This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/ZOFtyw8rEcK5lNc1l_ycXbYNh1E.roa File: ZOFtyw8rEcK5lNc1l_ycXbYNh1E.roa (raw, json) Hash identifier: CCPYX7azV0XU3mTS7uui9xIKAvE3rZogRNVuJDuaOG0= Subject key identifier: 64:E1:6D:CB:0F:2B:11:C2:B9:94:D7:35:97:FC:9C:5D:B6:0D:87:51 Certificate issuer: /CN=176c34e5ae7016c3605d3269564ae9685443595d Certificate serial: 019B7CED1AEDD9275937922C696FE8C7E17F Authority key identifier: 17:6C:34:E5:AE:70:16:C3:60:5D:32:69:56:4A:E9:68:54:43:59:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/ZOFtyw8rEcK5lNc1l_ycXbYNh1E.roa Signing time: Fri 02 Jan 2026 04:17:52 +0000 ROA not before: Fri 02 Jan 2026 04:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51595 IP address blocks: 185.90.112.0/22 maxlen: 22 194.0.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:1a:ed:d9:27:59:37:92:2c:69:6f:e8:c7:e1:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=176c34e5ae7016c3605d3269564ae9685443595d Validity Not Before: Jan 2 04:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64e16dcb0f2b11c2b994d73597fc9c5db60d8751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b1:ed:20:ae:6c:16:39:73:d9:90:8b:f0:0c: 82:fc:7e:de:b5:b2:09:f4:8e:19:56:53:dc:70:c6: f0:3d:70:36:4e:be:df:bd:f1:61:58:90:44:7e:06: 60:9f:35:20:18:6f:32:8b:8b:4c:46:c8:d2:aa:d7: fd:f2:ee:d6:40:09:55:db:30:4a:67:f3:d4:db:25: ac:fd:a4:6c:de:4c:5b:94:1a:35:2b:d6:4c:09:39: ac:cb:59:72:44:11:ea:eb:cf:eb:b6:78:0d:38:09: f8:a3:01:43:ab:79:29:30:84:9d:ae:8a:76:b9:bd: 65:d1:cc:73:0f:85:d7:d3:8d:bc:b6:12:ec:24:dc: 0e:ea:15:e2:d7:d4:5a:8a:4e:94:33:ad:4f:04:88: 99:af:99:a9:ab:54:31:1d:40:e6:f4:c1:57:c2:72: 37:e2:54:da:1d:cb:62:ee:20:fc:11:1d:e5:b7:12: 00:ec:e0:a2:14:14:0a:7e:c8:51:c9:14:e8:29:b0: 93:11:ae:43:b8:05:51:4d:e4:cb:7c:62:bd:5d:7f: 38:78:f8:59:e8:1e:e4:9e:6d:8d:fb:f2:10:a8:9b: bb:df:05:3e:a4:60:e4:38:7a:b3:01:f2:8b:11:3f: 0a:18:30:1c:e2:0b:48:96:e9:3f:2e:8b:aa:f5:2a: 60:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E1:6D:CB:0F:2B:11:C2:B9:94:D7:35:97:FC:9C:5D:B6:0D:87:51 X509v3 Authority Key Identifier: keyid:17:6C:34:E5:AE:70:16:C3:60:5D:32:69:56:4A:E9:68:54:43:59:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/ZOFtyw8rEcK5lNc1l_ycXbYNh1E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.90.112.0/22 194.0.155.0/24 Signature Algorithm: sha256WithRSAEncryption e0:05:cd:1e:02:91:2b:11:92:9c:91:07:ea:30:ab:42:4d:37: