This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/1bz4VaBV4zDNPpHlEQ4nHg2og7c.roa File: 1bz4VaBV4zDNPpHlEQ4nHg2og7c.roa (raw, json) Hash identifier: AW/6Peh9HLcmvxwe2ZPJ0WiX9tfpgRcCEnLYZpk1F4s= Subject key identifier: D5:BC:F8:55:A0:55:E3:30:CD:3E:91:E5:11:0E:27:1E:0D:A8:83:B7 Certificate issuer: /CN=2330e26060913c758137488bfd7ab1bfe9e10ae2 Certificate serial: 019B7C1189585D225FC4B813871915FADF23 Authority key identifier: 23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/1bz4VaBV4zDNPpHlEQ4nHg2og7c.roa Signing time: Fri 02 Jan 2026 00:18:02 +0000 ROA not before: Fri 02 Jan 2026 00:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 185.203.232.0/24 maxlen: 24 185.203.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:89:58:5d:22:5f:c4:b8:13:87:19:15:fa:df:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2330e26060913c758137488bfd7ab1bfe9e10ae2 Validity Not Before: Jan 2 00:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5bcf855a055e330cd3e91e5110e271e0da883b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:2a:8c:46:4d:0d:37:65:df:25:06:cc:32:ab: b9:99:be:a5:8f:a8:57:9f:ed:3e:41:2b:92:85:28: fe:07:a3:df:c5:63:5c:4f:8d:92:24:85:00:d5:8d: 7a:5a:78:ef:da:0d:e1:89:a5:27:50:28:2b:57:5e: 20:ae:fa:99:47:ae:5e:2d:60:2b:85:cb:a5:ee:53: ce:04:a2:75:56:69:76:f6:9e:63:2f:e1:97:6b:2c: 73:cf:87:6f:77:d3:12:3f:4d:07:58:b9:8e:7b:1b: b4:de:d1:22:c6:4d:a2:25:69:dc:c5:5f:32:30:10: 0c:3e:93:61:fb:3c:43:52:40:e2:64:16:28:85:97: 24:ce:25:27:10:60:19:0b:d4:5f:f5:c0:38:6b:e5: 57:1a:1c:52:88:09:ba:af:3d:fd:32:d7:03:0a:f8: a9:7f:f6:0c:ae:17:7c:aa:bd:45:9d:70:e2:de:ec: c6:ca:d1:8f:c8:33:b5:0c:80:d0:95:f2:0a:a9:fc: d6:bd:08:e1:34:0f:46:ff:55:87:ff:d9:b0:53:0d: fc:d8:1a:db:e9:c3:29:4c:80:ed:c9:97:8e:02:e7: 1b:73:b7:30:42:cd:80:6b:b5:90:31:90:cc:9c:aa: 33:4f:9c:4e:3e:39:7d:be:c3:ef:2a:d8:eb:78:8e: 9a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BC:F8:55:A0:55:E3:30:CD:3E:91:E5:11:0E:27:1E:0D:A8:83:B7 X509v3 Authority Key Identifier: keyid:23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/1bz4VaBV4zDNPpHlEQ4nHg2og7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.203.232.0/24 185.203.235.0/24 Signature Algorithm: sha256WithRSAEncryption 69:22:3e:d9:64:10:6c:e2:21:8d:c5:91:6d:66:fd:dc:1d:cd: fd:66:38:6f:64:05:51:80:24:ea:bb:a7:71:5e:e7:4b:a1:27: fc:8a:ca:aa:0a:34:a7:f6:3f:96:63:e9:9e:13:a0:0a:0c:f7: