This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/z_rlOiqBiGOKeFdRy89ys_JwXcM.roa File: z_rlOiqBiGOKeFdRy89ys_JwXcM.roa (raw, json) Hash identifier: RhetRJ3Zo1CzCaRPPa5jm5tpT048C/tX6ZCch0Ia1N4= Subject key identifier: CF:FA:E5:3A:2A:81:88:63:8A:78:57:51:CB:CF:72:B3:F2:70:5D:C3 Certificate issuer: /CN=8c77013e488a09c709b632246d9405da458c5538 Certificate serial: 019B79ECBADCEB32F7A746739EE0490A9343 Authority key identifier: 8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/z_rlOiqBiGOKeFdRy89ys_JwXcM.roa Signing time: Thu 01 Jan 2026 14:18:35 +0000 ROA not before: Thu 01 Jan 2026 14:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57738 IP address blocks: 185.17.12.0/22 maxlen: 24 185.128.244.0/22 maxlen: 24 185.129.172.0/22 maxlen: 24 2a06:d180::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ba:dc:eb:32:f7:a7:46:73:9e:e0:49:0a:93:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c77013e488a09c709b632246d9405da458c5538 Validity Not Before: Jan 1 14:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cffae53a2a8188638a785751cbcf72b3f2705dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9f:f4:99:bd:d5:45:62:1d:2b:40:9a:c6:1a: 19:b2:c2:41:7d:48:ba:4f:5f:e4:41:14:26:1c:25: 6b:c1:dc:96:af:8e:ee:ee:58:d8:da:e5:82:9f:b9: de:44:34:82:f9:ea:5d:f6:a9:45:ad:d2:e6:6e:15: 1c:e6:34:8b:71:2a:4a:c7:66:b7:e4:bf:a6:3b:34: be:f7:99:e1:10:e4:7b:fa:03:30:aa:1e:ac:95:ea: f7:04:8c:1a:4d:62:8d:25:89:3e:ab:ee:3f:cf:89: 50:c7:a4:a8:2c:e2:28:34:ca:75:5c:30:6b:30:40: 2a:c8:a4:07:eb:c0:25:c7:36:66:7b:d1:87:24:d0: 5b:aa:e6:95:dc:5b:58:43:77:8f:1d:d8:01:5d:54: fd:fb:d4:00:27:ea:38:80:43:f8:01:14:5c:d3:3d: bf:d1:2f:fd:40:26:bd:f9:61:90:01:ca:83:97:09: 37:97:b8:b5:b4:62:47:2b:3d:e9:a1:b2:f6:9b:b4: ef:bb:5c:35:f4:3a:dd:07:d7:77:5f:b9:bc:80:a0: 14:23:36:fa:d9:e0:03:01:ed:0b:4c:95:d0:6b:8b: 63:72:1e:bb:f4:9d:fb:62:89:f9:8d:2b:89:7f:b0: 7d:fd:11:a3:89:47:b6:aa:40:c9:57:45:ea:93:be: 6a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:FA:E5:3A:2A:81:88:63:8A:78:57:51:CB:CF:72:B3:F2:70:5D:C3 X509v3 Authority Key Identifier: keyid:8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/z_rlOiqBiGOKeFdRy89ys_JwXcM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.17.12.0/22 185.128.244.0/22 185.129.172.0/22 IPv6: 2a06:d180::/29 Signature Algorithm: sha256WithRSAEncryption 3d:39:40:29:88:6e:4d:c9:ce:ab:56:16:33:93:c8:59:cc:6f: 8c:4c:a6:62:d7:33:e0:c1:69:3d:11:07:f9:ce:7c:66:42:51: 