This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/Z1IlhEZgiQwk8auaQbQKsQhfjGw.roa File: Z1IlhEZgiQwk8auaQbQKsQhfjGw.roa (raw, json) Hash identifier: GuAHOBM9mGxQz1BFFSnguR68MvXbC1uYn6q2dEBSyQ0= Subject key identifier: 67:52:25:84:46:60:89:0C:24:F1:AB:9A:41:B4:0A:B1:08:5F:8C:6C Certificate issuer: /CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5 Certificate serial: 019B7FF2B69DB967CB31D30CA6B630A42004 Authority key identifier: AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/Z1IlhEZgiQwk8auaQbQKsQhfjGw.roa Signing time: Fri 02 Jan 2026 18:22:51 +0000 ROA not before: Fri 02 Jan 2026 18:22:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 185.24.80.0/24 maxlen: 24 185.24.81.0/24 maxlen: 24 185.24.82.0/24 maxlen: 24 185.24.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:b6:9d:b9:67:cb:31:d3:0c:a6:b6:30:a4:20:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5 Validity Not Before: Jan 2 18:22:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=675225844660890c24f1ab9a41b40ab1085f8c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cb:1f:a3:d9:b0:29:b9:81:65:21:45:01:92: a3:8a:4f:da:eb:f2:fc:7b:2d:4d:ba:7b:83:80:96: 87:33:7d:a5:cf:81:48:b4:41:7a:02:ba:2c:60:1d: f0:5e:a6:95:72:40:02:06:05:5e:7a:db:ab:93:3e: be:3d:cb:01:33:77:8c:a7:0b:a9:bd:89:66:63:14: aa:21:f8:4e:af:d3:29:11:80:33:d9:5e:17:e0:e3: 6e:2e:46:2b:65:10:3d:20:94:48:10:7d:27:55:39: 42:d3:53:e5:a2:08:e6:a3:2b:e1:aa:a9:08:27:ff: ac:b1:56:42:d4:66:3b:35:55:98:c9:94:63:4d:dc: e5:71:9e:38:43:e4:25:7d:81:2d:8b:e6:e4:78:20: e9:5c:7c:05:5d:72:29:6b:83:e3:60:33:e6:a8:d1: 71:34:eb:ad:1a:81:fe:c7:5b:db:c2:3d:aa:3f:2f: 10:21:8b:4c:ea:4a:38:31:43:f0:d6:20:13:a0:f5: 06:e8:38:79:0c:f3:cc:52:c0:4f:59:a3:0c:94:1f: 1a:bf:0d:45:96:0e:2a:c2:59:69:b5:1c:25:a9:bb: a6:1f:6d:88:e2:27:ed:10:db:4f:78:21:1a:e1:62: 6f:01:7d:d1:86:da:09:fa:00:a3:47:9e:ff:39:a8: 8e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:52:25:84:46:60:89:0C:24:F1:AB:9A:41:B4:0A:B1:08:5F:8C:6C X509v3 Authority Key Identifier: keyid:AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/Z1IlhEZgiQwk8auaQbQKsQhfjGw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.24.80.0/22 Signature Algorithm: sha256WithRSAEncryption 12:31:11:c8:6f:1e:9a:f1:4e:06:12:94:f0:c0:ba:bb:b0:17: b8:a1:a7:ea:5a:39:00:e0:d5:c5:1c:13:ed:98:64:12:02:5f: 6d:fc:d7:f9:1b:19:4f:46:c1:d0:28:cb:66:30:55:b7:a7:70: 28:2d:6c:8a:82:68:d5:67:6c:4d:bd:66:e6:ab:12:fb:ac:ec: e0:93:56:86:86:b8:31:c0:a3:90:5b:ff:bd:eb:10:3f:90:03: 0d:60:12:6c:2f:50:b4:58:bd:36:3e:fd:19:d0:fd:e7:d7:94: 76:09:6c:21:1a:e0:95:24:1b:79:33:55:d0:80:a9:15:7b:81: 58:5c:c7:a4:e6:5c:c4:75:f5:f3:8b:37:5e:2d:73:3c:d5:ac: e2:11:1f:0c:33:89:45:f7:dc:23:7f:e0:d8:73:d9:72:ce:d4: 1e:d4:71:c4:bc:e7:46:ee:cf:77:ee:4b:72:d5:0d:4e:82:1b: 7d:fa:14:94:c3:5f:24:3a:87:51:a9:7a:59:14:22:f7:f4:c0: 75:3a:dc:43:21:0d:3a:34:27:d6:f7:fc:e0:88:aa:33:99:e3: 4f:d8:68:12:ac:4c:f1:f4:2c:07:62:78:f0:1e:5a:4c:8e:73: 8d:a5:33:65:0c:cf:1b:31:ec:fe:f3:45:81:23:f7:01:1a:d8: c2:e8:1d:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8raduWfLMdMMprYwpCAEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNWZjNmM2YWVhM2YwZTRlZGY3Y2NiOTJlNmViMjM3N2E3 NDc5YTUwHhcNMjYwMTAyMTgyMjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzUyMjU4NDQ2NjA4OTBjMjRmMWFiOWE0MWI0MGFiMTA4NWY4YzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMsfo9mwKbmBZSFFAZKjik/a6/L8 ey1NunuDgJaHM32lz4FItEF6ArosYB3wXqaVckACBgVeeturkz6+PcsBM3eMpwup vYlmYxSqIfhOr9MpEYAz2V4X4ONuLkYrZRA9IJRIEH0nVTlC01PlogjmoyvhqqkI J/+ssVZC1GY7NVWYyZRjTdzlcZ44Q+QlfYEti+bkeCDpXHwFXXIpa4PjYDPmqNFx NOutGoH+x1vbwj2qPy8QIYtM6ko4MUPw1iAToPUG6Dh5DPPMUsBPWaMMlB8avw1F lg4qwllptRwlqbumH22I4iftENtPeCEa4WJvAX3RhtoJ+gCjR57/OaiOoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGdSJYRGYIkMJPGrmkG0CrEIX4xsMB8GA1UdIwQY MBaAFKxfxsauo/Dk7ffMuS5usjd6dHmlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckZfR3hxNmo4T1R0OTh5NUxtNnlOM3AwZWFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wODI3ZTAtMzMzMS00MGI0LTk5YjIt OWExMzcwOTJjZGQwLzEvWjFJbGhFWmdpUXdrOGF1YVFiUUtzUWhmakd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8wODI3ZTAtMzMzMS00MGI0LTk5YjItOWExMzcwOTJjZGQw LzEvckZfR3hxNmo4T1R0OTh5NUxtNnlOM3AwZWFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuRhQMA0G CSqGSIb3DQEBCwUAA4IBAQASMRHIbx6a8U4GEpTwwLq7sBe4oafqWjkA4NXFHBPt mGQSAl9t/Nf5GxlPRsHQKMtmMFW3p3AoLWyKgmjVZ2xNvWbmqxL7rOzgk1aGhrgx wKOQW/+96xA/kAMNYBJsL1C0WL02Pv0Z0P3n15R2CWwhGuCVJBt5M1XQgKkVe4FY XMek5lzEdfXzizdeLXM81aziER8MM4lF99wjf+DYc9lyztQe1HHEvOdG7s937kty 1Q1Oght9+hSUw18kOodRqXpZFCL39MB1OtxDIQ06NCfW9/zgiKozmeNP2GgSrEzx 9CwHYnjwHlpMjnONpTNlDM8bMez+80WBI/cBGtjC6B0s -----END CERTIFICATE-----Generated at Wed Jan 21 13:19:12 2026 by rpki-client