This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/z2VeS6Cr-FUTndI9erFU_xgXeQc.roa File: z2VeS6Cr-FUTndI9erFU_xgXeQc.roa (raw, json) Hash identifier: VfSkmN7U5VY7VVnLMw0WuSWj2FuFIlacIGmckDk9o2A= Subject key identifier: CF:65:5E:4B:A0:AB:F8:55:13:9D:D2:3D:7A:B1:54:FF:18:17:79:07 Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426 Certificate serial: 019B7D5B4166F50521EA2ED74BC2C37A2928 Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/z2VeS6Cr-FUTndI9erFU_xgXeQc.roa Signing time: Fri 02 Jan 2026 06:18:10 +0000 ROA not before: Fri 02 Jan 2026 06:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215224 IP address blocks: 185.229.240.0/24 maxlen: 24 185.229.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:41:66:f5:05:21:ea:2e:d7:4b:c2:c3:7a:29:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426 Validity Not Before: Jan 2 06:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf655e4ba0abf855139dd23d7ab154ff18177907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c7:13:7d:7b:68:88:1e:d6:e4:17:ee:bf:3a: f5:b5:5e:a3:6d:d1:07:50:21:cb:81:76:d1:1b:19: 18:25:89:5c:d2:d1:fc:e3:ac:a3:93:94:96:d8:35: 80:1f:2e:61:b7:5f:0a:da:22:91:a0:bf:30:d6:5b: 79:21:d8:a3:59:1a:4c:a3:2f:fa:cb:d9:8b:6d:f1: 81:44:1a:57:a9:1d:01:d3:7f:4d:b5:65:f6:a7:9b: 1b:5c:83:12:92:5d:c7:fc:0b:8e:4c:c8:1a:8c:10: 6f:3d:84:17:81:3e:98:33:2a:c8:41:1f:b3:40:ac: 74:69:0d:2a:63:f3:8a:e5:0e:de:90:24:dc:c8:ae: db:16:c2:26:e6:88:05:d9:c7:2f:6f:4b:0d:ba:13: af:86:ee:50:28:6f:4a:04:28:f5:ba:eb:a0:73:be: c2:03:d9:73:b0:20:c6:76:38:28:a5:86:93:26:2b: 9b:f5:7a:ef:16:ab:12:f3:e2:80:8b:d7:0b:a8:e0: 8d:6e:f7:b7:fe:12:36:d1:ff:05:3d:70:5a:04:3d: bf:ef:45:2c:8c:58:bf:ef:24:78:5d:ac:dc:96:72: 15:99:72:8e:66:6f:86:75:f7:1c:28:44:02:59:aa: ba:45:ee:54:ba:e7:b4:93:95:a9:41:68:cb:d5:3b: d2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:65:5E:4B:A0:AB:F8:55:13:9D:D2:3D:7A:B1:54:FF:18:17:79:07 X509v3 Authority Key Identifier: keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/z2VeS6Cr-FUTndI9erFU_xgXeQc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.229.240.0/23 Signature Algorithm: sha256WithRSAEncryption 04:be:90:d7:b1:56:d5:a3:a6:e9:8d:16:35:43:0b:f0:9b:65: 6c:86:01:9c:7a:12:81:97:9c:b0:97:4c:85:a9:30:04:5a:ca: 0d:71:ce:50:4d:d8:3b:74:ee:5a:d0:58:3d:7f:b3:76:f4:cc: 45:12:8e:47:69:a9:27:aa:fa:bb:2a:bb:83:1b:de:18:a3:5c: b5:b4:79:9e:53:64:0a:d0:de:cc:92:6b:aa:df:27:c0:9f:23: c4:6a:f2:b0:65:29:23:15:b2:e5:12:30:18:dc:30:9d:5c:42: 2f:41:3f:31:f8:25:ab:59:8f:4a:d8:aa:2d:d7:fb:03:ab:87: 27:e2:da:e3:f6:07:0d:38:c4:85:72:80:10:a9:c5:75:44:e9: fc:d1:42:24:06:86:4c:9c:b7:8b:df:ea:b6:8a:18:76:6a:07: bf:e8:80:68:f7:a8:9f:64:99:6d:7a:e7:7c:fb:76:e2:84:85: 03:79:d7:2e:1f:62:71:43:a6:bf:90:31:d5:76:38:a9:45:ec: bf:a3:d3:db:77:9b:fe:22:7e:44:fa:72:ca:9f:f4:21:a1:22: 19:f0:40:4f:14:02:a3:15:1a:5f:09:1a:ef:68:4e:ce:db:a0: 36:63:0c:e4:1d:c3:53:03:94:13:e7:b0:4e:62:9e:65:bc:69: 78:e1:ef:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W0Fm9QUh6i7XS8LDeikoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYzhiNzNhYjdiZGViNzZmZjQ4YjJjYTA5OTYxNmVkYmU3 MWM0MjYwHhcNMjYwMTAyMDYxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjY1NWU0YmEwYWJmODU1MTM5ZGQyM2Q3YWIxNTRmZjE4MTc3OTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1McTfXtoiB7W5Bfuvzr1tV6jbdEH UCHLgXbRGxkYJYlc0tH846yjk5SW2DWAHy5ht18K2iKRoL8w1lt5IdijWRpMoy/6 y9mLbfGBRBpXqR0B039NtWX2p5sbXIMSkl3H/AuOTMgajBBvPYQXgT6YMyrIQR+z QKx0aQ0qY/OK5Q7ekCTcyK7bFsIm5ogF2ccvb0sNuhOvhu5QKG9KBCj1uuugc77C A9lzsCDGdjgopYaTJiub9XrvFqsS8+KAi9cLqOCNbve3/hI20f8FPXBaBD2/70Us jFi/7yR4XazclnIVmXKOZm+GdfccKEQCWaq6Re5Uuue0k5WpQWjL1TvSmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM9lXkugq/hVE53SPXqxVP8YF3kHMB8GA1UdIwQY MBaAFIHItzq3vet2/0iyygmWFu2+ccQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt ZDg0ODhiM2FiNDJmLzEvejJWZVM2Q3ItRlVUbmRJOWVyRlVfeGdYZVFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm LzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBueXwMA0G CSqGSIb3DQEBCwUAA4IBAQAEvpDXsVbVo6bpjRY1Qwvwm2VshgGcehKBl5ywl0yF qTAEWsoNcc5QTdg7dO5a0Fg9f7N29MxFEo5Haaknqvq7KruDG94Yo1y1tHmeU2QK 0N7Mkmuq3yfAnyPEavKwZSkjFbLlEjAY3DCdXEIvQT8x+CWrWY9K2Kot1/sDq4cn 4trj9gcNOMSFcoAQqcV1ROn80UIkBoZMnLeL3+q2ihh2age/6IBo96ifZJlteud8 +3bihIUDedcuH2JxQ6a/kDHVdjipRey/o9Pbd5v+In5E+nLKn/QhoSIZ8EBPFAKj FRpfCRrvaE7O26A2YwzkHcNTA5QT57BOYp5lvGl44e8p -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:00 2026 by rpki-client