba:6b:58:23:74:6e:15:d1:5f:b6:49:7b:e8: a5:4a:22:03:6d:81:bf:18:79:bb:f8:1e:34:30:92:c8:35:3b: 9b:d2:80:0d:fd:4f:f2:bf:85:0d:36:0b:f7:95:75:9a:fc:bd: 12:59:85:5e:1a:5e:f3:c2:10:12:d3:6f:4a:81:84:bb:24:0c: 93:fd:d2:52:ba:fc:c5:fe:fe:3b:2b:43:19:7a:fd:35:da:55: 40:40:8e:5c:80:64:18:aa:84:b1:96:f2:f9:90:51:de:8a:fb: dd:a0:32:2e:dd:0e:f6:96:d5:23:20:6b:de:8e:11:b0:98:a3: 7e:50:27:86:52:45:10:a5:57:bb:a2:69:e3:f3:0d:fe:8e:81: a6:6c:d2:bb:54:16:6f:bc:94:82:a2:3d:12:dc:03:77:7b:7f: 60:52:2f:3b:ee:44:c3:33:a0:fb:ec:d5:cd:e0:7c:d9:84:27: 9a:ac:43:e3:10:b4:cb:e2:15:25:a4:d1:8a:c3:7c:81:c6:88: 92:c2:c3:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WH5j+c+DV7ti3N6AcxiZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MzkyZjkxZjQzYTY3ZjUwYWE3OWEwMTE2ZWFhNGRlOWJk NzM1MWUwHhcNMjYwMTAxMDIxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjIzZGZjMGRjZWUzMDkyNDkwZWU2MGU5ZjQwNjBhMzRlN2M2MTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW7p2ly1hGfxp4inDLTKuUsmiaNh mg+VKyqfLifDcf+VUsGBnzoLahOCWpRuUvdK6bEfOaHPzZYop+e1zZm7nB/244py jwDd0DUWNgZiEkrfVK3eW2yvxx4ZEca20auzahGwuDajGvqu60qeiCRBXGx9/pSy DYjFkZYc8J8JLISOx9jttPimn5s8U/mhp7RwW7QqvSFT3Y7YuQYEc3u+RBhHOsFr 9k4arUdOOlqcm8APw7J/lBUluT2S4sS3iBbcmQcqLMkExjxkErrVjdPq2wZb8uYC q08J54hJ1u3q77PhM8dL3ZCno7OCtrpDbQMWBY2FrgLlnB7oNwPODj905QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM8j38Dc7jCSSQ7mDp9AYKNOfGFtMB8GA1UdIwQY MBaAFFk5L5H0Omf1CqeaARbqpN6b1zUeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1RrdmtmUTZaX1VLcDVvQkZ1cWszcHZYTlI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9hZTRmYjEtNWMxNi00Y2U4LTllZWUt NDQ3Y2ZjYjVlNjg4LzEvenlQZndOenVNSkpKRHVZT24wQmdvMDU4WVcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9hZTRmYjEtNWMxNi00Y2U4LTllZWUtNDQ3Y2ZjYjVlNjg4 LzEvV1RrdmtmUTZaX1VLcDVvQkZ1cWszcHZYTlI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYAwMA0G CSqGSIb3DQEBCwUAA4IBAQBSqa6IwA0I2dOh0RQViycP9xpDIvuD5lZKiMeOoTAC TxOpbsqBFoZfMOr325kgJaVwrouOhZIxNfl3vrprWCN0bhXRX7ZJe+ilSiIDbYG/ GHm7+B40MJLINTub0oAN/U/yv4UNNgv3lXWa/L0SWYVeGl7zwhAS029KgYS7JAyT /dJSuvzF/v47K0MZev012lVAQI5cgGQYqoSxlvL5kFHeivvdoDIu3Q72ltUjIGve jhGwmKN+UCeGUkUQpVe7omnj8w3+joGmbNK7VBZvvJSCoj0S3AN3e39gUi877kTD M6D77NXN4HzZhCearEPjELTL4hUlpNGKw3yBxoiSwsOa -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:42 2026 by rpki-client