This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/Z-Nhf0GUm-eK6gBfuWRH4mBMDa8.roa File: Z-Nhf0GUm-eK6gBfuWRH4mBMDa8.roa (raw, json) Hash identifier: j8yQFLI888ZXRlZcfp3XqLieyu9/rqxMNp1WWGddyFc= Subject key identifier: 67:E3:61:7F:41:94:9B:E7:8A:EA:00:5F:B9:64:47:E2:60:4C:0D:AF Certificate issuer: /CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2 Certificate serial: 019B7B3549D9DF0BF164B85256399C022235 Authority key identifier: EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/Z-Nhf0GUm-eK6gBfuWRH4mBMDa8.roa Signing time: Thu 01 Jan 2026 20:17:28 +0000 ROA not before: Thu 01 Jan 2026 20:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50624 IP address blocks: 185.23.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:49:d9:df:0b:f1:64:b8:52:56:39:9c:02:22:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2 Validity Not Before: Jan 1 20:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67e3617f41949be78aea005fb96447e2604c0daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:86:c0:6f:85:52:ab:ee:9d:fe:35:d1:11:44: f4:43:ad:ee:06:33:13:fc:ad:aa:bd:bd:21:21:c3: 02:5c:27:81:9d:7e:69:1a:c9:cc:50:f6:85:24:a8: 12:5f:71:33:4f:fc:5a:3a:71:af:b8:40:c0:f8:ea: 86:74:7e:af:98:e6:92:a7:c1:fe:ed:3f:30:3e:cf: 73:36:a9:1a:38:9e:72:fd:af:4f:75:c3:24:e9:18: e6:20:e1:50:04:89:a8:1c:94:2b:0c:86:6b:be:56: e9:0b:03:b1:33:69:81:62:6a:4c:7a:b6:71:71:28: 45:20:a7:c8:bd:2d:00:27:69:92:e7:af:4b:f0:3a: 78:ad:41:0d:0c:91:39:2b:6f:d6:73:c8:0a:59:ad: 4b:fd:8e:35:4d:cc:28:17:45:a0:c4:d0:15:fc:ab: 89:d0:84:7c:95:55:4b:7d:19:a7:e8:70:c6:8c:5e: e1:ed:5e:35:e1:d5:a0:63:42:c3:24:64:e6:c1:47: 10:e0:49:f8:6a:c2:66:ca:72:04:0d:67:c1:2c:7f: b2:13:b0:8c:6b:93:42:68:bf:ff:e0:08:a9:0a:e4: 46:84:a2:97:6d:99:f0:41:f3:49:ae:86:f5:ee:d1: e2:b8:c2:fc:0c:63:6d:bf:62:20:2f:8a:18:32:02: 3b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E3:61:7F:41:94:9B:E7:8A:EA:00:5F:B9:64:47:E2:60:4C:0D:AF X509v3 Authority Key Identifier: keyid:EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/Z-Nhf0GUm-eK6gBfuWRH4mBMDa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.23.188.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:b9:80:00:c8:6e:c5:9d:27:a2:63:57:5b:f5:46:e0:50:a3: ed:72:bc:ae:7e:b5:94:bc:98:21:8b:c6:a0:08:f7:fd:a1:7d: 97:c0:71:02:55:ea:23:48:24:79:c8:d1:aa:33:67:35:cf:78: 1e:0b:d5:d5:48:e5:7b:39:a0:0d:78:69:23:7f:c9:6e:e3:ef: 7e:0d:d3:fb:f2:f6:10:10:b6:67:ca:ce:f4:91:f2:ed:30:9d: 7c:f0:a1:b3:21:85:c8:e5:8a:6c:6d:1a:70:8b:78:49:ea:3a: 3a:35:08:31:d4:50:bf:8c:11:eb:2f:1c:cc:1d:28:64:6d:20: fa:d4:be:83:84:ef:c0:6b:3a:49:34:71:2b:93:f6:4b:b6:f4: d3:92:ee:0c:51:78:f6:43:98:45:96:e9:5b:2b:f9:24:40:2c: 66:a9:61:8c:81:bb:4d:41:6d:87:a0:cc:3b:16:43:82:6f:33: 2d:da:7c:43:01:36:ae:54:2c:9b:d3:7b:df:88:4e:8f:9c:88: e2:e4:e1:64:25:7c:ab:6e:1c:38:bc:a2:fa:35:39:0b:81:d1: 4a:c2:bc:81:d3:b9:c1:43:30:93:3a:f0:f3:30:e8:5e:e7:a0: 70:58:bf:79:b9:8d:2b:70:fd:03:7b:0b:b8:9d:3c:d1:1b:d1: f2:39:c9:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NUnZ3wvxZLhSVjmcAiI1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNmQ0N2I0N2UwNWIxM2QwNThiMWNiNDI1MjlhN2MxODY2 ZGNkZjIwHhcNMjYwMTAxMjAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2UzNjE3ZjQxOTQ5YmU3OGFlYTAwNWZiOTY0NDdlMjYwNGMwZGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvobAb4VSq+6d/jXREUT0Q63uBjMT /K2qvb0hIcMCXCeBnX5pGsnMUPaFJKgSX3EzT/xaOnGvuEDA+OqGdH6vmOaSp8H+ 7T8wPs9zNqkaOJ5y/a9PdcMk6RjmIOFQBImoHJQrDIZrvlbpCwOxM2mBYmpMerZx cShFIKfIvS0AJ2mS569L8Dp4rUENDJE5K2/Wc8gKWa1L/Y41TcwoF0WgxNAV/KuJ 0IR8lVVLfRmn6HDGjF7h7V414dWgY0LDJGTmwUcQ4En4asJmynIEDWfBLH+yE7CM a5NCaL//4AipCuRGhKKXbZnwQfNJrob17tHiuML8DGNtv2IgL4oYMgI7WQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGfjYX9BlJvniuoAX7lkR+JgTA2vMB8GA1UdIwQY MBaAFOxtR7R+BbE9BYsctCUpp8GGbc3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0cxSHRINEZzVDBGaXh5MEpTbW53WVp0emZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yYTU5MWMtM2M0YS00Mjg4LWJlOTEt YzM5YWRiOThmNDI5LzEvWi1OaGYwR1VtLWVLNmdCZnVXUkg0bUJNRGE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8yYTU5MWMtM2M0YS00Mjg4LWJlOTEtYzM5YWRiOThmNDI5 LzEvN0cxSHRINEZzVDBGaXh5MEpTbW53WVp0emZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRe8MA0G CSqGSIb3DQEBCwUAA4IBAQA9uYAAyG7FnSeiY1db9UbgUKPtcryufrWUvJghi8ag CPf9oX2XwHECVeojSCR5yNGqM2c1z3geC9XVSOV7OaANeGkjf8lu4+9+DdP78vYQ ELZnys70kfLtMJ188KGzIYXI5YpsbRpwi3hJ6jo6NQgx1FC/jBHrLxzMHShkbSD6 1L6DhO/AazpJNHErk/ZLtvTTku4MUXj2Q5hFlulbK/kkQCxmqWGMgbtNQW2HoMw7 FkOCbzMt2nxDATauVCyb03vfiE6PnIji5OFkJXyrbhw4vKL6NTkLgdFKwryB07nB QzCTOvDzMOhe56BwWL95uY0rcP0Dewu4nTzRG9HyOck+ -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:49 2026 by rpki-client