This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/Zu8OUTqEJdgOEuCrzaxS93F6oOw.roa File: Zu8OUTqEJdgOEuCrzaxS93F6oOw.roa (raw, json) Hash identifier: nLLJAITVfYEFMYRyN3x5RMOELDek19fGEta6GIsZ1vM= Subject key identifier: 66:EF:0E:51:3A:84:25:D8:0E:12:E0:AB:CD:AC:52:F7:71:7A:A0:EC Certificate issuer: /CN=54598408d23cef52560f7eaad4e1db0c862062c3 Certificate serial: 019B7AC8B2CA8502B08EA5342F16D1C32620 Authority key identifier: 54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/Zu8OUTqEJdgOEuCrzaxS93F6oOw.roa Signing time: Thu 01 Jan 2026 18:18:51 +0000 ROA not before: Thu 01 Jan 2026 18:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203990 IP address blocks: 185.117.124.0/22 maxlen: 24 185.117.124.0/24 maxlen: 24 185.117.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:b2:ca:85:02:b0:8e:a5:34:2f:16:d1:c3:26:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54598408d23cef52560f7eaad4e1db0c862062c3 Validity Not Before: Jan 1 18:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66ef0e513a8425d80e12e0abcdac52f7717aa0ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:16:f0:f6:32:f1:63:6e:95:7d:e9:6f:9c:c5: 41:ef:2b:c4:f2:94:e9:d5:87:87:e1:42:ab:54:a2: da:0d:c3:08:c4:e6:1d:a8:bd:a4:a6:51:e9:e7:87: 0a:7c:df:2c:38:52:cf:b0:80:1d:9e:f7:a3:d1:6d: 85:b0:ae:0f:77:89:d7:eb:4b:17:93:3b:8d:9c:0b: 88:85:36:5d:d3:17:72:85:b1:2a:7a:50:57:9b:74: 9c:16:95:f2:5f:b7:3d:aa:74:d1:69:d0:22:c8:c4: db:9c:96:46:a6:53:45:f7:ff:74:8a:cc:4a:f0:3a: fd:21:a5:7d:1b:ff:e6:11:83:f4:09:e8:a0:a2:f6: 77:ab:2a:0e:c5:2b:1f:b7:7e:04:6f:db:48:86:ab: 76:fe:e6:17:a1:5b:0a:b5:23:0c:bc:0b:f6:2d:be: b5:3d:7e:1f:f8:9f:1d:b7:ba:00:e9:ad:bf:83:d3: ae:b3:5b:57:1a:6e:9e:59:21:12:e5:4f:08:ca:10: cc:ad:dd:85:62:ab:3b:ee:f5:dc:1a:9f:1b:b2:48: f1:46:a6:ae:f0:50:37:dc:7b:6f:d7:b2:26:79:a0: cb:52:d8:b6:81:19:3f:f1:80:19:f9:8e:37:3b:89: c3:4f:a2:e5:0b:c2:59:11:14:50:33:6a:84:d2:3a: 82:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:EF:0E:51:3A:84:25:D8:0E:12:E0:AB:CD:AC:52:F7:71:7A:A0:EC X509v3 Authority Key Identifier: keyid:54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/Zu8OUTqEJdgOEuCrzaxS93F6oOw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.124.0/22 Signature Algorithm: sha256WithRSAEncryption d3:1a:bf:0b:cf:48:69:bd:47:58:3f:ef:ca:ae:45:fb:44:1d: c3:a0:c4:79:0e:76:27:e2:9c:2c:c3:2d:b6:96:e1:eb:98:66: 