This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/zLRh9u6xLJnwtdY0ORDwft0JoyA.roa File: zLRh9u6xLJnwtdY0ORDwft0JoyA.roa (raw, json) Hash identifier: +NvH+iEfI87IdOFqZwYbFUot/dODFAweRpk/UBNPhTc= Subject key identifier: CC:B4:61:F6:EE:B1:2C:99:F0:B5:D6:34:39:10:F0:7E:DD:09:A3:20 Certificate issuer: /CN=504523f8811ebe5aa3598511a48f3baf0001a8e8 Certificate serial: 019B7910ED0C956FD9990AD9FB202CB2A386 Authority key identifier: 50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/zLRh9u6xLJnwtdY0ORDwft0JoyA.roa Signing time: Thu 01 Jan 2026 10:18:30 +0000 ROA not before: Thu 01 Jan 2026 10:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204806 IP address blocks: 185.239.92.0/22 maxlen: 24 185.239.92.0/24 maxlen: 24 185.239.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ed:0c:95:6f:d9:99:0a:d9:fb:20:2c:b2:a3:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=504523f8811ebe5aa3598511a48f3baf0001a8e8 Validity Not Before: Jan 1 10:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ccb461f6eeb12c99f0b5d6343910f07edd09a320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:64:fa:cf:52:92:ff:0d:7d:b3:3c:75:a6:5b: 3c:9c:d9:58:0e:3f:c4:72:65:1a:ba:41:9c:c2:e5: 84:27:4e:14:ee:08:24:0c:75:e0:c7:3b:fe:30:6c: 23:57:c2:ed:0d:09:42:d3:ab:ca:e6:d3:9c:ef:5c: 21:83:66:73:59:af:53:c5:cc:a3:10:39:b6:d7:21: 86:39:5c:eb:b5:5d:4d:fa:65:ba:a9:25:4a:62:24: 3a:c9:f6:35:51:db:3f:c4:63:6e:3b:4e:c2:7c:9c: 87:dc:b6:a7:3a:b6:0a:8f:eb:86:f8:6a:b0:61:f2: f5:18:c7:61:33:d3:d2:a3:8e:9c:e8:03:70:98:31: f0:2a:ea:fd:a0:08:bc:ce:cd:59:cd:ca:43:33:de: 97:7f:3d:4a:65:8d:e7:85:12:79:bc:01:95:1d:1e: 93:37:45:2e:3d:0c:1b:e9:7b:eb:87:18:9f:18:ef: de:79:e5:65:77:33:c7:19:5a:a0:3c:e1:7c:d1:1a: 54:5f:ad:db:18:18:f1:12:ca:71:87:85:1e:49:65: d6:1e:93:54:79:4c:93:42:6f:35:67:87:10:0b:07: dc:5c:ff:53:0d:1e:6f:0f:74:a8:3d:1f:96:6b:7b: 28:5b:0b:28:11:87:aa:66:54:af:b4:9d:4e:ea:ca: 9f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B4:61:F6:EE:B1:2C:99:F0:B5:D6:34:39:10:F0:7E:DD:09:A3:20 X509v3 Authority Key Identifier: keyid:50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/zLRh9u6xLJnwtdY0ORDwft0JoyA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.239.92.0/22 Signature Algorithm: sha256WithRSAEncryption 84:b3:ad:7e:24:59:ee:fa:97:6d:1e:1c:69:32:7c:c9:7e:76: 84:7f:fd:14:15:7e:8a:61:3a:0c:8d:6b:46:ab:74:36:74:3e: