This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/rlozkrq9ZzNHCZUtQGPTzboWxmI.roa File: rlozkrq9ZzNHCZUtQGPTzboWxmI.roa (raw, json) Hash identifier: +ky2eseP0hm1lozQb5MU58tNSrjncRM2hPrTaQ0J6cY= Subject key identifier: AE:5A:33:92:BA:BD:67:33:47:09:95:2D:40:63:D3:CD:BA:16:C6:62 Certificate issuer: /CN=01202596d5cece37dc34c861064578fc6daa5e86 Certificate serial: 019B7910DD195CD90DF8D484BF5EEFB40904 Authority key identifier: 01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/rlozkrq9ZzNHCZUtQGPTzboWxmI.roa Signing time: Thu 01 Jan 2026 10:18:26 +0000 ROA not before: Thu 01 Jan 2026 10:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61399 IP address blocks: 185.211.228.0/22 maxlen: 22 185.211.228.0/24 maxlen: 24 185.211.229.0/24 maxlen: 24 185.211.230.0/24 maxlen: 24 185.211.231.0/24 maxlen: 24 2a0b:6e40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:dd:19:5c:d9:0d:f8:d4:84:bf:5e:ef:b4:09:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01202596d5cece37dc34c861064578fc6daa5e86 Validity Not Before: Jan 1 10:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae5a3392babd67334709952d4063d3cdba16c662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:87:d0:25:08:cd:10:31:26:c1:5a:1e:4d:0d: 90:9f:12:20:ef:d5:73:75:d9:f4:cc:e7:4b:f6:92: ab:35:24:62:f9:7a:3a:6d:16:2c:79:ce:18:e5:62: 6d:e1:fe:3e:5c:ae:59:a3:c9:3d:b5:07:3e:1a:e0: 14:51:1d:1d:19:ff:a2:b5:70:61:cd:2b:0b:a9:4d: fc:22:f0:fd:17:8a:12:31:aa:f7:bc:da:48:74:4d: f0:c6:8c:df:be:c8:cb:89:13:ae:18:7d:6a:c1:d8: 39:b7:7d:1b:f6:9b:0d:1e:dd:46:f4:d2:72:a4:c3: ed:04:1a:25:1b:7d:49:32:fb:22:f1:7b:e5:3c:e6: 16:fb:22:79:1a:e8:ae:0b:3a:29:de:16:13:db:b8: 32:09:35:c4:f9:45:33:f0:4b:17:95:02:9e:ad:9a: 33:fc:87:e7:71:a5:48:52:7b:da:0f:9e:92:40:c0: fd:e3:44:a3:f4:09:9e:ff:57:f8:6f:75:8c:c3:5b: a5:30:6e:9b:97:90:11:be:3d:b7:2d:4a:f3:d3:f4: 36:d0:38:4b:7b:09:6d:14:56:7a:46:d9:5e:f0:0b: 0b:6d:dc:4c:04:aa:10:19:28:bb:60:66:99:45:c8: ea:6f:03:d2:69:33:0a:7f:a7:df:4b:42:b2:fe:08: ef:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:5A:33:92:BA:BD:67:33:47:09:95:2D:40:63:D3:CD:BA:16:C6:62 X509v3 Authority Key Identifier: keyid:01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/rlozkrq9ZzNHCZUtQGPTzboWxmI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.228.0/22 IPv6: 2a0b:6e40::/29 Signature Algorithm: sha256WithRSAEncryption 37:8c:d2:e3:5e:a7:e1:35:89:18:77:6e:a3:66:f5:08:ca:1c: 