This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/cz9nRQb6BVshkbbcxYYnEovL3TU.roa File: cz9nRQb6BVshkbbcxYYnEovL3TU.roa (raw, json) Hash identifier: GHnjEfatRTzGlGF7x4FbXgVm0gVtv1urnh0xflksSJo= Subject key identifier: 73:3F:67:45:06:FA:05:5B:21:91:B6:DC:C5:86:27:12:8B:CB:DD:35 Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad Certificate serial: 019B7F134FDD6645321035DC977C8BA1DB05 Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/cz9nRQb6BVshkbbcxYYnEovL3TU.roa Signing time: Fri 02 Jan 2026 14:18:50 +0000 ROA not before: Fri 02 Jan 2026 14:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208485 IP address blocks: 185.84.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:4f:dd:66:45:32:10:35:dc:97:7c:8b:a1:db:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad Validity Not Before: Jan 2 14:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=733f674506fa055b2191b6dcc58627128bcbdd35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:53:92:e9:54:c1:66:81:ae:f0:75:e2:8c:a2: b6:de:eb:5e:32:a7:bc:03:6a:23:b1:a5:ca:84:98: 73:41:99:cb:9c:66:57:bb:a2:f6:e1:ea:cd:99:7b: fd:4b:77:f1:6e:86:39:ec:a8:8d:96:31:c6:11:bf: 54:2b:43:a7:a6:0a:8d:14:68:c2:ce:bd:b7:67:f0: 59:9a:37:ee:a3:fb:52:36:a6:f9:e6:1b:24:aa:b2: c3:57:8a:43:1d:02:b3:28:db:17:08:e8:6a:79:b8: 33:93:3b:09:1c:4c:f6:4e:ae:c4:37:1e:cf:a9:f3: f8:84:91:01:b9:3e:51:e7:81:0d:56:89:8b:0b:46: 7b:a4:50:73:6b:12:54:6f:47:2f:1a:c9:6b:b6:c8: 5a:74:5e:1b:4b:4b:b7:c4:22:44:d6:61:3d:4e:e5: b9:51:39:82:c9:13:fb:2c:8a:b7:72:68:6f:cf:c6: 24:25:73:9b:58:45:9d:ff:82:31:46:b0:d6:4f:f3: 6f:97:f1:54:76:fd:19:08:a8:8b:33:46:59:06:4c: 0f:d4:15:e6:2c:4f:43:4c:c7:9c:a3:08:cb:da:22: 7c:68:9a:cd:be:da:02:6c:cc:11:c7:58:e9:8a:81: 48:f6:f5:ed:6a:fa:1b:e9:55:76:e1:3b:18:e4:71: e4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3F:67:45:06:FA:05:5B:21:91:B6:DC:C5:86:27:12:8B:CB:DD:35 X509v3 Authority Key Identifier: keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/cz9nRQb6BVshkbbcxYYnEovL3TU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.84.159.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:a5:8a:a1:74:36:f6:91:e7:85:78:94:8b:aa:a1:21:4d:31: 12:71:5b:1a:66:e0:4c:f5:28:20:e4:b9:5d:c7:e4:20:92:5d: 57:33:cd:e5:72:37:2f:3f:e2:38:ba:12:95:ea:1c:a2:a3:1b: fd:26:c3:7e:8f:bd:81:6d:27:9d:5a:4b:0f:aa:77:4f:bf:5a: 0c:67:6c:f4:bd:98:26:9a:82:09:7a:fd:e4:6c:ed:20:7c:bd: fc:34:89:04:a8:0a:50:b1:3f:c1:fd:db:33:c5:e9:4b:dd:ba: 96:8b:81:bf:d8:ea:b9:fa:7e:af:6d:af:79:13:74:9f:dd:b5: b3:fa:fe:cc:85:29:55:d3:9d:9b:62:28:ae:90:04:63:18:78: ca:2c:18:7d:04:70:38:35:ee:42:09:c8:d1:38:c1:9d:33:fe: f0:18:94:6f:cc:88:6c:6b:3f:c4:7e:3f:4f:7a:66:e1:0d:a3: d2:c0:8f:f3:8e:c2:4e:bb:be:5d:83:a2:00:ba:93:db:46:c2: 64:82:f7:cc:60:55:b2:bb:4c:e8:5f:1f:ba:3a:3c:48:b1:20: 59:f3:4e:53:f7:8b:6c:7b:05:82:9d:3c:ac:cb:53:95:16:6c: 76:29:8b:d0:8b:91:c4:5a:91:9a:c3:b3:8c:65:b4:3e:60:91: b6:7e:fa:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E0/dZkUyEDXcl3yLodsFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYzE3NjlkM2ZmMDQyMTI0Njk4ZTMxYzQ3MmI2M2JiZjFi YmI1YWQwHhcNMjYwMTAyMTQxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzNmNjc0NTA2ZmEwNTViMjE5MWI2ZGNjNTg2MjcxMjhiY2JkZDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVOS6VTBZoGu8HXijKK23uteMqe8 A2ojsaXKhJhzQZnLnGZXu6L24erNmXv9S3fxboY57KiNljHGEb9UK0OnpgqNFGjC zr23Z/BZmjfuo/tSNqb55hskqrLDV4pDHQKzKNsXCOhqebgzkzsJHEz2Tq7ENx7P qfP4hJEBuT5R54ENVomLC0Z7pFBzaxJUb0cvGslrtshadF4bS0u3xCJE1mE9TuW5 UTmCyRP7LIq3cmhvz8YkJXObWEWd/4IxRrDWT/Nvl/FUdv0ZCKiLM0ZZBkwP1BXm LE9DTMecowjL2iJ8aJrNvtoCbMwRx1jpioFI9vXtavob6VV24TsY5HHkLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHM/Z0UG+gVbIZG23MWGJxKLy901MB8GA1UdIwQY MBaAFF7Bdp0/8EISRpjjHEcrY7vxu7WtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yOWZiMDQtZTA3Yi00ZTMwLWI4ZjUt NTQyMDRkZGQyY2E2LzEvY3o5blJRYjZCVnNoa2JiY3hZWW5Fb3ZMM1RVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8yOWZiMDQtZTA3Yi00ZTMwLWI4ZjUtNTQyMDRkZGQyY2E2 LzEvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVSfMA0G CSqGSIb3DQEBCwUAA4IBAQCcpYqhdDb2keeFeJSLqqEhTTEScVsaZuBM9Sgg5Lld x+Qgkl1XM83lcjcvP+I4uhKV6hyioxv9JsN+j72BbSedWksPqndPv1oMZ2z0vZgm moIJev3kbO0gfL38NIkEqApQsT/B/dszxelL3bqWi4G/2Oq5+n6vba95E3Sf3bWz +v7MhSlV052bYiiukARjGHjKLBh9BHA4Ne5CCcjROMGdM/7wGJRvzIhsaz/Efj9P embhDaPSwI/zjsJOu75dg6IAupPbRsJkgvfMYFWyu0zoXx+6OjxIsSBZ805T94ts ewWCnTysy1OVFmx2KYvQi5HEWpGaw7OMZbQ+YJG2fvpo -----END CERTIFICATE-----Generated at Wed Jan 21 07:46:32 2026 by rpki-client