This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/zGh2HbLQZnyjxYkNHHK5OUHYSzI.roa File: zGh2HbLQZnyjxYkNHHK5OUHYSzI.roa (raw, json) Hash identifier: L1lyFIExE7ptfYv6B8KltqdYf/AvedX5c7QVNHU4hz0= Subject key identifier: CC:68:76:1D:B2:D0:66:7C:A3:C5:89:0D:1C:72:B9:39:41:D8:4B:32 Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019B797F322FCEA9AD4E594BEDAA8B165A79 Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/zGh2HbLQZnyjxYkNHHK5OUHYSzI.roa Signing time: Thu 01 Jan 2026 12:18:57 +0000 ROA not before: Thu 01 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52025 IP address blocks: 185.121.24.0/24 maxlen: 32 185.121.25.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 00:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:32:2f:ce:a9:ad:4e:59:4b:ed:aa:8b:16:5a:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Jan 1 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc68761db2d0667ca3c5890d1c72b93941d84b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:54:c0:0b:1f:38:9a:a1:eb:46:c4:70:ce:0c: b7:89:72:62:6a:a3:f1:a9:6f:48:43:f4:71:51:b6: 36:4f:ee:64:87:e7:d9:bd:2f:8d:21:bd:54:eb:ee: 81:1e:c4:0f:eb:fa:4a:8c:cf:fd:47:b9:a6:46:3f: 97:2d:70:5e:6c:07:cf:0b:93:ee:85:34:7d:9b:b1: 22:7e:25:d5:48:20:5a:ba:08:9c:47:79:54:de:bf: c7:2f:6d:d9:03:0f:27:6a:19:b2:7f:ce:80:e0:3e: a4:31:76:db:a3:8e:c3:0d:fd:25:eb:66:38:7c:04: 53:cc:b3:c4:ac:de:27:0e:cb:61:ce:1e:09:89:22: 36:59:40:2a:00:58:2c:45:a8:69:1f:bd:15:b4:6e: e2:5f:30:3e:39:2d:2d:74:33:90:3e:96:d8:86:d1: 5e:98:f7:22:1a:4a:a3:42:5b:e8:ca:92:7b:64:c3: b7:a9:4d:d1:96:84:00:3c:2b:e9:3e:9c:4a:33:3f: 4f:f2:e2:1c:54:97:cc:96:79:36:91:06:d6:41:70: ee:3c:f7:ed:83:1a:41:4b:87:d8:90:03:49:8d:78: 27:15:d8:23:1a:7e:b1:f3:42:86:30:38:60:ce:c9: 22:79:e7:17:36:f4:18:50:51:01:41:d4:e1:39:1f: 92:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:68:76:1D:B2:D0:66:7C:A3:C5:89:0D:1C:72:B9:39:41:D8:4B:32 X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/zGh2HbLQZnyjxYkNHHK5OUHYSzI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.24.0/23 Signature Algorithm: sha256WithRSAEncryption 82:98:fc:d1:c6:16:67:73:e3:5f:70:bc:38:1a:90:74:9c:9c: 5d:73:00:8a:5d:0b:6c:c6:2b:c7:46:51:de:c3:0a:52:a7:fc: f9:c5:c9:c2:74:3a:0f:0d:82:46:e8:3e:f0:38:18:64:58:28: 39:b0:5a:8b:32:00:2d:30:0f:2d:65:46:4e:08:a4:90:71:cc: 16:55:33:6a:6e:eb:b0:1e:fd:7f:f3:4f:39:05:86:81:4a:b4: b5:c4:05:be:5e:d6:e8:14:ad:30:ff:3f:14:5c:9c:be:fa:5b: 84:75:4a:55:8b:ac:99:70:b1:a9:b8:3d:8f:ce:07:a3:d7:79: f6:ab:f4:75:44:2c:45:2f:42:92:08:f5:8f:f6:a6:63:56:74: d3:24:95:93:bc:d8:93:62:ec:b2:00:ae:37:8b:cd:bf:a7:ed: 7b:0f:3a:53:e9:dc:e8:de:d7:b6:57:18:b0:2f:47:8c:87:8a: b8:18:2d:8c:a0:8e:0c:4e:26:2a:e0:be:94:28:78:97:5a:f5: ae:3b:97:59:8d:8e:4c:bb:24:9c:cc:6f:a4:f2:24:cc:a4:53: b9:ec:29:c5:46:1c:77:44:bc:4e:31:32:84:20:9d:ca:9d:bd: b4:74:04:e7:d3:37:ed:67:2e:04:44:b8:c8:04:b0:a0:d7:5e: 9b:59:25:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fzIvzqmtTllL7aqLFlp5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjYwMTAxMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzY4NzYxZGIyZDA2NjdjYTNjNTg5MGQxYzcyYjkzOTQxZDg0YjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lTACx84mqHrRsRwzgy3iXJiaqPx qW9IQ/RxUbY2T+5kh+fZvS+NIb1U6+6BHsQP6/pKjM/9R7mmRj+XLXBebAfPC5Pu hTR9m7EifiXVSCBaugicR3lU3r/HL23ZAw8nahmyf86A4D6kMXbbo47DDf0l62Y4 fARTzLPErN4nDsthzh4JiSI2WUAqAFgsRahpH70VtG7iXzA+OS0tdDOQPpbYhtFe mPciGkqjQlvoypJ7ZMO3qU3RloQAPCvpPpxKMz9P8uIcVJfMlnk2kQbWQXDuPPft gxpBS4fYkANJjXgnFdgjGn6x80KGMDhgzskieecXNvQYUFEBQdThOR+SbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMxodh2y0GZ8o8WJDRxyuTlB2EsyMB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvekdoMkhiTFFabnlqeFlrTkhISzVPVUhZU3pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuXkYMA0G CSqGSIb3DQEBCwUAA4IBAQCCmPzRxhZnc+NfcLw4GpB0nJxdcwCKXQtsxivHRlHe wwpSp/z5xcnCdDoPDYJG6D7wOBhkWCg5sFqLMgAtMA8tZUZOCKSQccwWVTNqbuuw Hv1/8085BYaBSrS1xAW+XtboFK0w/z8UXJy++luEdUpVi6yZcLGpuD2Pzgej13n2 q/R1RCxFL0KSCPWP9qZjVnTTJJWTvNiTYuyyAK43i82/p+17DzpT6dzo3te2Vxiw L0eMh4q4GC2MoI4MTiYq4L6UKHiXWvWuO5dZjY5MuySczG+k8iTMpFO57CnFRhx3 RLxOMTKEIJ3Knb20dATn0zftZy4ERLjIBLCg116bWSVF -----END CERTIFICATE-----Generated at Fri Jan 9 08:47:03 2026 by rpki-client