This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Z8dNcyViht4Rp27GV89fqWFqeTw.roa File: Z8dNcyViht4Rp27GV89fqWFqeTw.roa (raw, json) Hash identifier: 5Ir5EpfZaSFCA+peFfLrH5DTQ5uwnq+BcGVXDJQdSfA= Subject key identifier: 67:C7:4D:73:25:62:86:DE:11:A7:6E:C6:57:CF:5F:A9:61:6A:79:3C Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C138B2444CB46F5D283F1790292E565 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Z8dNcyViht4Rp27GV89fqWFqeTw.roa Signing time: Fri 02 Jan 2026 00:20:14 +0000 ROA not before: Fri 02 Jan 2026 00:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206501 IP address blocks: 185.108.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:8b:24:44:cb:46:f5:d2:83:f1:79:02:92:e5:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67c74d73256286de11a76ec657cf5fa9616a793c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:42:47:41:65:96:94:ef:ad:d2:6b:02:ed:7d: 5e:9c:25:cf:eb:dc:86:5e:90:7d:ec:9a:93:d5:b3: e5:5f:8b:83:ed:b7:db:90:82:2d:d2:af:6e:27:53: ee:4f:d7:8e:bb:cc:21:17:0b:ce:23:0f:9d:47:57: 65:01:fa:f2:91:75:70:69:89:3e:4f:8b:e9:f3:d8: 09:96:03:f9:e8:a5:74:6e:11:98:fa:08:43:fa:1b: eb:37:08:c7:25:54:50:20:b6:c1:61:6c:0d:73:2d: c8:d7:3e:d1:14:9a:4f:be:61:99:8c:e1:c3:b6:9c: d2:86:5a:48:0f:59:20:f4:9e:7d:34:cb:31:a3:7f: e6:cf:34:d0:15:72:16:cb:e6:1c:a2:bd:d8:31:29: 71:44:ea:6d:55:3a:4f:e5:17:a8:cf:5e:b4:87:bc: 8e:f1:5c:37:62:e3:ff:13:85:50:67:1b:67:15:7b: 38:83:12:2c:44:ee:9c:db:33:fa:ef:9d:b1:b6:29: 7e:95:e2:35:29:f0:54:5c:47:4f:a0:a7:80:61:b4: d5:5e:59:b8:1e:96:68:94:75:27:58:a5:48:b0:b2: d5:f8:80:21:20:e3:7a:61:60:d8:6f:29:6c:de:7a: 51:77:cb:a6:18:0f:63:f1:e3:43:f5:dc:05:5e:33: ff:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C7:4D:73:25:62:86:DE:11:A7:6E:C6:57:CF:5F:A9:61:6A:79:3C X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Z8dNcyViht4Rp27GV89fqWFqeTw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.108.205.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:e6:e3:8f:13:a1:a2:81:86:95:2b:57:4a:c1:09:9f:9d:b8: 7f:cf:4f:9e:e9:6d:9b:33:a7:89:44:8d:33:22:76:8a:cd:fb: 74:b4:dc:74:03:ca:7c:4e:f9:53:31:34:2a:83:b6:b4:35:c9: 00:4c:24:32:35:02:d8:4b:46:91:31:41:e9:ae:80:7b:33:07: fb:38:21:25:6c:a6:e5:4e:23:cd:7b:18:bb:e6:1e:df:b1:8f: f2:b3:b4:06:ae:e8:50:b3:dc:41:75:e3:ce:16:48:52:da:cc: 4f:dd:87:1f:0a:ed:21:80:71:f2:1d:00:93:59:03:73:b4:b4: 16:48:45:54:70:87:c7:42:99:21:3c:29:2e:ff:5e:d0:98:03: f2:6e:95:42:f4:9c:c0:24:44:3b:1f:a9:66:c9:b0:f2:6d:f0: f7:db:0e:5e:0d:32:d4:3a:d1:d9:11:59:86:2f:3f:1b:e4:dd: b8:13:14:a5:f0:9b:c3:6a:a6:c5:78:e5:d6:60:0d:4c:dd:ef: 1a:6d:a3:cd:7b:84:7e:74:b6:39:22:60:74:1a:e7:74:cc:cb: 26:48:62:27:7c:83:07:d1:f0:4b:bf:c2:f9:67:4d:f6:11:99: 33:22:10:ac:04:3d:20:95:f5:e8:79:f2:31:f2:47:9e:0b:d3: c8:1e:77:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E4skRMtG9dKD8XkCkuVlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2M3NGQ3MzI1NjI4NmRlMTFhNzZlYzY1N2NmNWZhOTYxNmE3OTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkJHQWWWlO+t0msC7X1enCXP69yG XpB97JqT1bPlX4uD7bfbkIIt0q9uJ1PuT9eOu8whFwvOIw+dR1dlAfrykXVwaYk+ T4vp89gJlgP56KV0bhGY+ghD+hvrNwjHJVRQILbBYWwNcy3I1z7RFJpPvmGZjOHD tpzShlpID1kg9J59NMsxo3/mzzTQFXIWy+Ycor3YMSlxROptVTpP5Reoz160h7yO 8Vw3YuP/E4VQZxtnFXs4gxIsRO6c2zP6752xtil+leI1KfBUXEdPoKeAYbTVXlm4 HpZolHUnWKVIsLLV+IAhION6YWDYbyls3npRd8umGA9j8eND9dwFXjP/dwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGfHTXMlYobeEaduxlfPX6lhank8MB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvWjhkTmN5VmlodDRScDI3R1Y4OWZxV0ZxZVR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWzNMA0G CSqGSIb3DQEBCwUAA4IBAQAr5uOPE6GigYaVK1dKwQmfnbh/z0+e6W2bM6eJRI0z InaKzft0tNx0A8p8TvlTMTQqg7a0NckATCQyNQLYS0aRMUHproB7Mwf7OCElbKbl TiPNexi75h7fsY/ys7QGruhQs9xBdePOFkhS2sxP3YcfCu0hgHHyHQCTWQNztLQW SEVUcIfHQpkhPCku/17QmAPybpVC9JzAJEQ7H6lmybDybfD32w5eDTLUOtHZEVmG Lz8b5N24ExSl8JvDaqbFeOXWYA1M3e8abaPNe4R+dLY5ImB0Gud0zMsmSGInfIMH 0fBLv8L5Z032EZkzIhCsBD0glfXoefIx8keeC9PIHnde -----END CERTIFICATE-----Generated at Fri Jan 2 23:47:30 2026 by rpki-client