This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/z2shUf2aqRLmVJq8eVLYTJ_YFbI.roa File: z2shUf2aqRLmVJq8eVLYTJ_YFbI.roa (raw, json) Hash identifier: Edkz13QcBJuRKSQNfHEA5UGNYVjpEOKlRl0wbxqZyxQ= Subject key identifier: CF:6B:21:51:FD:9A:A9:12:E6:54:9A:BC:79:52:D8:4C:9F:D8:15:B2 Certificate issuer: /CN=83f5bd23bec5d0639833a9141985cc5753886e16 Certificate serial: 019B7EA6C2F4CD9F3221A9C6EF888E188D89 Authority key identifier: 83:F5:BD:23:BE:C5:D0:63:98:33:A9:14:19:85:CC:57:53:88:6E:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/z2shUf2aqRLmVJq8eVLYTJ_YFbI.roa Signing time: Fri 02 Jan 2026 12:20:16 +0000 ROA not before: Fri 02 Jan 2026 12:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12344 IP address blocks: 185.119.96.0/22 maxlen: 22 2a04:f310::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c2:f4:cd:9f:32:21:a9:c6:ef:88:8e:18:8d:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83f5bd23bec5d0639833a9141985cc5753886e16 Validity Not Before: Jan 2 12:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf6b2151fd9aa912e6549abc7952d84c9fd815b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bb:ca:4d:60:1e:f7:b0:5e:6d:fa:d1:28:c4: 73:79:62:61:90:52:d4:4c:92:f0:08:f9:af:30:a2: a0:ea:4f:a6:5f:3e:99:8a:9c:e3:2b:c8:09:47:e2: 9d:d4:f3:77:1b:bb:2b:da:37:06:3e:b6:0d:8e:7f: 72:b8:4c:80:3d:c5:f8:c8:30:08:94:1a:0e:3a:dc: 06:c2:24:02:a5:bb:1c:81:67:3c:31:99:1b:63:a0: d1:f7:2c:f1:96:a4:36:c8:11:34:a1:02:d5:94:d5: df:6d:e0:22:18:98:1c:e5:ab:ba:65:65:b1:68:f1: 34:0a:a4:e4:e4:72:dc:fb:88:e0:7d:05:87:e2:d3: bb:54:fc:27:c2:c5:d9:8f:1c:d9:22:ec:e7:52:66: 1a:24:dc:b3:a5:6a:58:13:99:8c:c9:e4:59:9b:2d: 26:0b:d8:db:cc:5d:a2:1c:e6:0b:4e:25:03:86:d0: c3:81:81:5d:2c:03:74:de:05:4f:26:25:fe:36:99: 4d:f7:06:e7:6a:82:75:65:4f:0b:8f:7d:4a:c0:a5: 3c:f6:16:c5:c8:1a:13:55:b0:5d:06:de:fc:3a:61: 85:d8:78:d7:a8:d7:75:eb:c6:19:b4:7d:7a:21:24: 12:6e:cd:34:8b:4e:8d:2e:0f:b6:47:c7:7c:48:36: 83:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:6B:21:51:FD:9A:A9:12:E6:54:9A:BC:79:52:D8:4C:9F:D8:15:B2 X509v3 Authority Key Identifier: keyid:83:F5:BD:23:BE:C5:D0:63:98:33:A9:14:19:85:CC:57:53:88:6E:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/z2shUf2aqRLmVJq8eVLYTJ_YFbI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.119.96.0/22 IPv6: 2a04:f310::/31 Signature Algorithm: sha256WithRSAEncryption 90:66:0c:69:00:d8:65:08:c7:e3:f2:b2:01:1c:5c:a5:48:3d: