This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/ZwPne8zOsgkMT0U51cJiftdsvfk.roa File: ZwPne8zOsgkMT0U51cJiftdsvfk.roa (raw, json) Hash identifier: BIxOUNugWCSEebM0j8omjX/fG0IbzdxHMnELYPl8RdM= Subject key identifier: 67:03:E7:7B:CC:CE:B2:09:0C:4F:45:39:D5:C2:62:7E:D7:6C:BD:F9 Certificate issuer: /CN=b77627cafe755785750bde5ba49e6c1091bf4247 Certificate serial: 019B7834DE8184DFC239F956BE881301DF74 Authority key identifier: B7:76:27:CA:FE:75:57:85:75:0B:DE:5B:A4:9E:6C:10:91:BF:42:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/ZwPne8zOsgkMT0U51cJiftdsvfk.roa Signing time: Thu 01 Jan 2026 06:18:09 +0000 ROA not before: Thu 01 Jan 2026 06:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209302 IP address blocks: 85.209.248.0/22 maxlen: 22 85.209.250.0/24 maxlen: 24 85.209.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 03:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:de:81:84:df:c2:39:f9:56:be:88:13:01:df:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b77627cafe755785750bde5ba49e6c1091bf4247 Validity Not Before: Jan 1 06:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6703e77bccceb2090c4f4539d5c2627ed76cbdf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9b:89:ea:f0:38:c1:84:51:e4:9a:36:e4:72: c5:af:f4:69:5f:1f:8a:29:b4:eb:d6:4e:28:a0:5a: 7c:d0:a3:d4:54:78:6e:e9:df:d9:35:5b:d5:24:b6: b2:e6:63:89:3e:44:58:a4:c1:74:f0:af:d4:0f:13: fb:1a:c3:d2:be:f1:0b:da:29:ad:81:2f:8f:e5:1c: d8:c2:12:4d:44:bd:43:21:b2:84:bf:b6:3c:43:d7: 7f:e9:08:a2:aa:76:c6:41:38:ef:a3:c1:71:2e:f1: 11:a2:bd:a9:84:b7:0c:da:32:40:f1:14:d6:f2:60: 1a:51:e0:6b:bf:3d:3b:63:43:97:91:5d:a0:7b:9f: 1c:83:e2:41:28:7a:69:39:88:df:5f:a4:31:37:14: 6a:53:d9:b9:52:f8:8d:26:54:b6:66:5b:47:93:10: 9a:e4:3c:b0:f7:4e:56:aa:45:ba:44:7a:41:ee:34: e4:e2:f0:16:6e:c8:78:d8:e5:ab:ff:8c:f6:bd:4a: 39:89:b9:8d:60:6d:5b:90:f6:4b:94:4c:66:68:71: fc:3d:90:68:a0:8d:b4:25:fe:9d:b5:c7:b2:b7:9f: ed:25:1a:61:64:52:19:78:28:a9:07:34:54:d8:3d: 16:c5:7b:bb:c9:78:ba:83:2b:88:6c:b4:e2:be:9d: 20:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:03:E7:7B:CC:CE:B2:09:0C:4F:45:39:D5:C2:62:7E:D7:6C:BD:F9 X509v3 Authority Key Identifier: keyid:B7:76:27:CA:FE:75:57:85:75:0B:DE:5B:A4:9E:6C:10:91:BF:42:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/ZwPne8zOsgkMT0U51cJiftdsvfk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.209.248.