This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_ZWSKkXuBHjiv-L0PixHTIHZOdQ.roa File: _ZWSKkXuBHjiv-L0PixHTIHZOdQ.roa (raw, json) Hash identifier: qe6ihhT3yR6t7+njBEvLfRsvgRV0ISuyHcZNmPr71D4= Subject key identifier: FD:95:92:2A:45:EE:04:78:E2:BF:E2:F4:3E:2C:47:4C:81:D9:39:D4 Certificate issuer: /CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9 Certificate serial: 019B7A5B6B58609099D4E61CFD105E0DFA03 Authority key identifier: FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_ZWSKkXuBHjiv-L0PixHTIHZOdQ.roa Signing time: Thu 01 Jan 2026 16:19:30 +0000 ROA not before: Thu 01 Jan 2026 16:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 185.187.123.0/24 maxlen: 24 2a0b:9e80:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 13:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:6b:58:60:90:99:d4:e6:1c:fd:10:5e:0d:fa:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9 Validity Not Before: Jan 1 16:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd95922a45ee0478e2bfe2f43e2c474c81d939d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b1:1f:67:a1:e3:56:38:a5:11:27:a4:d8:c8: 87:b8:92:11:52:0f:c7:95:7d:cb:ab:16:b5:66:fa: 65:90:8c:27:d9:1c:14:96:d9:2e:a6:80:d4:a3:dc: 0f:61:cc:bc:7d:96:7b:e9:24:b3:ec:80:49:d6:07: fc:24:b3:63:49:60:50:7e:46:9a:cf:f9:8b:a6:a6: eb:2b:db:eb:ff:20:17:83:73:8c:c2:d0:02:5b:d8: 31:02:72:71:c7:e4:85:cc:f0:26:6f:8b:3e:a8:f4: e7:d6:f4:c7:72:35:f6:2b:0d:fb:56:fe:97:c1:18: cb:dc:95:b5:39:53:74:82:c8:3c:03:be:79:e1:b2: b0:dd:1f:1f:81:8f:0a:22:88:6a:32:5f:ae:28:9e: 49:84:32:9b:85:ed:e6:e3:6c:e6:11:83:d6:4a:0d: 32:5d:2c:e9:54:05:f1:21:5f:ff:54:46:a1:bd:6f: c3:9f:9f:4e:9c:e2:a8:e5:81:5b:0d:71:92:d4:d0: ff:d2:c8:14:48:ee:5c:ce:fe:15:fb:77:b3:1a:4c: 8b:42:59:4a:79:b1:a5:2d:ec:28:ea:1b:3d:3c:8b: 38:a1:d7:93:9c:2d:62:0f:06:81:55:10:ef:3d:a2: c1:73:6e:24:92:31:de:78:6d:e0:da:32:29:33:d2: 10:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:95:92:2A:45:EE:04:78:E2:BF:E2:F4:3E:2C:47:4C:81:D9:39:D4 X509v3 Authority Key Identifier: keyid:FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_ZWSKkXuBHjiv-L0PixHTIHZOdQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.187.123.0/24 IPv6: 2a0b:9e80:2000::/48 Signature Algorithm: sha256WithRSAEncryption 0d:34:76:64:de:87:4b:24:92:a5:a3:94:01:3e:b9:f1:d5:16: f0:de:73:55:00:7f:2d:b5:83:09:77:30:a6:51:3c:a5:d8:6a: 