This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/zgTpwMBLyKqEkj41ijMrXIxWx5I.roa File: zgTpwMBLyKqEkj41ijMrXIxWx5I.roa (raw, json) Hash identifier: bDKZ2scCeLL0RRlntw0B5EPYnDzEWkQl8FShFksXm3s= Subject key identifier: CE:04:E9:C0:C0:4B:C8:AA:84:92:3E:35:8A:33:2B:5C:8C:56:C7:92 Certificate issuer: /CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361 Certificate serial: 019B7758CC48DF56D27D762B42B584B846EF Authority key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/zgTpwMBLyKqEkj41ijMrXIxWx5I.roa Signing time: Thu 01 Jan 2026 02:17:46 +0000 ROA not before: Thu 01 Jan 2026 02:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63023 IP address blocks: 185.240.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:cc:48:df:56:d2:7d:76:2b:42:b5:84:b8:46:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361 Validity Not Before: Jan 1 02:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce04e9c0c04bc8aa84923e358a332b5c8c56c792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:98:f3:93:91:f2:d6:bb:63:c1:7a:c8:74:dc: b4:2d:4c:25:33:e4:93:1c:92:e0:4f:2c:54:cf:d1: 1c:ba:2b:22:33:89:4a:a3:6c:27:9d:49:f0:02:72: 6c:6e:82:03:ba:95:45:bd:95:bb:24:47:6e:60:1c: 7e:d7:bf:d4:08:36:53:f3:cf:8b:5a:71:2a:46:17: 19:11:05:96:c7:7d:ca:e2:9e:ac:0b:f4:3a:ab:9f: 38:d6:98:64:f6:b0:f7:1e:b9:10:10:c8:f7:2c:38: a9:3d:03:86:fd:0f:b8:b8:22:d8:a9:bb:b6:e3:85: c7:af:42:6d:0c:3f:68:71:93:d9:17:6a:9b:8b:8d: 8f:8d:52:a4:8a:99:a8:61:3b:a8:be:76:b7:49:5a: 80:72:4d:d6:25:a6:26:79:df:f0:4b:e1:c0:5b:17: fe:9d:ac:db:e4:4c:75:61:11:85:2b:93:4e:7d:91: f7:65:77:a7:86:79:e4:6c:4e:5b:3f:c4:fd:90:88: 2e:71:e6:6d:d3:39:8d:2a:3b:dd:27:e7:ef:75:4a: ea:f2:a3:6f:c5:05:04:13:ed:da:35:b9:7f:09:53: 85:7b:72:9e:01:71:d4:8a:5f:12:b8:bf:89:42:6a: 3f:6d:5d:a1:00:7d:82:68:23:0f:e2:fa:b3:f1:50: ef:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:04:E9:C0:C0:4B:C8:AA:84:92:3E:35:8A:33:2B:5C:8C:56:C7:92 X509v3 Authority Key Identifier: keyid:FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/zgTpwMBLyKqEkj41ijMrXIxWx5I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.240.161.0/24 Signature Algorithm: sha256WithRSAEncryption 12:30:72:cf:dd:63:94:39:6c:c0:7a:14:35:cf:53:89:e6:2d: 3a:6c:5d:a6:3d:5a:f2:af:26:57:ed:53:80:9b:33:2d:48:f3: e1:c6:75:0d:f4:46:ef:98:a8:7a:f4:e1:02:aa:d5:a0:4f:22: 66:c6:ca:24:c7:d0:85:2c:9f:95:d9:d9:9a:c1:8a:17:61:52: a8:ec:30:f0:3e:91:39:3a:77:12:5b:a8:26:de:93:73:3f:7a: ba:3c:7e:52:e0:dd:25:21:ed:f6:27:f7:6b:2a:41:1f:f9:dc: e7:75:52:72:3a:02:41:5d:0b:53:8c:84:42:ea:57:5b:59:2a: c9:eb:44:50:b8:94:06:89:92:30:c2:b3:3d:bb:d8:ae:5f:2b: 47:33:87:c0:d6:8a:87:89:2e:fa:62:c2:7d:f4:05:92:37:3c: 94:f8:dc:06:30:e1:d3:ad:ae:2c:ee:d4:6c:e7:d8:37:b3:2a: 1a:ed:13:e9:6c:0f:61:76:30:d1:da:e3:b7:92:51:ed:96:ed: 79:b4:74:28:0f:99:c0:53:0f:63:e4:0e:8a:8e:1e:aa:48:bb: c8:c2:8b:f7:dd:b5:5d:50:eb:4a:cd:37:8e:ba:41:c6:67:c5: e5:69:8c:22:4e:e6:e7:2f:4e:2f:9d:c9:2a:3f:25:12:3e:77: a5:93:65:cb -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WMxI31bSfXYrQrWEuEbvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMmU3MmFiZjdiMTcyOGZkYTZhYTBiMDQxM2Q4ODU0ODEy ZWEzNjEwHhcNMjYwMTAxMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTA0ZTljMGMwNGJjOGFhODQ5MjNlMzU4YTMzMmI1YzhjNTZjNzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5jzk5Hy1rtjwXrIdNy0LUwlM+ST HJLgTyxUz9EcuisiM4lKo2wnnUnwAnJsboIDupVFvZW7JEduYBx+17/UCDZT88+L WnEqRhcZEQWWx33K4p6sC/Q6q5841phk9rD3HrkQEMj3LDipPQOG/Q+4uCLYqbu2 44XHr0JtDD9ocZPZF2qbi42PjVKkipmoYTuovna3SVqAck3WJaYmed/wS+HAWxf+ nazb5Ex1YRGFK5NOfZH3ZXenhnnkbE5bP8T9kIguceZt0zmNKjvdJ+fvdUrq8qNv xQUEE+3aNbl/CVOFe3KeAXHUil8SuL+JQmo/bV2hAH2CaCMP4vqz8VDvswIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFM4E6cDAS8iqhJI+NYozK1yMVseSMB8GA1UdIwQY MBaAFPoucqv3sXKP2mqgsEE9iFSBLqNhMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1pNXlxX2V4Y29fYWFxQ3dRVDJJVklFdW8yRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvZjYxNTkxLTdjYTgtNGE5YS04OTlm LWEzNjZkYTI1MWE4My8xL3pnVHB3TUJMeUtxRWtqNDFpak1yWEl4V3g1SS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOWMvZjYxNTkxLTdjYTgtNGE5YS04OTlmLWEzNjZkYTI1MWE4 My8xLzEtaTV5cV9leGNvX2FhcUN3UVQySVZJRXVvMkUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC58KEw DQYJKoZIhvcNAQELBQADggEBABIwcs/dY5Q5bMB6FDXPU4nmLTpsXaY9WvKvJlft U4CbMy1I8+HGdQ30Ru+YqHr04QKq1aBPImbGyiTH0IUsn5XZ2ZrBihdhUqjsMPA+ kTk6dxJbqCbek3M/ero8flLg3SUh7fYn92sqQR/53Od1UnI6AkFdC1OMhELqV1tZ KsnrRFC4lAaJkjDCsz272K5fK0czh8DWioeJLvpiwn30BZI3PJT43AYw4dOtrizu 1Gzn2DezKhrtE+lsD2F2MNHa47eSUe2W7Xm0dCgPmcBTD2PkDoqOHqpIu8jCi/fd tV1Q60rNN466QcZnxeVpjCJO5ucvTi+dySo/JRI+d6WTZcs= -----END CERTIFICATE-----Generated at Mon Jan 19 18:05:07 2026 by rpki-client