This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/rPIzoCFP-zCt505IFJ-JM6SHddk.roa File: rPIzoCFP-zCt505IFJ-JM6SHddk.roa (raw, json) Hash identifier: ff67hWMpb0SLcbXRIw3vOQeGFPvfgLQxI2Na2l7rVAw= Subject key identifier: AC:F2:33:A0:21:4F:FB:30:AD:E7:4E:48:14:9F:89:33:A4:87:75:D9 Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019B9D7A43E378F82D7E4276D8EC42B16C36 Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/rPIzoCFP-zCt505IFJ-JM6SHddk.roa Signing time: Thu 08 Jan 2026 11:59:54 +0000 ROA not before: Thu 08 Jan 2026 11:59:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51791 IP address blocks: 185.88.174.0/24 maxlen: 24 185.184.24.0/24 maxlen: 24 193.160.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:7a:43:e3:78:f8:2d:7e:42:76:d8:ec:42:b1:6c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Jan 8 11:59:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acf233a0214ffb30ade74e48149f8933a48775d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:88:be:61:34:70:78:7c:61:55:5f:21:75:a2: 31:4d:1b:37:95:26:ac:1e:2c:73:15:95:d7:f7:54: f4:1a:8e:11:43:3f:41:15:1d:48:d7:52:ce:f7:f9: 1f:98:32:f5:cc:ba:3f:76:03:db:3a:cd:c8:2c:aa: 35:92:58:f0:9d:d9:7b:65:53:62:ac:27:17:2e:e0: b7:72:8a:90:40:c3:de:c3:81:fa:46:c2:d8:a9:bd: 8b:98:db:6c:4e:f7:b1:f8:55:20:cd:a4:b2:81:81: 2d:24:d1:ee:38:ab:cc:d8:4b:f8:53:16:30:68:9f: 92:47:4f:01:15:7b:89:e4:9f:95:64:23:2f:2c:77: c2:d7:cc:6f:cf:c5:08:79:48:73:0e:24:ee:1d:7f: eb:ad:d4:6e:ab:bc:38:50:c2:5b:91:ff:27:29:22: 71:03:b5:eb:9a:79:1a:97:40:34:65:dc:ed:75:4b: 2e:37:98:71:97:60:26:cd:33:3a:f8:58:f2:7e:ea: f2:43:a1:cb:c4:74:6e:be:6d:64:8d:90:42:44:d8: c9:58:00:60:76:13:01:1c:c6:4e:ba:3f:d1:5e:f2: e6:76:78:f1:9b:a7:bd:0e:7e:08:12:ed:b9:70:f5: b7:dd:be:5b:22:4a:a2:f8:01:c1:28:41:7d:85:69: 5a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F2:33:A0:21:4F:FB:30:AD:E7:4E:48:14:9F:89:33:A4:87:75:D9 X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/rPIzoCFP-zCt505IFJ-JM6SHddk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.88.174.0/24 185.184.24.0/24 193.160.141.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:42:af:72:c9:f1:7a:69:d6:10:c4:4b:6b:b0:5c:24:a3:97: 3e:5f:f5:2a:0c:e8:36:94:63:e0:af:b6:e8:0e:2f:de:d3:0c: 3e:f0:89:63:f7:66:54:38:8e:ef:35:5b:ee:1e:b9:22:99:91: 2f:f4:48:15:eb:94:56:63:6c:97:1e:03:0e:e8:06:05:8b:82: 7b:0a:af:4f:62:a1:87:3b:bc:02:6f:90:f3:3a:1f:79:3d:ad: 2c:e4:63:7d:a7:d6:c5:45:73:3e:f0:4c:71:6c:56:3a:8b:15: 0c:1d:d6:54:06:2a:48:ae:51:87:cd:a5:8d:43:c2:8c:96:f5: 79:07:c5:7c:03:22:2b:21:dc:ed:fb:aa:33:e0:d4:d1:1a:45: 57:4c:b4:ae:87:d0:89:e6:7c:3e:a1:0e:b6:a5:7c:a3:82:87: 95:b9:8d:0b:b0:a1:cd:24:d7:1a:6b:72:1d:ef:28:bd:5a:50: b4:1b:30:56:e6:fa:53:3c:42:cf:0a:f3:95:33:e3:d6:fe:a8: 53:45:81:ad:7d:c6:56:39:d0:d5:ec:a5:c9:ef:0a:63:a7:f9: c4:6a:ee:90:e2:fb:77:8b:96:26:00:38:5c:34:34:61:cc:c0: c1:79:95:c6:21:6e:1a:9f:31:21:75:de:13:c4:94:92:d4:3e: 4c:42:da:cf -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZudekPjePgtfkJ22OxCsWw2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjYwMTA4MTE1OTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2YyMzNhMDIxNGZmYjMwYWRlNzRlNDgxNDlmODkzM2E0ODc3NWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoi+YTRweHxhVV8hdaIxTRs3lSas HixzFZXX91T0Go4RQz9BFR1I11LO9/kfmDL1zLo/dgPbOs3ILKo1kljwndl7ZVNi rCcXLuC3coqQQMPew4H6RsLYqb2LmNtsTvex+FUgzaSygYEtJNHuOKvM2Ev4UxYw aJ+SR08BFXuJ5J+VZCMvLHfC18xvz8UIeUhzDiTuHX/rrdRuq7w4UMJbkf8nKSJx A7Xrmnkal0A0ZdztdUsuN5hxl2AmzTM6+FjyfuryQ6HLxHRuvm1kjZBCRNjJWABg dhMBHMZOuj/RXvLmdnjxm6e9Dn4IEu25cPW33b5bIkqi+AHBKEF9hWlaewIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKzyM6AhT/swredOSBSfiTOkh3XZMB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEvclBJem9DRlAtekN0NTA1SUZKLUpNNlNIZGRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuViuAwQA ubgYAwQAwaCNMA0GCSqGSIb3DQEBCwUAA4IBAQCcQq9yyfF6adYQxEtrsFwko5c+ X/UqDOg2lGPgr7boDi/e0ww+8Ilj92ZUOI7vNVvuHrkimZEv9EgV65RWY2yXHgMO 6AYFi4J7Cq9PYqGHO7wCb5DzOh95Pa0s5GN9p9bFRXM+8ExxbFY6ixUMHdZUBipI rlGHzaWNQ8KMlvV5B8V8AyIrIdzt+6oz4NTRGkVXTLSuh9CJ5nw+oQ62pXyjgoeV uY0LsKHNJNcaa3Id7yi9WlC0GzBW5vpTPELPCvOVM+PW/qhTRYGtfcZWOdDV7KXJ 7wpjp/nEau6Q4vt3i5YmADhcNDRhzMDBeZXGIW4anzEhdd4TxJSS1D5MQtrP -----END CERTIFICATE-----Generated at Wed Jan 21 14:10:53 2026 by rpki-client