This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/ZzpicKaWHBurh0e4X0ZDIWNkcE4.roa File: ZzpicKaWHBurh0e4X0ZDIWNkcE4.roa (raw, json) Hash identifier: 6kr876ns89mpp5ShZ/UXz/K/xiX9GT4sofpkzvGfKa8= Subject key identifier: 67:3A:62:70:A6:96:1C:1B:AB:87:47:B8:5F:46:43:21:63:64:70:4E Certificate issuer: /CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1 Certificate serial: 019B797DFF100B5EE618D30895A084DE05D7 Authority key identifier: 72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/ZzpicKaWHBurh0e4X0ZDIWNkcE4.roa Signing time: Thu 01 Jan 2026 12:17:39 +0000 ROA not before: Thu 01 Jan 2026 12:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 185.45.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:ff:10:0b:5e:e6:18:d3:08:95:a0:84:de:05:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1 Validity Not Before: Jan 1 12:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=673a6270a6961c1bab8747b85f4643216364704e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6a:71:e2:ae:d3:cb:ec:e2:f6:9b:3a:ff:53: 2c:87:2a:e5:60:49:31:6c:28:ec:5f:d8:8f:91:4a: 83:c8:5f:1c:e8:21:07:2d:31:0e:ef:06:c9:10:43: 5f:9e:fa:90:cd:59:b0:8f:17:57:c5:45:12:b1:3a: 4f:af:f3:40:f3:bd:f9:39:41:cc:70:83:2e:a8:3b: 7c:84:f5:ce:4f:4d:42:cf:cd:96:1a:45:fe:f2:f4: e7:cb:38:16:0f:3e:f4:3d:79:c6:52:e3:b0:c8:bb: 9f:a6:bb:35:bb:e4:0e:19:21:65:07:1d:91:4e:ad: 6a:6c:f6:c3:50:a5:cd:7f:58:46:43:11:f7:eb:d5: 22:ff:c4:f1:cd:dd:90:f5:39:75:3e:ea:ec:5d:6e: 7b:59:ab:40:cb:41:bb:39:7b:d3:8f:8a:c6:8d:c7: 6d:5e:a4:de:38:67:69:6e:15:d2:a9:bd:91:ef:5a: f9:1f:4d:c4:ae:20:76:5f:9e:2f:2a:02:16:a9:59: cf:f7:2e:19:1e:57:fd:92:07:14:c9:f8:45:78:04: f7:22:85:26:29:1d:75:29:1b:5c:89:fa:d1:7b:11: 2f:33:e3:d1:48:f6:af:7a:8b:72:b0:cf:57:62:1e: b9:c2:83:9c:c2:e8:95:18:bc:fd:85:2b:ef:64:e7: 31:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:3A:62:70:A6:96:1C:1B:AB:87:47:B8:5F:46:43:21:63:64:70:4E X509v3 Authority Key Identifier: keyid:72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/ZzpicKaWHBurh0e4X0ZDIWNkcE4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.45.122.0/24 Signature Algorithm: sha256WithRSAEncryption 55:57:48:45:e9:67:dc:df:49:a7:5c:9a:7b:ee:e5:9e:d1:89: b9:51:67:2c:ba:63:3a:7b:01:b5:6b:c2:71:3a:db:9e:81:90: ff:6d:39:a4:06:e9:a8:57:91:dc:e4:94:59:47:e5:70:21:78: 0e:7a:ce:1b:68:1f:aa:76:80:7d:0c:f7:2d:31:0e:60:c3:b2: b0:67:0c:68:07:63:7f:62:0d:15:a9:8f:de:3e:8d:aa:8b:e5: 1e:33:b8:0e:0a:82:7c:00:db:0a:80:67:9d:36:61:68:c3:32: 27:4a:18:e0:9d:36:36:f9:3d:cd:d8:7c:5d:09:b6:d6:6f:70: 66:ba:0b:84:ad:79:2e:3f:ab:fc:0f:2a:fa:9e:4d:85:77:04: ec:a6:f9:2f:51:3d:c0:47:e1:3c:21:e3:b3:df:58:ee:4a:3d: 6a:ea:46:a6:a1:ab:46:8c:b0:f4:77:70:20:91:b7:81:12:76: ae:58:4e:18:44:5a:69:53:e6:21:02:55:70:f1:2f:a3:89:85: e0:52:0c:79:65:6f:09:59:13:01:29:2f:6d:31:49:a4:32:dd: 30:20:27:68:f6:ad:4a:84:cd:b1:d2:59:b5:15:61:7e:f2:53: d8:15:68:f9:db:b0:e1:13:99:52:ff:68:49:4b:13:e4:6d:0a: 0e:0b:16:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ff8QC17mGNMIlaCE3gXXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYmQ4M2Y1Mjc1YmQwOWU4ZDMzYjQyOTg4MWViMmY5NmI2 ZDlkZTEwHhcNMjYwMTAxMTIxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzNhNjI3MGE2OTYxYzFiYWI4NzQ3Yjg1ZjQ2NDMyMTYzNjQ3MDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWpx4q7Ty+zi9ps6/1MshyrlYEkx bCjsX9iPkUqDyF8c6CEHLTEO7wbJEENfnvqQzVmwjxdXxUUSsTpPr/NA8735OUHM cIMuqDt8hPXOT01Cz82WGkX+8vTnyzgWDz70PXnGUuOwyLufprs1u+QOGSFlBx2R Tq1qbPbDUKXNf1hGQxH369Ui/8Txzd2Q9Tl1PursXW57WatAy0G7OXvTj4rGjcdt XqTeOGdpbhXSqb2R71r5H03EriB2X54vKgIWqVnP9y4ZHlf9kgcUyfhFeAT3IoUm KR11KRtcifrRexEvM+PRSPaveotysM9XYh65woOcwuiVGLz9hSvvZOcxIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGc6YnCmlhwbq4dHuF9GQyFjZHBOMB8GA1UdIwQY MBaAFHK9g/UnW9CejTO0KYgesvlrbZ3hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3IyRDlTZGIwSjZOTTdRcGlCNnktV3R0bmVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xOGM2YmEtN2I3MS00NDY2LWJiMzMt MDA1ODc3ZGE4MDI2LzEvWnpwaWNLYVdIQnVyaDBlNFgwWkRJV05rY0U0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8xOGM2YmEtN2I3MS00NDY2LWJiMzMtMDA1ODc3ZGE4MDI2 LzEvY3IyRDlTZGIwSjZOTTdRcGlCNnktV3R0bmVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuS16MA0G CSqGSIb3DQEBCwUAA4IBAQBVV0hF6Wfc30mnXJp77uWe0Ym5UWcsumM6ewG1a8Jx OtuegZD/bTmkBumoV5Hc5JRZR+VwIXgOes4baB+qdoB9DPctMQ5gw7KwZwxoB2N/ Yg0VqY/ePo2qi+UeM7gOCoJ8ANsKgGedNmFowzInShjgnTY2+T3N2HxdCbbWb3Bm uguErXkuP6v8Dyr6nk2FdwTspvkvUT3AR+E8IeOz31juSj1q6kamoatGjLD0d3Ag kbeBEnauWE4YRFppU+YhAlVw8S+jiYXgUgx5ZW8JWRMBKS9tMUmkMt0wICdo9q1K hM2x0lm1FWF+8lPYFWj527DhE5lS/2hJSxPkbQoOCxau -----END CERTIFICATE-----Generated at Sun Jan 18 16:38:01 2026 by rpki-client