This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZofjsxeEPnIeeZgXMSASk9dDVG0.roa File: ZofjsxeEPnIeeZgXMSASk9dDVG0.roa (raw, json) Hash identifier: sQYDtaarTXEW487cIlmAiE+J/jbbrU6qIuqtaacqBxw= Subject key identifier: 66:87:E3:B3:17:84:3E:72:1E:79:98:17:31:20:12:93:D7:43:54:6D Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C137B316035FBA48282AA7124B2D20F Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZofjsxeEPnIeeZgXMSASk9dDVG0.roa Signing time: Fri 02 Jan 2026 00:20:10 +0000 ROA not before: Fri 02 Jan 2026 00:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135391 IP address blocks: 185.230.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:7b:31:60:35:fb:a4:82:82:aa:71:24:b2:d2:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6687e3b317843e721e79981731201293d743546d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8c:4b:80:41:3f:ee:78:6f:ec:e4:9a:e4:e3: 1a:42:06:82:c4:06:9a:76:cd:4b:6e:29:9e:c8:43: 81:f8:1e:eb:c2:db:5f:07:45:26:35:e3:f0:89:4b: 22:17:40:c3:6d:83:ba:71:01:be:67:7f:be:61:4b: b9:27:ed:75:44:f2:15:a5:d7:24:50:38:9f:9e:28: 87:2a:6a:0d:87:b6:bf:f5:43:d0:14:5b:8c:02:cd: 95:28:5c:f3:02:75:89:37:ae:ba:cb:d5:27:11:2b: d6:3b:eb:86:0c:a2:3b:71:99:d5:91:f5:cb:ab:83: 52:d5:79:83:61:90:b9:c1:d2:ce:1c:66:b6:61:15: d9:05:6e:33:05:7f:0e:6e:28:24:29:53:16:5a:2b: 1a:9b:87:48:c7:13:6e:04:c9:54:38:57:6d:d1:9a: 2f:c7:5e:f3:1d:c9:6b:da:1f:6f:63:44:78:ca:91: be:8b:45:cf:1a:3e:3b:1c:0e:39:9d:e9:5a:61:ed: a8:fa:dd:2f:4a:70:88:e2:fa:3b:ef:69:cc:61:7e: c3:aa:6f:5d:c5:da:c6:fc:44:92:cc:55:c4:ad:3f: e2:39:78:e2:27:89:61:ca:92:b5:fe:be:f8:95:07: 1d:d2:63:ea:83:7c:93:aa:18:87:93:dd:44:e8:ce: f3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:87:E3:B3:17:84:3E:72:1E:79:98:17:31:20:12:93:D7:43:54:6D X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZofjsxeEPnIeeZgXMSASk9dDVG0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.230.53.0/24 Signature Algorithm: sha256WithRSAEncryption bf:f2:cc:41:49:c9:cc:b4:f3:10:70:6e:e0:22:5a:13:c4:6f: 95:da:6a:e9:87:bc:b2:ff:e6:a5:69:e0:92:41:26:34:c7:a8: 5f:3a:c7:fe:1c:2a:87:8f:82:95:92:c0:f2:ab:5b:77:1c:4d: 81:1c:5d:ef:af:0c:2b:ef:37:bd:45:1d:93:c3:b7:de:b8:8f: 73:b5:30:32:62:25:b9:c6:75:e2:7b:1b:e3:0c:87:10:4a:61: 33:72:66:c7:af:a9:10:e6:dc:9e:df:2d:11:73:c3:ba:f5:0d: 20:80:f9:a1:9a:89:8f:b9:27:85:7b:37:82:84:a5:ae:ac:13: 82:69:fb:59:11:73:a8:9c:24:9b:8b:82:e4:f9:cf:3c:76:f5: 9d:62:97:d3:93:82:2a:11:34:42:6c:c1:db:59:cc:bc:77:4e: 4f:b7:a9:88:3d:33:66:4c:88:f0:40:fe:45:db:7a:1e:97:4a: 71:64:4b:a3:bb:25:ce:e1:3a:93:c8:46:ed:7d:aa:5f:48:57: 9c:c4:8c:41:e0:0e:0f:79:16:5d:29:90:7f:92:23:06:dd:dc: eb:cf:af:16:d9:e5:61:fa:f5:ba:94:a2:ee:a1:6b:2e:31:85: ec:c4:5a:ca:6b:7f:66:42:a7:c6:d2:38:73:bc:1d:f9:58:19: d4:e2:79:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E3sxYDX7pIKCqnEkstIPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Njg3ZTNiMzE3ODQzZTcyMWU3OTk4MTczMTIwMTI5M2Q3NDM1NDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oxLgEE/7nhv7OSa5OMaQgaCxAaa ds1LbimeyEOB+B7rwttfB0UmNePwiUsiF0DDbYO6cQG+Z3++YUu5J+11RPIVpdck UDifniiHKmoNh7a/9UPQFFuMAs2VKFzzAnWJN666y9UnESvWO+uGDKI7cZnVkfXL q4NS1XmDYZC5wdLOHGa2YRXZBW4zBX8ObigkKVMWWisam4dIxxNuBMlUOFdt0Zov x17zHclr2h9vY0R4ypG+i0XPGj47HA45nelaYe2o+t0vSnCI4vo772nMYX7Dqm9d xdrG/ESSzFXErT/iOXjiJ4lhypK1/r74lQcd0mPqg3yTqhiHk91E6M7z3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGaH47MXhD5yHnmYFzEgEpPXQ1RtMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvWm9manN4ZUVQbkllZVpnWE1TQVNrOWREVkcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueY1MA0G CSqGSIb3DQEBCwUAA4IBAQC/8sxBScnMtPMQcG7gIloTxG+V2mrph7yy/+alaeCS QSY0x6hfOsf+HCqHj4KVksDyq1t3HE2BHF3vrwwr7ze9RR2Tw7feuI9ztTAyYiW5 xnXiexvjDIcQSmEzcmbHr6kQ5tye3y0Rc8O69Q0ggPmhmomPuSeFezeChKWurBOC aftZEXOonCSbi4Lk+c88dvWdYpfTk4IqETRCbMHbWcy8d05Pt6mIPTNmTIjwQP5F 23oel0pxZEujuyXO4TqTyEbtfapfSFecxIxB4A4PeRZdKZB/kiMG3dzrz68W2eVh +vW6lKLuoWsuMYXsxFrKa39mQqfG0jhzvB35WBnU4nl7 -----END CERTIFICATE-----Generated at Fri Jan 2 23:47:31 2026 by rpki-client