This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ZfoOtwjzH6Dvjj3ShRjgGgPAAtc.roa File: ZfoOtwjzH6Dvjj3ShRjgGgPAAtc.roa (raw, json) Hash identifier: SPK6XAVcaGH+5RqsIE0QaSygq3eYsl45cvObsmbsyyg= Subject key identifier: 65:FA:0E:B7:08:F3:1F:A0:EF:8E:3D:D2:85:18:E0:1A:03:C0:02:D7 Certificate issuer: /CN=22d54df89b8fd921dada3f0daa29efff5cce0a79 Certificate serial: 019B7AC84F0559418215B56657E0AC29DCDD Authority key identifier: 22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ZfoOtwjzH6Dvjj3ShRjgGgPAAtc.roa Signing time: Thu 01 Jan 2026 18:18:26 +0000 ROA not before: Thu 01 Jan 2026 18:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205219 IP address blocks: 188.65.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:4f:05:59:41:82:15:b5:66:57:e0:ac:29:dc:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22d54df89b8fd921dada3f0daa29efff5cce0a79 Validity Not Before: Jan 1 18:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65fa0eb708f31fa0ef8e3dd28518e01a03c002d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b0:3f:ac:95:21:56:fa:3f:ee:61:93:c7:6c: 76:c5:8b:e2:06:c2:15:d0:b1:95:2a:7d:1e:49:ad: 50:bd:27:9a:14:bf:01:db:29:48:db:eb:e2:64:f8: 8a:9a:bf:df:db:b7:f3:9a:98:e3:4d:8a:37:33:3b: 4e:ad:cb:f9:05:ca:ed:e7:f5:e8:59:c6:d8:68:db: 34:16:35:c6:81:a5:c8:28:39:b1:7a:4c:b1:9d:58: 66:5b:c7:eb:6d:db:3a:1f:57:6c:01:3f:97:c9:0f: b9:71:da:2c:91:fc:ab:38:63:a1:79:5f:b0:74:42: 4b:cc:04:59:3c:2c:ba:40:5f:4a:ba:ce:ae:9d:3d: fc:7c:3e:9b:ca:13:83:e4:9c:fe:47:4b:4e:aa:a0: 24:1c:aa:68:47:73:f7:0d:6f:de:40:83:66:5a:17: 4c:47:0f:41:13:fc:cc:f0:4c:6f:89:76:46:35:1d: be:f4:f7:ee:74:fe:42:84:bc:20:14:61:ca:dc:32: 53:d7:83:dc:6f:13:24:c6:8a:9d:48:6a:cb:7a:d1: 66:c4:c0:9d:ed:7a:d4:29:fd:44:25:a0:23:9d:90: c8:b9:82:8f:b7:93:d7:7e:6f:42:3c:72:fc:78:96: 74:e4:d6:78:e4:c5:6b:79:29:23:76:e4:37:33:eb: 66:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FA:0E:B7:08:F3:1F:A0:EF:8E:3D:D2:85:18:E0:1A:03:C0:02:D7 X509v3 Authority Key Identifier: keyid:22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ZfoOtwjzH6Dvjj3ShRjgGgPAAtc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.65.82.0/24 Signature Algorithm: sha256WithRSAEncryption a1:af:b6:1d:21:82:f3:85:6f:ca:40:af:e9:2f:ba:a4:e3:65: 1c:a9:68:09:a8:28:99:89:80:63:e2:c4:00:76:fc:d0:15:4f: 17:fa:70:89:13:25:08:9b:c2:54:a6:20:7a:db:8f:83:2b:bf: cc:d1:19:16:d5:8c:4f:3f:cf:67:66:3c:8d:82:b5:2f:12:59: 64:15:a4:b4:30:73:53:3c:28:f8:d8:8f:75:f2:3d:8a:75:75: e4:74:36:12:f1:34:44:44:7f:f5:f8:89:dc:94:b2:a3:25:4d: 60:c9:c3:e2:70:53:d8:2e:98:1c:df:1c:5c:00:e0:74:fd:37: 9f:aa:43:48:76:d8:d1:24:77:19:c9:39:df:64:82:d6:68:f7: 89:98:6f:76:2c:31:54:cb:33:28:c3:01:c8:1e:c7:45:ae:44: aa:7f:11:36:8e:09:69:2c:e7:93:44:96:c2:b5:50:37:e6:c6: 0d:a8:34:eb:02:17:da:99:0d:ac:49:16:3a:db:27:fa:f0:5a: 40:bb:12:a1:04:5b:53:7e:2b:32:43:a0:f1:2d:ca:82:44:a3: 5e:b8:8b:6c:ac:2e:d3:41:d0:33:56:66:c8:21:cd:b9:77:fd: ba:42:17:83:49:92:5f:8e:bf:e8:21:78:8e:c0:e2:17:1c:5a: 17:c2:15:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yE8FWUGCFbVmV+CsKdzdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZDU0ZGY4OWI4ZmQ5MjFkYWRhM2YwZGFhMjllZmZmNWNj ZTBhNzkwHhcNMjYwMTAxMTgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWZhMGViNzA4ZjMxZmEwZWY4ZTNkZDI4NTE4ZTAxYTAzYzAwMmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLA/rJUhVvo/7mGTx2x2xYviBsIV 0LGVKn0eSa1QvSeaFL8B2ylI2+viZPiKmr/f27fzmpjjTYo3MztOrcv5Bcrt5/Xo WcbYaNs0FjXGgaXIKDmxekyxnVhmW8frbds6H1dsAT+XyQ+5cdoskfyrOGOheV+w dEJLzARZPCy6QF9Kus6unT38fD6byhOD5Jz+R0tOqqAkHKpoR3P3DW/eQINmWhdM Rw9BE/zM8ExviXZGNR2+9PfudP5ChLwgFGHK3DJT14PcbxMkxoqdSGrLetFmxMCd 7XrUKf1EJaAjnZDIuYKPt5PXfm9CPHL8eJZ05NZ45MVreSkjduQ3M+tmHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGX6DrcI8x+g74490oUY4BoDwALXMB8GA1UdIwQY MBaAFCLVTfibj9kh2to/Daop7/9czgp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXRWTi1KdVAyU0hhMmo4TnFpbnZfMXpPQ25rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iNWNmMGItZWMzMS00NzA1LThmNjgt NmYxZmVjZTg3Yzg5LzEvWmZvT3R3anpINkR2amozU2hSamdHZ1BBQXRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9iNWNmMGItZWMzMS00NzA1LThmNjgtNmYxZmVjZTg3Yzg5 LzEvSXRWTi1KdVAyU0hhMmo4TnFpbnZfMXpPQ25rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvEFSMA0G CSqGSIb3DQEBCwUAA4IBAQChr7YdIYLzhW/KQK/pL7qk42UcqWgJqCiZiYBj4sQA dvzQFU8X+nCJEyUIm8JUpiB624+DK7/M0RkW1YxPP89nZjyNgrUvEllkFaS0MHNT PCj42I918j2KdXXkdDYS8TRERH/1+InclLKjJU1gycPicFPYLpgc3xxcAOB0/Tef qkNIdtjRJHcZyTnfZILWaPeJmG92LDFUyzMowwHIHsdFrkSqfxE2jglpLOeTRJbC tVA35sYNqDTrAhfamQ2sSRY62yf68FpAuxKhBFtTfisyQ6DxLcqCRKNeuItsrC7T QdAzVmbIIc25d/26QheDSZJfjr/oIXiOwOIXHFoXwhWf -----END CERTIFICATE-----Generated at Mon Jan 26 21:09:57 2026 by rpki-client