This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/rrH1j10hPF7JqcYJAD3BPexcKzg.roa File: rrH1j10hPF7JqcYJAD3BPexcKzg.roa (raw, json) Hash identifier: +IMZpUPrslETwFxcXPRLWmZpXfSU9RCOH9gP9Q/CH5w= Subject key identifier: AE:B1:F5:8F:5D:21:3C:5E:C9:A9:C6:09:00:3D:C1:3D:EC:5C:2B:38 Certificate issuer: /CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4 Certificate serial: 019B76EB9FC7C0E9CA486E711C7A78BEAB1D Authority key identifier: 29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/rrH1j10hPF7JqcYJAD3BPexcKzg.roa Signing time: Thu 01 Jan 2026 00:18:31 +0000 ROA not before: Thu 01 Jan 2026 00:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.214.22.0/24 maxlen: 24 185.214.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:9f:c7:c0:e9:ca:48:6e:71:1c:7a:78:be:ab:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4 Validity Not Before: Jan 1 00:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aeb1f58f5d213c5ec9a9c609003dc13dec5c2b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fc:01:55:b1:27:bd:d8:2e:9a:d0:56:47:e2: eb:5e:7b:8e:a0:6f:90:ec:fb:bb:c2:03:9e:d0:c4: a7:f9:b7:a5:8f:06:2c:a1:c2:be:69:d8:7f:23:9c: c7:09:4f:3c:fa:90:d9:0b:f7:31:27:27:2b:a3:55: 9f:b0:6f:22:8b:8a:df:06:43:80:b6:04:8f:55:10: c6:6a:61:55:f3:b3:7d:ab:1c:77:a8:35:9b:9c:89: 3b:89:20:89:0c:25:33:f8:bf:8c:5d:5b:9c:68:97: 7d:99:31:59:1e:31:66:71:5c:55:81:d3:32:62:c2: f3:e1:6c:6e:8b:90:dd:21:a4:b0:c1:26:14:c4:43: dc:c9:00:8f:cf:af:55:78:26:11:49:0d:8e:a0:90: 4f:08:3f:de:9b:05:a5:03:c5:8b:6a:22:84:c3:0d: 05:d4:41:53:1f:37:cf:8a:ab:1b:96:c0:46:0d:2a: 51:98:d2:4b:57:9e:1e:66:d2:9b:83:00:7e:32:3f: 2b:b9:41:e0:02:f0:47:2e:e7:f3:37:87:52:9c:21: 6d:82:cc:0c:51:85:03:e0:8e:56:d4:43:a2:9b:2b: 52:e0:6e:d3:4c:7a:70:a1:7d:32:98:c6:27:8d:21: 13:b8:95:66:b0:c4:0c:98:98:c2:7c:26:e2:f0:09: ab:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B1:F5:8F:5D:21:3C:5E:C9:A9:C6:09:00:3D:C1:3D:EC:5C:2B:38 X509v3 Authority Key Identifier: keyid:29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/rrH1j10hPF7JqcYJAD3BPexcKzg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.214.22.0/23 Signature Algorithm: sha256WithRSAEncryption 71:f0:91:e6:97:b8:83:db:84:64:5f:8d:de:69:e9:2d:d0:38: 91:a3:fc:1f:d2:7a:57:eb:5b:33:56:16:66:f0:0d:8a:df:f2: 24:fe:4d:4b:d2:cf:ea:11:5a:bf:6a:36:4e:2d:48:e1:a3:a5: e7:3f:a5:0b:dc:e2:16:e7:6a:4b:db:9e:1b:dd:4e:cf:ae:aa: 40:3b:d1:62:53:3e:7f:80:bf:91:ea:5a:6d:11:d1:f2:7d:f2: b5:cd:da:7c:ce:ad:34:01:5a:d1:f7:45:3a:b2:d8:2a:88:d0: 5b:b1:e7:94:ff:0d:c5:4e:0e:93:eb:c6:10:d6:b8:d7:dc:41: ad:29:5f:de:63:7d:51:eb:ca:0e:05:c6:9d:29:ff:d4:73:05: 94:2c:0b:67:51:1b:69:b8:e1:38:25:99:15:9b:a1:4a:92:0d: ab:38:19:e5:44:9b:41:58:dc:65:72:0b:b3:23:52:d6:e7:00: e9:c5:b8:9c:3f:62:e0:5c:f9:71:31:01:bc:a5:01:f2:43:11: b6:db:5e:1e:e1:8f:38:34:77:eb:74:05:b7:47:96:8c:00:79: c2:83:3c:f1:46:3f:ba:a3:a5:99:f0:e2:dc:b3:bf:d2:9e:46: f2:7b:d4:bd:7a:2b:e0:65:f6:8c:b3:f3:dc:61:ea:6d:64:13: 53:c2:68:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt265/HwOnKSG5xHHp4vqsdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5OTU5NDRlODRkYzM3YmE2YTQyZDY4YmIxZTJiOWE0NDIx ZTg0YTQwHhcNMjYwMTAxMDAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWIxZjU4ZjVkMjEzYzVlYzlhOWM2MDkwMDNkYzEzZGVjNWMyYjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPwBVbEnvdgumtBWR+LrXnuOoG+Q 7Pu7wgOe0MSn+beljwYsocK+adh/I5zHCU88+pDZC/cxJycro1WfsG8ii4rfBkOA tgSPVRDGamFV87N9qxx3qDWbnIk7iSCJDCUz+L+MXVucaJd9mTFZHjFmcVxVgdMy YsLz4Wxui5DdIaSwwSYUxEPcyQCPz69VeCYRSQ2OoJBPCD/emwWlA8WLaiKEww0F 1EFTHzfPiqsblsBGDSpRmNJLV54eZtKbgwB+Mj8ruUHgAvBHLufzN4dSnCFtgswM UYUD4I5W1EOimytS4G7TTHpwoX0ymMYnjSETuJVmsMQMmJjCfCbi8AmrSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK6x9Y9dITxeyanGCQA9wT3sXCs4MB8GA1UdIwQY MBaAFCmVlE6E3De6akLWi7HiuaRCHoSkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1pXVVRvVGNON3BxUXRhTHNlSzVwRUllaEtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hMTIwNjktYTA2MS00NDJlLTliZmIt MzM4YmRkNDM5ZWUxLzEvcnJIMWoxMGhQRjdKcWNZSkFEM0JQZXhjS3pnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hMTIwNjktYTA2MS00NDJlLTliZmItMzM4YmRkNDM5ZWUx LzEvS1pXVVRvVGNON3BxUXRhTHNlSzVwRUllaEtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBudYWMA0G CSqGSIb3DQEBCwUAA4IBAQBx8JHml7iD24RkX43eaekt0DiRo/wf0npX61szVhZm 8A2K3/Ik/k1L0s/qEVq/ajZOLUjho6XnP6UL3OIW52pL254b3U7PrqpAO9FiUz5/ gL+R6lptEdHyffK1zdp8zq00AVrR90U6stgqiNBbseeU/w3FTg6T68YQ1rjX3EGt KV/eY31R68oOBcadKf/UcwWULAtnURtpuOE4JZkVm6FKkg2rOBnlRJtBWNxlcguz I1LW5wDpxbicP2LgXPlxMQG8pQHyQxG2214e4Y84NHfrdAW3R5aMAHnCgzzxRj+6 o6WZ8OLcs7/Snkbye9S9eivgZfaMs/PcYeptZBNTwmgC -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:44 2026 by rpki-client