This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/Ci7zv_DnAxQFZ_khRfP74GA8IGU.roa File: Ci7zv_DnAxQFZ_khRfP74GA8IGU.roa (raw, json) Hash identifier: cMMuhG7xrtOzbQLc/BDIeV4S+eWZ3lL1QRAwLOKEPgQ= Subject key identifier: 0A:2E:F3:BF:F0:E7:03:14:05:67:F9:21:45:F3:FB:E0:60:3C:20:65 Certificate issuer: /CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff Certificate serial: 019B7D5CCD85565AF0C0BEFD879638F0640F Authority key identifier: E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/Ci7zv_DnAxQFZ_khRfP74GA8IGU.roa Signing time: Fri 02 Jan 2026 06:19:52 +0000 ROA not before: Fri 02 Jan 2026 06:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51580 IP address blocks: 185.29.73.0/24 maxlen: 24 185.29.74.0/23 maxlen: 24 185.29.74.0/24 maxlen: 24 185.29.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:cd:85:56:5a:f0:c0:be:fd:87:96:38:f0:64:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff Validity Not Before: Jan 2 06:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a2ef3bff0e703140567f92145f3fbe0603c2065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:63:f5:93:a4:c3:16:eb:0d:54:b0:d4:46:32: 51:ce:c1:a8:97:b6:84:55:41:e6:23:f1:b7:ca:b3: 98:1d:79:45:40:c2:fb:b7:0c:59:b2:84:63:0a:fc: 76:0f:2e:4c:a8:1f:1a:0e:03:46:83:29:1c:3e:d2: f3:cb:64:fa:d8:43:c1:94:22:9c:a3:6b:56:43:3b: 31:25:08:47:1e:73:53:b6:21:e9:de:79:dd:40:33: 65:76:11:cd:d8:6d:d8:14:60:56:f9:31:34:d1:5b: 56:d7:10:2f:10:cc:ff:0d:be:1f:61:06:36:00:f4: b7:fd:56:f0:24:fa:b9:e8:8e:3f:c0:fd:f5:31:aa: 66:6c:86:10:50:dc:b1:7e:e4:dc:c0:78:c6:e7:ac: d7:17:a0:d7:42:2c:76:53:88:33:4c:27:00:f9:57: 45:6e:4b:9c:80:7a:f1:61:62:03:10:af:9b:ec:ba: c1:18:3a:89:9f:7d:3f:55:15:7f:18:0a:3f:27:1f: c3:2f:5b:1f:bb:20:8b:7b:0d:88:4a:21:8c:ed:b6: 9a:2b:cc:7f:80:38:e9:4d:e9:4b:32:08:a8:3a:e8: 40:31:4b:95:35:e4:5a:4e:a2:eb:a9:ec:cb:17:6b: c5:eb:e3:7d:b5:34:31:65:47:71:f8:d0:37:55:eb: e1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2E:F3:BF:F0:E7:03:14:05:67:F9:21:45:F3:FB:E0:60:3C:20:65 X509v3 Authority Key Identifier: keyid:E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/Ci7zv_DnAxQFZ_khRfP74GA8IGU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.29.73.0-185.29.75.255 Signature Algorithm: sha256WithRSAEncryption 74:0b:94:85:f4:06:11:4b:de:ac:df:fc:b0:aa:7a:1f:6c:63: 37:e2:a2:e0:3d:ee:79:40:58:e6:99:c1:84:c2:40:26:90:20: 24:80:63:f7:15:ae:fb:9c:ef:00:60:64:f2:63:1b:f6:36:2e: 11:bf:35:d2:df:09:61:ff:d2:cf:ce:79:c3:d3:0c:9a:f3:2b: b3:3e:80:22:44:d4:15:75:c9:f8:b1:ff:de:0b:c8:ca:f2:88: 70:a6:4b:8d:77:31:3d:26:db:76:89:c7:c9:02:ef:8b:90:e3: 82:df:52:45:19:f6:ae:ba:82:9f:02:d0:36:46:0f:cf:0e:0c: 66:81:d4:52:94:72:c3:76:d7:f2:f4:c0:1a:4a:74:a6:e9:bf: 34:9d:97:bc:48:12:8b:75:17:8b:a2:d3:ab:34:b8:be:27:ed: c3:98:30:8a:15:7f:a7:dc:db:2b:51:18:eb:45:ed:d5:31:12: 49:bd:8d:40:9f:f6:fc:6f:a1:2b:ac:15:00:88:ea:18:51:21: d0:d2:13:22:c3:13:98:dd:6f:74:56:a0:2d:cc:97:4a:0f:43: cc:fc:6c:58:07:77:05:e6:fc:b2:8f:93:68:9a:ac:0a:0f:74: bf:7a:cf:ce:df:c8:dd:22:b4:b3:8d:67:5f:6c:ff:0a:03:7e: 50:73:e1:8f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt9XM2FVlrwwL79h5Y48GQPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMDQ0OWZlN2Y0YjJjZjFmN2ZkNjcwZTU4MmViY2M5N2U0 NWY3ZmYwHhcNMjYwMTAyMDYxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTJlZjNiZmYwZTcwMzE0MDU2N2Y5MjE0NWYzZmJlMDYwM2MyMDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mP1k6TDFusNVLDURjJRzsGol7aE VUHmI/G3yrOYHXlFQML7twxZsoRjCvx2Dy5MqB8aDgNGgykcPtLzy2T62EPBlCKc o2tWQzsxJQhHHnNTtiHp3nndQDNldhHN2G3YFGBW+TE00VtW1xAvEMz/Db4fYQY2 APS3/VbwJPq56I4/wP31MapmbIYQUNyxfuTcwHjG56zXF6DXQix2U4gzTCcA+VdF bkucgHrxYWIDEK+b7LrBGDqJn30/VRV/GAo/Jx/DL1sfuyCLew2ISiGM7baaK8x/ gDjpTelLMgioOuhAMUuVNeRaTqLrqezLF2vF6+N9tTQxZUdx+NA3VevhRwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFAou87/w5wMUBWf5IUXz++BgPCBlMB8GA1UdIwQY MBaAFOIESf5/Syzx9/1nDlguvMl+Rff/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGdSSl9uOUxMUEgzX1djT1dDNjh5WDVGOV84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZGM4NzktMTFiOS00ZmE2LTg0MWQt OTA2YTkxZWU5ZmU0LzEvQ2k3enZfRG5BeFFGWl9raFJmUDc0R0E4SUdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zZGM4NzktMTFiOS00ZmE2LTg0MWQtOTA2YTkxZWU5ZmU0 LzEvNGdSSl9uOUxMUEgzX1djT1dDNjh5WDVGOV84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5HUkD BAK5HUgwDQYJKoZIhvcNAQELBQADggEBAHQLlIX0BhFL3qzf/LCqeh9sYzfiouA9 7nlAWOaZwYTCQCaQICSAY/cVrvuc7wBgZPJjG/Y2LhG/NdLfCWH/0s/OecPTDJrz K7M+gCJE1BV1yfix/94LyMryiHCmS413MT0m23aJx8kC74uQ44LfUkUZ9q66gp8C 0DZGD88ODGaB1FKUcsN21/L0wBpKdKbpvzSdl7xIEot1F4ui06s0uL4n7cOYMIoV f6fc2ytRGOtF7dUxEkm9jUCf9vxvoSusFQCI6hhRIdDSEyLDE5jdb3RWoC3Ml0oP Q8z8bFgHdwXm/LKPk2iarAoPdL96z87fyN0itLONZ19s/woDflBz4Y8= -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:22 2026 by rpki-client