e2:f8:c6:2a:08:f0:77:35:69:ce:f7:9f:cc:51:32:0b:2e:88: ca:f3:a2:7a:51:ee:79:49:89:03:14:60:f3:1c:dd:98:fc:b6: a7:1b:aa:f1:7c:6d:2d:ea:02:48:20:fb:fb:22:d4:7c:f5:63: 7f:53:2a:0f:a6:d1:4e:84:66:e1:89:58:4e:99:86:39:cd:4c: ed:5d:4e:1a:38:bd:5a:08:c0:bd:19:36:8f:3f:8d:a4:98:93: 6e:3a:ce:24:f3:54:43:39:39:8f:f5:5a:fe:1f:0a:9b:e4:b3: 4b:54:6e:86:40:ca:1e:e2:9a:bd:b5:f8:87:eb:2f:54:40:45: 6b:0b:81:ad:98:c3:33:64:12:ce:f1:d6:2a:56:d0:6d:7e:64: 33:a7:a3:12:3f:bd:55:0a:c2:a6:5f:45:70:4e:47:25:23:a2: 84:81:68:2b:63:3c:f9:65:fa:98:d8:92:91:64:90:13:43:24: a3:09:a8:dc:af:05:79:fa:6e:ca:e1:74:a3:8e:2a:71:f5:f5: d2:f7:20:90:c5:6d:43:0e:8b:49:7f:20:5a:10:ff:0a:45:b9: d5:ce:c4:ae:d3:09:b9:7e:1a:48:80:d3:10:34:1a:4c:8a:f2: 3c:76:06:5c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+psL0zZ8yIanG74iOGI2JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZjViZDIzYmVjNWQwNjM5ODMzYTkxNDE5ODVjYzU3NTM4 ODZlMTYwHhcNMjYwMTAyMTIyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjZiMjE1MWZkOWFhOTEyZTY1NDlhYmM3OTUyZDg0YzlmZDgxNWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrvKTWAe97BebfrRKMRzeWJhkFLU TJLwCPmvMKKg6k+mXz6ZipzjK8gJR+Kd1PN3G7sr2jcGPrYNjn9yuEyAPcX4yDAI lBoOOtwGwiQCpbscgWc8MZkbY6DR9yzxlqQ2yBE0oQLVlNXfbeAiGJgc5au6ZWWx aPE0CqTk5HLc+4jgfQWH4tO7VPwnwsXZjxzZIuznUmYaJNyzpWpYE5mMyeRZmy0m C9jbzF2iHOYLTiUDhtDDgYFdLAN03gVPJiX+NplN9wbnaoJ1ZU8Lj31KwKU89hbF yBoTVbBdBt78OmGF2HjXqNd168YZtH16ISQSbs00i06NLg+2R8d8SDaD7wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFM9rIVH9mqkS5lSavHlS2Eyf2BWyMB8GA1UdIwQY MBaAFIP1vSO+xdBjmDOpFBmFzFdTiG4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ19XOUk3N0YwR09ZTTZrVUdZWE1WMU9JYmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iMjM5N2MtYjM2ZC00NmEzLWEyNDAt MWQ5YTE5ZjEyOTViLzEvejJzaFVmMmFxUkxtVkpxOGVWTFlUSl9ZRmJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9iMjM5N2MtYjM2ZC00NmEzLWEyNDAtMWQ5YTE5ZjEyOTVi LzEvZ19XOUk3N0YwR09ZTTZrVUdZWE1WMU9JYmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuXdgMA0E AgACMAcDBQEqBPMQMA0GCSqGSIb3DQEBCwUAA4IBAQCQZgxpANhlCMfj8rIBHFyl SD3i+MYqCPB3NWnO95/MUTILLojK86J6Ue55SYkDFGDzHN2Y/LanG6rxfG0t6gJI IPv7ItR89WN/UyoPptFOhGbhiVhOmYY5zUztXU4aOL1aCMC9GTaPP42kmJNuOs4k 81RDOTmP9Vr+Hwqb5LNLVG6GQMoe4pq9tfiH6y9UQEVrC4GtmMMzZBLO8dYqVtBt fmQzp6MSP71VCsKmX0VwTkclI6KEgWgrYzz5ZfqY2JKRZJATQySjCajcrwV5+m7K 4XSjjipx9fXS9yCQxW1DDotJfyBaEP8KRbnVzsSu0wm5fhpIgNMQNBpMivI8dgZc -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:11 2026 by rpki-client