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:6c:f7:1b:eb:f6:3d:51:ad:34:4b:56:b3:83:5d:04:c2:24: 21:27:e4:b4:8d:fe:18:7d:22:4e:56:8e:0d:ad:c4:b8:34:f8: 3d:e7:27:00:8b:e4:39:e1:ed:2f:28:85:b6:83:c2:98:ed:b4: 3b:38:e0:c6:25:84:d7:7c:fe:e2:8d:75:5a:49:fa:d9:3e:d7: 0a:24:56:07:db:27:c5:d7:bd:3a:93:3b:d9:e9:bf:7a:27:c5: 51:b1:cc:f6:1d:02:30:91:8a:41:74:3d:8c:dd:9a:48:73:81: d0:fc:81:ce:50:fd:e2:a9:89:29:e1:47:97:61:e0:dc:4e:96: 69:e4:d3:f7:28:e4:f7:66:43:76:4e:74:c7:b5:96:73:09:a5: 60:0f:f9:80:0f:c4:e4:34:1c:21:e2:95:02:99:6e:12:3c:89: 69:6d:7f:89:ff:42:2f:74:9b:75:63:6b:8d:45:88:1e:04:b9: fc:8f:af:67:88:0e:da:6e:39:de:d9:7a:40:e7:07:97:20:9a: 13:72:66:2c:b2:3c:95:52:79:5a:d2:e9:4f:5b:a4:75:71:2c: 97:40:a1:6d:ba:9b:d2:08:4c:96:8a:16:07:a8:87:12:98:43: a7:a9:0c:a7:a5:b7:d7:5d:eb:b7:f3:51:e0:f8:5f:ed:b8:05: 00:08:b5:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NN6BhN/COflWvogTAd90MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NzYyN2NhZmU3NTU3ODU3NTBiZGU1YmE0OWU2YzEwOTFi ZjQyNDcwHhcNMjYwMTAxMDYxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzAzZTc3YmNjY2ViMjA5MGM0ZjQ1MzlkNWMyNjI3ZWQ3NmNiZGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJuJ6vA4wYRR5Jo25HLFr/RpXx+K KbTr1k4ooFp80KPUVHhu6d/ZNVvVJLay5mOJPkRYpMF08K/UDxP7GsPSvvEL2imt gS+P5RzYwhJNRL1DIbKEv7Y8Q9d/6QiiqnbGQTjvo8FxLvERor2phLcM2jJA8RTW 8mAaUeBrvz07Y0OXkV2ge58cg+JBKHppOYjfX6QxNxRqU9m5UviNJlS2ZltHkxCa 5Dyw905WqkW6RHpB7jTk4vAWbsh42OWr/4z2vUo5ibmNYG1bkPZLlExmaHH8PZBo oI20Jf6dtceyt5/tJRphZFIZeCipBzRU2D0WxXu7yXi6gyuIbLTivp0grwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGcD53vMzrIJDE9FOdXCYn7XbL35MB8GA1UdIwQY MBaAFLd2J8r+dVeFdQveW6SebBCRv0JHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDNZbnl2NTFWNFYxQzk1YnBKNXNFSkdfUWtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82MDIxMzctZGQ0MC00ZWY5LWJiMGYt NDQ1N2ZhMjBiY2JhLzEvWndQbmU4ek9zZ2tNVDBVNTFjSmlmdGRzdmZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS82MDIxMzctZGQ0MC00ZWY5LWJiMGYtNDQ1N2ZhMjBiY2Jh LzEvdDNZbnl2NTFWNFYxQzk1YnBKNXNFSkdfUWtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVdH4MA0G CSqGSIb3DQEBCwUAA4IBAQArbPcb6/Y9Ua00S1azg10EwiQhJ+S0jf4YfSJOVo4N rcS4NPg95ycAi+Q54e0vKIW2g8KY7bQ7OODGJYTXfP7ijXVaSfrZPtcKJFYH2yfF 1706kzvZ6b96J8VRscz2HQIwkYpBdD2M3ZpIc4HQ/IHOUP3iqYkp4UeXYeDcTpZp 5NP3KOT3ZkN2TnTHtZZzCaVgD/mAD8TkNBwh4pUCmW4SPIlpbX+J/0IvdJt1Y2uN RYgeBLn8j69niA7abjne2XpA5weXIJoTcmYssjyVUnla0ulPW6R1cSyXQKFtupvS CEyWihYHqIcSmEOnqQynpbfXXeu381Hg+F/tuAUACLXS -----END CERTIFICATE-----Generated at Sat Jan 3 13:04:57 2026 by rpki-client