e8:0d:78:18:29:fe:e1:70:7a:52:02:ca:3f:f2:95:4e:67:db: de:29:2b:2e:51:64:a3:7b:2f:7b:7f:90:8f:ab:87:a4:ba:b7: d5:64:3e:11:98:89:18:c0:a5:2f:b8:6a:aa:b2:92:66:df:97: 52:2f:47:36:33:25:27:0d:38:87:95:74:46:cb:cd:0f:16:ee: 43:9f:71:f4:65:fb:99:ef:1d:45:18:20:0a:ea:27:dd:77:bd: c9:db:9f:62:03:91:4d:e6:d6:f2:00:3e:a3:b7:69:37:8a:9f: 66:08:4e:74:fa:88:40:95:07:08:71:98:a4:9a:01:a4:27:bd: dd:83:48:10:54:30:e1:c3:95:6a:70:b8:d7:c7:bd:07:74:ca: c9:54:bb:89:47:a5:ee:e1:cf:c3:b5:49:f9:13:98:c7:db:3b: d4:83:e3:47:98:54:29:dd:0b:2e:aa:cf:ab:f8:67:86:1c:46: 77:9c:9c:f0:c9:34:3a:3e:cc:e3:c7:26:c3:ce:5c:e5:c1:9b: f3:3a:62:fb:2b:dc:5e:37:ae:e9:ff:53:54:2c:0d:1d:00:2c: 6e:58:cd:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EO0MlW/ZmQrZ+yAssqOGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNDUyM2Y4ODExZWJlNWFhMzU5ODUxMWE0OGYzYmFmMDAw MWE4ZTgwHhcNMjYwMTAxMTAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2I0NjFmNmVlYjEyYzk5ZjBiNWQ2MzQzOTEwZjA3ZWRkMDlhMzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2T6z1KS/w19szx1pls8nNlYDj/E cmUaukGcwuWEJ04U7ggkDHXgxzv+MGwjV8LtDQlC06vK5tOc71whg2ZzWa9Txcyj EDm21yGGOVzrtV1N+mW6qSVKYiQ6yfY1Uds/xGNuO07CfJyH3LanOrYKj+uG+Gqw YfL1GMdhM9PSo46c6ANwmDHwKur9oAi8zs1ZzcpDM96Xfz1KZY3nhRJ5vAGVHR6T N0UuPQwb6XvrhxifGO/eeeVldzPHGVqgPOF80RpUX63bGBjxEspxh4UeSWXWHpNU eUyTQm81Z4cQCwfcXP9TDR5vD3SoPR+Wa3soWwsoEYeqZlSvtJ1O6sqfaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMy0YfbusSyZ8LXWNDkQ8H7dCaMgMB8GA1UdIwQY MBaAFFBFI/iBHr5ao1mFEaSPO68AAajoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUVVai1JRWV2bHFqV1lVUnBJODdyd0FCcU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zYjAyM2UtYTM5Ny00NmJiLTk0NjUt YmYzZjYyYjk1ZjEwLzEvekxSaDl1NnhMSm53dGRZME9SRHdmdDBKb3lBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8zYjAyM2UtYTM5Ny00NmJiLTk0NjUtYmYzZjYyYjk1ZjEw LzEvVUVVai1JRWV2bHFqV1lVUnBJODdyd0FCcU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCue9cMA0G CSqGSIb3DQEBCwUAA4IBAQCEs61+JFnu+pdtHhxpMnzJfnaEf/0UFX6KYToMjWtG q3Q2dD7oDXgYKf7hcHpSAso/8pVOZ9veKSsuUWSjey97f5CPq4ekurfVZD4RmIkY wKUvuGqqspJm35dSL0c2MyUnDTiHlXRGy80PFu5Dn3H0ZfuZ7x1FGCAK6ifdd73J 259iA5FN5tbyAD6jt2k3ip9mCE50+ohAlQcIcZikmgGkJ73dg0gQVDDhw5VqcLjX x70HdMrJVLuJR6Xu4c/DtUn5E5jH2zvUg+NHmFQp3Qsuqs+r+GeGHEZ3nJzwyTQ6 PszjxybDzlzlwZvzOmL7K9xeN67p/1NULA0dACxuWM3E -----END CERTIFICATE-----Generated at Tue Jan 20 04:46:52 2026 by rpki-client