This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/dZcFXy59OBgCvb8-LnAFu481H80.roa File: dZcFXy59OBgCvb8-LnAFu481H80.roa (raw, json) Hash identifier: S71mkWocgYTtJLOJGQFJaSGFLZadtvbJJdWNegtQAMs= Subject key identifier: 75:97:05:5F:2E:7D:38:18:02:BD:BF:3E:2E:70:05:BB:8F:35:1F:CD Certificate issuer: /CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14 Certificate serial: 019B7A5B5A65EC30FB5305D18B0B4D67DF42 Authority key identifier: 1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/dZcFXy59OBgCvb8-LnAFu481H80.roa Signing time: Thu 01 Jan 2026 16:19:25 +0000 ROA not before: Thu 01 Jan 2026 16:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213303 IP address blocks: 185.228.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:5a:65:ec:30:fb:53:05:d1:8b:0b:4d:67:df:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14 Validity Not Before: Jan 1 16:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7597055f2e7d381802bdbf3e2e7005bb8f351fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:eb:b8:0e:67:b5:2d:b8:ce:4f:f3:57:f8:9f: 29:29:65:4c:7b:b1:1d:db:93:e7:e0:07:d1:6a:05: 34:f9:3a:78:aa:a2:cc:73:ee:0f:69:0f:41:1b:db: 1b:e9:25:98:2d:07:0b:08:48:3b:8b:b8:46:8a:72: 27:d1:ae:92:3d:45:1e:69:5c:d4:41:84:3f:0c:e7: 75:17:cd:f3:93:83:54:6d:2c:d9:45:f4:29:4b:e9: 8f:da:fe:f9:44:61:26:a5:ed:e1:4c:09:95:82:53: 62:01:91:6d:1b:28:ea:18:cc:da:31:45:4e:32:76: 7c:1d:30:19:8f:b9:0a:09:4d:2d:51:30:dd:57:74: 95:cf:93:e1:be:29:13:83:3f:4b:97:19:bb:42:2e: f5:b4:0c:3f:12:d1:77:97:33:dd:2d:32:29:0c:f0: f4:4b:80:87:8f:68:2c:fa:50:97:c3:60:97:27:63: 88:50:76:92:3a:07:01:9c:0d:42:ee:19:0c:7f:6e: 0e:8e:ae:ca:ae:57:38:e6:3f:fd:18:c9:35:61:4d: ab:71:e1:1f:52:eb:37:e7:c1:06:df:25:7f:6a:5c: 73:80:d2:31:a5:b5:74:07:f5:2a:61:b8:3f:80:c2: 94:3f:69:a1:53:7e:29:4f:47:34:e7:78:0d:3d:04: 33:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:97:05:5F:2E:7D:38:18:02:BD:BF:3E:2E:70:05:BB:8F:35:1F:CD X509v3 Authority Key Identifier: keyid:1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/dZcFXy59OBgCvb8-LnAFu481H80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.228.172.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:d2:00:c2:72:7c:0e:5a:98:40:e3:4d:f7:a6:1c:63:e1:96: 80:48:de:cd:59:0e:06:14:8c:84:ea:cd:e3:d7:24:45:23:7d: 35:40:f1:08:14:f9:37:cb:79:2c:f9:5c:55:38:d4:90:db:aa: e2:54:95:61:57:dc:b5:57:0f:6f:2e:17:e3:cd:3c:ab:63:66: b8:ff:c1:0d:a8:56:d2:bd:c8:a3:a5:8e:72:38:a2:a5:32:70: e6:1d:10:a6:01:ac:1b:e3:9b:47:be:21:a2:0a:78:0c:b1:86: 51:ba:93:f7:e1:cb:fe:2f:b6:af:ef:7f:32:de:db:82:3f:69: c0:81:ca:d4:14:b8:21:5d:6f:b2:3d:4a:da:22:7a:a0:b8:dc: 78:42:54:ab:0c:10:84:e4:5c:2e:fa:3b:0e:53:21:65:0b:3d: b9:08:f4:2e:b4:38:c2:7b:23:27:b8:07:55:1b:6a:65:7f:f8: fa:1e:3a:be:30:b4:7b:f0:b8:8a:f9:94:b4:1a:0d:8d:f0:48: 34:a9:f2:86:ff:e8:6d:87:d0:1a:59:cc:8e:cf:f3:e8:8d:03: 81:b8:4f:a5:be:38:14:e7:ce:04:42:d6:c5:4d:3d:75:f9:d4: 51:f1:26:70:ac:55:bf:86:5f:7f:22:1d:fe:4d:9e:a0:7a:f7: 5e:ca:62:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W1pl7DD7UwXRiwtNZ99CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkODYyNjc0OWNiZjg0YmNmNDJlYmIyOTg1Yjg2ZGVlODMw ZTVjMTQwHhcNMjYwMTAxMTYxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTk3MDU1ZjJlN2QzODE4MDJiZGJmM2UyZTcwMDViYjhmMzUxZmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuu4Dme1LbjOT/NX+J8pKWVMe7Ed 25Pn4AfRagU0+Tp4qqLMc+4PaQ9BG9sb6SWYLQcLCEg7i7hGinIn0a6SPUUeaVzU QYQ/DOd1F83zk4NUbSzZRfQpS+mP2v75RGEmpe3hTAmVglNiAZFtGyjqGMzaMUVO MnZ8HTAZj7kKCU0tUTDdV3SVz5PhvikTgz9Llxm7Qi71tAw/EtF3lzPdLTIpDPD0 S4CHj2gs+lCXw2CXJ2OIUHaSOgcBnA1C7hkMf24Ojq7Krlc45j/9GMk1YU2rceEf Uus358EG3yV/alxzgNIxpbV0B/UqYbg/gMKUP2mhU34pT0c053gNPQQzXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHWXBV8ufTgYAr2/Pi5wBbuPNR/NMB8GA1UdIwQY MBaAFB2GJnScv4S89C67KYW4be6DDlwUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFlZbWRKeV9oTHowTHJzcGhiaHQ3b01PWEJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85NTFjOGUtNGE4Ni00YzhlLTk5ODYt MGJmYmFkNDg0OWNkLzEvZFpjRlh5NTlPQmdDdmI4LUxuQUZ1NDgxSDgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny85NTFjOGUtNGE4Ni00YzhlLTk5ODYtMGJmYmFkNDg0OWNk LzEvSFlZbWRKeV9oTHowTHJzcGhiaHQ3b01PWEJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueSsMA0G CSqGSIb3DQEBCwUAA4IBAQBs0gDCcnwOWphA4033phxj4ZaASN7NWQ4GFIyE6s3j 1yRFI301QPEIFPk3y3ks+VxVONSQ26riVJVhV9y1Vw9vLhfjzTyrY2a4/8ENqFbS vcijpY5yOKKlMnDmHRCmAawb45tHviGiCngMsYZRupP34cv+L7av738y3tuCP2nA gcrUFLghXW+yPUraInqguNx4QlSrDBCE5Fwu+jsOUyFlCz25CPQutDjCeyMnuAdV G2plf/j6Hjq+MLR78LiK+ZS0Gg2N8Eg0qfKG/+hth9AaWcyOz/PojQOBuE+lvjgU 584EQtbFTT11+dRR8SZwrFW/hl9/Ih3+TZ6gevdeymLE -----END CERTIFICATE-----Generated at Mon Jan 26 21:47:54 2026 by rpki-client