5a:8e:0f:8b:32:25:e7:7e:16:a6:d7:c9:ae:b2:80:16:ec:b5: 34:46:ee:81:ae:53:3d:b5:38:be:5f:06:ad:9f:19:61:33:85: 68:98:a3:5b:75:28:8e:c3:9f:bd:1f:d8:02:8e:f0:b2:a2:a7: da:d1:df:d6:24:9a:85:6e:d8:77:cb:5e:fb:6a:44:2d:80:0c: 83:99:fe:0c:84:39:97:61:87:69:6d:dc:2f:6b:49:c0:28:a5: 80:e8:1e:05:93:5b:4d:ed:c8:ad:e5:7a:24:10:06:f3:20:87: 03:31:20:15:d1:bd:c8:f6:30:93:39:2f:e4:dd:cf:6d:41:94: e9:63:84:f5:be:73:6f:e4:9f:c8:66:77:c8:a8:df:e5:a5:68: 48:32:b2:c1:4e:d1:60:21:a7:e1:c2:79:11:77:25:a8:74:42: 36:fd:b9:6c:f8:9c:84:2d:94:34:b1:dd:a3:4c:5a:36:9e:d8: 47:9a:3f:67:e0:97:b6:c6:db:6a:c3:7c:6d:ec:23:ba:b1:79: 83:5e:62:b3:76:97:95:84:b5:97:41:ba:11:5d:c5:1b:4d:c0: d7:fc:26:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yLLKhQKwjqU0LxbRwyYgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NTk4NDA4ZDIzY2VmNTI1NjBmN2VhYWQ0ZTFkYjBjODYy MDYyYzMwHhcNMjYwMTAxMTgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmVmMGU1MTNhODQyNWQ4MGUxMmUwYWJjZGFjNTJmNzcxN2FhMGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBbw9jLxY26VfelvnMVB7yvE8pTp 1YeH4UKrVKLaDcMIxOYdqL2kplHp54cKfN8sOFLPsIAdnvej0W2FsK4Pd4nX60sX kzuNnAuIhTZd0xdyhbEqelBXm3ScFpXyX7c9qnTRadAiyMTbnJZGplNF9/90isxK 8Dr9IaV9G//mEYP0CeigovZ3qyoOxSsft34Eb9tIhqt2/uYXoVsKtSMMvAv2Lb61 PX4f+J8dt7oA6a2/g9Ous1tXGm6eWSES5U8IyhDMrd2FYqs77vXcGp8bskjxRqau 8FA33Htv17ImeaDLUti2gRk/8YAZ+Y43O4nDT6LlC8JZERRQM2qE0jqCfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGbvDlE6hCXYDhLgq82sUvdxeqDsMB8GA1UdIwQY MBaAFFRZhAjSPO9SVg9+qtTh2wyGIGLDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkZtRUNOSTg3MUpXRDM2cTFPSGJESVlnWXNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9mOWQxNTItY2EwMC00NmM0LTkzNmEt ZTkwOTNmZWUzZmQzLzEvWnU4T1VUcUVKZGdPRXVDcnpheFM5M0Y2b093LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9mOWQxNTItY2EwMC00NmM0LTkzNmEtZTkwOTNmZWUzZmQz LzEvVkZtRUNOSTg3MUpXRDM2cTFPSGJESVlnWXNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXV8MA0G CSqGSIb3DQEBCwUAA4IBAQDTGr8Lz0hpvUdYP+/KrkX7RB3DoMR5DnYn4pwswy22 luHrmGZajg+LMiXnfham18musoAW7LU0Ru6BrlM9tTi+XwatnxlhM4VomKNbdSiO w5+9H9gCjvCyoqfa0d/WJJqFbth3y177akQtgAyDmf4MhDmXYYdpbdwva0nAKKWA 6B4Fk1tN7cit5XokEAbzIIcDMSAV0b3I9jCTOS/k3c9tQZTpY4T1vnNv5J/IZnfI qN/lpWhIMrLBTtFgIafhwnkRdyWodEI2/bls+JyELZQ0sd2jTFo2nthHmj9n4Je2 xttqw3xt7CO6sXmDXmKzdpeVhLWXQboRXcUbTcDX/CYr -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:26 2026 by rpki-client