This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/C1zIlcIzXEZYL09amURaGz9p9xo.roa File: C1zIlcIzXEZYL09amURaGz9p9xo.roa (raw, json) Hash identifier: J4P7qooPg0DuxBFi1ecg4N82wJ/j3cvFGPgY4cXhbt4= Subject key identifier: 0B:5C:C8:95:C2:33:5C:46:58:2F:4F:5A:99:44:5A:1B:3F:69:F7:1A Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B79105DD4A818BEDAFA56F0D74C064646 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/C1zIlcIzXEZYL09amURaGz9p9xo.roa Signing time: Thu 01 Jan 2026 10:17:54 +0000 ROA not before: Thu 01 Jan 2026 10:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205399 IP address blocks: 185.181.208.0/24 maxlen: 24 185.181.209.0/24 maxlen: 24 185.181.210.0/24 maxlen: 24 185.181.211.0/24 maxlen: 24 185.219.132.0/24 maxlen: 24 185.219.133.0/24 maxlen: 24 185.219.134.0/24 maxlen: 24 185.219.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:5d:d4:a8:18:be:da:fa:56:f0:d7:4c:06:46:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b5cc895c2335c46582f4f5a99445a1b3f69f71a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b5:bd:e4:fc:b7:2e:53:74:08:77:a1:f6:04: 41:86:62:2f:73:41:30:b9:57:3e:6f:b8:5b:d3:6f: 80:0a:29:e6:00:de:ab:9a:6a:6e:e4:c5:72:96:4c: e7:84:bd:7c:cb:ac:e0:6e:4f:4e:4f:7c:ef:2b:f1: ea:37:eb:3d:bf:fa:b6:ad:19:b2:43:99:ef:44:03: b5:cc:ad:76:b0:07:af:ef:95:7b:f2:82:36:8e:49: 40:67:b3:43:10:a5:22:cf:0a:97:21:13:99:07:43: 28:b0:5e:4a:24:be:f2:5d:e0:77:11:fc:bb:ad:8a: d8:67:36:4c:0f:80:72:d9:c3:d8:8e:38:41:40:3c: 02:aa:43:d7:01:ca:b6:aa:ce:fc:eb:1f:b7:71:e5: 84:5b:14:6e:a0:43:28:56:6c:a9:65:e1:78:03:e0: 2e:a5:32:6f:91:00:74:bc:8d:5e:c1:49:fd:d8:30: 6d:cc:89:47:2e:55:44:fc:27:01:69:b9:5f:2c:85: 9a:41:ad:15:9d:f9:7c:77:fb:c0:a0:30:26:8a:5c: e2:fb:c1:f4:75:ba:35:02:1e:bc:fa:1b:c8:5f:0f: 10:45:15:04:19:1e:d5:4c:61:ad:56:c5:1a:d3:16: 63:a0:cb:68:ec:9c:46:fa:92:56:bc:ef:07:d4:66: fd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:5C:C8:95:C2:33:5C:46:58:2F:4F:5A:99:44:5A:1B:3F:69:F7:1A X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/C1zIlcIzXEZYL09amURaGz9p9xo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.181.208.0/22 185.219.132.0/22 Signature Algorithm: sha256WithRSAEncryption 03:4c:3a:4f:5a:fd:da:07:8b:60:3a:a7:78:17:bf:b1:2c:fc: fb:0c:83:2a:e1:72:05:c8:f7:62:88:48:62:6c:f0:e2:6c:ca: 71:8f:00:7b:02:9e:e9:b3:61:c0:c6:44:52:9f:6e:81:87:63: 56:4e:5f:5f:a2:f5:24:43:02:e9:b4:22:cd:a4:45:2c:5e:f2: 86:52:47:df:c1:84:53:0d:f9:29:40:29:19:fd:f8:ce:57:e9: c5:c5:b3:fe:54:e3:c1:a5:34:ab:b3:5a:18:85:54:91:95:f5: cd:a7:3f:91:dc:63:e0:0c:e3:1b:9e:bb:43:03:4e:15:92:db: 10:25:71:c6:24:3b:5c:2d:47:91:48:d2:43:9b:7d:a7:e5:78: 89:09:82:6e:66:4b:95:26:c6:78:d5:f3:0b:97:d6:a0:fa:59: be:7b:ea:15:75:04:08:e6:f3:86:ab:e3:a0:1e:d8:5a:1c:db: 1b:f3:a6:dd:2f:04:0b:0f:ee:f0:61:e8:67:fa:b1:3b:7f:f3: 9c:9c:cd:1d:66:a5:11:91:3a:71:18:43:11:d8:a7:85:0c:37: a3:fe:94:41:00:a5:61:3e:64:30:d4:01:bb:3e:5e:24:3d:21: d1:7e:fb:85:cc:18:dd:b2:ae:85:b2:b1:bf:2e:cf:5c:45:3a: df:e9:a7:96 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EF3UqBi+2vpW8NdMBkZGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjVjYzg5NWMyMzM1YzQ2NTgyZjRmNWE5OTQ0NWExYjNmNjlmNzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7W95Py3LlN0CHeh9gRBhmIvc0Ew uVc+b7hb02+ACinmAN6rmmpu5MVylkznhL18y6zgbk9OT3zvK/HqN+s9v/q2rRmy Q5nvRAO1zK12sAev75V78oI2jklAZ7NDEKUizwqXIROZB0MosF5KJL7yXeB3Efy7 rYrYZzZMD4By2cPYjjhBQDwCqkPXAcq2qs786x+3ceWEWxRuoEMoVmypZeF4A+Au pTJvkQB0vI1ewUn92DBtzIlHLlVE/CcBablfLIWaQa0Vnfl8d/vAoDAmilzi+8H0 dbo1Ah68+hvIXw8QRRUEGR7VTGGtVsUa0xZjoMto7JxG+pJWvO8H1Gb9fQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAtcyJXCM1xGWC9PWplEWhs/afcaMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvQzF6SWxjSXpYRVpZTDA5YW1VUmFHejlwOXhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCubXQAwQC uduEMA0GCSqGSIb3DQEBCwUAA4IBAQADTDpPWv3aB4tgOqd4F7+xLPz7DIMq4XIF yPdiiEhibPDibMpxjwB7Ap7ps2HAxkRSn26Bh2NWTl9fovUkQwLptCLNpEUsXvKG UkffwYRTDfkpQCkZ/fjOV+nFxbP+VOPBpTSrs1oYhVSRlfXNpz+R3GPgDOMbnrtD A04VktsQJXHGJDtcLUeRSNJDm32n5XiJCYJuZkuVJsZ41fMLl9ag+lm+e+oVdQQI 5vOGq+OgHthaHNsb86bdLwQLD+7wYehn+rE7f/OcnM0dZqURkTpxGEMR2KeFDDej /pRBAKVhPmQw1AG7Pl4kPSHRfvuFzBjdsq6FsrG/Ls9cRTrf6aeW -----END CERTIFICATE-----Generated at Wed Jan 21 13:34:24 2026 by rpki-client