This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/ZNgK6rPOYQbiev36cRFB7zB9RWE.roa File: ZNgK6rPOYQbiev36cRFB7zB9RWE.roa (raw, json) Hash identifier: w0ez/NTzH8N4Z6kf7bnAilQBpsFXHEVSwqd8OI0nbqs= Subject key identifier: 64:D8:0A:EA:B3:CE:61:06:E2:7A:FD:FA:71:11:41:EF:30:7D:45:61 Certificate issuer: /CN=2a36d678c4bbcac24ae6bea9a24c995c48d593f0 Certificate serial: 019B7BA535B989982D815F4B5F3DC9D780EE Authority key identifier: 2A:36:D6:78:C4:BB:CA:C2:4A:E6:BE:A9:A2:4C:99:5C:48:D5:93:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/ZNgK6rPOYQbiev36cRFB7zB9RWE.roa Signing time: Thu 01 Jan 2026 22:19:43 +0000 ROA not before: Thu 01 Jan 2026 22:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204028 IP address blocks: 185.118.196.0/22 maxlen: 24 185.118.196.0/24 maxlen: 24 185.118.197.0/24 maxlen: 24 185.118.198.0/24 maxlen: 24 185.118.199.0/24 maxlen: 24 213.170.142.0/24 maxlen: 24 2a06:9500::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:35:b9:89:98:2d:81:5f:4b:5f:3d:c9:d7:80:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a36d678c4bbcac24ae6bea9a24c995c48d593f0 Validity Not Before: Jan 1 22:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64d80aeab3ce6106e27afdfa711141ef307d4561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:33:be:ca:cd:4e:46:07:bd:bc:a1:e6:64:16: 71:11:7c:82:44:99:7f:58:d3:47:bf:32:7c:db:1b: 8c:3e:79:3d:47:2a:89:79:bf:55:5c:0b:0d:be:4a: de:32:57:9f:d1:7f:ab:71:ea:04:ff:df:41:b1:60: 50:59:99:3e:31:c4:fc:1b:e8:c1:29:d7:22:f6:a8: 45:70:59:df:25:82:a6:75:f7:f2:92:22:72:9f:13: da:3c:23:f8:3a:64:c1:78:13:bc:7b:01:25:a1:64: 00:0b:09:56:2f:8a:b7:4e:d4:89:21:a3:9e:da:d1: 95:72:49:64:0c:5c:82:68:a9:7e:13:da:e4:06:3e: 90:5d:ca:7d:60:f2:85:30:1f:33:aa:e5:a6:52:60: d5:47:ee:36:f2:a4:2d:72:92:82:55:46:d6:ce:03: c6:d6:54:fc:d0:98:89:3a:4f:4c:1e:da:ed:dd:2b: 5a:46:d5:0d:95:75:76:1e:37:00:02:c0:27:74:75: 96:90:02:13:10:9c:a8:c3:68:91:e2:0f:51:af:c4: ed:61:01:a4:71:68:fe:b0:59:88:27:9f:fa:1d:c9: 20:c6:97:22:a8:b0:c9:21:6d:d4:c5:0b:d6:7f:4d: 5c:0e:9e:ea:ed:3c:09:1b:1e:ae:05:3f:5f:64:db: e1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D8:0A:EA:B3:CE:61:06:E2:7A:FD:FA:71:11:41:EF:30:7D:45:61 X509v3 Authority Key Identifier: keyid:2A:36:D6:78:C4:BB:CA:C2:4A:E6:BE:A9:A2:4C:99:5C:48:D5:93:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/ZNgK6rPOYQbiev36cRFB7zB9RWE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.118.196.0/22 213.170.142.0/24 IPv6: 2a06:9500::/29 Signature Algorithm: sha256WithRSAEncryption