This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/kz59O-9rHRK3If4NGher4WpZjHE.roa File: kz59O-9rHRK3If4NGher4WpZjHE.roa (raw, json) Hash identifier: AakaTSLsPxjlp4i8uprsoV1LtGwgVY7VSh5IFGItGZA= Subject key identifier: 93:3E:7D:3B:EF:6B:1D:12:B7:21:FE:0D:1A:17:AB:E1:6A:59:8C:71 Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Certificate serial: 019B7AC80D63CA72474EFC16869F9DB33B43 Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/kz59O-9rHRK3If4NGher4WpZjHE.roa Signing time: Thu 01 Jan 2026 18:18:09 +0000 ROA not before: Thu 01 Jan 2026 18:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210993 IP address blocks: 185.221.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:0d:63:ca:72:47:4e:fc:16:86:9f:9d:b3:3b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Validity Not Before: Jan 1 18:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=933e7d3bef6b1d12b721fe0d1a17abe16a598c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:18:9b:4d:ce:34:25:af:56:c7:c1:b9:6d:2d: c0:da:cc:08:37:1c:6b:37:0c:fd:41:87:0d:37:5d: ab:c8:5c:da:c3:e5:ad:b9:f9:72:db:19:27:80:1a: 62:ba:ff:31:d3:34:eb:67:f2:00:ec:6d:10:07:6a: 6e:e8:98:48:2a:cd:75:c9:70:51:b7:c6:4e:67:8c: 2e:33:34:41:11:eb:f2:d2:25:7c:7f:08:8c:52:9d: fc:29:9d:c0:17:91:31:fe:9e:a5:c4:5b:ca:28:e4: 83:55:89:57:f8:fb:ad:a7:ef:70:82:af:4b:fe:28: 4a:01:50:42:42:2b:21:15:3b:a8:27:52:d0:50:d8: 8a:49:30:3b:5b:43:e1:4f:3d:52:86:5b:c7:b6:9c: 3e:52:c6:0e:d1:93:bc:a3:23:dd:31:7c:eb:fb:04: ee:e0:37:b0:9e:e1:44:81:3d:7d:4b:9e:5c:7c:0e: 29:41:a9:e3:dd:19:4d:70:88:1e:5a:3b:ae:cb:1c: 91:42:70:77:28:20:18:77:e5:11:a6:48:a9:02:63: 22:6c:9c:cb:d1:a1:3a:3f:6e:0d:19:c1:19:ae:ba: 55:a0:5d:9f:08:52:bd:06:c6:ee:55:22:ca:f9:8f: 7c:55:aa:95:32:b4:65:67:f3:5a:a9:ff:34:ec:c1: e7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:3E:7D:3B:EF:6B:1D:12:B7:21:FE:0D:1A:17:AB:E1:6A:59:8C:71 X509v3 Authority Key Identifier: keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/kz59O-9rHRK3If4NGher4WpZjHE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.221.196.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:7c:c7:48:07:32:3e:f2:ef:58:68:54:9e:51:b5:a3:42:6b: 98:84:02:1e:dd:6a:15:68:03:fe:b5:1c:3e:eb:c5:25:c0:a8: 81:cf:bf:b3:6e:e3:c2:8c:b8:70:a5:6e:d8:ac:0c:07:d5:eb: 52:5e:73:cb:4d:b7:5d:a2:21:f6:a6:24:8e:af:85:77:8c:9d: 17:a0:fc:aa:22:80:75:b8:5d:60:7c:7b:63:6c:38:fe:85:ee: 1c:6b:15:9c:f2:7d:03:c8:c8:51:18:f4:5d:7b:3e:e1:49:4f: eb:91:ae:77:87:f3:c0:58:a5:a4:c1:2a:e0:bc:6d:cc:97:d3: bc:74:b0:36:d3:fa:b9:d5:7d:33:8c:ea:cc:40:ab:e0:81:fb: c6:6c:b3:ed:b1:5c:44:9f:da:77:c0:74:76:6b:35:cc:97:35: df:c7:6b:a0:b9:6a:42:04:5c:ec:37:8b:73:07:48:c3:a7:53: 47:03:17:8b:d7:52:34:39:6a:48:7a:82:9f:42:6c:98:69:6c: a7:3e:43:2a:d4:b8:f1:f6:ea:c7:8f:14:4b:2a:cb:78:49:d1: 96:82:a6:90:d6:9a:32:bc:44:3b:b5:b6:79:3f:37:ee:a4:e0: 83:1f:0e:94:c0:38:8b:a3:e9:d3:9c:5e:37:32:49:2c:29:cb: c5:9d:e0:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yA1jynJHTvwWhp+dsztDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk ZGVlNjkwHhcNMjYwMTAxMTgxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzNlN2QzYmVmNmIxZDEyYjcyMWZlMGQxYTE3YWJlMTZhNTk4YzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhibTc40Ja9Wx8G5bS3A2swINxxr Nwz9QYcNN12ryFzaw+Wtufly2xkngBpiuv8x0zTrZ/IA7G0QB2pu6JhIKs11yXBR t8ZOZ4wuMzRBEevy0iV8fwiMUp38KZ3AF5Ex/p6lxFvKKOSDVYlX+Putp+9wgq9L /ihKAVBCQishFTuoJ1LQUNiKSTA7W0PhTz1ShlvHtpw+UsYO0ZO8oyPdMXzr+wTu 4DewnuFEgT19S55cfA4pQanj3RlNcIgeWjuuyxyRQnB3KCAYd+URpkipAmMibJzL 0aE6P24NGcEZrrpVoF2fCFK9BsbuVSLK+Y98VaqVMrRlZ/Naqf807MHnfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJM+fTvvax0StyH+DRoXq+FqWYxxMB8GA1UdIwQY MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt NjkxZmY1YjQ0YjAxLzEva3o1OU8tOXJIUkszSWY0TkdoZXI0V3BaakhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud3EMA0G CSqGSIb3DQEBCwUAA4IBAQANfMdIBzI+8u9YaFSeUbWjQmuYhAIe3WoVaAP+tRw+ 68UlwKiBz7+zbuPCjLhwpW7YrAwH1etSXnPLTbddoiH2piSOr4V3jJ0XoPyqIoB1 uF1gfHtjbDj+he4caxWc8n0DyMhRGPRdez7hSU/rka53h/PAWKWkwSrgvG3Ml9O8 dLA20/q51X0zjOrMQKvggfvGbLPtsVxEn9p3wHR2azXMlzXfx2uguWpCBFzsN4tz B0jDp1NHAxeL11I0OWpIeoKfQmyYaWynPkMq1Ljx9urHjxRLKst4SdGWgqaQ1poy vEQ7tbZ5PzfupOCDHw6UwDiLo+nTnF43MkksKcvFneBK -----END CERTIFICATE-----Generated at Tue Jan 20 17:25:30 2026 by rpki-client