This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/ZgrpUK3TQHZ--50rt1VhXzg3NfA.roa File: ZgrpUK3TQHZ--50rt1VhXzg3NfA.roa (raw, json) Hash identifier: GHDjEI2YfdMwBWwNuedHeMpEANaKhvt6G9klIThtEis= Subject key identifier: 66:0A:E9:50:AD:D3:40:76:7E:FB:9D:2B:B7:55:61:5F:38:37:35:F0 Certificate issuer: /CN=2d18d87e8b9fe974bedf097f88948398861ac47e Certificate serial: 019B7834D1B221BFEE73A5461899C44CF731 Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/ZgrpUK3TQHZ--50rt1VhXzg3NfA.roa Signing time: Thu 01 Jan 2026 06:18:06 +0000 ROA not before: Thu 01 Jan 2026 06:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211196 IP address blocks: 185.53.112.0/22 maxlen: 22 185.53.112.0/24 maxlen: 24 185.53.113.0/24 maxlen: 24 185.53.114.0/24 maxlen: 24 185.53.115.0/24 maxlen: 24 185.198.68.0/24 maxlen: 24 2a0b:6f80::/32 maxlen: 32 2a0b:6f80:2::/48 maxlen: 48 2a0b:6f80:100::/48 maxlen: 48 2a0b:6f80:101::/48 maxlen: 48 2a0b:6f80:102::/48 maxlen: 48 2a0b:6f80:103::/48 maxlen: 48 2a0b:6f80:200::/40 maxlen: 40 2a0b:6f80:300::/40 maxlen: 40 2a0b:6f80:400::/40 maxlen: 40 2a0b:6f80:500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:d1:b2:21:bf:ee:73:a5:46:18:99:c4:4c:f7:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e Validity Not Before: Jan 1 06:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=660ae950add340767efb9d2bb755615f383735f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e7:af:6f:45:71:3a:c9:c2:68:f2:b5:36:6b: 9f:d4:f5:45:e0:17:f1:46:de:ea:1f:60:83:51:9d: 05:94:e1:00:b1:1a:0d:ac:46:c5:cf:ff:f5:58:0d: 90:06:92:b2:f7:13:5b:46:cf:ce:5c:d1:0b:31:a7: b9:a7:1c:b6:b1:43:51:6f:04:c6:72:50:5a:55:e2: 9c:68:26:7d:57:81:20:0b:03:24:75:51:1c:1d:d6: 7c:df:3b:d0:f9:0a:a8:31:7c:64:b2:fb:0b:49:d7: 71:aa:d6:15:33:9c:62:6b:c7:4c:d4:34:d6:5c:76: cf:96:13:62:93:78:36:8b:b6:b5:e0:5d:09:47:d6: 19:2c:ed:64:d9:2e:32:57:c1:14:38:5d:4a:6c:ed: 6b:0e:f0:e3:f7:17:a0:e9:d4:43:db:ba:37:0d:dd: fe:fb:28:b3:06:a0:2b:7d:a7:d4:cb:21:e2:ff:f9: ae:14:77:05:6a:76:27:01:f0:c6:e1:e6:47:a9:59: b0:e7:39:ed:aa:ec:2c:23:9d:d1:8b:ab:74:bb:a8: 43:25:a5:99:24:2b:d2:47:77:8d:12:67:0f:1a:36: d9:0f:57:b5:c2:2c:cc:63:dc:5c:80:f9:c0:d3:44: 92:e7:3b:9d:ab:67:19:96:47:55:6e:a5:5e:f1:3b: 93:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:0A:E9:50:AD:D3:40:76:7E:FB:9D:2B:B7:55:61:5F:38:37:35:F0 X509v3 Authority Key Identifier: keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/ZgrpUK3TQHZ--50rt1VhXzg3NfA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.53.112.0/22 