This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/ZW4Y1TGuNOmvztoKC-GttBiocmk.roa File: ZW4Y1TGuNOmvztoKC-GttBiocmk.roa (raw, json) Hash identifier: Pc22uXR6lgCrGRVc00EDjUUEOpeb78zqYMkdzAmaFbY= Subject key identifier: 65:6E:18:D5:31:AE:34:E9:AF:CE:DA:0A:0B:E1:AD:B4:18:A8:72:69 Certificate issuer: /CN=f615163d8fdc4523fbb8224df3dc207ac7bde1c9 Certificate serial: 019C27C29847C07C4AEA7F12220737497D44 Authority key identifier: F6:15:16:3D:8F:DC:45:23:FB:B8:22:4D:F3:DC:20:7A:C7:BD:E1:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hUWPY_cRSP7uCJN89wgese94ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/ZW4Y1TGuNOmvztoKC-GttBiocmk.roa Signing time: Wed 04 Feb 2026 08:26:30 +0000 ROA not before: Wed 04 Feb 2026 08:26:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213691 IP address blocks: 83.143.152.0/23 maxlen: 23 91.213.213.0/24 maxlen: 24 185.238.196.0/23 maxlen: 23 193.106.232.0/22 maxlen: 22 193.106.232.0/24 maxlen: 24 217.72.8.0/22 maxlen: 22 2a0c:bc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.mft rsync://rpki.ripe.net/repository/DEFAULT/9hUWPY_cRSP7uCJN89wgese94ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:27:c2:98:47:c0:7c:4a:ea:7f:12:22:07:37:49:7d:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f615163d8fdc4523fbb8224df3dc207ac7bde1c9 Validity Not Before: Feb 4 08:26:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=656e18d531ae34e9afceda0a0be1adb418a87269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:35:2f:21:6f:36:e1:db:16:55:27:e1:6b:8a: 96:02:1b:23:e5:8d:4e:3a:03:1f:07:dd:74:32:46: 07:8d:c8:e7:0b:ee:44:c8:e5:56:a5:ad:b5:84:f1: 08:20:8e:54:f4:a2:35:b5:38:89:f8:0e:a5:7d:81: c1:55:24:a2:e8:91:c1:9f:c5:7f:5d:6a:6e:e9:55: 88:72:db:a1:40:c2:fb:5a:97:29:59:64:69:a7:9e: b5:4c:62:9b:41:bf:36:1e:dd:e8:ad:04:67:6f:e4: 9f:94:0b:21:03:17:10:4d:c1:eb:4b:8d:ce:de:58: 3d:ff:b1:89:82:e8:27:06:90:99:e9:b3:ed:48:54: 4f:03:9a:5d:84:dd:09:58:af:c1:62:41:33:b2:2a: 70:df:c5:31:07:ad:01:92:4c:95:a5:4b:05:84:2e: 1d:7f:8e:b6:35:ac:2f:15:8f:cf:86:9f:96:26:e5: 08:6a:3e:01:1d:72:4b:fb:aa:24:76:8c:4f:1b:6c: d2:7d:d9:be:e8:d7:74:2a:c9:07:ec:31:bd:ac:a5: a2:0a:86:78:12:bf:76:51:2f:70:0e:25:4f:0a:b0: f9:d6:01:45:42:2d:9d:6c:c3:90:a7:22:3c:3d:08: 9d:c5:c9:41:70:14:fb:2b:8b:50:bd:c1:c9:64:96: d4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6E:18:D5:31:AE:34:E9:AF:CE:DA:0A:0B:E1:AD:B4:18:A8:72:69 X509v3 Authority Key Identifier: keyid:F6:15:16:3D:8F:DC:45:23:FB:B8:22:4D:F3:DC:20:7A:C7:BD:E1:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hUWPY_cRSP7uCJN89wgese94ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/ZW4Y1TGuNOmvztoKC-GttBiocmk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.143.152.0/23 