This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/zv8htVuLlM7L27gWdlqS584Hu_g.roa File: zv8htVuLlM7L27gWdlqS584Hu_g.roa (raw, json) Hash identifier: aUcg7/4honTLftFLDXOy/acZ6va/bYgkctanVBZKlS4= Subject key identifier: CE:FF:21:B5:5B:8B:94:CE:CB:DB:B8:16:76:5A:92:E7:CE:07:BB:F8 Certificate issuer: /CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2 Certificate serial: 019B76EB0E2231C61BDA74722A9B4303706E Authority key identifier: 65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/zv8htVuLlM7L27gWdlqS584Hu_g.roa Signing time: Thu 01 Jan 2026 00:17:54 +0000 ROA not before: Thu 01 Jan 2026 00:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.219.146.0/23 maxlen: 24 2a0a:640::/29 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:0e:22:31:c6:1b:da:74:72:2a:9b:43:03:70:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2 Validity Not Before: Jan 1 00:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ceff21b55b8b94cecbdbb816765a92e7ce07bbf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:db:42:a6:9d:b6:46:c0:dc:97:ab:c3:7b:78: 97:1f:3a:fb:f5:66:4a:4d:32:f1:c8:79:8f:a8:f6: 58:b6:e3:45:03:c8:a9:65:b2:36:6e:f8:b8:7e:10: 1f:4a:95:f0:31:85:bc:24:52:a9:15:77:bf:4d:01: 2d:61:0f:aa:7e:9c:a7:a1:de:49:ea:77:67:b6:1f: 06:00:72:ee:a9:6a:c1:23:f1:70:34:58:5f:ef:de: 43:f7:64:a5:d2:5d:8a:29:1b:7f:df:65:6e:a4:ed: 81:bc:10:71:28:65:71:cd:0d:9d:87:6e:cc:cb:90: 99:2b:cf:c8:a2:39:5f:72:5b:9e:e2:7b:0b:b3:2d: ef:fe:c0:88:dc:ab:58:bf:e1:37:0b:8d:87:42:01: a1:97:45:3f:1c:e9:44:1d:73:63:ed:57:83:aa:6a: 68:06:de:1a:d3:9c:ff:e3:93:c3:0f:1c:74:69:37: 52:1f:92:fe:c3:72:38:f2:78:52:ee:b6:30:bb:a2: a8:ad:aa:c3:df:a3:5d:1c:13:9c:63:79:18:d7:72: c8:9d:78:96:69:0e:1f:ec:04:99:e7:69:1c:9a:86: a4:a5:af:99:c4:b7:ab:33:21:f2:8f:70:c1:bd:38: 83:26:39:3a:e4:f7:6c:29:f8:03:6a:0d:4f:d1:96: da:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FF:21:B5:5B:8B:94:CE:CB:DB:B8:16:76:5A:92:E7:CE:07:BB:F8 X509v3 Authority Key Identifier: keyid:65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/zv8htVuLlM7L27gWdlqS584Hu_g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.219.146.0/23 IPv6: 2a0a:640::/29 Signature Algorithm: sha256WithRSAEncryption 9f:b6:6e:6e:cd:5b:98:bc:f0:37:70:b4:81:d4:af:f1:21:d6: a9:c8:e3:c1:28:02:b5:57:5a:62:e8:4e:ec:46:6a:03:53:06: 68:04:85:4b:f8:85:4a:e8:6b:f6:7f:99:54:fd:80:19:7e:c5: fa:09:0c:3f:b9:e1:76:05:80:ff:53:03:ba:ab:59:2c:d4:26: 3f:56:b6:7c:14:25:84:f3:96:28:f3:29:fd:4c:fc:ce:d6:99: e2:0b:37:71:56:02:df:34:bc:a4:16:25:f5:e3:c5:8c:ce:3f: 3c:29:fb:ba:d8:86:4a:97:dd:ca:01:7b:9d:07:dd:95:3b:03: bc:56:3a:9c:74:5e:bf:32:b8:c6:4a:7f:f7:7f:c2:b8:f5:0e: 8f:62:5a:f8:aa:3a:f1:0f:d3:d0:f0:f0:9c:96:81:7f:33:bf: a3:af:01:83:cf:ec:d4:fa:eb:6a:46:23:67:eb:de:55:d3:bc: 35:ec:dc:2f:41:ce:3e:a4:a6:15:88:c3:3d:7f:42:9b:a9:4b: aa:fb:3d:cb:ef:9a:2e:12:41:41:9d:09:eb:b4:e7:5c:59:d5: 4b:6c:6c:ca:54:b4:6b:d1:c5:71:bd:96:17:07:a1:3d:13:54: 13:7d:fc:ef:0c:c8:ac:03:4b:9c:f9:9b:71:0e:84:ef:4c:83: fc:73:61:86 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt26w4iMcYb2nRyKptDA3BuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NmQzM2M1ZjE2ZTNjZGQ5NjBhZTA1YzgwZDlmNmYzNmZj NTUzZjIwHhcNMjYwMTAxMDAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWZmMjFiNTViOGI5NGNlY2JkYmI4MTY3NjVhOTJlN2NlMDdiYmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NtCpp22RsDcl6vDe3iXHzr79WZK TTLxyHmPqPZYtuNFA8ipZbI2bvi4fhAfSpXwMYW8JFKpFXe/TQEtYQ+qfpynod5J 6ndnth8GAHLuqWrBI/FwNFhf795D92Sl0l2KKRt/32VupO2BvBBxKGVxzQ2dh27M y5CZK8/Iojlfclue4nsLsy3v/sCI3KtYv+E3C42HQgGhl0U/HOlEHXNj7VeDqmpo Bt4a05z/45PDDxx0aTdSH5L+w3I48nhS7rYwu6KorarD36NdHBOcY3kY13LInXiW aQ4f7ASZ52kcmoakpa+ZxLerMyHyj3DBvTiDJjk65PdsKfgDag1P0ZbaQwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFM7/IbVbi5TOy9u4FnZakufOB7v4MB8GA1UdIwQY MBaAFGVtM8XxbjzdlgrgXIDZ9vNvxVPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlcwenhmRnVQTjJXQ3VCY2dObjI4Ml9GVV9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83Y2M2ZWEtNzc0YS00ODc2LTg0Zjkt MzA0ZDIxOTFhNGYzLzEvenY4aHRWdUxsTTdMMjdnV2RscVM1ODRIdV9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83Y2M2ZWEtNzc0YS00ODc2LTg0ZjktMzA0ZDIxOTFhNGYz LzEvWlcwenhmRnVQTjJXQ3VCY2dObjI4Ml9GVV9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuduSMA0E AgACMAcDBQMqCgZAMA0GCSqGSIb3DQEBCwUAA4IBAQCftm5uzVuYvPA3cLSB1K/x IdapyOPBKAK1V1pi6E7sRmoDUwZoBIVL+IVK6Gv2f5lU/YAZfsX6CQw/ueF2BYD/ UwO6q1ks1CY/VrZ8FCWE85Yo8yn9TPzO1pniCzdxVgLfNLykFiX148WMzj88Kfu6 2IZKl93KAXudB92VOwO8VjqcdF6/MrjGSn/3f8K49Q6PYlr4qjrxD9PQ8PCcloF/ M7+jrwGDz+zU+utqRiNn695V07w17NwvQc4+pKYViMM9f0KbqUuq+z3L75ouEkFB nQnrtOdcWdVLbGzKVLRr0cVxvZYXB6E9E1QTffzvDMisA0uc+ZtxDoTvTIP8c2GG -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:58 2026 by rpki-client