This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/CshAZZODRLNLmNGlI2avtLyw1y8.roa File: CshAZZODRLNLmNGlI2avtLyw1y8.roa (raw, json) Hash identifier: Hf1RE2bw+HGP7b/6j+X1+6eXzCajo5UkBDMdWtNUDgc= Subject key identifier: 0A:C8:40:65:93:83:44:B3:4B:98:D1:A5:23:66:AF:B4:BC:B0:D7:2F Certificate issuer: /CN=e3b35956a4038a0938ccda85592ad531e4a883ad Certificate serial: 019B7BA4BA63C3C6D051B912E16F2B9F0B53 Authority key identifier: E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/CshAZZODRLNLmNGlI2avtLyw1y8.roa Signing time: Thu 01 Jan 2026 22:19:11 +0000 ROA not before: Thu 01 Jan 2026 22:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204741 IP address blocks: 185.242.24.0/22 maxlen: 22 185.242.24.0/23 maxlen: 23 185.242.24.0/24 maxlen: 24 185.242.25.0/24 maxlen: 24 185.242.26.0/23 maxlen: 23 185.242.26.0/24 maxlen: 24 185.242.27.0/24 maxlen: 24 2a0c:ba80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ba:63:c3:c6:d0:51:b9:12:e1:6f:2b:9f:0b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3b35956a4038a0938ccda85592ad531e4a883ad Validity Not Before: Jan 1 22:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ac84065938344b34b98d1a52366afb4bcb0d72f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:02:52:7f:e2:3e:20:d0:16:f7:a5:be:df:f4: 7d:76:eb:09:16:7b:da:05:b9:d0:94:cc:72:24:18: 27:da:21:e9:75:ac:a5:de:69:47:a9:d4:a3:34:92: 0b:0e:47:36:d8:e1:9a:6b:6f:58:9a:db:d3:cf:a9: 2e:5a:d1:46:ad:ff:34:2d:17:68:ff:18:2d:e6:d9: b6:b0:0c:cb:78:02:d8:52:87:f5:cb:af:82:c8:a5: ba:c7:a3:54:84:7b:18:4d:df:78:c6:ae:72:14:26: 4b:6b:d9:ff:33:51:39:a9:f8:5a:3f:69:44:c5:5d: 46:00:3c:4f:92:7f:51:b2:7e:a7:b2:c6:ad:b1:3a: ac:3e:1c:3b:61:db:8c:62:12:59:f7:26:31:54:14: 7a:1a:d3:7a:3e:87:78:53:fb:f1:ce:65:af:1e:13: 71:27:bf:32:ff:1b:a3:38:41:3f:65:58:c1:05:1e: 19:b5:9b:fa:86:be:a1:f0:91:75:0a:0d:db:e7:1b: d9:3d:67:ef:df:f4:3b:a9:c0:69:86:cd:6e:b8:41: 56:9e:2e:69:e5:fe:20:21:4d:ec:72:18:65:92:c6: 7b:cf:01:58:b6:b0:1c:37:9e:6f:7f:fe:a2:ff:6f: 00:27:0b:e6:80:89:e8:07:b6:04:b4:6d:5d:bc:cc: 4c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C8:40:65:93:83:44:B3:4B:98:D1:A5:23:66:AF:B4:BC:B0:D7:2F X509v3 Authority Key Identifier: keyid:E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/CshAZZODRLNLmNGlI2avtLyw1y8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.24.0/22 IPv6: 2a0c:ba80::/29 Signature Algorithm: sha256WithRSAEncryption 11:0e:e6:a8:62:c3:ca:fc:2b:1a:ef:20:85:39:06:e1:52:23: 