This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/1VZy0G-wHQ_TX2BXwKD4dH12AVw.roa File: 1VZy0G-wHQ_TX2BXwKD4dH12AVw.roa (raw, json) Hash identifier: mifTRRl6FrcrdgjIAd+uxzGUQnWJ54FTfDl9SZZKo7c= Subject key identifier: D5:56:72:D0:6F:B0:1D:0F:D3:5F:60:57:C0:A0:F8:74:7D:76:01:5C Certificate issuer: /CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591 Certificate serial: 019B7C80ACC5CB8021654353D85AE629D710 Authority key identifier: D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/1VZy0G-wHQ_TX2BXwKD4dH12AVw.roa Signing time: Fri 02 Jan 2026 02:19:26 +0000 ROA not before: Fri 02 Jan 2026 02:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199837 IP address blocks: 185.249.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:ac:c5:cb:80:21:65:43:53:d8:5a:e6:29:d7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591 Validity Not Before: Jan 2 02:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d55672d06fb01d0fd35f6057c0a0f8747d76015c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bc:9a:3a:e5:97:b1:78:b2:60:2c:a9:ce:17: ba:17:00:9a:9d:1b:3b:42:fa:c0:31:d7:f3:c5:a0: 5c:c1:a6:67:7a:7c:4b:a5:b4:c6:c1:f1:6d:06:f1: b5:70:bf:32:f9:d8:89:20:99:c7:9e:2e:e6:7c:84: f6:36:c3:c4:c5:29:0e:6a:8e:e2:12:c0:bd:1e:18: d1:af:99:71:00:5e:04:f9:1c:a8:5d:b8:27:5b:41: 83:5b:3c:35:e8:ee:75:2e:cc:f5:2b:1f:ba:e3:0e: 48:3c:11:42:74:6d:59:a8:91:a7:b8:c0:1d:2f:7c: d9:9f:25:12:62:af:06:21:cd:06:17:e2:89:2b:31: 3a:0b:c7:83:bd:78:2a:f1:64:66:bf:f0:69:60:b6: a8:dc:31:5e:a9:72:48:f0:5a:4a:d7:c0:95:c0:0c: 1b:ed:89:d7:a0:fe:88:e8:2c:6b:41:6b:2d:61:82: 40:6d:e1:2d:8b:96:69:4b:f8:5a:0d:e8:a2:8b:cc: f9:b3:66:30:e1:a2:1c:07:f9:4b:47:1f:5b:22:bb: 56:06:9f:0c:66:74:63:96:89:4b:06:5f:de:f8:5e: 60:37:19:d3:d0:7c:bd:23:de:da:e7:7a:89:cf:2e: 1d:1c:af:cc:bd:84:8b:54:38:b8:9c:f4:f2:ff:73: 24:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:56:72:D0:6F:B0:1D:0F:D3:5F:60:57:C0:A0:F8:74:7D:76:01:5C X509v3 Authority Key Identifier: keyid:D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/1VZy0G-wHQ_TX2BXwKD4dH12AVw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.249.12.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:11:d5:76:19:b2:f2:65:07:df:fc:74:bf:ec:01:58:e0:0b: 55:83:35:25:09:da:26:46:5b:70:eb:c0:f9:96:ab:81:14:80: 83:01:2c:0a:41:37:71:20:a9:a5:0b:16:25:e1:7b:28:77:ca: 0d:a7:0b:00:3c:a1:f1:f2:ea:ad:fa:ea:02:cb:e8:48:e6:9e: 2d:29:e5:5a:a1:2d:4a:db:71:e1:65:b5:b8:ff:7d:f1:f0:0f: dc:93:83:7f:b2:ce:90:0f:58:41:e7:bc:24:26:1d:61:f5:00: e0:07:15:23:7e:42:d0:78:9a:9d:00:67:a6:d5:15:6e:2d:93: 50:16:32:93:7b:6f:dc:19:75:49:c7:e0:bd:f6:3b:95:b1:0e: 23:fa:1b:b5:90:bc:10:74:01:28:37:29:1d:24:11:a1:f8:ed: f2:fc:5d:9f:82:5d:a0:8c:14:13:b4:f2:39:3e:6d:9c:92:60: 00:80:8c:66:78:16:18:1a:ae:70:ef:a3:04:fc:78:89:61:79: a6:24:fc:63:b5:e6:f6:2d:f6:1a:e9:e2:91:00:18:e7:a0:10: 98:b2:35:95:c3:b3:e7:94:b8:55:89:7d:a1:8e:4f:c5:dd:d2: 2e:80:b5:e5:9f:47:22:e8:06:89:88:ee:46:c7:d6:8c:d4:68: a7:e6:be:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gKzFy4AhZUNT2FrmKdcQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YWNmMzRiZTJiMDRjN2NjZWYyMjIxZThkMWZjYjZjYWJi NDE1OTEwHhcNMjYwMTAyMDIxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTU2NzJkMDZmYjAxZDBmZDM1ZjYwNTdjMGEwZjg3NDdkNzYwMTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7yaOuWXsXiyYCypzhe6FwCanRs7 QvrAMdfzxaBcwaZnenxLpbTGwfFtBvG1cL8y+diJIJnHni7mfIT2NsPExSkOao7i EsC9HhjRr5lxAF4E+RyoXbgnW0GDWzw16O51Lsz1Kx+64w5IPBFCdG1ZqJGnuMAd L3zZnyUSYq8GIc0GF+KJKzE6C8eDvXgq8WRmv/BpYLao3DFeqXJI8FpK18CVwAwb 7YnXoP6I6CxrQWstYYJAbeEti5ZpS/haDeiii8z5s2Yw4aIcB/lLRx9bIrtWBp8M ZnRjlolLBl/e+F5gNxnT0Hy9I97a53qJzy4dHK/MvYSLVDi4nPTy/3MkmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNVWctBvsB0P019gV8Cg+HR9dgFcMB8GA1UdIwQY MBaAFNis80visEx8zvIiHo0fy2yrtBWRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkt6elMtS3dUSHpPOGlJZWpSX0xiS3UwRlpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zZGYzNDEtMDE3Yy00NjYwLThjZjct NDRkNjRiOWRhNDU5LzEvMVZaeTBHLXdIUV9UWDJCWHdLRDRkSDEyQVZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8zZGYzNDEtMDE3Yy00NjYwLThjZjctNDRkNjRiOWRhNDU5 LzEvMkt6elMtS3dUSHpPOGlJZWpSX0xiS3UwRlpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufkMMA0G CSqGSIb3DQEBCwUAA4IBAQBMEdV2GbLyZQff/HS/7AFY4AtVgzUlCdomRltw68D5 lquBFICDASwKQTdxIKmlCxYl4Xsod8oNpwsAPKHx8uqt+uoCy+hI5p4tKeVaoS1K 23HhZbW4/33x8A/ck4N/ss6QD1hB57wkJh1h9QDgBxUjfkLQeJqdAGem1RVuLZNQ FjKTe2/cGXVJx+C99juVsQ4j+hu1kLwQdAEoNykdJBGh+O3y/F2fgl2gjBQTtPI5 Pm2ckmAAgIxmeBYYGq5w76ME/HiJYXmmJPxjteb2LfYa6eKRABjnoBCYsjWVw7Pn lLhViX2hjk/F3dIugLXln0ci6AaJiO5Gx9aM1Gin5r7v -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:05 2026 by rpki-client