8d:15:3c:88:af:d3:50:1f:7e:b7:67:46:e5:88:d3:51:23:41: 81:3b:a9:3a:a6:c5:57:3e:12:f4:29:0e:06:57:ff:7c:39:e6: d1:d1:df:fc:bd:e9:1e:f6:bb:6d:a1:3b:db:0c:3e:90:c8:09: d5:54:08:ca:e8:4d:3f:28:eb:d4:b3:a0:87:da:93:a0:5e:b8: ac:ad:65:22:a8:77:d2:36:d1:c5:db:09:09:47:86:a2:7c:d3: ab:aa:69:b8:fb:38:80:8d:91:c2:fb:c2:b0:c5:22:a8:5c:74: 6f:40:50:87:5b:e4:ce:33:5a:e0:78:c9:e3:90:38:d2:36:04: 59:1e:58:73:ec:35:58:e2:1f:be:89:32:56:39:eb:d4:82:89: cb:31:57:d0:92:e3:6c:a3:7c:04:32:5d:dc:0a:02:0f:cd:72: 46:e8:c1:19:08:5f:1d:28:9b:fe:ad:7f:40:09:76:12:58:8f: f3:f9:f1:c5:03:6b:91:ff:b3:79:56:3a:5b:53:bf:1d:66:74: 9c:15:39:a3:8f:17:9a:1f:df:bb:03:e9:91:bd:75:6c:fd:8a: cf:af:1e:f1 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt57Lrc6zL3p0ZznuBJCpNDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjNzcwMTNlNDg4YTA5YzcwOWI2MzIyNDZkOTQwNWRhNDU4 YzU1MzgwHhcNMjYwMTAxMTQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmZhZTUzYTJhODE4ODYzOGE3ODU3NTFjYmNmNzJiM2YyNzA1ZGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5/0mb3VRWIdK0CaxhoZssJBfUi6 T1/kQRQmHCVrwdyWr47u7ljY2uWCn7neRDSC+epd9qlFrdLmbhUc5jSLcSpKx2a3 5L+mOzS+95nhEOR7+gMwqh6sler3BIwaTWKNJYk+q+4/z4lQx6SoLOIoNMp1XDBr MEAqyKQH68AlxzZme9GHJNBbquaV3FtYQ3ePHdgBXVT9+9QAJ+o4gEP4ARRc0z2/ 0S/9QCa9+WGQAcqDlwk3l7i1tGJHKz3pobL2m7Tvu1w19DrdB9d3X7m8gKAUIzb6 2eADAe0LTJXQa4tjch679J37Yon5jSuJf7B9/RGjiUe2qkDJV0Xqk75qbQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFM/65ToqgYhjinhXUcvPcrPycF3DMB8GA1UdIwQY MBaAFIx3AT5IignHCbYyJG2UBdpFjFU4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakhjQlBraUtDY2NKdGpJa2JaUUYya1dNVlRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xNjg1MDktMmNmMy00ODNkLWJjZDgt MDIxMjk1MzNhMzNkLzEvel9ybE9pcUJpR09LZUZkUnk4OXlzX0p3WGNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8xNjg1MDktMmNmMy00ODNkLWJjZDgtMDIxMjk1MzNhMzNk LzEvakhjQlBraUtDY2NKdGpJa2JaUUYya1dNVlRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuREMAwQC uYD0AwQCuYGsMA0EAgACMAcDBQMqBtGAMA0GCSqGSIb3DQEBCwUAA4IBAQA9OUAp iG5Nyc6rVhYzk8hZzG+MTKZi1zPgwWk9EQf5znxmQlGNFTyIr9NQH363Z0bliNNR I0GBO6k6psVXPhL0KQ4GV/98OebR0d/8veke9rttoTvbDD6QyAnVVAjK6E0/KOvU s6CH2pOgXrisrWUiqHfSNtHF2wkJR4aifNOrqmm4+ziAjZHC+8KwxSKoXHRvQFCH W+TOM1rgeMnjkDjSNgRZHlhz7DVY4h++iTJWOevUgonLMVfQkuNso3wEMl3cCgIP zXJG6MEZCF8dKJv+rX9ACXYSWI/z+fHFA2uR/7N5VjpbU78dZnScFTmjjxeaH9+7 A+mRvXVs/YrPrx7x -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:06 2026 by rpki-client