This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/ZOFtNvohh1GT6QmRpbTj8yFColo.roa File: ZOFtNvohh1GT6QmRpbTj8yFColo.roa (raw, json) Hash identifier: icnN57OgCydR3QaLKU2WG6f0DKQefqL0klzmHG6LRNw= Subject key identifier: 64:E1:6D:36:FA:21:87:51:93:E9:09:91:A5:B4:E3:F3:21:42:A2:5A Certificate issuer: /CN=3d4fb91656dded5a0afaf0710d26a8df636ee078 Certificate serial: 019B775914ADCCE9F00C57E4326658FEC8ED Authority key identifier: 3D:4F:B9:16:56:DD:ED:5A:0A:FA:F0:71:0D:26:A8:DF:63:6E:E0:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PU-5Flbd7VoK-vBxDSao32Nu4Hg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/ZOFtNvohh1GT6QmRpbTj8yFColo.roa Signing time: Thu 01 Jan 2026 02:18:05 +0000 ROA not before: Thu 01 Jan 2026 02:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35604 IP address blocks: 195.137.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.crl rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.mft rsync://rpki.ripe.net/repository/DEFAULT/PU-5Flbd7VoK-vBxDSao32Nu4Hg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:14:ad:cc:e9:f0:0c:57:e4:32:66:58:fe:c8:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d4fb91656dded5a0afaf0710d26a8df636ee078 Validity Not Before: Jan 1 02:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64e16d36fa21875193e90991a5b4e3f32142a25a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:01:35:7e:eb:75:15:12:6c:cb:e3:a5:60:0e: 88:44:70:b3:1a:f4:87:c4:2a:57:9b:9b:3c:39:c4: 1d:03:d8:ca:b2:15:24:fb:96:76:a2:5f:8c:95:7a: 55:d6:e7:75:2e:1f:65:5c:78:dc:d9:cb:3a:a0:9e: ed:06:59:76:97:d7:a7:93:80:11:5d:05:26:e7:cc: e5:90:1b:a9:d4:16:99:9d:91:e7:93:d1:92:f7:8b: 35:29:e3:29:e5:2d:4f:ad:dd:97:d5:f1:12:aa:d2: 70:81:d4:c0:e3:85:88:53:08:38:b7:bc:3e:f1:84: 8c:a3:ad:24:9c:d7:d2:2d:6f:99:9e:70:0a:71:d8: 39:b5:db:99:4d:be:09:c9:ff:05:c1:c4:d3:88:4e: 03:ab:f3:5f:9a:b7:21:2a:16:46:d0:4d:45:07:fd: df:03:a0:3d:df:4a:ba:43:ee:99:68:04:4a:28:d3: 4f:2b:62:ee:de:9c:b5:99:24:76:a3:91:53:06:80: 00:26:ac:60:94:f3:11:d3:49:78:c7:37:d9:98:37: 0d:bf:3d:61:78:97:f0:c6:03:7b:3a:12:e4:d8:14: b9:b2:32:34:f4:df:29:1d:64:fd:14:6c:d7:a5:ab: f0:f4:c6:f9:86:18:33:9d:4a:a5:21:ac:5b:51:6f: 60:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E1:6D:36:FA:21:87:51:93:E9:09:91:A5:B4:E3:F3:21:42:A2:5A X509v3 Authority Key Identifier: keyid:3D:4F:B9:16:56:DD:ED:5A:0A:FA:F0:71:0D:26:A8:DF:63:6E:E0:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PU-5Flbd7VoK-vBxDSao32Nu4Hg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/ZOFtNvohh1GT6QmRpbTj8yFColo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.137.166.0/24 