This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/affaa1-0e7b-401e-a7c5-06270ea82154/1/iZZcAtI6tX7pa2kx02V3Cb8900I.roa File: iZZcAtI6tX7pa2kx02V3Cb8900I.roa (raw, json) Hash identifier: DpMSCiHNTOpSLZuOk1jeRKQ+RT6rgkZxlrfr955DoA8= Subject key identifier: 89:96:5C:02:D2:3A:B5:7E:E9:6B:69:31:D3:65:77:09:BF:3D:D3:42 Certificate issuer: /CN=348566061e368caff1881be2bac6737dfd3c1dba Certificate serial: 019B79ECF008A97E4263CCE3B155F514DB4F Authority key identifier: 34:85:66:06:1E:36:8C:AF:F1:88:1B:E2:BA:C6:73:7D:FD:3C:1D:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIVmBh42jK_xiBviusZzff08Hbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/affaa1-0e7b-401e-a7c5-06270ea82154/1/iZZcAtI6tX7pa2kx02V3Cb8900I.roa Signing time: Thu 01 Jan 2026 14:18:49 +0000 ROA not before: Thu 01 Jan 2026 14:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206521 IP address blocks: 185.140.156.0/22 maxlen: 24 185.140.156.0/24 maxlen: 24 185.140.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/affaa1-0e7b-401e-a7c5-06270ea82154/1/NIVmBh42jK_xiBviusZzff08Hbo.crl rsync://rpki.ripe.net/repository/DEFAULT/48/affaa1-0e7b-401e-a7c5-06270ea82154/1/NIVmBh42jK_xiBviusZzff08Hbo.mft rsync://rpki.ripe.net/repository/DEFAULT/NIVmBh42jK_xiBviusZzff08Hbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:f0:08:a9:7e:42:63:cc:e3:b1:55:f5:14:db:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=348566061e368caff1881be2bac6737dfd3c1dba Validity Not Before: Jan 1 14:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89965c02d23ab57ee96b6931d3657709bf3dd342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8b:74:58:95:11:d3:75:07:18:56:dd:96:33: b6:74:c9:8f:70:84:ac:d3:03:b3:04:39:d4:3e:33: 19:b3:59:59:2c:8e:dc:5b:1c:9e:80:8a:c0:76:aa: 46:b0:7e:bb:f9:60:44:19:48:d5:ff:90:a1:37:7f: ac:ea:20:ca:cd:85:ef:e0:00:66:e8:a0:b4:aa:09: 8a:62:66:a0:e9:4a:9d:da:de:2e:58:ff:24:52:77: b5:9a:6b:7d:53:41:e3:fb:c9:ca:67:34:25:00:cb: 99:25:4e:b7:9c:34:fc:5d:87:a6:06:10:e8:33:3d: 92:65:41:ca:0b:ba:9f:31:58:ef:c1:84:f7:0e:a8: 0f:47:7c:f7:71:ec:cb:cf:2d:7f:2a:8e:92:48:58: f2:6d:7e:2f:1e:f2:07:35:4a:b9:6b:9b:10:1e:a1: 0f:58:7b:e2:cf:4a:23:66:fa:cc:21:80:1f:ae:f1: 9d:f8:7b:aa:79:e3:d9:66:79:ff:58:53:d9:97:54: 7a:78:02:3a:43:9d:3c:ca:21:c0:d4:b5:71:7a:63: a1:cc:10:70:74:17:db:58:92:09:ed:64:08:2d:44: a5:84:07:48:27:bd:e3:43:2a:9e:97:61:41:b0:cb: 20:e2:b2:64:83:02:38:65:6f:2d:4d:9f:ff:db:b2: 3c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:96:5C:02:D2:3A:B5:7E:E9:6B:69:31:D3:65:77:09:BF:3D:D3:42 X509v3 Authority Key Identifier: