This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/ZcHXLBJSx_Tt6F_s5FsMwgXSk6E.roa File: ZcHXLBJSx_Tt6F_s5FsMwgXSk6E.roa (raw, json) Hash identifier: DXyT/IUpWKmwacoz1gYsfpWFfm80bfOxmbXLHhHgltY= Subject key identifier: 65:C1:D7:2C:12:52:C7:F4:ED:E8:5F:EC:E4:5B:0C:C2:05:D2:93:A1 Certificate issuer: /CN=b43a71ca60d74e45d2b9748ab1066529fd01337e Certificate serial: 019B7F82A0E7F16113D5BC25F354BFEC27BD Authority key identifier: B4:3A:71:CA:60:D7:4E:45:D2:B9:74:8A:B1:06:65:29:FD:01:33:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDpxymDXTkXSuXSKsQZlKf0BM34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/ZcHXLBJSx_Tt6F_s5FsMwgXSk6E.roa Signing time: Fri 02 Jan 2026 16:20:25 +0000 ROA not before: Fri 02 Jan 2026 16:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62373 IP address blocks: 185.38.4.0/22 maxlen: 22 185.229.140.0/22 maxlen: 22 185.240.60.0/22 maxlen: 22 2a04:7501::/32 maxlen: 32 2a0c:7380::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.mft rsync://rpki.ripe.net/repository/DEFAULT/tDpxymDXTkXSuXSKsQZlKf0BM34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:a0:e7:f1:61:13:d5:bc:25:f3:54:bf:ec:27:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b43a71ca60d74e45d2b9748ab1066529fd01337e Validity Not Before: Jan 2 16:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65c1d72c1252c7f4ede85fece45b0cc205d293a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a2:33:a0:85:a7:eb:09:df:96:a3:1a:7b:2c: d2:c7:fe:79:55:2c:c5:cb:68:12:1c:48:10:a6:ba: 92:af:3c:00:eb:2f:4f:12:95:da:16:8f:af:89:56: 8c:16:89:32:46:31:ac:02:5d:22:ae:26:2a:a2:4f: 4f:ff:86:06:78:27:df:de:ff:38:80:a6:d1:a7:b9: 73:47:b3:b6:3d:89:55:9d:40:4c:4d:9e:21:38:a6: a7:28:dd:f1:99:b4:59:52:34:7f:d8:b2:4d:0f:ec: 0e:2a:96:92:48:0d:52:5e:a8:22:65:7e:df:70:ad: 04:7d:4a:ac:02:de:9d:ae:3a:39:7a:c7:0d:5d:a6: 77:39:21:c5:70:33:9f:32:45:76:41:07:0a:72:72: 5b:97:8f:f0:7d:4a:fe:3c:f2:ee:59:7f:d6:bc:be: 61:42:a0:3b:a3:62:32:52:60:52:01:d5:25:43:5b: d1:4c:27:1d:e9:dc:29:f8:ff:c9:66:1d:4c:fb:29: 99:51:7a:94:ce:d7:07:d0:9e:f8:06:cf:af:f7:0c: 38:4b:4b:73:6b:16:c1:85:bb:3e:3b:57:3f:b7:87: 46:8b:f9:f6:65:c7:20:d5:1d:0e:ec:a6:42:aa:bb: c7:2e:28:b9:f6:a0:89:0b:58:1a:b9:61:be:e1:ce: f5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C1:D7:2C:12:52:C7:F4:ED:E8:5F:EC:E4:5B:0C:C2:05:D2:93:A1 X509v3 Authority Key Identifier: keyid:B4:3A:71:CA:60:D7:4E:45:D2:B9:74:8A:B1:06:65:29:FD:01:33:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDpxymDXTkXSuXSKsQZlKf0BM34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/ZcHXLBJSx_Tt6F_s5FsMwgXSk6E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.38.4.0/22 