18:ae:0a:67:f0:bd:16:6c:63:6a:33:9f:10:46:ea:f4:bd:fb: 38:7b:a9:75:82:80:81:a5:7d:70:2c:41:41:82:cd:3e:c2:30: 9c:0a:62:51:19:b5:fa:ab:87:ef:c8:69:43:78:66:a3:38:3d: 09:6d:41:08:8f:3b:e6:6b:e9:18:5d:03:43:86:b6:25:95:22: cf:4f:e8:e0:e7:8a:29:10:a4:7c:d4:45:15:5c:f1:b4:77:1d: ca:e3:0b:5c:e0:95:81:ee:44:81:21:0a:f2:bd:b8:fd:30:8f: 36:88:ed:63:99:03:a4:ff:7a:bb:67:44:67:21:1a:38:4b:21: d0:9b:99:f0:73:42:5e:c0:4c:91:97:64:6d:9c:2a:cf:98:18: 54:c6:f3:bd:20:e3:14:0a:47:32:d3:55:0d:52:ea:3c:dc:6a: 93:ce:a8:1c:29:d6:28:ac:aa:a4:77:55:71:53:36:5c:ad:87: 81:0f:a1:7b:64:0f:39:77:a7:e7:c6:0f:b5:dc:60:dc:6e:cf: 65:1f:5a:7f:a0:57:e1:ca:fa:ac:b4:fc:41:e1:ec:5f:d3:64: 35:ae:0e:b8 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6W2tYYJCZ1OYc/RBeDfoDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjI1NjJjYWU4NzNmNGZjNGEzMjMyYmY0OWRkNTM0M2I3 MDg0ZjkwHhcNMjYwMTAxMTYxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDk1OTIyYTQ1ZWUwNDc4ZTJiZmUyZjQzZTJjNDc0YzgxZDkzOWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LEfZ6HjVjilESek2MiHuJIRUg/H lX3Lqxa1ZvplkIwn2RwUltkupoDUo9wPYcy8fZZ76SSz7IBJ1gf8JLNjSWBQfkaa z/mLpqbrK9vr/yAXg3OMwtACW9gxAnJxx+SFzPAmb4s+qPTn1vTHcjX2Kw37Vv6X wRjL3JW1OVN0gsg8A7554bKw3R8fgY8KIohqMl+uKJ5JhDKbhe3m42zmEYPWSg0y XSzpVAXxIV//VEahvW/Dn59OnOKo5YFbDXGS1ND/0sgUSO5czv4V+3ezGkyLQllK ebGlLewo6hs9PIs4odeTnC1iDwaBVRDvPaLBc24kkjHeeG3g2jIpM9IQ1wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFP2VkipF7gR44r/i9D4sR0yB2TnUMB8GA1UdIwQY MBaAFP9iViyuhz9PxKMjK/Sd1TQ7cIT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJKV0xLNkhQMF9Fb3lNcjlKM1ZORHR3aFBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zZGMzYzQtOWM0OC00YTY0LThmYTEt ODhmN2I5MWI2ZTMyLzEvX1pXU0trWHVCSGppdi1MMFBpeEhUSUhaT2RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8zZGMzYzQtOWM0OC00YTY0LThmYTEtODhmN2I5MWI2ZTMy LzEvXzJKV0xLNkhQMF9Fb3lNcjlKM1ZORHR3aFBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAubt7MA8E AgACMAkDBwAqC56AIAAwDQYJKoZIhvcNAQELBQADggEBAA00dmTeh0skkqWjlAE+ ufHVFvDec1UAfy21gwl3MKZRPKXYahiuCmfwvRZsY2oznxBG6vS9+zh7qXWCgIGl fXAsQUGCzT7CMJwKYlEZtfqrh+/IaUN4ZqM4PQltQQiPO+Zr6RhdA0OGtiWVIs9P 6ODniikQpHzURRVc8bR3HcrjC1zglYHuRIEhCvK9uP0wjzaI7WOZA6T/ertnRGch GjhLIdCbmfBzQl7ATJGXZG2cKs+YGFTG870g4xQKRzLTVQ1S6jzcapPOqBwp1iis qqR3VXFTNlyth4EPoXtkDzl3p+fGD7XcYNxuz2UfWn+gV+HK+qy0/EHh7F/TZDWu Drg= -----END CERTIFICATE-----Generated at Sun Jan 18 16:37:47 2026 by rpki-client