38:6b:ee:34:3a:e3:a9:f0:df:c3:b3:62:72:c0:54:dc:5a:24: 10:cb:6c:aa:5b:73:2a:e2:af:dc:05:9a:47:4e:fc:a9:61:07: c8:d2:33:49:53:d2:ec:db:24:4a:f6:9d:36:47:ad:38:ed:fc: 08:b5:f2:e8:38:55:ea:31:4d:4a:8d:eb:b9:25:ea:ed:88:51: 2f:63:80:48:64:47:97:7f:14:a1:c4:d6:50:3f:ce:1a:d1:8f: 3d:c3:4a:51:18:5c:ec:ab:2a:98:fa:75:4a:8a:5c:aa:e7:94: 3b:90:56:f3:df:36:7e:d7:05:51:2c:a2:a3:b5:57:c1:7c:02: aa:e2:5b:26:82:13:5c:27:3a:58:ec:85:8b:6c:69:bb:73:f6: ce:52:0b:e1:40:27:50:6d:af:51:99:ce:84:f9:b4:cb:c8:ed: 79:2b:1a:1e:88:99:b6:4e:ce:b6:e4:ad:7f:e9:a0:65:a5:52: 28:d0:e9:e1:86:ac:92:a0:f1:68:97:1b:55:75:95:8d:7e:83: 9b:a3:5d:31:63:85:db:d1:89:f0:41:db:d0:5b:95:45:f2:f8: 77:2e:b3:c3:84:d9:48:79:f2:10:aa:a0:73:95:49:a6:63:5b: cc:5b:1b:df -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EN0ZXNkN+NSEv17vtAkEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMjAyNTk2ZDVjZWNlMzdkYzM0Yzg2MTA2NDU3OGZjNmRh YTVlODYwHhcNMjYwMTAxMTAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTVhMzM5MmJhYmQ2NzMzNDcwOTk1MmQ0MDYzZDNjZGJhMTZjNjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ofQJQjNEDEmwVoeTQ2QnxIg79Vz ddn0zOdL9pKrNSRi+Xo6bRYsec4Y5WJt4f4+XK5Zo8k9tQc+GuAUUR0dGf+itXBh zSsLqU38IvD9F4oSMar3vNpIdE3wxozfvsjLiROuGH1qwdg5t30b9psNHt1G9NJy pMPtBBolG31JMvsi8XvlPOYW+yJ5GuiuCzop3hYT27gyCTXE+UUz8EsXlQKerZoz /IfncaVIUnvaD56SQMD940Sj9Ame/1f4b3WMw1ulMG6bl5ARvj23LUrz0/Q20DhL ewltFFZ6Rtle8AsLbdxMBKoQGSi7YGaZRcjqbwPSaTMKf6ffS0Ky/gjvawIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFK5aM5K6vWczRwmVLUBj0826FsZiMB8GA1UdIwQY MBaAFAEgJZbVzs433DTIYQZFePxtql6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVNBbGx0WE96amZjTk1oaEJrVjRfRzJxWG9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85ODYxNjQtODAzMC00ZTQ3LTk4YjUt NDgxMTUxYWNmMzI5LzEvcmxvemtycTlaek5IQ1pVdFFHUFR6Ym9XeG1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi85ODYxNjQtODAzMC00ZTQ3LTk4YjUtNDgxMTUxYWNmMzI5 LzEvQVNBbGx0WE96amZjTk1oaEJrVjRfRzJxWG9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudPkMA0E AgACMAcDBQMqC25AMA0GCSqGSIb3DQEBCwUAA4IBAQA3jNLjXqfhNYkYd26jZvUI yhw4a+40OuOp8N/Ds2JywFTcWiQQy2yqW3Mq4q/cBZpHTvypYQfI0jNJU9Ls2yRK 9p02R6047fwItfLoOFXqMU1Kjeu5JertiFEvY4BIZEeXfxShxNZQP84a0Y89w0pR GFzsqyqY+nVKilyq55Q7kFbz3zZ+1wVRLKKjtVfBfAKq4lsmghNcJzpY7IWLbGm7 c/bOUgvhQCdQba9Rmc6E+bTLyO15KxoeiJm2Ts625K1/6aBlpVIo0OnhhqySoPFo lxtVdZWNfoObo10xY4Xb0YnwQdvQW5VF8vh3LrPDhNlIefIQqqBzlUmmY1vMWxvf -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:51 2026 by rpki-client