This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/1zpG2CVrxsMORx6-f7bFYATXDp8.roa File: 1zpG2CVrxsMORx6-f7bFYATXDp8.roa (raw, json) Hash identifier: ZOZ+1A/5qrE+UhYF92TopbAqYAeLlDGmriRx3ZRkiq8= Subject key identifier: D7:3A:46:D8:25:6B:C6:C3:0E:47:1E:BE:7F:B6:C5:60:04:D7:0E:9F Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Certificate serial: 019BD59E059C5F9D967777B06B19B2525F33 Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/1zpG2CVrxsMORx6-f7bFYATXDp8.roa Signing time: Mon 19 Jan 2026 09:37:41 +0000 ROA not before: Mon 19 Jan 2026 09:37:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40676 IP address blocks: 85.117.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:9e:05:9c:5f:9d:96:77:77:b0:6b:19:b2:52:5f:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Validity Not Before: Jan 19 09:37:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d73a46d8256bc6c30e471ebe7fb6c56004d70e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:59:ad:09:ac:8b:1a:5c:2a:05:c8:2f:c1:ca: 51:c0:38:f9:e1:c2:0e:70:75:8e:f4:e5:c7:78:41: c9:08:a8:9c:4d:8f:e8:4e:19:6f:ba:b5:6a:24:09: 11:55:ac:22:58:4b:b5:b2:ca:15:fc:3d:73:9a:86: f1:d4:ef:32:6c:b3:54:f2:28:ae:21:6a:71:3c:93: 73:e6:34:f9:66:29:d1:a2:fe:24:8f:0d:ff:67:1c: ab:a4:38:21:d6:6a:3e:ec:4b:a3:40:58:01:b4:24: 26:9f:9c:6f:5a:4c:38:61:6a:cd:97:37:de:39:d9: 1f:47:47:76:1b:b8:f9:ec:d6:c1:5c:0c:95:e6:db: 2d:d2:b1:d9:f4:1d:cd:b0:de:d0:b7:fb:43:3f:db: 87:6a:c4:e8:7b:fb:ab:3d:18:31:ec:02:d6:15:93: 42:a6:0c:32:e7:59:ca:6f:46:2f:c3:71:fc:00:21: 3c:3f:36:c7:b0:6b:67:8c:10:30:05:df:05:44:86: 1c:17:22:ef:6e:d3:60:77:da:e9:a5:4d:97:08:0a: 3f:81:4e:89:63:26:9a:96:ab:57:9a:ba:1f:1c:db: 3c:cd:2b:0c:2c:cc:56:5d:fa:ce:04:e2:3f:db:b2: d8:f5:62:96:b4:80:f8:c3:e1:6e:25:17:4b:a1:07: ef:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:3A:46:D8:25:6B:C6:C3:0E:47:1E:BE:7F:B6:C5:60:04:D7:0E:9F X509v3 Authority Key Identifier: keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/1zpG2CVrxsMORx6-f7bFYATXDp8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.117.242.0/24 Signature Algorithm: sha256WithRSAEncryption 40:73:6d:d5:8b:f4:8d:04:1f:9f:04:da:0e:9e:79:96:0f:47: 83:8a:1a:da:0c:17:58:e4:93:7c:71:59:e3:dd:2b:ba:c0:16: 5c:0c:0e:76:8a:40:2a:4e:e7:d4:03:05:af:73:35:63:03:14: 55:90:1f:c8:98:c7:67:0f:d1:fc:79:f8:db:09:c5:68:19:7c: bf:0f:22:18:a8:72:b1:cb:84:29:d9:0e:29:c9:c5:a7:c7:25: f3:cc:4c:f9:63:de:2e:d2:26:ed:a7:e3:c5:91:06:09:a8:7f: b3:5f:68:81:dc:72:1f:89:41:83:2a:fa:96:f2:b2:a9:3a:b7: 6c:30:50:c0:fe:01:33:91:c5:73:91:3f:02:11:fc:06:f9:94: 92:05:63:68:b3:37:7d:35:b7:77:06:56:bf:d2:17:90:92:41: 19:88:af:1f:8f:80:66:ca:fd:28:19:cc:0d:c9:a0:1a:62:99: 23:b2:09:a2:b5:24:21:46:f8:71:84:6f:0d:4c:f5:4e:0b:56: 3b:13:43:ce:9d:1c:ff:49:9a:6b:c7:0b:2a:d6:c8:42:24:e7: 8c:e4:56:5f:8f:44:9e:1e:26:62:9b:9c:df:e9:aa:e2:00:9e: 6e:21:8f:9c:4c:db:f5:54:03:e6:8f:7e:78:3f:28:62:f5:ac: d4:b3:bc:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvVngWcX52Wd3ewaxmyUl8zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk YTEzNzAwHhcNMjYwMTE5MDkzNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzNhNDZkODI1NmJjNmMzMGU0NzFlYmU3ZmI2YzU2MDA0ZDcwZTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1mtCayLGlwqBcgvwcpRwDj54cIO cHWO9OXHeEHJCKicTY/oThlvurVqJAkRVawiWEu1ssoV/D1zmobx1O8ybLNU8iiu IWpxPJNz5jT5ZinRov4kjw3/ZxyrpDgh1mo+7EujQFgBtCQmn5xvWkw4YWrNlzfe OdkfR0d2G7j57NbBXAyV5tst0rHZ9B3NsN7Qt/tDP9uHasToe/urPRgx7ALWFZNC pgwy51nKb0Yvw3H8ACE8PzbHsGtnjBAwBd8FRIYcFyLvbtNgd9rppU2XCAo/gU6J YyaalqtXmrofHNs8zSsMLMxWXfrOBOI/27LY9WKWtID4w+FuJRdLoQfvGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNc6Rtgla8bDDkcevn+2xWAE1w6fMB8GA1UdIwQY MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt NjA4MDk1MmYwZTA0LzEvMXpwRzJDVnJ4c01PUng2LWY3YkZZQVRYRHA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0 LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXXyMA0G CSqGSIb3DQEBCwUAA4IBAQBAc23Vi/SNBB+fBNoOnnmWD0eDihraDBdY5JN8cVnj 3Su6wBZcDA52ikAqTufUAwWvczVjAxRVkB/ImMdnD9H8efjbCcVoGXy/DyIYqHKx y4Qp2Q4pycWnxyXzzEz5Y94u0ibtp+PFkQYJqH+zX2iB3HIfiUGDKvqW8rKpOrds MFDA/gEzkcVzkT8CEfwG+ZSSBWNoszd9Nbd3Bla/0heQkkEZiK8fj4Bmyv0oGcwN yaAaYpkjsgmitSQhRvhxhG8NTPVOC1Y7E0POnRz/SZprxwsq1shCJOeM5FZfj0Se HiZim5zf6ariAJ5uIY+cTNv1VAPmj354Pyhi9azUs7xU -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:56 2026 by rpki-client