This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/Z7cr1HbCrsDtXUyxT8SJLiqzP6o.roa File: Z7cr1HbCrsDtXUyxT8SJLiqzP6o.roa (raw, json) Hash identifier: xU544IyvXcLXM7e3JvHPAxxk8EzCmMrxrlsPcRWgF9s= Subject key identifier: 67:B7:2B:D4:76:C2:AE:C0:ED:5D:4C:B1:4F:C4:89:2E:2A:B3:3F:AA Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Certificate serial: 019B7E386CA20109A7A1D2A1DA34BE17C73D Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/Z7cr1HbCrsDtXUyxT8SJLiqzP6o.roa Signing time: Fri 02 Jan 2026 10:19:45 +0000 ROA not before: Fri 02 Jan 2026 10:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7018 IP address blocks: 185.141.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:6c:a2:01:09:a7:a1:d2:a1:da:34:be:17:c7:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Validity Not Before: Jan 2 10:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67b72bd476c2aec0ed5d4cb14fc4892e2ab33faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7e:d9:8c:93:d6:45:7f:2a:2d:ef:15:1c:df: 19:da:61:39:47:e2:cb:0f:dc:93:d4:70:8e:d8:86: a1:48:46:00:04:ac:6a:ed:f7:1f:81:99:f7:56:f4: 19:de:ca:22:86:59:df:a0:89:c3:b0:92:de:c6:6d: dc:3a:52:6c:45:02:fe:58:db:4f:d9:ee:e5:99:7b: ac:02:c1:db:8e:46:5f:94:70:c1:6c:ff:70:ce:a2: f9:8e:7c:a7:ff:59:fe:2d:0b:94:99:77:4d:fc:0f: 01:62:e7:c2:49:a1:06:a5:8b:f7:77:85:d8:46:1f: aa:8e:05:55:ed:f2:91:7a:5c:9d:6c:63:f3:b9:29: dd:a8:ca:e7:df:2b:0a:ca:a8:8f:a6:c2:a8:55:b3: 29:dd:31:36:0c:7e:a4:46:d0:da:01:ef:f7:74:90: 03:af:68:c7:d4:3a:ab:26:90:e5:81:aa:26:db:ab: 9e:9a:fb:dc:d7:c9:42:47:5f:c8:d3:00:5e:9f:88: 0a:d9:5c:3c:d7:50:c8:51:c3:21:8c:77:ac:85:1b: 48:ff:48:29:db:cc:e2:db:77:7a:8b:26:ea:80:5c: ab:26:4a:8f:86:8f:12:45:e6:59:94:dd:39:ff:72: c8:43:9a:d0:94:d3:2e:5d:e3:15:23:42:b5:95:8e: 85:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B7:2B:D4:76:C2:AE:C0:ED:5D:4C:B1:4F:C4:89:2E:2A:B3:3F:AA X509v3 Authority Key Identifier: keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/Z7cr1HbCrsDtXUyxT8SJLiqzP6o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.141.116.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:d1:2e:d0:8e:dc:2a:ad:e0:30:ff:8c:72:7d:5f:67:ac:14: d4:c9:b4:f8:07:2a:c4:0a:4f:28:e2:98:bd:ce:4d:ff:3f:1d: 6e:0b:d6:d3:9f:a4:b2:49:94:7e:81:de:01:59:ca:4b:b3:b3: f6:a0:a5:70:2b:a5:60:f5:db:5c:0d:ad:d5:25:6a:28:10:c2: 4e:56:e8:4c:d7:ea:4e:da:61:33:a4:2c:a3:79:df:71:b8:40: 99:bd:ee:33:ac:aa:a2:f0:86:e8:5b:95:7e:91:8a:47:0f:2f: 7f:c9:b0:33:5d:6e:3d:31:da:f6:6c:8b:85:37:cd:72:19:95: 2c:5e:ea:18:a7:b0:0f:d5:96:40:20:b1:d4:b1:7a:87:23:b0: 21:40:20:1c:c4:fe:50:92:83:d4:9a:d6:49:18:2c:ac:11:0f: 5c:58:43:4f:1f:5a:a6:9c:fe:27:81:11:35:09:3e:21:ef:d1: a0:4b:81:09:35:c5:1a:3b:2e:f8:ce:3f:61:fa:82:98:a9:0f: d3:9a:7d:fa:97:f7:15:c9:12:a6:5d:4b:eb:8a:62:7f:0d:50: 80:bc:56:63:60:b0:84:a9:99:9b:52:f9:01:0a:60:8b:17:8e: 65:f8:c9:23:a2:3d:54:6b:a7:76:03:a4:72:80:da:2a:ac:9a: fb:38:d5:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OGyiAQmnodKh2jS+F8c9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjJiYjdiYWQ1MGYxOTIxODEwYTAyOGU3OGVkZDY1Zjgx ZjZhN2QwHhcNMjYwMTAyMTAxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2I3MmJkNDc2YzJhZWMwZWQ1ZDRjYjE0ZmM0ODkyZTJhYjMzZmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH7ZjJPWRX8qLe8VHN8Z2mE5R+LL D9yT1HCO2IahSEYABKxq7fcfgZn3VvQZ3soihlnfoInDsJLexm3cOlJsRQL+WNtP 2e7lmXusAsHbjkZflHDBbP9wzqL5jnyn/1n+LQuUmXdN/A8BYufCSaEGpYv3d4XY Rh+qjgVV7fKRelydbGPzuSndqMrn3ysKyqiPpsKoVbMp3TE2DH6kRtDaAe/3dJAD r2jH1DqrJpDlgaom26uemvvc18lCR1/I0wBen4gK2Vw811DIUcMhjHeshRtI/0gp 28zi23d6iybqgFyrJkqPho8SReZZlN05/3LIQ5rQlNMuXeMVI0K1lY6FnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGe3K9R2wq7A7V1MsU/EiS4qsz+qMB8GA1UdIwQY MBaAFE+yu3utUPGSGBCgKOeO3WX4H2p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYt MjdmYmM5OWVhM2M2LzEvWjdjcjFIYkNyc0R0WFV5eFQ4U0pMaXF6UDZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYtMjdmYmM5OWVhM2M2 LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuY10MA0G CSqGSIb3DQEBCwUAA4IBAQAv0S7QjtwqreAw/4xyfV9nrBTUybT4ByrECk8o4pi9 zk3/Px1uC9bTn6SySZR+gd4BWcpLs7P2oKVwK6Vg9dtcDa3VJWooEMJOVuhM1+pO 2mEzpCyjed9xuECZve4zrKqi8IboW5V+kYpHDy9/ybAzXW49Mdr2bIuFN81yGZUs XuoYp7AP1ZZAILHUsXqHI7AhQCAcxP5QkoPUmtZJGCysEQ9cWENPH1qmnP4ngRE1 CT4h79GgS4EJNcUaOy74zj9h+oKYqQ/Tmn36l/cVyRKmXUvrimJ/DVCAvFZjYLCE qZmbUvkBCmCLF45l+Mkjoj1Ua6d2A6RygNoqrJr7ONXD -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:35 2026 by rpki-client