This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/ZgQVnt2sCJCW5WJtm6rkh6ZTXa0.roa File: ZgQVnt2sCJCW5WJtm6rkh6ZTXa0.roa (raw, json) Hash identifier: AZk9Jwr5toaqA9609l05vDG4SlK9prtZxrMQmnM4Ybs= Subject key identifier: 66:04:15:9E:DD:AC:08:90:96:E5:62:6D:9B:AA:E4:87:A6:53:5D:AD Certificate issuer: /CN=57bbbc47b1c67e557beab0f2c6d18bf026c306e0 Certificate serial: 019B79101CDD5B35062330236DEAF49A8C46 Authority key identifier: 57:BB:BC:47:B1:C6:7E:55:7B:EA:B0:F2:C6:D1:8B:F0:26:C3:06:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7u8R7HGflV76rDyxtGL8CbDBuA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/ZgQVnt2sCJCW5WJtm6rkh6ZTXa0.roa Signing time: Thu 01 Jan 2026 10:17:37 +0000 ROA not before: Thu 01 Jan 2026 10:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199657 IP address blocks: 185.7.20.0/22 maxlen: 24 2a03:11c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft rsync://rpki.ripe.net/repository/DEFAULT/V7u8R7HGflV76rDyxtGL8CbDBuA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:1c:dd:5b:35:06:23:30:23:6d:ea:f4:9a:8c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57bbbc47b1c67e557beab0f2c6d18bf026c306e0 Validity Not Before: Jan 1 10:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6604159eddac089096e5626d9baae487a6535dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:08:0e:92:8c:04:89:a6:25:84:5c:a5:3e:18: 0e:6f:bc:25:b9:a1:30:9e:96:19:52:f6:9b:0b:ab: c2:b9:da:bf:4e:e6:b1:71:04:e3:17:7f:2d:74:d7: 1b:a0:d4:5a:57:89:50:38:75:2e:2b:e5:25:fc:e5: cb:66:ba:38:64:60:10:63:d5:7b:8b:44:83:b9:79: 86:bc:a6:a4:09:28:d9:ef:7a:9a:8c:44:81:ba:f5: 03:3f:a2:27:63:d6:1e:c1:5d:f4:aa:8a:06:73:29: 23:e3:7f:5b:45:3b:e9:17:78:31:9e:77:b8:e1:1b: c8:f5:66:db:fd:d6:1c:89:1c:f2:a2:81:af:47:86: bc:67:4f:b1:8a:aa:45:e9:d6:90:5c:97:ee:6b:01: db:73:31:94:93:0f:25:03:04:db:d7:05:af:ea:43: 95:c5:73:bf:49:50:17:c6:0c:41:35:7a:f2:96:ed: 91:0a:50:b1:7e:6c:65:1b:22:6d:81:d9:37:50:04: 7f:a3:40:e5:a7:bf:f1:25:a7:0f:d8:bc:6e:59:ad: 26:82:ed:ce:cc:fc:c3:56:b6:48:aa:6b:83:cc:0d: 9c:fa:2b:22:27:f1:18:48:81:1b:3f:72:84:4d:2e: ee:55:9c:df:17:08:b6:fa:45:24:4e:02:1a:81:1d: dd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:04:15:9E:DD:AC:08:90:96:E5:62:6D:9B:AA:E4:87:A6:53:5D:AD X509v3 Authority Key Identifier: keyid:57:BB:BC:47:B1:C6:7E:55:7B:EA:B0:F2:C6:D1:8B:F0:26:C3:06:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7u8R7HGflV76rDyxtGL8CbDBuA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/ZgQVnt2sCJCW5WJtm6rkh6ZTXa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.7.20.0/22 IPv6: 