a7:9f:d0:b1:c6:f1:9f:05:02:f8:1b:93:90:a8:19:3c:41:16: 08:bd:a4:0d:48:03:cf:5e:11:99:1c:58:76:77:07:0d:27:20: 71:d9:7f:b1:77:b1:54:01:74:46:75:26:bb:42:8c:3b:f3:f8: bc:c9:80:ae:bf:14:f3:60:8d:07:4f:fd:1a:01:38:db:49:0a: 86:38:c0:cb:12:aa:9d:05:fd:92:4f:bd:26:21:5c:36:21:0b: 8f:91:c5:7c:70:fb:ce:4a:98:a2:c6:e9:97:4f:34:32:f5:b8: 4b:f0:cd:f8:8c:82:e5:55:43:75:f9:82:7d:f4:03:ab:6c:b4: e3:73:e3:a3:09:01:10:c8:5f:6a:06:e8:03:55:ef:74:08:58: 4c:41:a3:ac:97:68:14:0f:aa:1c:bb:71:86:5e:28:13:cb:84: e8:67:22:d0:4c:c9:5d:cf:7f:a9:ea:30:0e:d2:1f:97:90:1a: 76:84:8d:8b:f2:c7:f4:cf:fe:aa:57:35:6a:5b:11:2c:dc:64: 0b:fb:69:f4:1f:e6:30:17:47:8b:ef:d1:f3:33:30:83:1b:11: cf:79:72:90:65:92:2a:20:04:8d:d6:98:3d:09:9e:c9:1d:8f: 31:89:18:f3:5a:9b:86:a0:1f:f2:97:d7:a4:74:e0:03:9a:4f: 07:1f:ce:bf -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7pTW5iZgtgV9LXz3J14DuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMzZkNjc4YzRiYmNhYzI0YWU2YmVhOWEyNGM5OTVjNDhk NTkzZjAwHhcNMjYwMTAxMjIxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGQ4MGFlYWIzY2U2MTA2ZTI3YWZkZmE3MTExNDFlZjMwN2Q0NTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8DO+ys1ORge9vKHmZBZxEXyCRJl/ WNNHvzJ82xuMPnk9RyqJeb9VXAsNvkreMlef0X+rceoE/99BsWBQWZk+McT8G+jB Kdci9qhFcFnfJYKmdffykiJynxPaPCP4OmTBeBO8ewEloWQACwlWL4q3TtSJIaOe 2tGVcklkDFyCaKl+E9rkBj6QXcp9YPKFMB8zquWmUmDVR+428qQtcpKCVUbWzgPG 1lT80JiJOk9MHtrt3StaRtUNlXV2HjcAAsAndHWWkAITEJyow2iR4g9Rr8TtYQGk cWj+sFmIJ5/6HckgxpciqLDJIW3UxQvWf01cDp7q7TwJGx6uBT9fZNvhjwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGTYCuqzzmEG4nr9+nERQe8wfUVhMB8GA1UdIwQY MBaAFCo21njEu8rCSua+qaJMmVxI1ZPwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2piV2VNUzd5c0pLNXI2cG9reVpYRWpWa19BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9hMDFmZDMtYTg2Ny00MmM2LTlhMGUt ZGY2NTFiOTY2YjJiLzEvWk5nSzZyUE9ZUWJpZXYzNmNSRkI3ekI5UldFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9hMDFmZDMtYTg2Ny00MmM2LTlhMGUtZGY2NTFiOTY2YjJi LzEvS2piV2VNUzd5c0pLNXI2cG9reVpYRWpWa19BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuXbEAwQA 1aqOMA0EAgACMAcDBQMqBpUAMA0GCSqGSIb3DQEBCwUAA4IBAQCnn9CxxvGfBQL4 G5OQqBk8QRYIvaQNSAPPXhGZHFh2dwcNJyBx2X+xd7FUAXRGdSa7Qow78/i8yYCu vxTzYI0HT/0aATjbSQqGOMDLEqqdBf2ST70mIVw2IQuPkcV8cPvOSpiixumXTzQy 9bhL8M34jILlVUN1+YJ99AOrbLTjc+OjCQEQyF9qBugDVe90CFhMQaOsl2gUD6oc u3GGXigTy4ToZyLQTMldz3+p6jAO0h+XkBp2hI2L8sf0z/6qVzVqWxEs3GQL+2n0 H+YwF0eL79HzMzCDGxHPeXKQZZIqIASN1pg9CZ7JHY8xiRjzWpuGoB/yl9ekdOAD mk8HH86/ -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:14 2026 by rpki-client