This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Zf_rCXFE2KN_tDL0xgD2saSRwyE.roa File: Zf_rCXFE2KN_tDL0xgD2saSRwyE.roa (raw, json) Hash identifier: jSImieZK4bbGOdamckIo2jHlABgcL/TR9dZDw4gq8m8= Subject key identifier: 65:FF:EB:09:71:44:D8:A3:7F:B4:32:F4:C6:00:F6:B1:A4:91:C3:21 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E27833AF637D442CE4A98491E76C5 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Zf_rCXFE2KN_tDL0xgD2saSRwyE.roa Signing time: Thu 01 Jan 2026 12:17:49 +0000 ROA not before: Thu 01 Jan 2026 12:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39018 IP address blocks: 185.193.38.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:27:83:3a:f6:37:d4:42:ce:4a:98:49:1e:76:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65ffeb097144d8a37fb432f4c600f6b1a491c321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a8:dd:ca:ad:dc:60:8e:37:5e:4f:a2:e9:66: fe:a3:f7:69:90:03:80:db:69:5d:d7:81:d3:9e:91: ba:9d:28:ca:6e:eb:19:38:bd:16:c2:94:16:b6:a0: 4b:49:3d:7d:4f:b8:de:c2:d5:02:88:ae:9e:34:72: 5b:10:59:ac:77:b5:e6:5b:97:d1:f9:dc:3a:98:ec: 80:49:07:3b:50:24:77:25:f7:e3:c1:9c:48:12:d7: ae:41:c2:d2:93:48:cb:e1:05:94:83:e1:f0:5c:d7: 7c:f1:96:6c:58:a9:9d:51:c7:c9:d0:d9:74:36:88: e0:bb:d0:59:83:56:a4:14:1e:93:b6:d0:d4:56:5a: ba:86:7c:86:3c:08:a5:45:d3:67:ad:2b:6a:0e:68: 10:f7:63:b8:c5:6d:0b:37:e6:59:ef:be:c7:7c:12: da:df:b1:49:42:d4:83:43:8a:50:ca:9a:0e:40:4f: 9b:05:33:a5:12:dc:3c:94:1a:d7:a7:7c:8b:ba:31: 15:a8:8b:60:2f:d0:a6:ab:fa:82:e4:9b:8f:0e:bd: fb:3b:53:ce:67:cb:26:66:dc:60:b5:88:03:24:e4: 47:a2:78:e8:04:9d:03:ea:95:6f:c6:33:b6:7f:df: 25:be:f8:89:84:c8:7a:f5:21:5c:4c:06:ac:37:26: 5e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FF:EB:09:71:44:D8:A3:7F:B4:32:F4:C6:00:F6:B1:A4:91:C3:21 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Zf_rCXFE2KN_tDL0xgD2saSRwyE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.193.38.0/24 Signature Algorithm: sha256WithRSAEncryption a7:55:02:41:79:91:4d:16:29:a9:e0:f1:0d:b3:a5:7a:06:e2: 0b:47:95:af:c8:37:7e:44:8d:2a:64:c1:10:c5:12:6e:40:fb: 4e:2b:a9:eb:b5:a7:3b:d6:60:48:e6:b2:d6:11:65:8e:1c:74: f9:88:2d:2e:02:22:ec:d4:76:bd:da:e7:a1:0a:a9:fd:54:73: 93:fb:4b:7e:a6:fc:29:ff:40:53:2a:61:d2:e8:92:f5:34:8b: df:ef:f8:aa:4a:bf:d8:a6:5b:6d:b6:d7:fa:3a:68:ff:0f:96: a2:e2:d9:e1:ff:9e:f6:90:c5:0d:8d:2b:06:6c:5c:9d:0f:c5: 8a:75:ef:7b:fc:3f:38:ef:98:1c:5c:8a:e8:85:c5:30:7d:94: ce:2a:9e:26:ee:bb:67:77:a3:0c:92:e6:ef:82:3d:33:e9:ae: a6:4f:df:91:ed:ee:58:59:37:9f:f3:ad:eb:58:81:83:64:e0: 63:c6:16:cb:fb:57:8a:43:1f:82:c6:6b:47:21:fb:d9:58:3e: 3b:7b:20:21:44:fe:ce:60:88:03:7f:02:c1:67:c9:7d:06:a8: d4:c1:8d:c9:9a:d7:c4:95:12:58:0d:e8:20:4b:c5:cc:98:0b: 23:5b:5d:c0:12:38:25:17:70:6d:58:6c:90:01:d1:16:0e:cb: 14:84:d4:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fieDOvY31ELOSphJHnbFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWZmZWIwOTcxNDRkOGEzN2ZiNDMyZjRjNjAwZjZiMWE0OTFjMzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26jdyq3cYI43Xk+i6Wb+o/dpkAOA 22ld14HTnpG6nSjKbusZOL0WwpQWtqBLST19T7jewtUCiK6eNHJbEFmsd7XmW5fR +dw6mOyASQc7UCR3JffjwZxIEteuQcLSk0jL4QWUg+HwXNd88ZZsWKmdUcfJ0Nl0 Nojgu9BZg1akFB6TttDUVlq6hnyGPAilRdNnrStqDmgQ92O4xW0LN+ZZ777HfBLa 37FJQtSDQ4pQypoOQE+bBTOlEtw8lBrXp3yLujEVqItgL9Cmq/qC5JuPDr37O1PO Z8smZtxgtYgDJORHonjoBJ0D6pVvxjO2f98lvviJhMh69SFcTAasNyZeUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGX/6wlxRNijf7Qy9MYA9rGkkcMhMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvWmZfckNYRkUyS05fdERMMHhnRDJzYVNSd3lFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucEmMA0G CSqGSIb3DQEBCwUAA4IBAQCnVQJBeZFNFimp4PENs6V6BuILR5WvyDd+RI0qZMEQ xRJuQPtOK6nrtac71mBI5rLWEWWOHHT5iC0uAiLs1Ha92uehCqn9VHOT+0t+pvwp /0BTKmHS6JL1NIvf7/iqSr/Yplttttf6Omj/D5ai4tnh/572kMUNjSsGbFydD8WK de97/D8475gcXIrohcUwfZTOKp4m7rtnd6MMkubvgj0z6a6mT9+R7e5YWTef863r WIGDZOBjxhbL+1eKQx+CxmtHIfvZWD47eyAhRP7OYIgDfwLBZ8l9BqjUwY3JmtfE lRJYDeggS8XMmAsjW13AEjglF3BtWGyQAdEWDssUhNS9 -----END CERTIFICATE-----Generated at Mon Jan 19 20:23:11 2026 by rpki-client