2a03:11c0::/32 Signature Algorithm: sha256WithRSAEncryption 3c:6f:7c:d1:5d:f1:6c:68:fb:09:c5:86:fc:ed:79:5d:5c:bc: b3:4e:9a:85:66:b1:b2:11:f8:bf:80:f4:7f:61:3e:a4:89:d9: ba:93:69:c7:63:b5:08:b3:13:29:ae:f6:87:6a:b7:fe:bc:85: d7:76:01:c3:87:42:c8:c9:e8:e7:6d:55:22:80:65:ba:d6:85: ae:5f:bb:94:2c:8b:10:21:f3:bf:52:db:86:84:3b:21:63:e9: eb:72:21:fd:9a:c2:6d:0f:f8:72:2a:13:70:2f:16:7a:ea:17: 4d:3e:81:5a:fc:df:a2:d8:61:05:99:4b:51:ac:f4:07:04:99: f8:15:40:df:67:12:92:57:31:43:47:8b:97:7a:09:d7:f3:17: 3d:30:dd:7c:2f:c5:d6:c2:80:cc:6a:03:ff:92:aa:04:a2:99: 50:ec:74:ea:8e:c8:4d:61:b3:72:ba:a5:32:65:72:e1:ec:d4: df:ea:e8:72:36:25:a0:c2:55:45:06:2f:13:ec:77:a4:8e:56: 3d:24:88:1e:74:01:45:2f:80:50:09:52:4b:5a:9b:f4:fe:9b: 3f:3e:57:6c:45:59:81:b2:d3:62:b0:91:f9:e0:f5:b5:eb:f3: c8:81:37:2d:85:3e:cc:e5:7d:a3:d3:2c:73:6d:e5:66:75:65: fe:1e:90:3b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EBzdWzUGIzAjber0moxGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YmJiYzQ3YjFjNjdlNTU3YmVhYjBmMmM2ZDE4YmYwMjZj MzA2ZTAwHhcNMjYwMTAxMTAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjA0MTU5ZWRkYWMwODkwOTZlNTYyNmQ5YmFhZTQ4N2E2NTM1ZGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywgOkowEiaYlhFylPhgOb7wluaEw npYZUvabC6vCudq/TuaxcQTjF38tdNcboNRaV4lQOHUuK+Ul/OXLZro4ZGAQY9V7 i0SDuXmGvKakCSjZ73qajESBuvUDP6InY9YewV30qooGcykj439bRTvpF3gxnne4 4RvI9Wbb/dYciRzyooGvR4a8Z0+xiqpF6daQXJfuawHbczGUkw8lAwTb1wWv6kOV xXO/SVAXxgxBNXrylu2RClCxfmxlGyJtgdk3UAR/o0Dlp7/xJacP2LxuWa0mgu3O zPzDVrZIqmuDzA2c+isiJ/EYSIEbP3KETS7uVZzfFwi2+kUkTgIagR3ddwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGYEFZ7drAiQluVibZuq5IemU12tMB8GA1UdIwQY MBaAFFe7vEexxn5Ve+qw8sbRi/AmwwbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjd1OFI3SEdmbFY3NnJEeXh0R0w4Q2JEQnVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mZWYxM2QtOGI5OC00NTFkLThlMDEt YjdiM2FmZmM2ZWM5LzEvWmdRVm50MnNDSkNXNVdKdG02cmtoNlpUWGEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9mZWYxM2QtOGI5OC00NTFkLThlMDEtYjdiM2FmZmM2ZWM5 LzEvVjd1OFI3SEdmbFY3NnJEeXh0R0w4Q2JEQnVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuQcUMA0E AgACMAcDBQAqAxHAMA0GCSqGSIb3DQEBCwUAA4IBAQA8b3zRXfFsaPsJxYb87Xld XLyzTpqFZrGyEfi/gPR/YT6kidm6k2nHY7UIsxMprvaHarf+vIXXdgHDh0LIyejn bVUigGW61oWuX7uULIsQIfO/UtuGhDshY+nrciH9msJtD/hyKhNwLxZ66hdNPoFa /N+i2GEFmUtRrPQHBJn4FUDfZxKSVzFDR4uXegnX8xc9MN18L8XWwoDMagP/kqoE oplQ7HTqjshNYbNyuqUyZXLh7NTf6uhyNiWgwlVFBi8T7HekjlY9JIgedAFFL4BQ CVJLWpv0/ps/PldsRVmBstNisJH54PW16/PIgTcthT7M5X2j0yxzbeVmdWX+HpA7 -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:48 2026 by rpki-client