This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/zwpretBBcOwIvlCxlvtxUd8KleQ.roa File: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (raw, json) Hash identifier: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY= Subject key identifier: CF:0A:6B:7A:D0:41:70:EC:08:BE:50:B1:96:FB:71:51:DF:0A:95:E4 Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Certificate serial: 019B7A5B516D00814679B115099FAD398F42 Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/zwpretBBcOwIvlCxlvtxUd8KleQ.roa Signing time: Thu 01 Jan 2026 16:19:23 +0000 ROA not before: Thu 01 Jan 2026 16:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13101 IP address blocks: 185.60.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 23:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:51:6d:00:81:46:79:b1:15:09:9f:ad:39:8f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Validity Not Before: Jan 1 16:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf0a6b7ad04170ec08be50b196fb7151df0a95e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dc:dd:54:6d:17:e2:8d:9d:2e:c9:31:5b:30: f5:07:7d:f0:1a:c5:d0:90:94:52:ea:83:03:68:06: 0d:9a:4f:e0:af:63:89:a6:c6:19:7f:12:1c:c0:41: f2:ee:7f:a8:b1:69:2a:f8:65:0d:04:0d:25:3b:84: 66:71:72:bb:83:38:77:d7:ca:37:36:3a:c7:ab:6b: 2d:9e:64:a8:0c:f3:9e:36:38:35:ae:f0:0d:5f:08: 8c:ff:61:65:86:f9:98:20:31:23:9a:69:b2:fc:90: 0f:34:a6:e2:54:36:5f:4e:74:65:dc:1c:91:85:01: b7:4e:0f:2b:a3:7b:65:20:75:4d:af:cc:0c:ba:5c: 84:21:8e:d7:bd:f3:6e:70:48:61:51:25:7c:37:ed: f0:9e:b9:9e:74:aa:39:aa:2b:a4:2d:a5:40:54:d6: 99:6c:c6:43:0d:9c:5d:2e:97:d7:c7:1f:e4:9f:64: 34:ae:5e:6d:f8:2c:c2:8c:b4:0a:1d:38:55:b5:2b: 0a:4c:0d:3e:14:8e:e8:aa:54:7f:26:d3:87:38:12: 8c:46:21:f2:a4:d9:c1:47:66:15:53:e8:16:81:12: 66:1f:f7:bd:88:a8:be:e1:15:db:2a:97:c9:78:12: d8:20:3e:93:f8:14:13:5f:01:b1:53:f2:14:c2:ac: 8f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0A:6B:7A:D0:41:70:EC:08:BE:50:B1:96:FB:71:51:DF:0A:95:E4 X509v3 Authority Key Identifier: keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/zwpretBBcOwIvlCxlvtxUd8KleQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.21.0/24 Signature Algorithm: sha256WithRSAEncryption 86:de:a6:40:b0:d2:21:cc:ec:d0:4c:7a:65:70:97:32:43:06: 36:69:74:66:31:c2:c6:5e:73:9e:80:52:04:b1:9b:e3:03:c9: ae:48:cf:5e:04:28:bb:f9:c5:43:a2:67:94:d2:d5:09:2a:ae: 62:c9:72:86:57:a6:bf:20:74:d4:cc:f3:90:37:0b:a5:db:d6: b6:d8:34:8a:1f:89:29:f8:6d:86:71:f4:67:7d:c7:19:c8:9a: 5a:39:02:72:3e:cc:4d:eb:b6:5b:ae:ac:e0:37:f0:58:8c:fa: 09:fd:4f:6c:cd:81:05:a4:bf:e3:df:7e:84:43:c4:8f:48:68: e5:8f:96:34:8e:84:7a:a7:c8:81:f5:1a:eb:8a:db:c8:a2:e4: 1b:1a:31:83:02:34:39:cb:60:90:b7:08:3f:ef:04:2f:23:0b: be:7d:58:3c:9c:0a:1a:ea:85:d4:e1:c0:22:b4:9f:ec:ab:49: 03:7d:c4:d8:b9:46:16:45:cd:43:b8:a1:af:fc:ac:22:fc:1a: 3b:35:d5:ce:51:d6:6f:66:63:60:0e:38:12:a1:a6:2c:59:ba: 3e:00:5c:d6:fa:55:2d:b4:f5:fc:30:9a:6d:d3:5f:16:60:d1: 7b:d6:d6:0e:4e:38:7b:87:30:c9:41:64:8d:5f:eb:03:7c:ce: 4d:98:25:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W1FtAIFGebEVCZ+tOY9CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz MGFlMzkwHhcNMjYwMTAxMTYxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjBhNmI3YWQwNDE3MGVjMDhiZTUwYjE5NmZiNzE1MWRmMGE5NWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdzdVG0X4o2dLskxWzD1B33wGsXQ kJRS6oMDaAYNmk/gr2OJpsYZfxIcwEHy7n+osWkq+GUNBA0lO4RmcXK7gzh318o3 NjrHq2stnmSoDPOeNjg1rvANXwiM/2FlhvmYIDEjmmmy/JAPNKbiVDZfTnRl3ByR hQG3Tg8ro3tlIHVNr8wMulyEIY7XvfNucEhhUSV8N+3wnrmedKo5qiukLaVAVNaZ bMZDDZxdLpfXxx/kn2Q0rl5t+CzCjLQKHThVtSsKTA0+FI7oqlR/JtOHOBKMRiHy pNnBR2YVU+gWgRJmH/e9iKi+4RXbKpfJeBLYID6T+BQTXwGxU/IUwqyPbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM8Ka3rQQXDsCL5QsZb7cVHfCpXkMB8GA1UdIwQY MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt YzZiODRjYzU4NjEwLzEvendwcmV0QkJjT3dJdmxDeGx2dHhVZDhLbGVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTwVMA0G CSqGSIb3DQEBCwUAA4IBAQCG3qZAsNIhzOzQTHplcJcyQwY2aXRmMcLGXnOegFIE sZvjA8muSM9eBCi7+cVDomeU0tUJKq5iyXKGV6a/IHTUzPOQNwul29a22DSKH4kp +G2GcfRnfccZyJpaOQJyPsxN67ZbrqzgN/BYjPoJ/U9szYEFpL/j336EQ8SPSGjl j5Y0joR6p8iB9RrritvIouQbGjGDAjQ5y2CQtwg/7wQvIwu+fVg8nAoa6oXU4cAi tJ/sq0kDfcTYuUYWRc1DuKGv/Kwi/Bo7NdXOUdZvZmNgDjgSoaYsWbo+AFzW+lUt tPX8MJpt018WYNF71tYOTjh7hzDJQWSNX+sDfM5NmCVb -----END CERTIFICATE-----Generated at Mon Jan 5 05:01:46 2026 by rpki-client