This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/z36r_Nn_-H3d4HbuPBnEDOhSNcw.roa File: z36r_Nn_-H3d4HbuPBnEDOhSNcw.roa (raw, json) Hash identifier: X04P3E9PBW3dznN7My2v7aFbzSrBBxruG8NoCY4g2sI= Subject key identifier: CF:7E:AB:FC:D9:FF:F8:7D:DD:E0:76:EE:3C:19:C4:0C:E8:52:35:CC Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C13AA163722CD99ED09FA8F90D5CE29 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/z36r_Nn_-H3d4HbuPBnEDOhSNcw.roa Signing time: Fri 02 Jan 2026 00:20:22 +0000 ROA not before: Fri 02 Jan 2026 00:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400909 IP address blocks: 185.238.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:aa:16:37:22:cd:99:ed:09:fa:8f:90:d5:ce:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf7eabfcd9fff87ddde076ee3c19c40ce85235cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9e:48:54:29:dd:a4:e9:85:ff:b0:25:ab:44: c8:ab:3b:34:df:ba:f3:e0:8f:1d:3f:81:6e:d3:12: 7e:ce:7e:47:59:ca:c8:ed:5b:32:55:78:b7:64:ca: 98:10:4f:dc:af:a0:9f:21:2c:82:60:18:0b:8d:8b: fe:b1:d2:1a:b6:d5:d8:a4:fe:f8:59:de:62:53:6a: dc:e4:4b:52:14:54:63:ef:9c:69:71:73:39:c4:db: ee:67:67:a9:09:cf:e0:e5:e1:2f:5b:78:86:7a:49: e0:0e:f6:ef:bc:14:d1:4e:bc:3d:55:21:c1:45:bb: bb:9d:8f:5f:08:34:a3:d1:8b:b2:1e:e6:00:c3:f8: 66:fe:33:76:4a:5c:5c:ea:7e:b9:8f:3b:7e:cb:78: 52:e9:e0:dc:1e:5e:78:67:53:d6:7a:41:38:a5:5f: b7:27:4c:a6:48:97:26:a7:15:9a:a0:49:85:1e:cd: d3:43:81:9e:54:4a:60:5f:42:7d:b4:9a:8e:82:c7: 9d:e7:86:c3:fc:92:ce:cc:01:ce:19:2c:23:00:c9: ae:2c:42:e8:56:9d:8a:e0:e7:ed:3e:b6:7a:b7:78: e2:c6:36:b6:b4:ac:3b:d7:2e:03:fc:17:dc:57:63: 8b:6a:ed:d4:d1:7d:db:48:b9:3e:be:f7:06:f7:2b: a9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7E:AB:FC:D9:FF:F8:7D:DD:E0:76:EE:3C:19:C4:0C:E8:52:35:CC X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/z36r_Nn_-H3d4HbuPBnEDOhSNcw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.238.229.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:4a:cf:7d:72:e5:2b:20:b8:2f:f9:17:30:72:53:5c:b7:e2: 63:7e:d4:e2:55:8c:46:4c:32:06:c4:37:1a:46:b6:cf:ba:7f: 19:f1:c4:4f:10:59:2a:9b:bd:fa:33:a0:dc:25:42:a7:47:b9: b2:59:0a:cf:1c:2c:d9:09:bb:68:98:7a:4b:16:52:cf:ec:c8: cd:7a:6c:e1:50:5a:be:ab:f3:a3:e2:e4:1b:6e:f2:1f:a1:69: b7:19:a1:e6:20:19:f2:88:db:52:08:dd:6e:31:0b:e5:bb:dd: 75:de:32:10:1e:9f:67:c8:90:5c:81:a6:90:b1:18:ee:a5:36: 6c:18:99:24:14:5a:de:fe:ab:39:0c:7f:49:24:4a:32:53:2b: 38:f7:00:1c:8f:d7:9e:68:6c:65:ff:f8:b4:36:01:3d:d8:6f: b4:14:3f:dd:24:43:ab:5e:d2:35:23:9b:c0:f2:a6:e7:78:31: 37:b5:81:a3:da:a5:88:f3:b0:cc:47:98:e8:04:58:95:e4:69: c2:fd:71:39:5e:66:38:d6:fe:b7:3b:1e:44:80:96:35:08:87: f4:54:85:9a:e5:40:00:fa:5a:45:4e:e3:69:c5:5c:5e:f9:b1: 47:38:a2:5a:99:11:e5:ee:f1:05:72:65:4c:4a:f7:a4:60:d9: 5b:ad:d7:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E6oWNyLNme0J+o+Q1c4pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjdlYWJmY2Q5ZmZmODdkZGRlMDc2ZWUzYzE5YzQwY2U4NTIzNWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ5IVCndpOmF/7Alq0TIqzs037rz 4I8dP4Fu0xJ+zn5HWcrI7VsyVXi3ZMqYEE/cr6CfISyCYBgLjYv+sdIattXYpP74 Wd5iU2rc5EtSFFRj75xpcXM5xNvuZ2epCc/g5eEvW3iGekngDvbvvBTRTrw9VSHB Rbu7nY9fCDSj0YuyHuYAw/hm/jN2Slxc6n65jzt+y3hS6eDcHl54Z1PWekE4pV+3 J0ymSJcmpxWaoEmFHs3TQ4GeVEpgX0J9tJqOgsed54bD/JLOzAHOGSwjAMmuLELo Vp2K4OftPrZ6t3jixja2tKw71y4D/BfcV2OLau3U0X3bSLk+vvcG9yupFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM9+q/zZ//h93eB27jwZxAzoUjXMMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvejM2cl9Obl8tSDNkNEhidVBCbkVET2hTTmN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue7lMA0G CSqGSIb3DQEBCwUAA4IBAQB7Ss99cuUrILgv+RcwclNct+JjftTiVYxGTDIGxDca RrbPun8Z8cRPEFkqm736M6DcJUKnR7myWQrPHCzZCbtomHpLFlLP7MjNemzhUFq+ q/Oj4uQbbvIfoWm3GaHmIBnyiNtSCN1uMQvlu9113jIQHp9nyJBcgaaQsRjupTZs GJkkFFre/qs5DH9JJEoyUys49wAcj9eeaGxl//i0NgE92G+0FD/dJEOrXtI1I5vA 8qbneDE3tYGj2qWI87DMR5joBFiV5GnC/XE5XmY41v63Ox5EgJY1CIf0VIWa5UAA +lpFTuNpxVxe+bFHOKJamRHl7vEFcmVMSvekYNlbrdeA -----END CERTIFICATE-----Generated at Fri Jan 2 23:53:23 2026 by rpki-client