This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/zL1avC0lj7yCwQAa8kdB-j9BOqc.roa File: zL1avC0lj7yCwQAa8kdB-j9BOqc.roa (raw, json) Hash identifier: dt/cheCBQnjNlx2owBRsbLzi25MiYf0n9VeZMVmnugI= Subject key identifier: CC:BD:5A:BC:2D:25:8F:BC:82:C1:00:1A:F2:47:41:FA:3F:41:3A:A7 Certificate issuer: /CN=07526589c5194f1e5fbb9fdc51667daf0562d6d9 Certificate serial: 019B7CEE08A2CB1D34530B104D0DC96C7284 Authority key identifier: 07:52:65:89:C5:19:4F:1E:5F:BB:9F:DC:51:66:7D:AF:05:62:D6:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/zL1avC0lj7yCwQAa8kdB-j9BOqc.roa Signing time: Fri 02 Jan 2026 04:18:53 +0000 ROA not before: Fri 02 Jan 2026 04:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206041 IP address blocks: 185.32.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:08:a2:cb:1d:34:53:0b:10:4d:0d:c9:6c:72:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07526589c5194f1e5fbb9fdc51667daf0562d6d9 Validity Not Before: Jan 2 04:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ccbd5abc2d258fbc82c1001af24741fa3f413aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a4:89:78:c7:e0:c4:3d:dc:25:c3:91:c0:c6: 11:e1:55:9a:87:7b:1d:85:85:b9:66:cf:49:51:be: 38:50:5c:99:2f:2f:d0:2d:17:d0:66:e9:02:13:37: cd:30:15:21:48:b2:48:76:7a:e0:47:69:2b:a0:76: c5:f6:1a:f2:cf:5f:c0:91:1f:70:c6:7b:6f:8b:a0: d1:31:f0:af:ec:f7:40:41:9b:f8:fb:22:ba:e4:ed: 75:b8:4b:d1:04:bd:05:4d:46:72:bf:9e:75:24:18: e8:8e:a7:6b:f6:48:d9:6e:89:ab:92:0a:e9:9a:c5: 87:5b:ed:5b:c3:01:8b:7e:52:eb:ae:6b:27:f9:75: 69:53:1f:ad:e6:e4:8e:d2:48:0b:b1:16:13:09:ad: e3:06:f3:ad:27:dc:9a:28:74:16:4a:46:ac:ea:69: 3b:33:19:85:bf:3c:be:00:d0:c4:a5:c3:97:b6:db: 63:b4:25:7c:74:44:f0:fe:80:35:df:5d:5f:15:ed: 2b:3a:3c:ed:52:9b:8a:be:86:24:72:14:37:55:a0: 4b:af:3e:04:58:3e:60:e4:8b:55:f0:0d:9d:b5:8b: 17:97:3f:86:02:e9:6f:f7:c2:1f:39:bc:fb:67:02: aa:51:3a:71:08:a6:dd:28:04:79:ad:8e:ba:4e:b8: ce:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BD:5A:BC:2D:25:8F:BC:82:C1:00:1A:F2:47:41:FA:3F:41:3A:A7 X509v3 Authority Key Identifier: keyid:07:52:65:89:C5:19:4F:1E:5F:BB:9F:DC:51:66:7D:AF:05:62:D6:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/zL1avC0lj7yCwQAa8kdB-j9BOqc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.32.69.0/24 Signature Algorithm: sha256WithRSAEncryption 22:40:73:45:50:12:92:5f:33:a5:a2:44:76:13:3c:cc:a3:a5: bf:f4:9e:1c:16:0d:cf:c8:6f:b1:69:5b:03:02:f6:82:3a:90: 