This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/1-z20vDfkn7oH-6wUhtZ7pUOpXYs.roa File: 1-z20vDfkn7oH-6wUhtZ7pUOpXYs.roa (raw, json) Hash identifier: 4MFRLpbPJz7onF3ec6CHT+GVAOztKot1i4cNl9/RUGQ= Subject key identifier: FB:3D:B4:BC:37:E4:9F:BA:07:FB:AC:14:86:D6:7B:A5:43:A9:5D:8B Certificate issuer: /CN=2af5e4866ba09820124a6e511104fc41fa541995 Certificate serial: 019B7AC91F6AA4D5725A19B3CE03BFAB17C1 Authority key identifier: 2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/1-z20vDfkn7oH-6wUhtZ7pUOpXYs.roa Signing time: Thu 01 Jan 2026 18:19:19 +0000 ROA not before: Thu 01 Jan 2026 18:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50114 IP address blocks: 185.110.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:1f:6a:a4:d5:72:5a:19:b3:ce:03:bf:ab:17:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2af5e4866ba09820124a6e511104fc41fa541995 Validity Not Before: Jan 1 18:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb3db4bc37e49fba07fbac1486d67ba543a95d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f4:a7:87:82:53:3f:6f:c0:88:72:53:1d:ad: 06:be:2a:7f:91:17:0e:36:e3:1e:04:62:e9:63:96: 66:85:4f:eb:49:ef:6c:a6:3a:29:03:39:5c:2b:14: 88:1f:cd:9e:e9:7f:a8:61:d6:a0:0a:8b:af:90:21: 23:3a:58:22:3b:f2:01:8b:36:c6:25:b5:06:69:ee: bd:71:ad:ed:5f:ac:14:57:90:b1:c9:c3:bd:4c:db: 93:33:a2:60:06:03:51:9c:b0:bc:74:75:46:3d:f7: 68:20:c6:84:86:4b:18:13:98:87:b0:ad:08:e3:d3: 97:05:3a:6b:72:e4:8a:54:73:6e:99:7c:96:0c:e3: 82:14:0a:8c:13:60:4a:45:89:bb:87:99:11:05:c9: 7d:bf:26:d7:f5:07:4e:65:08:ca:1c:89:06:ed:b3: f2:97:6d:1a:98:20:01:aa:e4:f5:b9:0c:68:03:31: be:73:e3:a8:f1:88:af:a1:c7:a8:9d:e9:a7:70:4f: 48:12:05:7b:2f:8d:d2:f2:d7:c7:bd:31:49:0b:1b: 78:54:dc:45:6b:cf:07:02:1b:8a:82:cb:25:1a:9e: 95:c4:6b:4b:7e:19:79:52:db:a3:2b:73:a2:cf:86: 9f:55:73:16:d3:00:fc:c9:a4:f7:5d:85:c2:50:5f: a6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3D:B4:BC:37:E4:9F:BA:07:FB:AC:14:86:D6:7B:A5:43:A9:5D:8B X509v3 Authority Key Identifier: keyid:2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/1-z20vDfkn7oH-6wUhtZ7pUOpXYs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.110.237.0/24 Signature Algorithm: sha256WithRSAEncryption ba:a2:ff:8f:e6:e2:4c:bc:e0:bf:81:10:f0:6f:f7:cc:03:30: 76:81:93:f5:f0:74:90:7a:8e:51:2f:37:81:83:fd:cd:a2:4f: d3:1f:3e:c6:b2:93:26:ca:f7:4a:95:b1:dd:55:3d:db:8c:72: 7f:eb:24:05:1e:a5:62:7e:14:47:46:