This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/Zpq31QxZEBIlYUReZR_zQ9fqz_s.roa File: Zpq31QxZEBIlYUReZR_zQ9fqz_s.roa (raw, json) Hash identifier: kvahSoEODcR6XaCVi1n2GMeJPQJl3cEsFyNEhPCk3BY= Subject key identifier: 66:9A:B7:D5:0C:59:10:12:25:61:44:5E:65:1F:F3:43:D7:EA:CF:FB Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f Certificate serial: 019B7E38DD37A107374CEB5DD8522C5D626A Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/Zpq31QxZEBIlYUReZR_zQ9fqz_s.roa Signing time: Fri 02 Jan 2026 10:20:14 +0000 ROA not before: Fri 02 Jan 2026 10:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213157 IP address blocks: 185.86.83.0/24 maxlen: 24 185.254.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:dd:37:a1:07:37:4c:eb:5d:d8:52:2c:5d:62:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f Validity Not Before: Jan 2 10:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=669ab7d50c5910122561445e651ff343d7eacffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:07:37:86:36:6d:e4:ae:b9:d0:b2:e2:0e:fa: b1:70:ef:3c:71:4c:2e:2e:d4:84:49:04:a3:56:f9: 58:27:a6:12:62:86:33:78:f2:2b:24:60:ed:18:2e: cd:85:48:a6:d7:3a:8c:96:af:c0:8f:72:ef:ff:5f: 45:7a:a5:c0:30:d0:26:9c:6d:c6:77:dd:62:dc:33: 10:72:63:e7:65:8b:0b:6e:06:38:2f:49:c1:70:74: cf:12:0c:45:07:cc:ce:0a:d4:ea:0f:fc:0d:ba:bc: 6b:74:f3:02:3d:55:b9:77:64:39:d8:91:05:8f:29: f9:dd:d6:e3:0d:51:1d:9b:87:47:c6:dd:60:91:ed: 68:ce:1c:8c:04:2a:e5:e1:12:26:e7:55:45:29:f7: be:59:c2:77:c6:4b:e5:fc:a7:e6:81:0c:1f:4f:89: d8:f3:15:a3:87:a1:95:79:9a:cd:c1:3c:8d:fc:c1: c9:63:72:a0:7d:26:45:ea:0a:eb:5c:d5:79:cc:77: f4:4a:f4:0e:65:9f:88:e6:4c:f9:dc:5f:84:ee:4c: 0b:3c:86:61:5f:39:38:62:20:f2:ac:93:5b:15:c6: 8d:8d:d9:91:1e:e8:58:e4:ed:4a:e7:4e:a4:27:ea: 55:83:a2:1c:1b:34:60:13:ad:fc:b8:04:68:18:b9: 26:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9A:B7:D5:0C:59:10:12:25:61:44:5E:65:1F:F3:43:D7:EA:CF:FB X509v3 Authority Key Identifier: keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/Zpq31QxZEBIlYUReZR_zQ9fqz_s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.86.83.0/24 185.254.92.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:a6:99:b4:9f:1c:4c:5d:b6:97:f4:75:af:de:62:39:04:c0: 80:da:fc:24:59:bc:18:15:e1:06:ec:c3:54:c0:cb:f7:be:18: 61:bb:92:6a:d4:57:2e:a4:27:b1:93:f2:8e:20:8a:57:2c:cb: 38:70:98:35:db:5d:08:a8:bf:8c:19:1a:b2:c0:65:8a:67:75: a8:d0:72:18:9b:63:1c:88:b7:7f:c6:44:86:80:f8:48:b3:50: f5:49:0d:b6:28:05:0c:eb:37:4f:f2:35:02:b8:3a:1e:d8:70: 08:39:f0:88:a3:64:74:60:0f:c8:79:50:b3:35:b2:81:5d:02: 9f:3b:d7:e7:45:91:e3:78:1a:c8:05:5a:d2:2a:73:53:73:c1: 15:47:cf:58:83:76:e4:1f:db:50:ab:79:f0:39:88:1c:db:c1: 9c:af:d8:6c:59:c9:f5:27:ec:47:38:86:53:8a:ab:ae:bb:ea: 7f:52:c4:af:cd:64:a9:b6:16:1a:e1:76:69:03:ef:a3:ec:ad: d6:ea:84:c9:7b:e7:21:8e:6d:96:ef:14:e8:a5:97:1c:b6:7d: 54:f9:ce:4d:84:0b:79:77:42:c6:21:ee:89:e2:d4:fa:f1:7e: 6e:ec:4f:f2:49:91:92:30:5d:fd:79:88:53:7b:34:ab:c2:fd: 87:bc:1a:6f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+ON03oQc3TOtd2FIsXWJqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTkyZTY4ODk1YzcwNjhiNDY1NTUwODkxN2FkNWJiZGRi ZDBhNWYwHhcNMjYwMTAyMTAyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjlhYjdkNTBjNTkxMDEyMjU2MTQ0NWU2NTFmZjM0M2Q3ZWFjZmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gc3hjZt5K650LLiDvqxcO88cUwu LtSESQSjVvlYJ6YSYoYzePIrJGDtGC7NhUim1zqMlq/Aj3Lv/19FeqXAMNAmnG3G d91i3DMQcmPnZYsLbgY4L0nBcHTPEgxFB8zOCtTqD/wNurxrdPMCPVW5d2Q52JEF jyn53dbjDVEdm4dHxt1gke1ozhyMBCrl4RIm51VFKfe+WcJ3xkvl/KfmgQwfT4nY 8xWjh6GVeZrNwTyN/MHJY3KgfSZF6grrXNV5zHf0SvQOZZ+I5kz53F+E7kwLPIZh Xzk4YiDyrJNbFcaNjdmRHuhY5O1K506kJ+pVg6IcGzRgE638uARoGLkm1QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGaat9UMWRASJWFEXmUf80PX6s/7MB8GA1UdIwQY MBaAFFBZLmiJXHBotGVVCJF61bvdvQpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEt N2JiZDI4Y2U0YTc1LzEvWnBxMzFReFpFQklsWVVSZVpSX3pROWZxel9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEtN2JiZDI4Y2U0YTc1 LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuVZTAwQA uf5cMA0GCSqGSIb3DQEBCwUAA4IBAQA/ppm0nxxMXbaX9HWv3mI5BMCA2vwkWbwY FeEG7MNUwMv3vhhhu5Jq1FcupCexk/KOIIpXLMs4cJg1210IqL+MGRqywGWKZ3Wo 0HIYm2MciLd/xkSGgPhIs1D1SQ22KAUM6zdP8jUCuDoe2HAIOfCIo2R0YA/IeVCz NbKBXQKfO9fnRZHjeBrIBVrSKnNTc8EVR89Yg3bkH9tQq3nwOYgc28Gcr9hsWcn1 J+xHOIZTiquuu+p/UsSvzWSpthYa4XZpA++j7K3W6oTJe+chjm2W7xTopZcctn1U +c5NhAt5d0LGIe6J4tT68X5u7E/ySZGSMF39eYhTezSrwv2HvBpv -----END CERTIFICATE-----Generated at Mon Jan 26 18:55:03 2026 by rpki-client