This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/z0HMvI8Tn4kNW4qTvegWr7zZfkQ.roa File: z0HMvI8Tn4kNW4qTvegWr7zZfkQ.roa (raw, json) Hash identifier: gn2Rwh38asVwA7jLccAuFqntHaZG2BuAuv36mcj+c3Q= Subject key identifier: CF:41:CC:BC:8F:13:9F:89:0D:5B:8A:93:BD:E8:16:AF:BC:D9:7E:44 Certificate issuer: /CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1 Certificate serial: 019B7AC836AA97B249059AC780891E54C129 Authority key identifier: CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/z0HMvI8Tn4kNW4qTvegWr7zZfkQ.roa Signing time: Thu 01 Jan 2026 18:18:19 +0000 ROA not before: Thu 01 Jan 2026 18:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21060 IP address blocks: 185.126.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:36:aa:97:b2:49:05:9a:c7:80:89:1e:54:c1:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1 Validity Not Before: Jan 1 18:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf41ccbc8f139f890d5b8a93bde816afbcd97e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:47:48:6b:e4:38:be:eb:f2:13:9b:5f:7f:1d: 49:94:1e:dc:2e:7a:a6:47:9d:d7:87:d9:c0:40:87: 5f:b7:69:35:d9:2d:bd:d9:3f:0b:f1:c5:e9:cf:75: 54:63:9f:fb:8c:fa:20:c6:e8:c1:b7:6d:5e:5f:bc: 4e:20:55:b7:20:94:7e:ad:dc:69:10:0b:cf:45:65: 9c:41:26:ec:63:b1:34:b0:3e:88:97:10:21:58:9b: 07:4e:47:0a:95:e4:28:e0:2c:ed:63:6f:2a:dc:e3: 73:66:de:35:10:6c:2a:f1:39:fe:74:92:cb:43:27: c9:d6:61:36:d0:e9:6f:57:5c:df:63:32:31:e6:04: 46:e6:52:80:c7:98:b2:f0:40:57:00:70:96:d3:7c: f3:2e:ac:23:5a:51:e4:6c:99:39:48:ab:56:0c:58: fd:a5:b7:9b:a5:03:21:be:82:da:62:13:99:08:35: 8c:d5:bc:03:ad:e3:4f:83:3f:cc:a0:4e:c2:5f:29: f0:6c:ad:47:d3:77:8a:17:68:57:ac:51:78:60:ae: 41:9b:98:b3:ff:0c:f1:3c:52:cd:80:1d:a5:90:dc: 1f:23:bc:ed:d0:48:8b:a4:e5:da:ca:53:86:63:ba: f0:3f:21:d6:09:0a:bd:74:e6:47:b1:cf:2a:b3:53: 74:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:41:CC:BC:8F:13:9F:89:0D:5B:8A:93:BD:E8:16:AF:BC:D9:7E:44 X509v3 Authority Key Identifier: keyid:CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/z0HMvI8Tn4kNW4qTvegWr7zZfkQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.126.52.0/24 Signature Algorithm: sha256WithRSAEncryption 29:d7:6a:a3:fc:b5:8e:5a:ea:ed:bd:0c:06:90:b1:75:ed:91: 2d:22:43:5e:70:ee:f4:52:61:16:40:50:69:0c:9f:89:db:84: 79:f8:36:09:a4:04:a5:d7:b2:c9:4e:10:ca:c3:7e:56:67:73: 8f:c6:7a:10:1b:a6:a5:af:aa:9b:28:fb:ae:ba:83:78:4f:7c: 65:1a:20:4e:4a:e8:ba:74:53:50:98:c7:bb:d4:9f:e6:8c:ae: 60:52:26:bf:39:72:72:fa:e4:16:3b:8e:83:57:1a:95:97:6c: 2f:0a:f3:cf:06:de:68:53:fe:07:2f:ce:50:00:ab:04:17:f9: d0:70:82:7d:3c:e4:cc:7a:90:47:d3:93:f9:91:18:1e:70:a8: b6:f5:f1:18:b3:01:4c:3d:d5:20:c0:82:30:b4:ff:41:c8:bc: cb:f6:13:c8:15:4d:8b:82:1f:0d:33:01:6f:3d:cd:cc:6f:be: 49:8d:c2:a5:e6:cc:12:05:1d:c6:c5:2a:fb:2c:1c:1a:87:17: 5a:3b:73:69:cb:e1:7c:3a:c6:c3:cd:32:20:1a:14:78:9b:fa: 61:51:37:9e:58:78:7e:3f:30:5f:8c:1a:e3:e2:0b:e4:0b:6a: a6:92:a0:53:5c:bb:03:b5:80:45:6d:7d:31:70:d5:6d:52:69: 05:6a:06:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yDaql7JJBZrHgIkeVMEpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlOGU5YmUyNDhjNzQxYmE2YTI2YWM4Y2ZlMmMyYmI3YzJk N2EzYjEwHhcNMjYwMTAxMTgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjQxY2NiYzhmMTM5Zjg5MGQ1YjhhOTNiZGU4MTZhZmJjZDk3ZTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUdIa+Q4vuvyE5tffx1JlB7cLnqm R53Xh9nAQIdft2k12S292T8L8cXpz3VUY5/7jPogxujBt21eX7xOIFW3IJR+rdxp EAvPRWWcQSbsY7E0sD6IlxAhWJsHTkcKleQo4CztY28q3ONzZt41EGwq8Tn+dJLL QyfJ1mE20OlvV1zfYzIx5gRG5lKAx5iy8EBXAHCW03zzLqwjWlHkbJk5SKtWDFj9 pbebpQMhvoLaYhOZCDWM1bwDreNPgz/MoE7CXynwbK1H03eKF2hXrFF4YK5Bm5iz /wzxPFLNgB2lkNwfI7zt0EiLpOXaylOGY7rwPyHWCQq9dOZHsc8qs1N0pQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM9BzLyPE5+JDVuKk73oFq+82X5EMB8GA1UdIwQY MBaAFM6Om+JIx0G6aiasjP4sK7fC16OxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem82YjRrakhRYnBxSnF5TV9pd3J0OExYbzdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yODYwYzktYWI1Zi00NDQwLTgzMTIt OWZiOGUyNTQ1ZDczLzEvejBITXZJOFRuNGtOVzRxVHZlZ1dyN3paZmtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8yODYwYzktYWI1Zi00NDQwLTgzMTItOWZiOGUyNTQ1ZDcz LzEvem82YjRrakhRYnBxSnF5TV9pd3J0OExYbzdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuX40MA0G CSqGSIb3DQEBCwUAA4IBAQAp12qj/LWOWurtvQwGkLF17ZEtIkNecO70UmEWQFBp DJ+J24R5+DYJpASl17LJThDKw35WZ3OPxnoQG6alr6qbKPuuuoN4T3xlGiBOSui6 dFNQmMe71J/mjK5gUia/OXJy+uQWO46DVxqVl2wvCvPPBt5oU/4HL85QAKsEF/nQ cIJ9POTMepBH05P5kRgecKi29fEYswFMPdUgwIIwtP9ByLzL9hPIFU2Lgh8NMwFv Pc3Mb75JjcKl5swSBR3GxSr7LBwahxdaO3Npy+F8OsbDzTIgGhR4m/phUTeeWHh+ PzBfjBrj4gvkC2qmkqBTXLsDtYBFbX0xcNVtUmkFagYt -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:50 2026 by rpki-client