This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/r12czjd3hmL-yG97PfK3Dj9akbk.roa File: r12czjd3hmL-yG97PfK3Dj9akbk.roa (raw, json) Hash identifier: jVaf6gTo2ZlEb+vsLBsz2owvWSdPoh6WJGm9n3ARZyY= Subject key identifier: AF:5D:9C:CE:37:77:86:62:FE:C8:6F:7B:3D:F2:B7:0E:3F:5A:91:B9 Certificate issuer: /CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53 Certificate serial: 019B7E392F50F4F947FD595E08296B8DC7FD Authority key identifier: 72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/r12czjd3hmL-yG97PfK3Dj9akbk.roa Signing time: Fri 02 Jan 2026 10:20:35 +0000 ROA not before: Fri 02 Jan 2026 10:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 185.227.234.0/24 maxlen: 24 185.227.235.0/24 maxlen: 24 194.88.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.crl rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.mft rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2f:50:f4:f9:47:fd:59:5e:08:29:6b:8d:c7:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53 Validity Not Before: Jan 2 10:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af5d9cce37778662fec86f7b3df2b70e3f5a91b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c6:78:29:af:2c:ff:5a:da:85:4b:25:86:6b: d2:5a:04:85:0a:41:68:fb:fe:2c:8b:61:72:e9:26: ab:3e:0b:51:46:3f:66:70:18:2f:27:d9:af:15:20: 7e:dc:69:e2:f6:29:ee:9c:9e:de:c0:4d:70:fe:a1: 51:ed:96:c5:b3:9c:8d:15:59:f6:54:7a:fc:4b:97: 57:bc:bb:4b:55:61:e8:9a:de:f0:d6:01:a3:8f:f4: 07:4f:cb:12:eb:66:0a:34:01:d7:c6:8f:21:59:dd: 8c:9b:25:ab:7e:25:f0:2a:96:e0:53:55:59:78:42: 22:84:bd:4b:94:2d:0b:84:9b:9c:b1:09:cc:f4:62: 58:89:82:d3:df:db:82:2f:8b:9d:06:69:3a:77:99: 4e:55:40:60:67:50:59:9b:29:c8:46:85:af:98:86: ee:b3:42:12:59:e8:a5:7e:81:77:ac:32:f3:9d:67: eb:db:0a:88:2e:27:48:cb:ac:55:38:9f:01:35:3f: 2d:98:50:e9:3d:79:a8:3e:f8:f7:bc:74:59:db:77: c4:44:b9:45:e1:89:16:67:79:4a:51:6d:4e:5b:13: bd:e9:57:a1:4b:8c:76:9a:da:74:2b:20:06:c3:79: fa:55:1b:0b:7a:01:5e:03:3b:98:8e:85:10:53:2f: cb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5D:9C:CE:37:77:86:62:FE:C8:6F:7B:3D:F2:B7:0E:3F:5A:91:B9 X509v3 Authority Key Identifier: keyid:72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/r12czjd3hmL-yG97PfK3Dj9akbk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.227.234.0/23 194.88.156.0/23 Signature Algorithm: sha256WithRSAEncryption ad:2b:d6:b4:d1:b2:9a:4d:50:5e:cc:34:99:7e:75:53:ed:1c: c2:26:05:5b:02:ef:f6:aa:b0:2a:81:2c:6e:ed:e9:fa:b6:11: ee:3a:00:a8:5b:8c:a4:bb:4f:d0:d0:96:ff:b7:72:92:95:7a: ab:22:8d:d3:b4:e4:6b:8c:b4:26:02:14:a5:d2:70:24:ff:31: 60:1d:a7:5e:9b:13:99:0e:46:b2:2c:46:e2:ad:66:8c:aa:ae: 72:c0:c5:54:9c:b2:89:8d:a9:51:ed:7d:01:48:3a:41:b4:17: 96:bd:40:e9:ab:07:17:44:a7:39:f8:d9:d6:be:cb:93:02:16: 38:c0:d3:f3:82:d9:eb:f7:a3:91:e9:31:0d:e7:db:2c:4e:bd: 5c:eb:3a:b8:dc:de:4c:45:e5:09:a2:ed:e6:34:e3:f4:cd:78: fe:f1:5e:4c:05:86:42:d7:c2:5a:0b:3a:49:71:b1:c9:3a:10: 88:eb:6f:50:9e:fa:da:ce:ba:1f:96:fb:10:85:4a:36:53:0b: 55:65:51:47:85:95:46:86:81:9c:57:13:e1:f0:a5:04:46:a2: 97:12:3d:dc:87:16:9b:7c:94:2a:33:d7:e2:79:d1:9c:5a:17: 38:bc:b3:f9:78:3e:23:0b:85:10:00:6f:f0:11:39:fd:64:ac: a1:53:a7:53 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OS9Q9PlH/VleCClrjcf9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNDdiYTQzZTI3MGM5OGJkYzY0MmE5ZTNjMjE4Y2E1MjRl YjBmNTMwHhcNMjYwMTAyMTAyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjVkOWNjZTM3Nzc4NjYyZmVjODZmN2IzZGYyYjcwZTNmNWE5MWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcZ4Ka8s/1rahUslhmvSWgSFCkFo +/4si2Fy6SarPgtRRj9mcBgvJ9mvFSB+3Gni9inunJ7ewE1w/qFR7ZbFs5yNFVn2 VHr8S5dXvLtLVWHomt7w1gGjj/QHT8sS62YKNAHXxo8hWd2MmyWrfiXwKpbgU1VZ eEIihL1LlC0LhJucsQnM9GJYiYLT39uCL4udBmk6d5lOVUBgZ1BZmynIRoWvmIbu s0ISWeilfoF3rDLznWfr2wqILidIy6xVOJ8BNT8tmFDpPXmoPvj3vHRZ23fERLlF 4YkWZ3lKUW1OWxO96VehS4x2mtp0KyAGw3n6VRsLegFeAzuYjoUQUy/LmQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK9dnM43d4Zi/shvez3ytw4/WpG5MB8GA1UdIwQY MBaAFHJHukPicMmL3GQqnjwhjKUk6w9TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2tlNlEtSnd5WXZjWkNxZVBDR01wU1RyRDFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8zNDEwNjgtMjhmNi00ZjgxLTk5M2Yt Mjc5MjAzYjFkOTJjLzEvcjEyY3pqZDNobUwteUc5N1BmSzNEajlha2JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8zNDEwNjgtMjhmNi00ZjgxLTk5M2YtMjc5MjAzYjFkOTJj LzEvY2tlNlEtSnd5WXZjWkNxZVBDR01wU1RyRDFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuePqAwQB wlicMA0GCSqGSIb3DQEBCwUAA4IBAQCtK9a00bKaTVBezDSZfnVT7RzCJgVbAu/2 qrAqgSxu7en6thHuOgCoW4yku0/Q0Jb/t3KSlXqrIo3TtORrjLQmAhSl0nAk/zFg HademxOZDkayLEbirWaMqq5ywMVUnLKJjalR7X0BSDpBtBeWvUDpqwcXRKc5+NnW vsuTAhY4wNPzgtnr96OR6TEN59ssTr1c6zq43N5MReUJou3mNOP0zXj+8V5MBYZC 18JaCzpJcbHJOhCI629QnvrazroflvsQhUo2UwtVZVFHhZVGhoGcVxPh8KUERqKX Ej3chxabfJQqM9fiedGcWhc4vLP5eD4jC4UQAG/wETn9ZKyhU6dT -----END CERTIFICATE-----Generated at Fri Jan 9 06:21:13 2026 by rpki-client