This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/zzm4xYnMOB3jbc8NbBnWyWTRTvA.roa File: zzm4xYnMOB3jbc8NbBnWyWTRTvA.roa (raw, json) Hash identifier: kFfMKwS5LxfccFDbx+zZKifQAt7o+0DnklToBwmr71Q= Subject key identifier: CF:39:B8:C5:89:CC:38:1D:E3:6D:CF:0D:6C:19:D6:C9:64:D1:4E:F0 Certificate issuer: /CN=298354861973728ce2be505f7270a4364d94e691 Certificate serial: 019B7C7FF43A0BDD3A9E5B17B45352B60C23 Authority key identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/zzm4xYnMOB3jbc8NbBnWyWTRTvA.roa Signing time: Fri 02 Jan 2026 02:18:38 +0000 ROA not before: Fri 02 Jan 2026 02:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 185.1.94.0/24 maxlen: 24 2001:7f8:b6::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 07:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:f4:3a:0b:dd:3a:9e:5b:17:b4:53:52:b6:0c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=298354861973728ce2be505f7270a4364d94e691 Validity Not Before: Jan 2 02:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf39b8c589cc381de36dcf0d6c19d6c964d14ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:a0:19:c8:d1:a4:dd:44:72:20:27:c1:b4:39: c0:8d:60:74:66:2d:5b:19:45:bb:f7:38:02:4f:d8: bf:dc:c1:1e:af:6b:92:b2:6b:60:0b:66:9e:a9:ce: ec:2c:79:56:c7:42:39:5d:b1:3e:d9:32:ad:26:37: 4e:cc:fc:b7:cc:44:0d:5b:0f:1d:80:99:6d:3b:e7: 44:06:56:2f:8a:e2:90:95:c0:03:50:b0:cd:ea:e1: 4b:6f:9b:b1:3b:4f:92:94:33:77:3f:e3:46:1c:72: f0:c8:cd:38:15:12:6d:f3:c8:bb:03:e8:d8:92:13: 77:81:88:4c:cc:e6:b7:fa:6c:4a:8c:0a:22:5d:67: bb:b6:4d:bc:0d:a0:bb:ae:d7:71:24:88:47:fe:03: fa:29:39:ce:ca:43:ba:4e:97:1a:8e:5b:c7:c0:c7: 4b:7d:e3:61:40:e7:3c:ed:b7:9f:5e:d6:60:a6:c6: fe:07:67:06:e5:bb:99:37:63:b0:64:f7:69:97:88: eb:b1:e4:fc:d3:cb:0f:16:14:82:0d:ae:7f:b5:ac: 62:ad:0c:b2:d2:40:16:c9:87:31:99:c9:45:55:00: 64:91:70:f2:f9:e5:1f:5a:b7:07:ce:78:92:00:87: f6:7f:21:94:fb:39:3e:7a:b8:bb:c5:68:e1:36:e6: 14:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:39:B8:C5:89:CC:38:1D:E3:6D:CF:0D:6C:19:D6:C9:64:D1:4E:F0 X509v3 Authority Key Identifier: keyid:29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/zzm4xYnMOB3jbc8NbBnWyWTRTvA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.94.0/24 IPv6: 2001:7f8:b6::/64 Signature Algorithm: sha256WithRSAEncryption 34:dc:05:6a:2d:fc:d8:ab:69:a8:15:49:b8:d2:42:27:a8:f6: ed:37:eb:f2:4e:f6:83:98:a9:75:ad:43:d7:69:09:c1:ac:3c: 93:52:86:e5:0c:f4:c7:da:4a:81:ee:59:8b:b1:95:22:ce:d3: