This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/zmJzZmVY8NtwzftSPErinNzKjGE.roa File: zmJzZmVY8NtwzftSPErinNzKjGE.roa (raw, json) Hash identifier: yU1t8HphTqzqKJyMuPkrerGT4L8SmhaXm7BHsn47/0I= Subject key identifier: CE:62:73:66:65:58:F0:DB:70:CD:FB:52:3C:4A:E2:9C:DC:CA:8C:61 Certificate issuer: /CN=09f93d62beb75bb4232dcd052d270276d36f8573 Certificate serial: 019B7C124D174DF40D41EB01488390FAE994 Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/zmJzZmVY8NtwzftSPErinNzKjGE.roa Signing time: Fri 02 Jan 2026 00:18:52 +0000 ROA not before: Fri 02 Jan 2026 00:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.141.193.0/24 maxlen: 24 2a04:ac0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 00:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:4d:17:4d:f4:0d:41:eb:01:48:83:90:fa:e9:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573 Validity Not Before: Jan 2 00:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce6273666558f0db70cdfb523c4ae29cdcca8c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:87:31:c3:29:83:bd:cf:87:ab:03:45:9d:16: 58:97:e6:d3:07:ec:91:60:46:60:ec:7c:f1:b3:b5: 53:a5:20:c2:bc:51:78:6a:27:16:ac:56:a8:3a:5c: 67:d4:7e:8d:fd:e3:2c:a9:39:df:0d:08:79:8b:b9: 15:bb:e1:e8:4a:39:a0:86:8f:ac:20:09:0d:28:6b: a9:35:d5:4c:2d:2f:c5:01:2b:9b:46:6d:09:bf:e8: b4:97:eb:c0:b2:01:84:bd:ae:e5:c9:7c:08:d0:3c: 9e:05:c2:60:ea:d5:66:17:c8:4c:43:93:a7:df:0b: a2:01:19:87:30:36:f8:14:68:13:0a:54:48:4e:82: 6b:7c:7b:51:7d:47:d7:73:8b:84:c2:3e:80:ac:6e: b6:f1:ae:8e:aa:6a:88:5d:d5:d7:69:03:4a:88:47: be:3f:cb:32:32:dc:02:9f:72:40:dd:2f:49:d3:0b: 22:f1:ce:15:dc:1f:83:9f:44:a2:43:f2:63:87:ce: cb:04:d3:a6:b7:20:f0:e0:49:de:97:b1:12:5b:b6: 6f:70:ff:bb:dc:11:e0:8c:cb:4c:d5:44:5f:4e:17: 09:f5:f3:42:dd:83:0d:7b:d7:bd:f4:56:69:b7:9a: 8c:73:d3:78:0b:65:24:6f:37:30:cd:3d:61:81:d8: c8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:62:73:66:65:58:F0:DB:70:CD:FB:52:3C:4A:E2:9C:DC:CA:8C:61 X509v3 Authority Key Identifier: keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/zmJzZmVY8NtwzftSPErinNzKjGE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.141.193.0/24 IPv6: 2a04:ac0:2::/48 Signature Algorithm: sha256WithRSAEncryption 7f:89:78:56:25:c5:08:63:65:49:27:7d:8a:8c:5f:51:01:a0: 61:9c:02:bf:b5:dd:a6:b1:08:b6:0c:e4:68:ac:59:62:32:33: 47:3f:fd:7a:96:02:0d:97:11:b7:a4:b1:84:22:04:f6:76:3f: 8f:8a:9f:27:d1:1f:8e:f0:84:48:96:c3:9b:57:9c:bf:f1:6d: 62:9f:76:04:64:8c:07:f5:a1:16:0b:3e:8a:28:bb:7f:6f:5c: c1:35:07:0e:70:12:11:be:39:c2:fd:4e:41:6e:36:d4:2c:5b: 38:88:0c:bb:de:8d:44:25:c3:61:66:26:1c:4d:72:d1:13:fb: b5:98:f8:a2:45:ff:0b:e1:af:92:08:8c:27:bf:1d:9a:b7:de: 48:ca:12:51:52:66:86:a3:99:f1:56:5d:f0:96:37:eb:65:0a: dd:12:b9:a1:5c:30:19:40:1f:83:4b:bd:91:72:19:59:ff:90: a0:d4:ec:99:02:9b:4b:1b:76:7a:f8:e5:3b:3e:5f:dd:4f:39: 0f:24:26:d9:38:06:9f:81:af:84:27:93:96:d2:30:cb:38:21: eb:d7:3e:22:e0:49:c3:2e:ce:b3:6e:e2:e5:76:5e:47:87:50: 31:b1:e9:22:d1:25:e6:2a:c6:7d:2d:19:f5:39:d5:21:d8:5e: 6f:ca:b4:55 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8Ek0XTfQNQesBSIOQ+umUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZjkzZDYyYmViNzViYjQyMzJkY2QwNTJkMjcwMjc2ZDM2 Zjg1NzMwHhcNMjYwMTAyMDAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTYyNzM2NjY1NThmMGRiNzBjZGZiNTIzYzRhZTI5Y2RjY2E4YzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14cxwymDvc+HqwNFnRZYl+bTB+yR YEZg7Hzxs7VTpSDCvFF4aicWrFaoOlxn1H6N/eMsqTnfDQh5i7kVu+HoSjmgho+s IAkNKGupNdVMLS/FASubRm0Jv+i0l+vAsgGEva7lyXwI0DyeBcJg6tVmF8hMQ5On 3wuiARmHMDb4FGgTClRIToJrfHtRfUfXc4uEwj6ArG628a6OqmqIXdXXaQNKiEe+ P8syMtwCn3JA3S9J0wsi8c4V3B+Dn0SiQ/Jjh87LBNOmtyDw4Enel7ESW7ZvcP+7 3BHgjMtM1URfThcJ9fNC3YMNe9e99FZpt5qMc9N4C2UkbzcwzT1hgdjIiQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFM5ic2ZlWPDbcM37UjxK4pzcyoxhMB8GA1UdIwQY MBaAFAn5PWK+t1u0Iy3NBS0nAnbTb4VzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2ZrOVlyNjNXN1FqTGMwRkxTY0NkdE52aFhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83MDVhYWQtNTliMi00NzRlLWEzZDgt YmYzNGQwMWY4YjBhLzEvem1KelptVlk4TnR3emZ0U1BFcmluTnpLakdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny83MDVhYWQtNTliMi00NzRlLWEzZDgtYmYzNGQwMWY4YjBh LzEvQ2ZrOVlyNjNXN1FqTGMwRkxTY0NkdE52aFhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuY3BMA8E AgACMAkDBwAqBArAAAIwDQYJKoZIhvcNAQELBQADggEBAH+JeFYlxQhjZUknfYqM X1EBoGGcAr+13aaxCLYM5GisWWIyM0c//XqWAg2XEbeksYQiBPZ2P4+KnyfRH47w hEiWw5tXnL/xbWKfdgRkjAf1oRYLPooou39vXME1Bw5wEhG+OcL9TkFuNtQsWziI DLvejUQlw2FmJhxNctET+7WY+KJF/wvhr5IIjCe/HZq33kjKElFSZoajmfFWXfCW N+tlCt0SuaFcMBlAH4NLvZFyGVn/kKDU7JkCm0sbdnr45Ts+X91POQ8kJtk4Bp+B r4Qnk5bSMMs4IevXPiLgScMuzrNu4uV2XkeHUDGx6SLRJeYqxn0tGfU51SHYXm/K tFU= -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:14 2026 by rpki-client