185.229.140.0/22 185.240.60.0/22 IPv6: 2a04:7501::/32 2a0c:7380::/29 Signature Algorithm: sha256WithRSAEncryption 07:2a:9b:f9:44:fc:5b:5e:81:cc:d9:8f:64:78:60:cc:d4:be: a0:87:ea:01:0e:b7:51:9d:7b:1c:43:0c:ae:92:23:5c:d3:9f: 12:9f:21:0f:3a:14:e5:45:8b:bc:8a:7d:8e:1e:e5:31:16:e6: 7f:f5:e5:1f:87:c2:fd:52:51:4b:f0:a6:45:10:b8:fd:55:a2: 64:05:fb:a7:30:08:b1:e6:aa:8b:6e:1c:06:f7:1a:c8:b5:62: 8e:8c:59:f2:62:0f:a2:5f:2c:42:42:6f:f5:3e:78:ef:f4:29: ef:d1:de:be:1f:72:e5:93:35:5c:c5:9e:7d:80:13:9a:b6:ed: 32:28:1f:83:cc:b9:57:8a:dd:35:52:d0:e8:e6:05:2b:ce:84: 75:fd:26:3f:03:88:fb:a4:1c:4d:7e:cf:63:de:82:db:b9:4e: 1e:8c:10:d0:ce:a3:dc:aa:cb:2e:5b:cd:14:82:ea:bc:8d:d6: f3:a3:7d:43:1e:21:19:92:96:68:2e:c6:10:d2:49:4f:02:13: 55:ba:4d:4b:46:75:50:3a:d5:79:01:08:5b:03:71:2b:81:09: f2:e6:42:58:42:93:4e:87:64:46:e7:ed:73:32:11:0e:c8:5a: 2e:a1:d2:4e:3a:19:40:04:2f:cd:e5:25:25:b4:82:3e:38:4a: 19:b6:41:52 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt/gqDn8WET1bwl81S/7Ce9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0M2E3MWNhNjBkNzRlNDVkMmI5NzQ4YWIxMDY2NTI5ZmQw MTMzN2UwHhcNMjYwMTAyMTYyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWMxZDcyYzEyNTJjN2Y0ZWRlODVmZWNlNDViMGNjMjA1ZDI5M2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6IzoIWn6wnflqMaeyzSx/55VSzF y2gSHEgQprqSrzwA6y9PEpXaFo+viVaMFokyRjGsAl0iriYqok9P/4YGeCff3v84 gKbRp7lzR7O2PYlVnUBMTZ4hOKanKN3xmbRZUjR/2LJND+wOKpaSSA1SXqgiZX7f cK0EfUqsAt6drjo5escNXaZ3OSHFcDOfMkV2QQcKcnJbl4/wfUr+PPLuWX/WvL5h QqA7o2IyUmBSAdUlQ1vRTCcd6dwp+P/JZh1M+ymZUXqUztcH0J74Bs+v9ww4S0tz axbBhbs+O1c/t4dGi/n2Zccg1R0O7KZCqrvHLii59qCJC1gauWG+4c71pQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFGXB1ywSUsf07ehf7ORbDMIF0pOhMB8GA1UdIwQY MBaAFLQ6ccpg105F0rl0irEGZSn9ATN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERweHltRFhUa1hTdVhTS3NRWmxLZjBCTTM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS84Y2VmNmYtZmUwOS00ZWY2LThiZjEt Nzk4YWM0OTI4ZWQ2LzEvWmNIWExCSlN4X1R0NkZfczVGc013Z1hTazZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS84Y2VmNmYtZmUwOS00ZWY2LThiZjEtNzk4YWM0OTI4ZWQ2 LzEvdERweHltRFhUa1hTdVhTS3NRWmxLZjBCTTM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQCuSYEAwQC ueWMAwQCufA8MBQEAgACMA4DBQAqBHUBAwUDKgxzgDANBgkqhkiG9w0BAQsFAAOC AQEAByqb+UT8W16BzNmPZHhgzNS+oIfqAQ63UZ17HEMMrpIjXNOfEp8hDzoU5UWL vIp9jh7lMRbmf/XlH4fC/VJRS/CmRRC4/VWiZAX7pzAIseaqi24cBvcayLVijoxZ 8mIPol8sQkJv9T547/Qp79Hevh9y5ZM1XMWefYATmrbtMigfg8y5V4rdNVLQ6OYF K86Edf0mPwOI+6QcTX7PY96C27lOHowQ0M6j3KrLLlvNFILqvI3W86N9Qx4hGZKW aC7GENJJTwITVbpNS0Z1UDrVeQEIWwNxK4EJ8uZCWEKTTodkRuftczIRDshaLqHS TjoZQAQvzeUlJbSCPjhKGbZBUg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:04 2026 by rpki-client