This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/ZyxzZp4gH4IwnodhpQuQPKxwDQQ.roa File: ZyxzZp4gH4IwnodhpQuQPKxwDQQ.roa (raw, json) Hash identifier: Z8QAW/Hd5difEMOxpKQPyuERzxUSGU8aVI2YVAh28b8= Subject key identifier: 67:2C:73:66:9E:20:1F:82:30:9E:87:61:A5:0B:90:3C:AC:70:0D:04 Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 019B797F31071833A8C73DF5AE02F90B25AA Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/ZyxzZp4gH4IwnodhpQuQPKxwDQQ.roa Signing time: Thu 01 Jan 2026 12:18:57 +0000 ROA not before: Thu 01 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29423 IP address blocks: 185.207.229.0/24 maxlen: 24 185.211.60.0/24 maxlen: 24 2a0b:2a40::/32 maxlen: 32 2a0b:6340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:31:07:18:33:a8:c7:3d:f5:ae:02:f9:0b:25:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Jan 1 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=672c73669e201f82309e8761a50b903cac700d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0a:de:7d:d9:9c:18:1f:a5:a5:d8:cc:f4:e2: c9:7e:ba:89:0b:05:67:1a:cf:5d:ec:87:46:74:42: a2:6e:35:d1:01:0c:f7:34:6d:35:df:8e:f9:db:8b: 94:72:87:a9:b1:70:ad:07:a1:7a:cc:95:e8:9d:df: 87:ca:d9:c5:ef:00:43:03:f2:cb:d3:28:bf:41:d5: cf:be:ff:e3:96:9d:6a:e1:d2:c3:52:05:36:e4:a5: e1:2c:c8:e8:45:02:14:99:c1:fd:a2:52:85:9d:d8: 82:10:f4:62:2d:ea:c0:49:16:da:c6:e4:57:f6:74: 59:d4:b4:f5:29:dd:ba:1e:63:c3:a7:d1:ff:ee:44: dd:34:39:5d:e4:d6:8d:f4:c3:a2:91:46:48:d6:c5: 7a:a4:d4:7d:f6:96:01:6f:d6:bc:76:d9:67:a6:17: 09:5d:37:30:69:ab:7b:ab:fc:fd:54:eb:70:7f:b1: 9c:28:90:85:ae:3e:15:f4:03:ed:63:19:15:4e:ca: 87:b7:ee:e3:4a:31:33:19:f1:94:a9:a5:fe:ac:3d: 5e:34:e9:47:8e:2b:0f:b9:77:b4:88:eb:d5:a3:2a: df:96:58:71:a1:ee:09:82:19:3f:06:c2:0c:79:70: e9:04:51:0f:b5:39:6b:6c:5f:83:83:65:6c:1e:33: df:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2C:73:66:9E:20:1F:82:30:9E:87:61:A5:0B:90:3C:AC:70:0D:04 X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/ZyxzZp4gH4IwnodhpQuQPKxwDQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.207.229.0/24 185.211.60.0/24 IPv6: 2a0b:2a40::/32 2a0b:6340::/32 Signature Algorithm: sha256WithRSAEncryption 79:ea:dc:c1:6d:88:ba:71:81:3a:75:de:22:3d:0c:60:f6:62: a5:55:b5:3c:a2:39:da:e0:68:dc:d7:c4:f4:57:1c:db:85:f2: c4:ca:44:91:d9:10:71:94:be:05:e7:ce:22:81:62:74:be:86: 92:c0:a4:58:d9:38:3f:69:40:92:4d:68:35:15:4e:05:94:9a: cf:e0:c0:bf:a7:f4:5e:6a:22:89:27:35:60:31:a6:00:1e:c6: be:c0:d4:82:64:81:20:e6:a3:b1:3a:1b:74:23:63:88:6d:60: 94:9e:a5:ef:97:a2:b7:9b:06:e4:8e:19:4b:39:49:eb:b4:93: 46:85:c4:a0:db:c4:2e:ae:fc:32:1e:f0:65:3f:b9:5d:98:4e: a4:ee:50:a0:2b:ed:80:06:56:bd:34:7e:20:0f:a6:6b:0b:b6: 2c:b1:34:5e:f4:1f:9e:8c:17:05:4d:9d:df:db:66:ad:8d:af: 70:2f:f6:03:30:22:3a:73:d8:db:49:60:a7:d5:20:ff:8d:35: 54:22:56:cd:2a:6b:90:03:ce:bd:5c:42:3b:47:7c:34:bd:2b: eb:89:b1:80:a8:3f:b6:3c:06:fc:33:9d:0e:06:42:d9:42:4e: 44:51:3a:f7:51:93:78:75:c9:a9:b7:e0:cb:3f:7d:71:c8:51: cd:e3:ba:7b -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt5fzEHGDOoxz31rgL5CyWqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjYwMTAxMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzJjNzM2NjllMjAxZjgyMzA5ZTg3NjFhNTBiOTAzY2FjNzAwZDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wrefdmcGB+lpdjM9OLJfrqJCwVn Gs9d7IdGdEKibjXRAQz3NG01347524uUcoepsXCtB6F6zJXond+HytnF7wBDA/LL 0yi/QdXPvv/jlp1q4dLDUgU25KXhLMjoRQIUmcH9olKFndiCEPRiLerASRbaxuRX 9nRZ1LT1Kd26HmPDp9H/7kTdNDld5NaN9MOikUZI1sV6pNR99pYBb9a8dtlnphcJ XTcwaat7q/z9VOtwf7GcKJCFrj4V9APtYxkVTsqHt+7jSjEzGfGUqaX+rD1eNOlH jisPuXe0iOvVoyrfllhxoe4Jghk/BsIMeXDpBFEPtTlrbF+Dg2VsHjPffwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGcsc2aeIB+CMJ6HYaULkDyscA0EMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEvWnl4elpwNGdINEl3bm9kaHBRdVFQS3h3RFFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQAuc/lAwQA udM8MBQEAgACMA4DBQAqCypAAwUAKgtjQDANBgkqhkiG9w0BAQsFAAOCAQEAeerc wW2IunGBOnXeIj0MYPZipVW1PKI52uBo3NfE9Fcc24XyxMpEkdkQcZS+BefOIoFi dL6GksCkWNk4P2lAkk1oNRVOBZSaz+DAv6f0XmoiiSc1YDGmAB7GvsDUgmSBIOaj sTobdCNjiG1glJ6l75eit5sG5I4ZSzlJ67STRoXEoNvELq78Mh7wZT+5XZhOpO5Q oCvtgAZWvTR+IA+mawu2LLE0XvQfnowXBU2d39tmrY2vcC/2AzAiOnPY20lgp9Ug /401VCJWzSprkAPOvVxCO0d8NL0r64mxgKg/tjwG/DOdDgZC2UJORFE691GTeHXJ qbfgyz99cchRzeO6ew== -----END CERTIFICATE-----Generated at Mon Jan 26 07:57:32 2026 by rpki-client