This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/zpBvr7D0ZTnk2RASjPjWwuPCBo4.roa File: zpBvr7D0ZTnk2RASjPjWwuPCBo4.roa (raw, json) Hash identifier: 6ihXuEihTvHi2kmbZX2/h+YBlObaB/XzKmiIBYoX2XQ= Subject key identifier: CE:90:6F:AF:B0:F4:65:39:E4:D9:10:12:8C:F8:D6:C2:E3:C2:06:8E Certificate issuer: /CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4 Certificate serial: 019B7E383A193BC999680F7A3999CA006D39 Authority key identifier: 27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/zpBvr7D0ZTnk2RASjPjWwuPCBo4.roa Signing time: Fri 02 Jan 2026 10:19:32 +0000 ROA not before: Fri 02 Jan 2026 10:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209026 IP address blocks: 185.253.236.0/22 maxlen: 24 2a0c:42c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:3a:19:3b:c9:99:68:0f:7a:39:99:ca:00:6d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4 Validity Not Before: Jan 2 10:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce906fafb0f46539e4d910128cf8d6c2e3c2068e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3b:8b:88:d7:9d:be:c4:3f:f7:b4:9b:29:96: 54:e9:4f:bd:40:4f:4a:47:d0:52:6b:e4:ff:b3:37: 37:78:5d:7f:f4:2b:0b:c7:9e:a6:57:60:a1:80:59: 1e:31:5a:39:5c:42:0b:62:78:99:ef:89:ab:bf:e2: 1f:55:27:15:80:f4:11:dd:2e:d9:48:47:f7:61:a6: a4:93:91:82:63:3f:3f:ee:40:51:bd:c8:9e:e6:81: bf:2c:d6:b3:91:35:8b:95:b8:75:24:23:7b:53:8c: aa:8a:2a:e1:d5:7f:e6:08:b4:0b:46:d0:40:c7:52: 5d:6c:cb:25:17:6e:16:a2:f1:07:21:b9:83:6b:82: 03:c6:b3:bf:17:3d:66:fe:a5:f7:71:25:89:75:21: 2c:81:8f:c0:fa:aa:aa:83:f8:99:76:82:82:bb:f1: 2c:cc:09:c4:63:55:ba:c7:2e:04:1c:97:a2:7b:d2: 1a:10:14:98:8e:ea:6d:fe:3c:a4:18:c1:19:88:96: 05:ec:e8:f7:1d:f2:44:8f:ec:66:10:c2:69:6f:7a: 82:c0:ad:9a:b8:3d:f6:55:51:5c:79:de:e0:dc:f6: 7d:6b:e9:9a:96:12:b1:f4:92:fd:79:3c:2b:23:03: c9:88:b5:b1:88:bb:43:d2:45:d7:a8:28:fe:8c:b7: 04:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:90:6F:AF:B0:F4:65:39:E4:D9:10:12:8C:F8:D6:C2:E3:C2:06:8E X509v3 Authority Key Identifier: keyid:27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/zpBvr7D0ZTnk2RASjPjWwuPCBo4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.253.236.0/22 IPv6: 2a0c:42c0::/29 Signature Algorithm: sha256WithRSAEncryption 35:0c:b3:b7:66:7e:49:e8:b5:b2:84:9b:bb:37:24:ad:a2:21: 8e:8b:65:99:7c:bf:26:ca:7d:c4:32:42:31:05:b4:4d:9f:ca: 3d:6d:af:32:d3:fd:be:9a:b6:59:54:14:be:c1:85:07:06:68: 68:79:c7:14:de:04:f7:2c:b7:7c:d5:c7:9e:d0:d9:57:b7:ae: 65:85:be:53:81:0f:24:81:f9:39:24:7b:9d:30:85:9b:fb:a0: 12:de:60:4f:00:e9:93:dd:f2:44:53:b7:9e:6b:16:55:37:a7: 58:0a:67:b1:4e:45:37:f0:99:db:36:1c:a5:71:c1:fd:4a:2f: 1b:2e:a9:f2:8b:cc:5b:3e:3a:23:70:fc:37:fd:39:f5:11:60: 97:8f:1c:1e:9b:eb:20:68:a8:f6:1a:36:77:6e:65:6d:70:7c: 59:4c:bb:0d:21:f8:9f:86:ef:2d:1c:e0:88:4b:c4:7c:3d:70: 0d:12:cc:b3:7a:ec:7e:9f:49:8b:22:f6:96:34:5c:c8:87:7c: 1f:95:31:7b:b8:cb:53:96:ba:16:e7:3e:72:f3:8d:4f:92:a7: b1:b5:19:a3:f1:f2:13:b7:9b:50:7b:67:98:b7:33:1c:07:ff: df:4e:b9:d3:17:f6:ba:71:08:96:3c:d0:a3:72:d3:b1:68:91: b4:f3:b5:7e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+ODoZO8mZaA96OZnKAG05MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZDhhZjdlNTZjODBkMThkYzk2OGY0ZGJjZWM4MTNmODVl YTMwYTQwHhcNMjYwMTAyMTAxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTkwNmZhZmIwZjQ2NTM5ZTRkOTEwMTI4Y2Y4ZDZjMmUzYzIwNjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDuLiNedvsQ/97SbKZZU6U+9QE9K R9BSa+T/szc3eF1/9CsLx56mV2ChgFkeMVo5XEILYniZ74mrv+IfVScVgPQR3S7Z SEf3Yaakk5GCYz8/7kBRvcie5oG/LNazkTWLlbh1JCN7U4yqiirh1X/mCLQLRtBA x1JdbMslF24WovEHIbmDa4IDxrO/Fz1m/qX3cSWJdSEsgY/A+qqqg/iZdoKCu/Es zAnEY1W6xy4EHJeie9IaEBSYjupt/jykGMEZiJYF7Oj3HfJEj+xmEMJpb3qCwK2a uD32VVFced7g3PZ9a+malhKx9JL9eTwrIwPJiLWxiLtD0kXXqCj+jLcEWQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFM6Qb6+w9GU55NkQEoz41sLjwgaOMB8GA1UdIwQY MBaAFCfYr35WyA0Y3JaPTbzsgT+F6jCkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjlpdmZsYklEUmpjbG85TnZPeUJQNFhxTUtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9kOGI5ZjQtYWQwMS00NDdjLWE0ZGUt MDIxNWFjYTFiOTA5LzEvenBCdnI3RDBaVG5rMlJBU2pQald3dVBDQm80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9kOGI5ZjQtYWQwMS00NDdjLWE0ZGUtMDIxNWFjYTFiOTA5 LzEvSjlpdmZsYklEUmpjbG85TnZPeUJQNFhxTUtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuf3sMA0E AgACMAcDBQMqDELAMA0GCSqGSIb3DQEBCwUAA4IBAQA1DLO3Zn5J6LWyhJu7NySt oiGOi2WZfL8myn3EMkIxBbRNn8o9ba8y0/2+mrZZVBS+wYUHBmhoeccU3gT3LLd8 1cee0NlXt65lhb5TgQ8kgfk5JHudMIWb+6AS3mBPAOmT3fJEU7eeaxZVN6dYCmex TkU38JnbNhylccH9Si8bLqnyi8xbPjojcPw3/Tn1EWCXjxwem+sgaKj2GjZ3bmVt cHxZTLsNIfifhu8tHOCIS8R8PXANEsyzeux+n0mLIvaWNFzIh3wflTF7uMtTlroW 5z5y841PkqextRmj8fITt5tQe2eYtzMcB//fTrnTF/a6cQiWPNCjctOxaJG087V+ -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:04 2026 by rpki-client