This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/ZMb0v-oWgmW0S9DVSRLNECome6Q.roa File: ZMb0v-oWgmW0S9DVSRLNECome6Q.roa (raw, json) Hash identifier: kkThLxyKHt8WPy1uBNPV0DqDTG+95f3qdT0ehmPEep4= Subject key identifier: 64:C6:F4:BF:EA:16:82:65:B4:4B:D0:D5:49:12:CD:10:2A:26:7B:A4 Certificate issuer: /CN=ee25026e5955dcdd111476f9b6849d728185469b Certificate serial: 019B7EA5ADF60DB3F84972218BC21A5FE81F Authority key identifier: EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/ZMb0v-oWgmW0S9DVSRLNECome6Q.roa Signing time: Fri 02 Jan 2026 12:19:05 +0000 ROA not before: Fri 02 Jan 2026 12:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200683 IP address blocks: 185.68.4.0/22 maxlen: 22 185.231.67.0/24 maxlen: 24 188.64.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:ad:f6:0d:b3:f8:49:72:21:8b:c2:1a:5f:e8:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee25026e5955dcdd111476f9b6849d728185469b Validity Not Before: Jan 2 12:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64c6f4bfea168265b44bd0d54912cd102a267ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:17:8e:11:c0:f8:97:da:30:71:24:a5:d3:bd: 42:c0:d5:ad:19:9a:b9:b0:1f:56:90:ed:66:20:58: 3b:3f:3c:02:77:f2:a6:8d:d3:6f:fe:53:57:71:6b: 7e:01:eb:68:af:8d:07:83:a4:fd:75:38:a6:2a:83: 5c:52:c7:37:6a:96:4a:4d:c8:97:e2:7c:53:3d:1c: 46:42:07:97:fd:ae:d3:1a:f0:23:9f:71:97:ed:71: 07:9a:93:5c:03:f3:69:b1:23:16:15:f2:79:b3:31: 95:3a:cf:8e:fb:22:c8:dc:31:2b:19:4d:3b:1f:70: c2:36:04:8a:99:98:8d:c8:33:15:f9:0a:71:ef:51: d0:ac:03:b4:d2:01:cd:43:96:ad:a0:f6:d5:5e:c5: d9:2d:41:c9:1d:66:74:fd:c9:c0:30:9a:38:a2:0f: f3:3e:30:5e:3b:1e:5b:99:08:41:a1:d1:69:fc:df: e8:14:b6:ce:7d:df:24:e6:3c:c5:c9:a1:01:6e:ff: 9d:9d:8c:81:b6:e7:81:f0:92:f2:7c:45:9a:94:cf: 77:46:a0:62:1f:fa:8a:5b:7c:2f:f2:3e:19:5d:1d: e6:55:78:c3:b7:43:3e:50:9b:6b:93:a6:e5:2f:3f: 53:44:16:f6:9f:d8:9e:66:35:fe:d2:f0:f3:5c:a1: 74:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C6:F4:BF:EA:16:82:65:B4:4B:D0:D5:49:12:CD:10:2A:26:7B:A4 X509v3 Authority Key Identifier: keyid:EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/ZMb0v-oWgmW0S9DVSRLNECome6Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.68.4.0/22 185.231.67.0/24 188.64.212.0/22 Signature Algorithm: sha256WithRSAEncryption 68:1c:23:45:c9:2f:d6:f2:ca:a4:cd:71:9a:19:bd:74:65:47: d4:d4:bf:34:88:61:59:32:3d:75:df:1f:1d:64:69:36:dc:3d: 