This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/RzWzE6OpgeFZk0yxSCkJMoNMTwA.roa File: RzWzE6OpgeFZk0yxSCkJMoNMTwA.roa (raw, json) Hash identifier: EOrql+fdFMhDNMTm2/S5izzC4MsYg2L6WcA9m2Sp+8U= Subject key identifier: 47:35:B3:13:A3:A9:81:E1:59:93:4C:B1:48:29:09:32:83:4C:4F:00 Certificate issuer: /CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656 Certificate serial: 019B76EB4F70766F695A018EAD57FC889D83 Authority key identifier: B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/RzWzE6OpgeFZk0yxSCkJMoNMTwA.roa Signing time: Thu 01 Jan 2026 00:18:11 +0000 ROA not before: Thu 01 Jan 2026 00:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24961 IP address blocks: 185.171.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:4f:70:76:6f:69:5a:01:8e:ad:57:fc:88:9d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656 Validity Not Before: Jan 1 00:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4735b313a3a981e159934cb148290932834c4f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4f:80:01:4e:0e:1f:dc:f8:48:e3:21:9e:7c: 9f:68:2e:1d:1f:99:57:79:f5:f1:8a:8b:03:3f:5f: 0f:74:60:51:00:3c:61:19:8c:07:e1:bd:7a:dc:1f: cc:de:54:43:f5:fa:c9:39:01:9d:44:30:5b:11:48: 0d:70:ab:1a:79:3d:94:5a:af:3b:ac:a2:2a:31:80: 24:32:06:81:07:74:37:c9:44:45:98:aa:88:6b:86: 59:92:ed:16:86:20:51:d8:7e:11:8d:16:62:50:03: 6e:f4:b0:aa:71:8e:2d:56:ff:4d:44:f0:e3:da:27: 5d:66:33:24:b8:7f:a7:f3:df:76:f8:bc:fc:14:ee: 64:a4:72:6f:6a:27:f9:a1:ff:72:e3:59:6c:99:c8: b4:26:67:19:7a:c0:d6:79:ac:77:1c:86:28:28:f4: ec:27:35:cb:cf:14:88:1b:d1:8c:c6:d5:ef:ed:a8: 78:53:43:bc:1e:fb:ba:85:e4:89:53:de:0b:b8:2e: 69:47:14:5b:6c:b8:9a:05:58:fd:cd:7e:3b:d8:0d: 74:b7:12:4c:6f:c7:1c:f9:7a:2d:74:b1:cf:64:45: d7:e3:f6:5f:5e:a5:c9:04:2e:17:69:25:9f:a5:da: c3:3c:73:82:1b:5e:c6:ab:d6:49:6c:6a:d3:03:0f: 53:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:35:B3:13:A3:A9:81:E1:59:93:4C:B1:48:29:09:32:83:4C:4F:00 X509v3 Authority Key Identifier: keyid:B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/RzWzE6OpgeFZk0yxSCkJMoNMTwA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.171.218.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:ba:f2:5d:ab:11:83:a3:9e:fe:e6:89:50:5a:dc:b8:79:91: cb:8f:7d:18:fe:38:9d:65:35:92:84:28:98:f5:31:04:7d:e9: ef:50:82:b6:cf:57:d6:1c:d1:21:c8:11:96:91:3b:5e:14:81: 91:c7:ba:b8:d8:c1:4e:75:ea:7f:4d:f3:96:2b:57:a0:30:10: 26:ac:1d:49:ed:2a:ab:f3:2d:d2:be:50:7b:5f:2f:be:06:2d: 79:d2:83:35:1b:53:7a:4e:8a:84:d2:03:59:2c:4d:fe:52:0c: f1:34:7b:91:cc:8c:71:01:59:ee:15:23:35:02:a7:00:4e:c8: f9:b2:30:0f:4b:1a:dd:99:01:71:b6:c3:b5:a0:0b:f9:57:10: 6f:b8:68:a3:49:1a:3d:02:fe:01:8b:4d:ec:d6:ec:94:d6:eb: b4:5f:78:c8:b9:b4:44:7f:3c:7d:6e:dc:c9:f7:ac:09:0d:de: 31:a7:d9:4b:12:ef:9a:4b:ff:44:62:02:f9:79:e4:2b:6f:0e: 24:c9:db:00:3e:25:9a:6a:02:57:e0:b7:74:0b:9f:47:f6:0e: ac:09:6e:e9:b3:fb:94:2e:f5:c1:5d:c7:d4:f7:4a:44:f5:f8: 4d:75:6d:57:2d:7e:89:4d:c9:08:f7:eb:c8:9e:7c:63:50:a1: 03:9e:5a:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt2609wdm9pWgGOrVf8iJ2DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ZTM0ZjU3ZDAwNzE2NmRlZjRkZDg4MWQ4ZjdkNWI2ZWQ5 NWU2NTYwHhcNMjYwMTAxMDAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzM1YjMxM2EzYTk4MWUxNTk5MzRjYjE0ODI5MDkzMjgzNGM0ZjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk+AAU4OH9z4SOMhnnyfaC4dH5lX efXxiosDP18PdGBRADxhGYwH4b163B/M3lRD9frJOQGdRDBbEUgNcKsaeT2UWq87 rKIqMYAkMgaBB3Q3yURFmKqIa4ZZku0WhiBR2H4RjRZiUANu9LCqcY4tVv9NRPDj 2iddZjMkuH+n8992+Lz8FO5kpHJvaif5of9y41lsmci0JmcZesDWeax3HIYoKPTs JzXLzxSIG9GMxtXv7ah4U0O8Hvu6heSJU94LuC5pRxRbbLiaBVj9zX472A10txJM b8cc+XotdLHPZEXX4/ZfXqXJBC4XaSWfpdrDPHOCG17Gq9ZJbGrTAw9TxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEc1sxOjqYHhWZNMsUgpCTKDTE8AMB8GA1UdIwQY MBaAFLfjT1fQBxZt703Ygdj31bbtleZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdC1OUFY5QUhGbTN2VGRpQjJQZlZ0dTJWNWxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lNWQ1ODAtZWVlOC00NjNlLTg0YTgt ZWFjY2I4YjQyZGM5LzEvUnpXekU2T3BnZUZaazB5eFNDa0pNb05NVHdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lNWQ1ODAtZWVlOC00NjNlLTg0YTgtZWFjY2I4YjQyZGM5 LzEvdC1OUFY5QUhGbTN2VGRpQjJQZlZ0dTJWNWxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuavaMA0G CSqGSIb3DQEBCwUAA4IBAQB/uvJdqxGDo57+5olQWty4eZHLj30Y/jidZTWShCiY 9TEEfenvUIK2z1fWHNEhyBGWkTteFIGRx7q42MFOdep/TfOWK1egMBAmrB1J7Sqr 8y3SvlB7Xy++Bi150oM1G1N6ToqE0gNZLE3+UgzxNHuRzIxxAVnuFSM1AqcATsj5 sjAPSxrdmQFxtsO1oAv5VxBvuGijSRo9Av4Bi03s1uyU1uu0X3jIubREfzx9btzJ 96wJDd4xp9lLEu+aS/9EYgL5eeQrbw4kydsAPiWaagJX4Ld0C59H9g6sCW7ps/uU LvXBXcfU90pE9fhNdW1XLX6JTckI9+vInnxjUKEDnloy -----END CERTIFICATE-----Generated at Wed Jan 21 09:20:58 2026 by rpki-client