This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/ZfGGQU9W0a70Z3nhfljS_U8V_50.roa File: ZfGGQU9W0a70Z3nhfljS_U8V_50.roa (raw, json) Hash identifier: DKS9/Q/MIgMKGWPJykoNUGv5smmKvns8ub6eLvNE14E= Subject key identifier: 65:F1:86:41:4F:56:D1:AE:F4:67:79:E1:7E:58:D2:FD:4F:15:FF:9D Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Certificate serial: 019B7DCAE3F4A819D9DE9FFBB1E315E58F3F Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/ZfGGQU9W0a70Z3nhfljS_U8V_50.roa Signing time: Fri 02 Jan 2026 08:20:07 +0000 ROA not before: Fri 02 Jan 2026 08:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215523 IP address blocks: 185.210.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:e3:f4:a8:19:d9:de:9f:fb:b1:e3:15:e5:8f:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Validity Not Before: Jan 2 08:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65f186414f56d1aef46779e17e58d2fd4f15ff9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:28:9f:14:f6:85:44:ce:13:74:93:11:0e:cc: 87:fc:f6:d5:b7:b6:f3:24:cc:5d:31:40:1b:ed:0c: 7a:49:65:23:2e:45:2e:7c:9c:8b:73:e2:a9:e4:95: 06:a9:5c:a8:bb:21:bc:4b:54:74:f6:06:36:dd:55: 19:33:a1:23:5c:52:2f:8b:7d:f3:12:c9:7f:73:0b: 00:6c:9d:97:95:43:40:83:ce:3e:21:fb:52:af:08: 2c:90:70:dd:d3:92:ab:b2:35:bc:f9:6a:a6:08:a7: 78:20:05:2f:96:cb:5f:48:ca:67:86:bc:75:78:00: 29:f8:d8:85:56:4f:7f:17:6a:ef:53:42:0c:00:08: c2:c4:00:c9:68:8c:ea:eb:92:9d:40:87:9b:96:1a: 12:41:0a:cf:47:9e:3f:b5:4e:92:9c:cc:a4:58:bf: 47:1f:ff:e9:d3:5e:45:ea:1a:9e:ee:15:07:54:16: 32:89:b1:d8:35:f3:04:ee:2a:c5:00:d0:09:af:5a: 4f:2d:16:1e:46:d8:e4:10:d4:bc:40:18:d2:23:e7: 7e:63:ac:fc:7c:e1:c0:15:3b:d0:ae:f8:27:50:68: dd:78:51:a9:97:c6:b6:9d:ec:d2:16:00:53:40:47: d5:ff:6c:20:bd:e8:e8:80:41:d2:c9:d3:30:ac:5e: 04:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F1:86:41:4F:56:D1:AE:F4:67:79:E1:7E:58:D2:FD:4F:15:FF:9D X509v3 Authority Key Identifier: keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/ZfGGQU9W0a70Z3nhfljS_U8V_50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.210.170.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:b6:65:9b:fc:ea:4e:51:93:b5:c6:e2:57:37:d4:46:25:df: 36:eb:a8:da:63:f6:72:dd:ad:92:ac:51:90:aa:0b:50:da:e6: 19:be:29:ce:e1:d6:3c:6a:9c:fe:15:92:c0:a9:1f:e6:74:6f: a5:4b:19:95:e4:98:aa:fb:f0:b7:55:1b:d4:38:e7:8f:f9:db: 7c:58:24:ee:ba:f5:7a:37:4b:69:cd:28:59:a2:31:a0:b6:86: 25:36:ac:49:3a:85:c0:32:b0:ea:d5:40:5b:ec:a0:84:fb:3a: fe:c2:fc:84:48:9d:63:7e:ee:b3:58:dc:c7:2c:97:c9:f9:ca: 92:cf:27:9e:ea:82:7c:32:43:2c:f0:83:28:cc:d6:e9:4e:43: cd:e9:3b:c1:05:02:1b:29:e7:0a:76:c7:48:91:af:ee:c6:82: 21:3d:6f:3e:20:97:e7:47:5b:b6:d0:66:ee:98:47:84:98:19: 0f:7a:6c:51:0d:4b:41:a1:3d:46:74:56:65:20:c0:4a:ee:e5: a9:47:8e:2e:9c:ab:76:6d:1b:5c:9a:d0:21:46:36:10:6e:99: 0f:b6:80:88:ac:c0:7a:58:c4:e7:25:e4:b3:35:4b:00:71:d5: 96:c8:7a:7e:cf:c6:3b:69:71:c2:fb:1e:44:60:b9:d8:78:81: 94:6d:38:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yuP0qBnZ3p/7seMV5Y8/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1 OGRjZDQwHhcNMjYwMTAyMDgyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWYxODY0MTRmNTZkMWFlZjQ2Nzc5ZTE3ZTU4ZDJmZDRmMTVmZjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiifFPaFRM4TdJMRDsyH/PbVt7bz JMxdMUAb7Qx6SWUjLkUufJyLc+Kp5JUGqVyouyG8S1R09gY23VUZM6EjXFIvi33z Esl/cwsAbJ2XlUNAg84+IftSrwgskHDd05KrsjW8+WqmCKd4IAUvlstfSMpnhrx1 eAAp+NiFVk9/F2rvU0IMAAjCxADJaIzq65KdQIeblhoSQQrPR54/tU6SnMykWL9H H//p015F6hqe7hUHVBYyibHYNfME7irFANAJr1pPLRYeRtjkENS8QBjSI+d+Y6z8 fOHAFTvQrvgnUGjdeFGpl8a2nezSFgBTQEfV/2wgvejogEHSydMwrF4E1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGXxhkFPVtGu9Gd54X5Y0v1PFf+dMB8GA1UdIwQY MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt NmZjZGNkNWFiNjYwLzEvWmZHR1FVOVcwYTcwWjNuaGZsalNfVThWXzUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBudKqMA0G CSqGSIb3DQEBCwUAA4IBAQAetmWb/OpOUZO1xuJXN9RGJd8266jaY/Zy3a2SrFGQ qgtQ2uYZvinO4dY8apz+FZLAqR/mdG+lSxmV5Jiq+/C3VRvUOOeP+dt8WCTuuvV6 N0tpzShZojGgtoYlNqxJOoXAMrDq1UBb7KCE+zr+wvyESJ1jfu6zWNzHLJfJ+cqS zyee6oJ8MkMs8IMozNbpTkPN6TvBBQIbKecKdsdIka/uxoIhPW8+IJfnR1u20Gbu mEeEmBkPemxRDUtBoT1GdFZlIMBK7uWpR44unKt2bRtcmtAhRjYQbpkPtoCIrMB6 WMTnJeSzNUsAcdWWyHp+z8Y7aXHC+x5EYLnYeIGUbTja -----END CERTIFICATE-----Generated at Thu Jan 22 00:57:46 2026 by rpki-client