Signature Algorithm: sha256WithRSAEncryption d0:1e:b5:ae:87:48:8d:5a:28:36:82:74:1b:c1:63:a7:12:0f: c0:ba:bc:cf:f5:b9:bd:f1:e8:5f:b5:45:e8:97:83:a0:b7:c8: d5:03:e2:c9:c1:4a:6b:ee:0f:1d:9d:64:d1:69:82:f2:b5:a7: 73:4c:1a:25:0d:b9:1f:49:ca:bb:e3:bd:4d:fa:96:e6:51:d3: e7:48:c6:dd:1a:62:b6:99:64:82:2f:96:d8:be:4d:1a:80:2e: 54:b1:62:ad:3e:ae:f5:8e:2c:40:46:8a:45:38:0e:f1:ac:85: fe:03:d9:35:6c:70:ca:aa:61:5f:30:10:0a:ea:7c:bc:2b:67: a3:2f:c8:bf:ea:b8:11:83:c6:4d:ac:63:c3:c5:7c:5c:e6:49: 8c:00:d4:12:c6:15:d8:a2:63:0c:00:f3:18:3e:a4:7c:bf:01: b2:e4:22:61:3a:33:c0:28:f9:ab:6f:ed:d0:35:d7:cb:7b:5d: 33:7b:00:16:d0:fb:f7:74:d4:a5:30:47:ae:af:84:f5:29:8a: 16:c9:36:7c:3d:6e:f4:32:64:6b:6a:d6:d3:ba:e8:14:53:a3: 5d:31:3d:d3:be:84:86:f7:83:34:57:52:74:fa:20:3a:f2:21: 57:d2:23:37:9b:af:09:23:c0:c0:35:80:d1:f3:18:8a:ce:0c: 01:25:46:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WRStzOnwDFfkMmZY/sjtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNGZiOTE2NTZkZGVkNWEwYWZhZjA3MTBkMjZhOGRmNjM2 ZWUwNzgwHhcNMjYwMTAxMDIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGUxNmQzNmZhMjE4NzUxOTNlOTA5OTFhNWI0ZTNmMzIxNDJhMjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAE1fut1FRJsy+OlYA6IRHCzGvSH xCpXm5s8OcQdA9jKshUk+5Z2ol+MlXpV1ud1Lh9lXHjc2cs6oJ7tBll2l9enk4AR XQUm58zlkBup1BaZnZHnk9GS94s1KeMp5S1Prd2X1fESqtJwgdTA44WIUwg4t7w+ 8YSMo60knNfSLW+ZnnAKcdg5tduZTb4Jyf8FwcTTiE4Dq/NfmrchKhZG0E1FB/3f A6A930q6Q+6ZaARKKNNPK2Lu3py1mSR2o5FTBoAAJqxglPMR00l4xzfZmDcNvz1h eJfwxgN7OhLk2BS5sjI09N8pHWT9FGzXpavw9Mb5hhgznUqlIaxbUW9gBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGThbTb6IYdRk+kJkaW04/MhQqJaMB8GA1UdIwQY MBaAFD1PuRZW3e1aCvrwcQ0mqN9jbuB4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFUtNUZsYmQ3Vm9LLXZCeERTYW8zMk51NEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85MmUwNjgtNGM5ZC00YTdlLWE5MmYt NTJiODVjZjNmYjc4LzEvWk9GdE52b2hoMUdUNlFtUnBiVGo4eUZDb2xvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi85MmUwNjgtNGM5ZC00YTdlLWE5MmYtNTJiODVjZjNmYjc4 LzEvUFUtNUZsYmQ3Vm9LLXZCeERTYW8zMk51NEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4mmMA0G CSqGSIb3DQEBCwUAA4IBAQDQHrWuh0iNWig2gnQbwWOnEg/AurzP9bm98ehftUXo l4Ogt8jVA+LJwUpr7g8dnWTRaYLytadzTBolDbkfScq7471N+pbmUdPnSMbdGmK2 mWSCL5bYvk0agC5UsWKtPq71jixARopFOA7xrIX+A9k1bHDKqmFfMBAK6ny8K2ej L8i/6rgRg8ZNrGPDxXxc5kmMANQSxhXYomMMAPMYPqR8vwGy5CJhOjPAKPmrb+3Q NdfLe10zewAW0Pv3dNSlMEeur4T1KYoWyTZ8PW70MmRratbTuugUU6NdMT3TvoSG 94M0V1J0+iA68iFX0iM3m68JI8DANYDR8xiKzgwBJUYM -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:31 2026 by rpki-client