keyid:34:85:66:06:1E:36:8C:AF:F1:88:1B:E2:BA:C6:73:7D:FD:3C:1D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIVmBh42jK_xiBviusZzff08Hbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/affaa1-0e7b-401e-a7c5-06270ea82154/1/iZZcAtI6tX7pa2kx02V3Cb8900I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/affaa1-0e7b-401e-a7c5-06270ea82154/1/NIVmBh42jK_xiBviusZzff08Hbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.140.156.0/22 Signature Algorithm: sha256WithRSAEncryption b1:af:5e:78:0d:26:8d:e7:ab:29:28:74:d6:e0:f1:e0:4a:47: 6b:50:85:b4:44:40:2f:fc:c7:88:63:6c:c6:3c:19:64:08:13: 23:27:a0:fd:42:2b:d0:59:e7:1e:4f:69:08:bf:76:8d:2c:bf: 29:6a:b3:c6:78:ed:78:38:c2:54:73:d6:b5:49:29:99:fe:4d: 8e:9f:9a:94:0c:ec:9d:0d:97:76:6e:da:a4:fe:03:6c:78:f2: 9f:2c:43:9e:d6:b1:da:bb:46:30:6c:33:2c:7e:9a:4e:1c:e0: 41:72:4c:9f:7b:2c:ec:94:38:63:e6:81:68:2c:f0:f3:bd:dc: 00:d6:ab:a6:3c:bb:c4:03:22:7b:99:4c:29:11:3d:1a:aa:ca: 58:ff:5c:e5:29:2a:29:80:a5:ba:c1:38:f9:35:19:13:09:35: 3c:1a:dd:e8:6d:2b:28:73:1e:52:76:94:93:76:17:b7:4d:5b: a4:ef:c8:69:f3:4b:41:82:5b:8e:e5:ac:63:b2:c7:dc:f3:83: b9:b2:1e:cd:d6:08:85:fc:60:63:31:92:e7:67:0c:2b:01:15: 8e:d3:89:88:b4:40:70:5a:46:b5:dd:af:f3:4c:66:c5:6f:87: 1e:6c:97:58:89:0f:9b:c6:f4:10:35:9f:fd:e4:78:e8:46:d5: 30:4d:1e:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57PAIqX5CY8zjsVX1FNtPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ODU2NjA2MWUzNjhjYWZmMTg4MWJlMmJhYzY3MzdkZmQz YzFkYmEwHhcNMjYwMTAxMTQxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTk2NWMwMmQyM2FiNTdlZTk2YjY5MzFkMzY1NzcwOWJmM2RkMzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuot0WJUR03UHGFbdljO2dMmPcISs 0wOzBDnUPjMZs1lZLI7cWxyegIrAdqpGsH67+WBEGUjV/5ChN3+s6iDKzYXv4ABm 6KC0qgmKYmag6Uqd2t4uWP8kUne1mmt9U0Hj+8nKZzQlAMuZJU63nDT8XYemBhDo Mz2SZUHKC7qfMVjvwYT3DqgPR3z3cezLzy1/Ko6SSFjybX4vHvIHNUq5a5sQHqEP WHviz0ojZvrMIYAfrvGd+HuqeePZZnn/WFPZl1R6eAI6Q508yiHA1LVxemOhzBBw dBfbWJIJ7WQILUSlhAdIJ73jQyqel2FBsMsg4rJkgwI4ZW8tTZ//27I8qQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFImWXALSOrV+6WtpMdNldwm/PdNCMB8GA1UdIwQY MBaAFDSFZgYeNoyv8Ygb4rrGc339PB26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTklWbUJoNDJqS194aUJ2aXVzWnpmZjA4SGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9hZmZhYTEtMGU3Yi00MDFlLWE3YzUt MDYyNzBlYTgyMTU0LzEvaVpaY0F0STZ0WDdwYTJreDAyVjNDYjg5MDBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9hZmZhYTEtMGU3Yi00MDFlLWE3YzUtMDYyNzBlYTgyMTU0 LzEvTklWbUJoNDJqS194aUJ2aXVzWnpmZjA4SGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYycMA0G CSqGSIb3DQEBCwUAA4IBAQCxr154DSaN56spKHTW4PHgSkdrUIW0REAv/MeIY2zG PBlkCBMjJ6D9QivQWeceT2kIv3aNLL8parPGeO14OMJUc9a1SSmZ/k2On5qUDOyd DZd2btqk/gNsePKfLEOe1rHau0YwbDMsfppOHOBBckyfeyzslDhj5oFoLPDzvdwA 1qumPLvEAyJ7mUwpET0aqspY/1zlKSopgKW6wTj5NRkTCTU8Gt3obSsocx5SdpST dhe3TVuk78hp80tBgluO5axjssfc84O5sh7N1giF/GBjMZLnZwwrARWO04mItEBw Wka13a/zTGbFb4cebJdYiQ+bxvQQNZ/95HjoRtUwTR4u -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:12 2026 by rpki-client