This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/JZiy3r9PkYB8MElyL5xGJo1pVPk.roa File: JZiy3r9PkYB8MElyL5xGJo1pVPk.roa (raw, json) Hash identifier: xvNOkN38iMVfLqxF6m1PTaRdbwBZf+HM7rmKu9Qh53U= Subject key identifier: 25:98:B2:DE:BF:4F:91:80:7C:30:49:72:2F:9C:46:26:8D:69:54:F9 Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb Certificate serial: 019B7A5A812FFA963DED9CAD9B5B89FDFDA6 Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/JZiy3r9PkYB8MElyL5xGJo1pVPk.roa Signing time: Thu 01 Jan 2026 16:18:30 +0000 ROA not before: Thu 01 Jan 2026 16:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203714 IP address blocks: 176.53.180.0/23 maxlen: 23 176.53.182.0/23 maxlen: 23 185.53.104.0/23 maxlen: 23 185.53.104.0/24 maxlen: 24 185.207.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:81:2f:fa:96:3d:ed:9c:ad:9b:5b:89:fd:fd:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb Validity Not Before: Jan 1 16:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2598b2debf4f91807c3049722f9c46268d6954f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e5:38:44:49:60:8c:73:e9:58:e8:9e:e2:27: cc:cf:79:4d:b1:91:d0:73:46:e1:f6:37:57:0a:d8: 9e:94:a8:c1:5c:b2:36:bf:27:63:76:d1:e7:3a:87: 50:5b:fe:7d:c1:32:d4:e2:94:f7:ce:4a:43:8d:14: e6:75:99:59:bf:be:82:37:dd:33:c3:10:52:6f:21: bb:50:96:68:75:f6:db:8b:4c:e5:69:48:cd:ff:70: 81:33:78:14:15:be:5f:3a:68:74:db:96:06:f4:d3: 7c:99:c1:29:67:99:5e:33:59:53:f1:c5:1c:8e:3f: df:aa:a3:aa:29:f7:fa:44:1a:22:45:77:bb:5e:fd: 76:ef:97:5c:e0:63:e9:6e:dc:2a:41:17:16:33:aa: 72:97:db:97:0d:71:dd:45:c3:21:20:7c:e2:80:f5: c4:51:19:67:78:1e:05:09:d0:ef:ac:77:f7:7c:78: 97:08:43:cf:b6:5e:26:5d:13:3e:67:70:f5:bd:ad: 92:07:68:9b:d7:01:62:47:13:79:fa:6b:f3:c8:ea: 77:8b:84:51:3c:68:73:2c:fc:d8:95:46:bd:a1:a8: f1:f5:a1:39:2e:be:5f:92:be:af:d9:e4:82:34:07: 11:4b:89:ff:05:21:8f:48:fe:dc:7e:96:b7:0d:9f: 7f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:98:B2:DE:BF:4F:91:80:7C:30:49:72:2F:9C:46:26:8D:69:54:F9 X509v3 Authority Key Identifier: keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/JZiy3r9PkYB8MElyL5xGJo1pVPk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.53.180.0/22 185.53.104.0/23 185.207.2.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:f6:a2:ae:d0:89:0f:28:7b:16:49:de:ad:cf:d5:ab:62:8a: 65:b5:07:37:d7:ce:c4:09:8a:fe:31:4c:0f:7b:c0:47:2f:70: bf:8c:4b:31:0b:06:2a:8c:cd:c5:d1:9a:93:69:90:65:a9:d1: dd:c4:77:f1:e8:fb:64:b5:8d:56:3c:80:24:c3:1f:34:03:1e: 49:a7:aa:95:82:d4:88:2d:15:f3:ed:60:7d:9d:fc:8f:a6:ec: a7:40:a9:27:20:ad:52:c6:55:b7:7c:ce:a4:97:9e:bc:bf:6f: 74:de:05:26:40:cc:b3:1e:d8:86:b8:c2:d4:f8:6c:3a:7d:cc: fd:23:2a:ad:40:fb:64:16:56:04:1f:0d:9e:1d:2b:b9:00:ca: 90:de:33:bd:55:fc:88:40:e1:82:74:0e:21:26:00:98:fe:36: 01:35:58:00:14:61:41:7f:7d:5c:2f:93:0a:49:ae:a8:6d:fd: 7e:ec:26:43:05:5b:72:bf:b7:71:9a:71:19:1f:c1:9f:88:b0: 34:6e:9a:be:ee:99:d6:7b:b1:57:56:1d:08:a1:a2:00:f7:c0: 50:8c:b2:27:95:55:1b:4d:a8:f5:1c:1b:21:07:35:e5:a7:d5: aa:f4:2c:bd:7a:39:2b:3e:c3:d2:c4:c3:46:53:e4:ce:32:bb: d6:12:e8:f2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6WoEv+pY97Zytm1uJ/f2mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MTM1ZDYzOTc2OGEzYTYzZWQ5YzVmZjQwYWY1ZWQwMWRm NzQxY2IwHhcNMjYwMTAxMTYxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTk4YjJkZWJmNGY5MTgwN2MzMDQ5NzIyZjljNDYyNjhkNjk1NGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeU4RElgjHPpWOie4ifMz3lNsZHQ c0bh9jdXCtielKjBXLI2vydjdtHnOodQW/59wTLU4pT3zkpDjRTmdZlZv76CN90z wxBSbyG7UJZodfbbi0zlaUjN/3CBM3gUFb5fOmh025YG9NN8mcEpZ5leM1lT8cUc jj/fqqOqKff6RBoiRXe7Xv1275dc4GPpbtwqQRcWM6pyl9uXDXHdRcMhIHzigPXE URlneB4FCdDvrHf3fHiXCEPPtl4mXRM+Z3D1va2SB2ib1wFiRxN5+mvzyOp3i4RR PGhzLPzYlUa9oajx9aE5Lr5fkr6v2eSCNAcRS4n/BSGPSP7cfpa3DZ9/+wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCWYst6/T5GAfDBJci+cRiaNaVT5MB8GA1UdIwQY MBaAFOYTXWOXaKOmPtnF/0CvXtAd90HLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83NDZhNzUtZDM2MS00ZTkxLTg3M2Et MGE3NzBmMGM3NjA4LzEvSlppeTNyOVBrWUI4TUVseUw1eEdKbzFwVlBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS83NDZhNzUtZDM2MS00ZTkxLTg3M2EtMGE3NzBmMGM3NjA4 LzEvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCsDW0AwQB uTVoAwQAuc8CMA0GCSqGSIb3DQEBCwUAA4IBAQAL9qKu0IkPKHsWSd6tz9WrYopl tQc3187ECYr+MUwPe8BHL3C/jEsxCwYqjM3F0ZqTaZBlqdHdxHfx6PtktY1WPIAk wx80Ax5Jp6qVgtSILRXz7WB9nfyPpuynQKknIK1SxlW3fM6kl568v2903gUmQMyz HtiGuMLU+Gw6fcz9IyqtQPtkFlYEHw2eHSu5AMqQ3jO9VfyIQOGCdA4hJgCY/jYB NVgAFGFBf31cL5MKSa6obf1+7CZDBVtyv7dxmnEZH8GfiLA0bpq+7pnWe7FXVh0I oaIA98BQjLInlVUbTaj1HBshBzXlp9Wq9Cy9ejkrPsPSxMNGU+TOMrvWEujy -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:18 2026 by rpki-client