91.213.213.0/24 185.238.196.0/23 193.106.232.0/22 217.72.8.0/22 IPv6: 2a0c:bc0::/29 Signature Algorithm: sha256WithRSAEncryption ab:d4:a8:3b:da:a0:0c:0c:f2:79:d4:12:d3:80:3d:97:10:c6: f6:68:f5:a2:7d:36:02:1c:28:83:1b:e2:9e:f0:40:6c:b9:01: bb:32:75:45:d9:21:27:8c:53:2e:21:fc:35:1d:f7:65:03:22: 0e:51:a7:0f:70:db:a8:6b:86:6e:57:3f:b1:35:a9:8e:5b:ca: 5d:83:c5:5b:90:4a:f6:70:13:9a:b2:c7:cb:26:f9:20:29:58: 0b:fc:6d:0d:f3:46:39:8b:ab:eb:f4:02:c9:81:d2:c7:fc:1b: 67:70:cf:cd:7f:b4:83:57:61:4b:d2:ac:bf:78:1b:04:47:d0: 2f:3c:9b:27:e2:68:de:c9:e1:b3:3f:d5:11:4f:ea:ad:2b:d9: 2a:26:22:bc:3f:c4:bf:18:3e:ba:d4:34:fb:14:0d:04:f3:76: 33:5d:31:8d:c5:cb:28:18:71:85:3c:f9:af:c6:30:07:90:8e: 31:6e:dd:12:8f:ed:9c:da:1e:44:22:d7:e9:9b:46:9a:0c:8b: 3f:d7:d2:ea:2a:ad:89:58:51:9f:df:2e:71:b2:9f:2d:77:06: a7:91:32:d4:46:48:3b:91:b2:38:25:57:3e:7e:12:15:70:14: 72:77:1d:6e:33:31:86:2b:d8:d4:74:fe:2b:64:ea:b1:07:f9: 5f:11:82:cd -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZwnwphHwHxK6n8SIgc3SX1EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MTUxNjNkOGZkYzQ1MjNmYmI4MjI0ZGYzZGMyMDdhYzdi ZGUxYzkwHhcNMjYwMjA0MDgyNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTZlMThkNTMxYWUzNGU5YWZjZWRhMGEwYmUxYWRiNDE4YTg3MjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTUvIW824dsWVSfha4qWAhsj5Y1O OgMfB910MkYHjcjnC+5EyOVWpa21hPEIII5U9KI1tTiJ+A6lfYHBVSSi6JHBn8V/ XWpu6VWIctuhQML7WpcpWWRpp561TGKbQb82Ht3orQRnb+SflAshAxcQTcHrS43O 3lg9/7GJgugnBpCZ6bPtSFRPA5pdhN0JWK/BYkEzsipw38UxB60BkkyVpUsFhC4d f462NawvFY/Php+WJuUIaj4BHXJL+6okdoxPG2zSfdm+6Nd0KskH7DG9rKWiCoZ4 Er92US9wDiVPCrD51gFFQi2dbMOQpyI8PQidxclBcBT7K4tQvcHJZJbUBQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFGVuGNUxrjTpr87aCgvhrbQYqHJpMB8GA1UdIwQY MBaAFPYVFj2P3EUj+7giTfPcIHrHveHJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWhVV1BZX2NSU1A3dUNKTjg5d2dlc2U5NGNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8wNWI2NTktZDE5Yi00M2NkLTlmY2Mt ZDUzOTg1N2UyZTJmLzEvWlc0WTFUR3VOT212enRvS0MtR3R0QmlvY21rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8wNWI2NTktZDE5Yi00M2NkLTlmY2MtZDUzOTg1N2UyZTJm LzEvOWhVV1BZX2NSU1A3dUNKTjg5d2dlc2U5NGNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQBU4+YAwQA W9XVAwQBue7EAwQCwWroAwQC2UgIMA0EAgACMAcDBQMqDAvAMA0GCSqGSIb3DQEB CwUAA4IBAQCr1Kg72qAMDPJ51BLTgD2XEMb2aPWifTYCHCiDG+Ke8EBsuQG7MnVF 2SEnjFMuIfw1HfdlAyIOUacPcNuoa4ZuVz+xNamOW8pdg8VbkEr2cBOassfLJvkg KVgL/G0N80Y5i6vr9ALJgdLH/BtncM/Nf7SDV2FL0qy/eBsER9AvPJsn4mjeyeGz P9URT+qtK9kqJiK8P8S/GD661DT7FA0E83YzXTGNxcsoGHGFPPmvxjAHkI4xbt0S j+2c2h5EItfpm0aaDIs/19LqKq2JWFGf3y5xsp8tdwankTLURkg7kbI4JVc+fhIV cBRydx1uMzGGK9jUdP4rZOqxB/lfEYLN -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:10 2026 by rpki-client