This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/sZ1Q72ClTj5f73HDar0G-SATsrU.roa File: sZ1Q72ClTj5f73HDar0G-SATsrU.roa (raw, json) Hash identifier: jrtQOenli72Qacdq88MxRlE81nSBmCwOeAYmo/28Pbg= Subject key identifier: B1:9D:50:EF:60:A5:4E:3E:5F:EF:71:C3:6A:BD:06:F9:20:13:B2:B5 Certificate issuer: /CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5 Certificate serial: 019B7E38536AFFFDED987558BCF2E9AC4279 Authority key identifier: D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/sZ1Q72ClTj5f73HDar0G-SATsrU.roa Signing time: Fri 02 Jan 2026 10:19:39 +0000 ROA not before: Fri 02 Jan 2026 10:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 185.1.172.0/24 maxlen: 24 2001:7f8:f5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:53:6a:ff:fd:ed:98:75:58:bc:f2:e9:ac:42:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5 Validity Not Before: Jan 2 10:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b19d50ef60a54e3e5fef71c36abd06f92013b2b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:47:f9:99:7b:41:24:42:4c:4e:fc:5b:12:53: bc:a6:76:ec:5c:d4:47:4b:e2:64:18:62:51:5e:1c: b9:e3:25:e8:30:d5:56:16:ac:e0:5a:a5:8d:e1:b9: 6d:11:0c:d2:2e:0a:a9:36:94:1f:5c:fc:20:d0:e5: 6f:cb:7b:6e:51:a9:ec:4a:03:6a:b3:8b:7d:cb:94: f3:e1:7c:57:cd:89:e1:56:05:86:e1:e6:fa:c7:e8: 85:63:7d:66:64:9e:f4:80:0f:6a:73:0d:16:87:f2: d1:da:fc:b0:0b:e8:9d:45:73:68:d0:ef:44:72:c1: 0e:23:44:c1:05:6a:1f:96:dd:d5:63:86:db:0a:b2: 7d:90:63:44:1a:be:ab:bd:6c:93:ad:4c:54:e8:ba: 09:0b:f3:f0:5e:ee:33:f6:b0:c1:39:a5:a2:5d:15: 28:8f:36:58:f6:01:91:7f:b3:32:d7:64:de:57:84: dd:82:ce:72:b1:39:b2:cb:1b:bc:88:1a:51:38:86: a2:86:49:92:cb:10:b5:a3:25:33:d3:cb:f8:eb:cc: d3:35:86:ad:60:46:99:3f:b2:dc:b5:72:75:36:54: 59:52:fc:6d:14:f0:9a:84:e3:77:b0:96:e3:c6:54: bf:03:a5:17:26:07:78:0c:96:b9:9e:34:a1:1d:09: 3d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9D:50:EF:60:A5:4E:3E:5F:EF:71:C3:6A:BD:06:F9:20:13:B2:B5 X509v3 Authority Key Identifier: keyid:D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/sZ1Q72ClTj5f73HDar0G-SATsrU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.172.0/24 IPv6: 2001:7f8:f5::/48 Signature Algorithm: sha256WithRSAEncryption 0d:7b:a7:f3:9b:7b:17:b1:f6:06:80:a3:df:ae:e5:36:3d:51: 36:08:14:cb:d8:51:be:17:b2:64:3a:0c:17:9b:83:0f:db:82: 6b:71:8a:0f:f2:e4:1c:76:80:ab:86:d7:9d:c1:be:c3:6f:59: e1:de:4a:5c:8f:de:e9:9b:d2:61:0f:8e:a1:02:90:36:c1:61: 1c:6a:bc:38:ab:1a:a9:7d:84:b4:92:91:a6:5c:c3:57:45:8e: 6a:f1:2b:87:1c:87:c8:37:97:6e:a4:8d:01:49:b5:03:b9:b3: 75:6a:9a:ff:bc:15:4d:e0:a7:5b:4e:ef:97:da:fb:3e:be:11: 42:fa:f7:6a:2f:e8:6d:21:0f:a9:0b:ce:de:c5:78:78:9b:31: f8:37:14:32:b0:ad:36:e8:0f:d7:55:d7:c8:94:23:fe:9b:67: f9:1b:22:40:54:84:76:87:11:04:d8:2c:58:39:cf:f1:6e:29: 56:7e:00:de:c3:52:48:6d:b5:b5:40:99:5f:b3:e3:3f:f5:77: 90:86:02:59:4c:5b:78:c3:1d:ea:6d:30:c1:77:08:db:97:5f: 3f:ca:3f:b8:21:eb:96:de:8c:86:31:53:bb:11:71:5c:29:98: 14:6d:7f:a2:0c:9c:27:6e:83:d3:2b:11:24:a1:2c:bb:28:38: 65:4d:56:45 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+OFNq//3tmHVYvPLprEJ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNjAwY2JhZmQyNmZlZTUwNjRmYzg5ZjMwMWRmYzhlM2Mx ZDNjYTUwHhcNMjYwMTAyMTAxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTlkNTBlZjYwYTU0ZTNlNWZlZjcxYzM2YWJkMDZmOTIwMTNiMmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkf5mXtBJEJMTvxbElO8pnbsXNRH S+JkGGJRXhy54yXoMNVWFqzgWqWN4bltEQzSLgqpNpQfXPwg0OVvy3tuUansSgNq s4t9y5Tz4XxXzYnhVgWG4eb6x+iFY31mZJ70gA9qcw0Wh/LR2vywC+idRXNo0O9E csEOI0TBBWoflt3VY4bbCrJ9kGNEGr6rvWyTrUxU6LoJC/PwXu4z9rDBOaWiXRUo jzZY9gGRf7My12TeV4Tdgs5ysTmyyxu8iBpROIaihkmSyxC1oyUz08v468zTNYat YEaZP7LctXJ1NlRZUvxtFPCahON3sJbjxlS/A6UXJgd4DJa5njShHQk9/QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLGdUO9gpU4+X+9xw2q9BvkgE7K1MB8GA1UdIwQY MBaAFNNgDLr9Jv7lBk/InzAd/I48HTylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9iNzA2NTgtZTFkYy00OTQ0LWEwNmIt MWM2ODBhZGY3YTI2LzEvc1oxUTcyQ2xUajVmNzNIRGFyMEctU0FUc3JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9iNzA2NTgtZTFkYy00OTQ0LWEwNmItMWM2ODBhZGY3YTI2 LzEvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuQGsMA8E AgACMAkDBwAgAQf4APUwDQYJKoZIhvcNAQELBQADggEBAA17p/Obexex9gaAo9+u 5TY9UTYIFMvYUb4XsmQ6DBebgw/bgmtxig/y5Bx2gKuG153BvsNvWeHeSlyP3umb 0mEPjqECkDbBYRxqvDirGql9hLSSkaZcw1dFjmrxK4cch8g3l26kjQFJtQO5s3Vq mv+8FU3gp1tO75fa+z6+EUL692ov6G0hD6kLzt7FeHibMfg3FDKwrTboD9dV18iU I/6bZ/kbIkBUhHaHEQTYLFg5z/FuKVZ+AN7DUkhttbVAmV+z4z/1d5CGAllMW3jD HeptMMF3CNuXXz/KP7gh65bejIYxU7sRcVwpmBRtf6IMnCdug9MrESShLLsoOGVN VkU= -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:55 2026 by rpki-client