47:a0:34:55:e8:be:1e:aa:72:f8:10:8a:00:b5:f4:82:33:ae: 84:4f:f0:43:2b:c3:87:46:bf:87:29:31:aa:90:66:c8:c0:d1: f1:81:b0:0e:7c:19:bd:f8:b2:19:ee:77:17:75:81:4e:d2:74: 91:38:ae:f5:09:32:46:f1:39:d6:83:f0:e4:58:4b:26:0d:04: 9b:cc:5f:b0:21:4b:8d:f8:ba:86:f7:1f:9c:ce:f9:1a:0b:cb: b1:1e:51:e3:04:87:48:56:16:3c:30:52:f2:8f:8a:5a:6c:5f: e5:b0:b9:1d:6a:43:37:94:c2:30:55:36:56:27:13:50:4c:e2: 2a:38:4e:c9:30:d6:6f:06:38:b8:5d:a1:f8:8c:f8:67:43:fa: ba:0d:42:d8:73:14:eb:f8:db:8a:e7:05:9e:a6:54:34:27:92: f3:a6:b3:82:fb:14:76:99:18:a6:f3:98:68:ec:db:e0:ab:88: 5d:03:f3:b3:da:24:30:28:28:b8:1f:54:95:fd:b5:46:90:c1: b2:c3:33:a5:b5:44:08:2a:1c:a6:f5:57:d7:71:a2:b8:f0:9c: ff:51:28:86 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pa32DbP4SXIhi8IaX+gfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMjUwMjZlNTk1NWRjZGQxMTE0NzZmOWI2ODQ5ZDcyODE4 NTQ2OWIwHhcNMjYwMTAyMTIxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGM2ZjRiZmVhMTY4MjY1YjQ0YmQwZDU0OTEyY2QxMDJhMjY3YmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyheOEcD4l9owcSSl071CwNWtGZq5 sB9WkO1mIFg7PzwCd/KmjdNv/lNXcWt+Aetor40Hg6T9dTimKoNcUsc3apZKTciX 4nxTPRxGQgeX/a7TGvAjn3GX7XEHmpNcA/NpsSMWFfJ5szGVOs+O+yLI3DErGU07 H3DCNgSKmZiNyDMV+Qpx71HQrAO00gHNQ5atoPbVXsXZLUHJHWZ0/cnAMJo4og/z PjBeOx5bmQhBodFp/N/oFLbOfd8k5jzFyaEBbv+dnYyBtueB8JLyfEWalM93RqBi H/qKW3wv8j4ZXR3mVXjDt0M+UJtrk6blLz9TRBb2n9ieZjX+0vDzXKF07wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGTG9L/qFoJltEvQ1UkSzRAqJnukMB8GA1UdIwQY MBaAFO4lAm5ZVdzdERR2+baEnXKBhUabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2lVQ2JsbFYzTjBSRkhiNXRvU2Rjb0dGUnBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mNzAwNjItYzE2ZC00ZTVjLTlhZTct MmE0NmY2ZmFjNGNhLzEvWk1iMHYtb1dnbVcwUzlEVlNSTE5FQ29tZTZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9mNzAwNjItYzE2ZC00ZTVjLTlhZTctMmE0NmY2ZmFjNGNh LzEvN2lVQ2JsbFYzTjBSRkhiNXRvU2Rjb0dGUnBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuUQEAwQA uedDAwQCvEDUMA0GCSqGSIb3DQEBCwUAA4IBAQBoHCNFyS/W8sqkzXGaGb10ZUfU 1L80iGFZMj113x8dZGk23D1HoDRV6L4eqnL4EIoAtfSCM66ET/BDK8OHRr+HKTGq kGbIwNHxgbAOfBm9+LIZ7ncXdYFO0nSROK71CTJG8TnWg/DkWEsmDQSbzF+wIUuN +LqG9x+czvkaC8uxHlHjBIdIVhY8MFLyj4pabF/lsLkdakM3lMIwVTZWJxNQTOIq OE7JMNZvBji4XaH4jPhnQ/q6DULYcxTr+NuK5wWeplQ0J5LzprOC+xR2mRim85ho 7Nvgq4hdA/Oz2iQwKCi4H1SV/bVGkMGywzOltUQIKhym9VfXcaK48Jz/USiG -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:10 2026 by rpki-client