This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/Zly76sR93xiLWK-6z00JINgQw0s.roa File: Zly76sR93xiLWK-6z00JINgQw0s.roa (raw, json) Hash identifier: Cwnf2YJcr7xtYOcQAYO59i1uM8hPOiSg7BcnRFcg/g0= Subject key identifier: 66:5C:BB:EA:C4:7D:DF:18:8B:58:AF:BA:CF:4D:09:20:D8:10:C3:4B Certificate issuer: /CN=492a8e482a81d90c45c4d90ac668a3f2245c0d6d Certificate serial: 019B7E387F3CB1C8DEE878CDB1036CED4402 Authority key identifier: 49:2A:8E:48:2A:81:D9:0C:45:C4:D9:0A:C6:68:A3:F2:24:5C:0D:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSqOSCqB2QxFxNkKxmij8iRcDW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/Zly76sR93xiLWK-6z00JINgQw0s.roa Signing time: Fri 02 Jan 2026 10:19:50 +0000 ROA not before: Fri 02 Jan 2026 10:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201259 IP address blocks: 185.60.32.0/22 maxlen: 22 185.60.32.0/23 maxlen: 23 185.60.32.0/24 maxlen: 24 185.60.33.0/24 maxlen: 24 185.60.34.0/23 maxlen: 23 185.60.34.0/24 maxlen: 24 185.60.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.crl rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.mft rsync://rpki.ripe.net/repository/DEFAULT/SSqOSCqB2QxFxNkKxmij8iRcDW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:7f:3c:b1:c8:de:e8:78:cd:b1:03:6c:ed:44:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=492a8e482a81d90c45c4d90ac668a3f2245c0d6d Validity Not Before: Jan 2 10:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=665cbbeac47ddf188b58afbacf4d0920d810c34b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a1:62:01:03:31:d4:6a:a1:ec:da:7e:cc:b4: 86:96:0a:a0:0a:1f:bf:b0:a7:82:d6:b5:87:35:10: 65:fd:23:86:98:9c:aa:ca:80:05:0d:f4:f2:6d:fb: 95:18:93:7b:75:7e:c3:f4:7d:b0:39:c6:5f:77:18: 6f:64:ed:ec:67:3c:7b:de:37:d8:02:4d:67:94:93: f3:e3:c4:a6:1e:68:91:1f:0a:7e:44:68:9f:f6:9e: 12:5d:bc:46:ff:ea:0f:a5:a0:fb:45:95:7b:88:59: d0:ee:c8:54:be:7c:4e:af:34:e4:a6:b4:00:40:03: 21:9c:c2:39:12:0c:53:e6:70:60:2a:18:70:9d:f9: 6a:44:6f:76:2e:7d:fc:9f:bb:9a:f3:9f:8d:64:ea: e4:ca:30:75:d0:dc:ee:86:b1:5a:c9:f5:77:16:1d: 1f:70:28:97:8b:9b:6f:eb:17:1c:01:42:46:b5:7d: 43:4d:d1:03:a8:dd:ea:62:b8:72:1b:1c:5f:e1:44: ef:b6:b9:b1:a4:7e:14:00:98:98:6a:60:cf:77:76: 7d:b5:23:52:3f:19:dd:d8:3d:06:cb:e1:13:26:74: 56:cd:62:17:97:2c:53:d1:3b:62:62:fd:a6:69:e3: cd:32:f9:6b:3e:7a:db:ac:b2:10:f6:2f:e2:9c:a5: 40:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5C:BB:EA:C4:7D:DF:18:8B:58:AF:BA:CF:4D:09:20:D8:10:C3:4B X509v3 Authority Key Identifier: keyid:49:2A:8E:48:2A:81:D9:0C:45:C4:D9:0A:C6:68:A3:F2:24:5C:0D:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSqOSCqB2QxFxNkKxmij8iRcDW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/Zly76sR93xiLWK-6z00JINgQw0s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.32.0/22 