d4:29:6c:56:33:0a:94:0b:4a:4c:1e:b8:f5:ad:5a:db:48:9e: 3d:e8:51:80:b0:ab:9c:c8:a2:38:a6:ee:ce:70:39:59:f8:80: 88:aa:bf:70:d5:32:2e:1a:d1:91:1f:74:c7:f0:4d:9c:46:13: bb:70:3a:86:fd:bb:78:a6:6f:19:aa:51:a9:68:bb:3a:3c:6b: 1f:79:b3:70:78:cf:0e:67:c5:4b:2a:84:2e:a8:d2:e0:8e:de: d3:9e:c4:95:b2:1b:f7:9e:85:3d:d4:32:7f:ed:07:39:2a:39: 66:8c:d1:be:d5:cb:af:a6:56:a1:78:14:da:15:8b:3f:43:23: cd:d9:94:5b:3f:52:ab:8d:c8:e0:d9:f9:12:05:33:d1:23:33: 03:44:b7:94:6e:35:34:31:ff:27:4b:be:58:00:22:d4:a2:45: d5:11:ec:db:39:4c:0d:9a:78:af:31:f2:f8:f5:fd:2d:6a:61: aa:3b:e9:f8:45:21:d3:2b:78:07:a1:40:0a:3c:f0:63:bc:72: 19:88:17:24:c2:bb:1b:35:f7:11:bd:47:b0:7d:23:7c:6f:76: 8a:84:d8:70:ec:39:92:5e:93:96:1d:cc:02:fc:ba:f6:a8:4b: ea:12:ad:11 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87Rrt2SdZN5IsaW/ox+F/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NmMzNGU1YWU3MDE2YzM2MDVkMzI2OTU2NGFlOTY4NTQ0 MzU5NWQwHhcNMjYwMTAyMDQxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGUxNmRjYjBmMmIxMWMyYjk5NGQ3MzU5N2ZjOWM1ZGI2MGQ4NzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLHtIK5sFjlz2ZCL8AyC/H7etbIJ 9I4ZVlPccMbwPXA2Tr7fvfFhWJBEfgZgnzUgGG8yi4tMRsjSqtf98u7WQAlV2zBK Z/PU2yWs/aRs3kxblBo1K9ZMCTmsy1lyRBHq68/rtngNOAn4owFDq3kpMISdrop2 ub1l0cxzD4XX0428thLsJNwO6hXi19Raik6UM61PBIiZr5mpq1QxHUDm9MFXwnI3 4lTaHcti7iD8ER3ltxIA7OCiFBQKfshRyRToKbCTEa5DuAVRTeTLfGK9XX84ePhZ 6B7knm2N+/IQqJu73wU+pGDkOHqzAfKLET8KGDAc4gtIluk/Louq9Spg2QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGThbcsPKxHCuZTXNZf8nF22DYdRMB8GA1UdIwQY MBaAFBdsNOWucBbDYF0yaVZK6WhUQ1ldMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjJ3MDVhNXdGc05nWFRKcFZrcnBhRlJEV1YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82NDI2YTUtNmIxNC00OTExLTg4ZTEt YTc1ZjNkZjQ2YWYxLzEvWk9GdHl3OHJFY0s1bE5jMWxfeWNYYllOaDFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82NDI2YTUtNmIxNC00OTExLTg4ZTEtYTc1ZjNkZjQ2YWYx LzEvRjJ3MDVhNXdGc05nWFRKcFZrcnBhRlJEV1YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuVpwAwQA wgCbMA0GCSqGSIb3DQEBCwUAA4IBAQDgBc0eApErEZKckQfqMKtCTTfUKWxWMwqU C0pMHrj1rVrbSJ496FGAsKucyKI4pu7OcDlZ+ICIqr9w1TIuGtGRH3TH8E2cRhO7 cDqG/bt4pm8ZqlGpaLs6PGsfebNweM8OZ8VLKoQuqNLgjt7TnsSVshv3noU91DJ/ 7Qc5KjlmjNG+1cuvplaheBTaFYs/QyPN2ZRbP1Krjcjg2fkSBTPRIzMDRLeUbjU0 Mf8nS75YACLUokXVEezbOUwNmnivMfL49f0tamGqO+n4RSHTK3gHoUAKPPBjvHIZ iBckwrsbNfcRvUewfSN8b3aKhNhw7DmSXpOWHcwC/Lr2qEvqEq0R -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:34 2026 by rpki-client