cd:77:f4:ea:bc:89:c5:bd:fe:8f:60:a2:d4:f6:4b:2d:ba:72: cd:6f:90:e0:08:15:a1:6a:fa:ee:8c:e2:0e:cf:c8:dd:b2:12: 70:27:fe:47:06:70:ad:7b:bc:f1:bd:29:c3:0e:43:45:ac:25: 14:3f:c7:cd:da:56:08:7d:52:7b:6d:b2:2d:5e:99:e4:8b:69: b8:28:0e:07:3b:a6:40:18:45:0d:86:1f:4d:3c:c7:f7:f4:5a: 11:f7:76:ad:48:7b:8f:b3:fb:82:2a:87:ee:52:ef:07:c0:c8: 1f:f3:e3:64:06:f1:e3:df:c7:b5:9e:39:73:67:33:0e:e0:cd: 99:13:a8:06:8a:10:e7:21:a9:b7:ec:18:15:31:c7:a1:b7:8f: 58:57:8b:17:cc:7a:df:d9:85:fe:ad:70:84:74:77:b3:bb:8c: 3b:3c:b0:b4:c2:af:75:e8:78:4e:8f:5d:d4:0e:eb:d7:28:76: f0:58:d7:ed:aa:6a:2b:ee:6b:e0:06:fc:ed:ea:1d:32:1f:2a: 25:a9:e4:a7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EYlYXSJfxLgThxkV+t8jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMzBlMjYwNjA5MTNjNzU4MTM3NDg4YmZkN2FiMWJmZTll MTBhZTIwHhcNMjYwMTAyMDAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWJjZjg1NWEwNTVlMzMwY2QzZTkxZTUxMTBlMjcxZTBkYTg4M2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iqMRk0NN2XfJQbMMqu5mb6lj6hX n+0+QSuShSj+B6PfxWNcT42SJIUA1Y16Wnjv2g3hiaUnUCgrV14grvqZR65eLWAr hcul7lPOBKJ1Vml29p5jL+GXayxzz4dvd9MSP00HWLmOexu03tEixk2iJWncxV8y MBAMPpNh+zxDUkDiZBYohZckziUnEGAZC9Rf9cA4a+VXGhxSiAm6rz39MtcDCvip f/YMrhd8qr1FnXDi3uzGytGPyDO1DIDQlfIKqfzWvQjhNA9G/1WH/9mwUw382Brb 6cMpTIDtyZeOAucbc7cwQs2Aa7WQMZDMnKozT5xOPjl9vsPvKtjreI6aowIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNW8+FWgVeMwzT6R5REOJx4NqIO3MB8GA1UdIwQY MBaAFCMw4mBgkTx1gTdIi/16sb/p4QriMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXpEaVlHQ1JQSFdCTjBpTF9YcXh2LW5oQ3VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80NjkwYzAtMGI5MS00MzIyLTk0Yjkt NzA2NzgyY2ZhMDNiLzEvMWJ6NFZhQlY0ekROUHBIbEVRNG5IZzJvZzdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS80NjkwYzAtMGI5MS00MzIyLTk0YjktNzA2NzgyY2ZhMDNi LzEvSXpEaVlHQ1JQSFdCTjBpTF9YcXh2LW5oQ3VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAucvoAwQA ucvrMA0GCSqGSIb3DQEBCwUAA4IBAQBpIj7ZZBBs4iGNxZFtZv3cHc39ZjhvZAVR gCTqu6dxXudLoSf8isqqCjSn9j+WY+meE6AKDPfNd/TqvInFvf6PYKLU9kstunLN b5DgCBWhavrujOIOz8jdshJwJ/5HBnCte7zxvSnDDkNFrCUUP8fN2lYIfVJ7bbIt Xpnki2m4KA4HO6ZAGEUNhh9NPMf39FoR93atSHuPs/uCKofuUu8HwMgf8+NkBvHj 38e1njlzZzMO4M2ZE6gGihDnIam37BgVMceht49YV4sXzHrf2YX+rXCEdHezu4w7 PLC0wq916HhOj13UDuvXKHbwWNftqmor7mvgBvzt6h0yHyolqeSn -----END CERTIFICATE-----Generated at Wed Jan 21 13:18:02 2026 by rpki-client