185.198.68.0/24 IPv6: 2a0b:6f80::/32 Signature Algorithm: sha256WithRSAEncryption 55:12:f5:56:a4:9d:76:ba:f2:ae:a8:20:f5:e1:4a:6a:7d:9c: cf:98:90:4a:3f:6b:ae:4a:29:a9:93:ea:65:56:6b:18:18:1f: 1e:67:da:74:b0:d6:e4:85:e3:3a:1b:b2:44:ff:9f:6a:f1:15: 0b:dd:d1:dc:30:e3:c5:40:1d:c8:37:94:93:da:df:b8:29:bf: 7c:ab:f3:ea:83:f3:bc:b8:f3:0a:1c:ea:c2:08:d5:20:f6:6b: 88:fa:90:e8:12:2b:34:06:90:e1:79:4f:bf:ef:5b:81:2a:1d: 86:a3:58:14:bc:6d:53:91:1e:c5:9a:a2:e5:df:61:0a:13:35: 2a:b3:1a:ce:7d:49:1b:c2:10:58:88:df:33:6b:4c:23:e0:d1: 49:7c:a6:f1:59:63:43:a3:7b:46:38:72:03:e9:b0:67:aa:05: 80:fc:20:07:0e:56:79:82:04:e2:36:2e:95:88:30:4a:7d:a1: 4d:a3:68:4b:0f:a8:4d:c6:8b:02:e1:bc:79:d5:3b:56:14:e7: 5c:59:82:37:87:b7:69:13:fb:3a:ac:4e:4a:de:27:36:a7:9f: 8d:eb:92:9a:32:92:0f:74:88:d8:96:9c:b8:94:da:19:b4:2a: b6:30:2d:cc:f9:62:ae:14:de:92:9e:68:cb:32:c7:e3:0f:1a: ea:a0:84:94 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4NNGyIb/uc6VGGJnETPcxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMThkODdlOGI5ZmU5NzRiZWRmMDk3Zjg4OTQ4Mzk4ODYx YWM0N2UwHhcNMjYwMTAxMDYxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjBhZTk1MGFkZDM0MDc2N2VmYjlkMmJiNzU1NjE1ZjM4MzczNWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+evb0VxOsnCaPK1Nmuf1PVF4Bfx Rt7qH2CDUZ0FlOEAsRoNrEbFz//1WA2QBpKy9xNbRs/OXNELMae5pxy2sUNRbwTG clBaVeKcaCZ9V4EgCwMkdVEcHdZ83zvQ+QqoMXxksvsLSddxqtYVM5xia8dM1DTW XHbPlhNik3g2i7a14F0JR9YZLO1k2S4yV8EUOF1KbO1rDvDj9xeg6dRD27o3Dd3+ +yizBqArfafUyyHi//muFHcFanYnAfDG4eZHqVmw5zntquwsI53Ri6t0u6hDJaWZ JCvSR3eNEmcPGjbZD1e1wizMY9xcgPnA00SS5zudq2cZlkdVbqVe8TuTgQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGYK6VCt00B2fvudK7dVYV84NzXwMB8GA1UdIwQY MBaAFC0Y2H6Ln+l0vt8Jf4iUg5iGGsR+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYzg1ZjUtN2Y2NS00OWYyLTk4Yjkt Y2YwOTA3MTMzMjQxLzEvWmdycFVLM1RRSFotLTUwcnQxVmhYemczTmZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9lYzg1ZjUtN2Y2NS00OWYyLTk4YjktY2YwOTA3MTMzMjQx LzEvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuTVwAwQA ucZEMA0EAgACMAcDBQAqC2+AMA0GCSqGSIb3DQEBCwUAA4IBAQBVEvVWpJ12uvKu qCD14UpqfZzPmJBKP2uuSimpk+plVmsYGB8eZ9p0sNbkheM6G7JE/59q8RUL3dHc MOPFQB3IN5ST2t+4Kb98q/Pqg/O8uPMKHOrCCNUg9muI+pDoEis0BpDheU+/71uB Kh2Go1gUvG1TkR7FmqLl32EKEzUqsxrOfUkbwhBYiN8za0wj4NFJfKbxWWNDo3tG OHID6bBnqgWA/CAHDlZ5ggTiNi6ViDBKfaFNo2hLD6hNxosC4bx51TtWFOdcWYI3 h7dpE/s6rE5K3ic2p5+N65KaMpIPdIjYlpy4lNoZtCq2MC3M+WKuFN6SnmjLMsfj DxrqoISU -----END CERTIFICATE-----Generated at Tue Feb 10 03:02:14 2026 by rpki-client