This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZT1QbCEHIkSe_EVPBSuQvXWXeTU.roa File: ZT1QbCEHIkSe_EVPBSuQvXWXeTU.roa (raw, json) Hash identifier: Gy+ie2Aej1tM+6jWulUGPfV5fHBI9PTOJmEtqOAX7E8= Subject key identifier: 65:3D:50:6C:21:07:22:44:9E:FC:45:4F:05:2B:90:BD:75:97:79:35 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019BA2023E65843FFAB9B3E78C610B465A2B Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZT1QbCEHIkSe_EVPBSuQvXWXeTU.roa Signing time: Fri 09 Jan 2026 09:06:54 +0000 ROA not before: Fri 09 Jan 2026 09:06:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 185.246.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 23:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:02:3e:65:84:3f:fa:b9:b3:e7:8c:61:0b:46:5a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 9 09:06:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=653d506c210722449efc454f052b90bd75977935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:10:86:e2:2e:d3:ee:7a:b7:21:7d:2e:58:d2: 5f:5c:b1:59:f5:7b:f5:42:1b:78:a3:8c:e2:b5:b8: dc:d2:48:59:20:ec:2f:64:9f:db:65:d4:80:56:74: 27:74:e0:5b:3b:8c:3a:5d:a8:d1:d8:3f:0e:cb:50: 85:7f:0d:b6:50:c5:18:9a:fa:fc:46:bc:9d:0e:4b: 2c:c6:ca:46:ec:c2:1a:bf:7a:e9:15:9f:73:3a:de: e8:93:83:0d:f9:7d:94:62:e2:d6:9a:be:73:67:5f: f1:7c:8c:fe:9d:f5:de:d8:cc:a7:bf:c9:f4:5e:59: 79:7d:1c:1a:fb:6d:39:be:c5:bb:97:93:5a:ca:18: 8c:51:63:88:bf:a0:4c:ac:96:d3:48:b9:72:3b:62: b1:c4:8a:b6:7c:af:5b:62:04:5e:a8:a7:29:9a:cd: 46:87:40:f7:fd:4c:d7:b4:5e:6b:c4:df:7d:44:40: 0d:93:aa:62:fa:38:3b:c6:38:d7:de:04:bd:36:65: bd:95:28:6d:69:44:b1:7b:43:26:49:47:22:b9:8f: 1e:7c:ad:be:57:eb:92:24:11:67:36:76:3d:6d:f2: a9:31:c2:a9:c3:4b:b4:a9:63:5c:01:8e:6d:2b:b1: 61:a6:cd:3d:36:2a:5f:cd:9e:93:e0:ce:10:7e:8e: b8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3D:50:6C:21:07:22:44:9E:FC:45:4F:05:2B:90:BD:75:97:79:35 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZT1QbCEHIkSe_EVPBSuQvXWXeTU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.246.112.0/24 Signature Algorithm: sha256WithRSAEncryption b2:59:ec:83:47:e0:3b:0c:13:37:fb:53:36:5a:aa:cf:98:c9: 13:3b:d5:17:d7:c0:b5:b0:7a:87:3d:78:f1:a2:83:da:a4:d8: f6:b6:74:fb:80:ce:83:f3:67:47:bb:62:aa:b0:54:b6:55:37: 21:6d:e6:c8:66:af:7b:5f:60:54:f9:d8:e0:4f:ab:7c:3d:de: 50:63:6e:78:b7:34:51:f9:0a:38:f0:83:12:e1:70:e3:92:c2: d3:78:dd:aa:1c:32:24:30:12:97:ad:8e:cb:6d:75:bd:5c:34: 9d:1b:2b:bf:4e:c9:98:d7:c1:91:c0:09:5d:0f:f8:29:d0:83: bc:8f:f3:f1:c5:90:d7:95:99:c1:34:c8:c6:6e:2d:58:3a:83: 96:59:dc:d6:30:c1:52:7f:98:d4:90:fb:01:ff:50:7c:a0:4a: 29:3f:98:be:60:7b:c2:3c:96:9d:a3:52:69:6a:fe:3c:67:3d: c2:e6:dd:d0:43:a0:34:02:6a:61:42:4a:dd:c4:bb:b3:1e:4b: de:3f:74:44:76:20:03:a7:04:1e:c7:27:8e:14:39:57:dd:35: 0a:e1:46:83:b2:6d:da:2c:5f:0b:ed:cc:8b:3e:5b:c4:d4:8d: 7f:0c:1a:25:a5:98:a7:29:d5:df:68:e8:be:f9:14:8b:92:b9: e4:71:03:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuiAj5lhD/6ubPnjGELRlorMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTA5MDkwNjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTNkNTA2YzIxMDcyMjQ0OWVmYzQ1NGYwNTJiOTBiZDc1OTc3OTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRCG4i7T7nq3IX0uWNJfXLFZ9Xv1 Qht4o4zitbjc0khZIOwvZJ/bZdSAVnQndOBbO4w6XajR2D8Oy1CFfw22UMUYmvr8 RrydDkssxspG7MIav3rpFZ9zOt7ok4MN+X2UYuLWmr5zZ1/xfIz+nfXe2Mynv8n0 Xll5fRwa+205vsW7l5NayhiMUWOIv6BMrJbTSLlyO2KxxIq2fK9bYgReqKcpms1G h0D3/UzXtF5rxN99REANk6pi+jg7xjjX3gS9NmW9lShtaUSxe0MmSUciuY8efK2+ V+uSJBFnNnY9bfKpMcKpw0u0qWNcAY5tK7Fhps09NipfzZ6T4M4Qfo64RwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGU9UGwhByJEnvxFTwUrkL11l3k1MB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvWlQxUWJDRUhJa1NlX0VWUEJTdVF2WFdYZVRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufZwMA0G CSqGSIb3DQEBCwUAA4IBAQCyWeyDR+A7DBM3+1M2WqrPmMkTO9UX18C1sHqHPXjx ooPapNj2tnT7gM6D82dHu2KqsFS2VTchbebIZq97X2BU+djgT6t8Pd5QY254tzRR +Qo48IMS4XDjksLTeN2qHDIkMBKXrY7LbXW9XDSdGyu/TsmY18GRwAldD/gp0IO8 j/PxxZDXlZnBNMjGbi1YOoOWWdzWMMFSf5jUkPsB/1B8oEopP5i+YHvCPJado1Jp av48Zz3C5t3QQ6A0AmphQkrdxLuzHkveP3REdiADpwQexyeOFDlX3TUK4UaDsm3a LF8L7cyLPlvE1I1/DBolpZinKdXfaOi++RSLkrnkcQMU -----END CERTIFICATE-----Generated at Sun Jan 11 07:31:09 2026 by rpki-client