2a:e2:4a:24:f3:10:01:6f:d0:ca:97:47:84:43:78:a7:8a:4a: 09:9b:a7:47:45:82:86:15:67:38:06:5c:63:66:75:52:af:39: 60:4b:18:6b:e8:d3:33:87:70:df:87:e7:e5:61:76:c1:1b:cb: 7a:76:6b:e9:1a:1d:b0:5d:33:91:fc:ce:b8:74:9a:9d:23:67: 4a:bd:4b:f8:84:1b:f3:f7:19:3e:5e:d4:55:e7:39:80:46:a4: 79:eb:3d:0b:22:28:30:27:f1:b1:51:fc:2d:99:3f:f8:73:5d: 30:ce:34:ec:90:bb:3e:c2:5b:7a:f6:3c:14:91:4f:7c:fd:be: 69:13:24:5a:8d:0d:46:37:7b:1e:97:4a:26:9a:f4:9a:27:6a: 0e:4a:88:b6:61:1e:34:fd:ad:67:91:a3:02:fd:2a:b6:49:f9: 25:af:8c:f4:db:23:4b:b3:bf:92:97:5b:73:81:f6:93:2b:82: 16:7f:86:0d:83:7b:e2:e7:19:97:44:56:54:5e:6a:72:9b:75: 89:3e:ac:a4:5c:7c:87:42:86:56:1b:c9:c6:d1:b3:3e:9e:27: e4:fb:9c:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87giiyx00UwsQTQ3JbHKEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NTI2NTg5YzUxOTRmMWU1ZmJiOWZkYzUxNjY3ZGFmMDU2 MmQ2ZDkwHhcNMjYwMTAyMDQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2JkNWFiYzJkMjU4ZmJjODJjMTAwMWFmMjQ3NDFmYTNmNDEzYWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqSJeMfgxD3cJcORwMYR4VWah3sd hYW5Zs9JUb44UFyZLy/QLRfQZukCEzfNMBUhSLJIdnrgR2kroHbF9hryz1/AkR9w xntvi6DRMfCv7PdAQZv4+yK65O11uEvRBL0FTUZyv551JBjojqdr9kjZbomrkgrp msWHW+1bwwGLflLrrmsn+XVpUx+t5uSO0kgLsRYTCa3jBvOtJ9yaKHQWSkas6mk7 MxmFvzy+ANDEpcOXtttjtCV8dETw/oA1311fFe0rOjztUpuKvoYkchQ3VaBLrz4E WD5g5ItV8A2dtYsXlz+GAulv98IfObz7ZwKqUTpxCKbdKAR5rY66TrjO3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMy9WrwtJY+8gsEAGvJHQfo/QTqnMB8GA1UdIwQY MBaAFAdSZYnFGU8eX7uf3FFmfa8FYtbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjFKbGljVVpUeDVmdTVfY1VXWjlyd1ZpMXRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hNWE3NzQtODU1My00NDE0LWFjM2Mt ZGQxNzBjMWZkMzNjLzEvekwxYXZDMGxqN3lDd1FBYThrZEItajlCT3FjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hNWE3NzQtODU1My00NDE0LWFjM2MtZGQxNzBjMWZkMzNj LzEvQjFKbGljVVpUeDVmdTVfY1VXWjlyd1ZpMXRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSBFMA0G CSqGSIb3DQEBCwUAA4IBAQAiQHNFUBKSXzOlokR2EzzMo6W/9J4cFg3PyG+xaVsD AvaCOpAq4kok8xABb9DKl0eEQ3inikoJm6dHRYKGFWc4BlxjZnVSrzlgSxhr6NMz h3Dfh+flYXbBG8t6dmvpGh2wXTOR/M64dJqdI2dKvUv4hBvz9xk+XtRV5zmARqR5 6z0LIigwJ/GxUfwtmT/4c10wzjTskLs+wlt69jwUkU98/b5pEyRajQ1GN3sel0om mvSaJ2oOSoi2YR40/a1nkaMC/Sq2Sfklr4z02yNLs7+Sl1tzgfaTK4IWf4YNg3vi 5xmXRFZUXmpym3WJPqykXHyHQoZWG8nG0bM+nifk+5z1 -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:18 2026 by rpki-client