Signature Algorithm: sha256WithRSAEncryption 80:15:da:9c:dc:de:c5:98:63:c3:6e:c8:52:4e:c8:0b:7c:72: 28:30:01:92:cf:b2:9a:a1:31:93:a1:1d:c1:f6:19:0a:14:4e: fa:07:61:54:ba:ec:1d:3f:74:d5:78:6d:4b:56:31:04:bd:01: 25:06:25:2e:b7:54:50:b9:a3:d8:e3:83:28:46:06:6f:b9:d8: 39:97:28:b6:26:fd:bc:1a:6c:79:43:16:3f:37:12:48:d9:cd: 28:46:72:22:41:37:01:a0:91:09:25:b8:7a:3b:db:4c:8f:f6: 1f:7a:09:e6:8d:06:65:c3:9e:26:89:7c:04:95:6c:d7:f3:6a: 8a:9e:e2:42:ab:cf:47:80:ee:68:92:da:48:ab:c4:d0:2b:9a: f4:90:ae:df:a9:7b:38:af:12:4b:77:db:5a:f4:f8:8f:48:6e: b6:d7:88:97:58:80:54:27:bc:54:6f:75:a1:b7:9b:94:92:26: c9:e2:c5:7c:d7:30:cf:51:f9:cb:9f:5f:6c:4d:5b:09:7a:d7: 6e:6f:08:7d:b6:17:90:bc:b2:e2:27:a3:17:a7:1f:44:65:91: fd:e7:d2:7d:72:f4:75:27:af:18:12:49:88:b9:44:47:94:cd: ca:b2:5a:03:83:73:d8:e6:0d:d8:d1:48:f8:ea:22:79:28:90: 06:20:c2:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OH88scje6HjNsQNs7UQCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MmE4ZTQ4MmE4MWQ5MGM0NWM0ZDkwYWM2NjhhM2YyMjQ1 YzBkNmQwHhcNMjYwMTAyMTAxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjVjYmJlYWM0N2RkZjE4OGI1OGFmYmFjZjRkMDkyMGQ4MTBjMzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKFiAQMx1Gqh7Np+zLSGlgqgCh+/ sKeC1rWHNRBl/SOGmJyqyoAFDfTybfuVGJN7dX7D9H2wOcZfdxhvZO3sZzx73jfY Ak1nlJPz48SmHmiRHwp+RGif9p4SXbxG/+oPpaD7RZV7iFnQ7shUvnxOrzTkprQA QAMhnMI5EgxT5nBgKhhwnflqRG92Ln38n7ua85+NZOrkyjB10NzuhrFayfV3Fh0f cCiXi5tv6xccAUJGtX1DTdEDqN3qYrhyGxxf4UTvtrmxpH4UAJiYamDPd3Z9tSNS Pxnd2D0Gy+ETJnRWzWIXlyxT0TtiYv2maePNMvlrPnrbrLIQ9i/inKVA1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGZcu+rEfd8Yi1ivus9NCSDYEMNLMB8GA1UdIwQY MBaAFEkqjkgqgdkMRcTZCsZoo/IkXA1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NxT1NDcUIyUXhGeE5rS3htaWo4aVJjRFcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9iOGVhZGYtODAzNy00ZmFlLThkMmMt ZTBhM2NiZDA0Nzk2LzEvWmx5NzZzUjkzeGlMV0stNnowMEpJTmdRdzBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9iOGVhZGYtODAzNy00ZmFlLThkMmMtZTBhM2NiZDA0Nzk2 LzEvU1NxT1NDcUIyUXhGeE5rS3htaWo4aVJjRFcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTwgMA0G CSqGSIb3DQEBCwUAA4IBAQCAFdqc3N7FmGPDbshSTsgLfHIoMAGSz7KaoTGToR3B 9hkKFE76B2FUuuwdP3TVeG1LVjEEvQElBiUut1RQuaPY44MoRgZvudg5lyi2Jv28 Gmx5QxY/NxJI2c0oRnIiQTcBoJEJJbh6O9tMj/YfegnmjQZlw54miXwElWzX82qK nuJCq89HgO5oktpIq8TQK5r0kK7fqXs4rxJLd9ta9PiPSG6214iXWIBUJ7xUb3Wh t5uUkibJ4sV81zDPUfnLn19sTVsJetdubwh9theQvLLiJ6MXpx9EZZH959J9cvR1 J68YEkmIuURHlM3KsloDg3PY5g3Y0Uj46iJ5KJAGIMK8 -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:42 2026 by rpki-client