20:54:0c:e3:3d:2a:4b:13:d9:62:09:dc:b8:73:54:47:4f:2c: 04:58:a6:8c:10:42:50:a4:b0:32:a0:4c:49:38:ab:10:73:04: 7d:04:e3:de:06:90:d1:74:5d:c3:aa:24:8f:36:9d:f1:c9:65: 99:22:42:4d:21:4f:87:18:74:b1:c4:41:64:40:e8:13:f2:e7: f6:e9:d8:d7:46:62:05:d5:e0:b5:64:87:6d:eb:bf:bb:e0:8b: d5:09:47:14:b2:36:dd:c6:cf:90:28:14:8c:04:60:db:8a:cf: 9e:af:1b:bf:4f:b9:5d:24:78:03:f5:3d:18:3e:d0:40:9b:1a: 2b:32:34:61:55:6a:ce:26:fb:01:ab:81:1a:0a:ee:e8:39:62: ed:3f:45:79:a9:85:81:4b:0f:db:7c:78:36:d0:51:c3:76:0a: 1c:bb:c2:fd:e5:cf:1b:79:8a:cc:6f:19:3d:84:57:1a:85:94: 7e:0c:ce:2b:01:c9:dd:0c:d6:7f:75:cc:37:17:55:3c:fc:18: 7e:d4:e2:e4:c6:84:84:32:c7:af:da:28:f8:36:e0:51:c5:61: d3:7e:c8:5b:0a:29:ef:c6:9a:5c:e1:04:fe:11:45:ee:f0:71: 6e:f2:90:11 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7pLpjw8bQUbkS4W8rnwtTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYjM1OTU2YTQwMzhhMDkzOGNjZGE4NTU5MmFkNTMxZTRh ODgzYWQwHhcNMjYwMTAxMjIxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWM4NDA2NTkzODM0NGIzNGI5OGQxYTUyMzY2YWZiNGJjYjBkNzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQJSf+I+INAW96W+3/R9dusJFnva BbnQlMxyJBgn2iHpdayl3mlHqdSjNJILDkc22OGaa29YmtvTz6kuWtFGrf80LRdo /xgt5tm2sAzLeALYUof1y6+CyKW6x6NUhHsYTd94xq5yFCZLa9n/M1E5qfhaP2lE xV1GADxPkn9Rsn6nssatsTqsPhw7YduMYhJZ9yYxVBR6GtN6Pod4U/vxzmWvHhNx J78y/xujOEE/ZVjBBR4ZtZv6hr6h8JF1Cg3b5xvZPWfv3/Q7qcBphs1uuEFWni5p 5f4gIU3schhlksZ7zwFYtrAcN55vf/6i/28AJwvmgInoB7YEtG1dvMxMnwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFArIQGWTg0SzS5jRpSNmr7S8sNcvMB8GA1UdIwQY MBaAFOOzWVakA4oJOMzahVkq1THkqIOtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDdOWlZxUURpZ2s0ek5xRldTclZNZVNvZzYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xN2JmODUtZTJjMC00NmY5LWIwZmIt MDdhZTY4MmMxMjYyLzEvQ3NoQVpaT0RSTE5MbU5HbEkyYXZ0THl3MXk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8xN2JmODUtZTJjMC00NmY5LWIwZmItMDdhZTY4MmMxMjYy LzEvNDdOWlZxUURpZ2s0ek5xRldTclZNZVNvZzYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufIYMA0E AgACMAcDBQMqDLqAMA0GCSqGSIb3DQEBCwUAA4IBAQARDuaoYsPK/Csa7yCFOQbh UiMgVAzjPSpLE9liCdy4c1RHTywEWKaMEEJQpLAyoExJOKsQcwR9BOPeBpDRdF3D qiSPNp3xyWWZIkJNIU+HGHSxxEFkQOgT8uf26djXRmIF1eC1ZIdt67+74IvVCUcU sjbdxs+QKBSMBGDbis+erxu/T7ldJHgD9T0YPtBAmxorMjRhVWrOJvsBq4EaCu7o OWLtP0V5qYWBSw/bfHg20FHDdgocu8L95c8beYrMbxk9hFcahZR+DM4rAcndDNZ/ dcw3F1U8/Bh+1OLkxoSEMsev2ij4NuBRxWHTfshbCinvxppc4QT+EUXu8HFu8pAR -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:23 2026 by rpki-client