bf:bb:8e:4e:1c:95:eb:09:e3:5c:c3:a1:03:7f:34:81:8c:83: ee:2c:81:46:89:43:cf:81:1f:ca:75:43:2c:fa:67:5b:5a:fc: 95:c3:fd:0e:19:4b:0f:e0:48:c9:6c:90:b0:4b:14:04:34:f4: 6d:f1:8c:20:9b:22:27:45:f9:ef:0f:02:59:34:ed:c8:13:2b: 42:5d:0d:28:20:00:fc:80:bb:78:0a:bd:c9:2f:19:0f:16:aa: b1:38:3c:33:35:87:dc:57:38:da:ce:5c:5d:ae:d9:c3:66:2a: ab:50:bd:1b:e6:56:5c:dd:af:3c:1e:bb:6a:92:83:a0:15:72: c3:84:be:33:0b:5a:ca:48:8c:3d:e7:5e:8e:22:e4:35:8a:99: 09:5f:31:42:d0:ac:d9:cb:3f:d3:6d:25:ee:84:9b:2a:b0:ff: 98:53:95:a7:58:44:4a:58:07:2e:de:26:8a:a1:a1:8d:22:10: 81:93:f6:ab:fe:36:da:b0:19:d6:41:ba:fb:c8:93:4e:92:97: 4a:c2:37:8f -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZt8f/Q6C906nlsXtFNStgwjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ODM1NDg2MTk3MzcyOGNlMmJlNTA1ZjcyNzBhNDM2NGQ5 NGU2OTEwHhcNMjYwMTAyMDIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjM5YjhjNTg5Y2MzODFkZTM2ZGNmMGQ2YzE5ZDZjOTY0ZDE0ZWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA96AZyNGk3URyICfBtDnAjWB0Zi1b GUW79zgCT9i/3MEer2uSsmtgC2aeqc7sLHlWx0I5XbE+2TKtJjdOzPy3zEQNWw8d gJltO+dEBlYviuKQlcADULDN6uFLb5uxO0+SlDN3P+NGHHLwyM04FRJt88i7A+jY khN3gYhMzOa3+mxKjAoiXWe7tk28DaC7rtdxJIhH/gP6KTnOykO6TpcajlvHwMdL feNhQOc87befXtZgpsb+B2cG5buZN2OwZPdpl4jrseT808sPFhSCDa5/taxirQyy 0kAWyYcxmclFVQBkkXDy+eUfWrcHzniSAIf2fyGU+zk+eri7xWjhNuYUjQIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFM85uMWJzDgd423PDWwZ1slk0U7wMB8GA1UdIwQY MBaAFCmDVIYZc3KM4r5QX3JwpDZNlOaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1lOVWhobHpjb3ppdmxCZmNuQ2tOazJVNXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9hNmRjZjEtOTdmNC00NWFmLWJiNDgt M2RiNmYwNTcwZDQ4LzEvenptNHhZbk1PQjNqYmM4TmJCbld5V1RSVHZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9hNmRjZjEtOTdmNC00NWFmLWJiNDgtM2RiNmYwNTcwZDQ4 LzEvS1lOVWhobHpjb3ppdmxCZmNuQ2tOazJVNXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAMBAIAATAGAwQAuQFeMBEE AgACMAsDCQAgAQf4ALYAADANBgkqhkiG9w0BAQsFAAOCAQEANNwFai382KtpqBVJ uNJCJ6j27Tfr8k72g5ipda1D12kJwaw8k1KG5Qz0x9pKge5Zi7GVIs7Tv7uOThyV 6wnjXMOhA380gYyD7iyBRolDz4EfynVDLPpnW1r8lcP9DhlLD+BIyWyQsEsUBDT0 bfGMIJsiJ0X57w8CWTTtyBMrQl0NKCAA/IC7eAq9yS8ZDxaqsTg8MzWH3Fc42s5c Xa7Zw2Yqq1C9G+ZWXN2vPB67apKDoBVyw4S+MwtaykiMPedejiLkNYqZCV8xQtCs 2cs/020l7oSbKrD/mFOVp1hESlgHLt4miqGhjSIQgZP2q/422rAZ1kG6+8iTTpKX SsI3jw== -----END CERTIFICATE-----Generated at Wed Jan 7 10:04:12 2026 by rpki-client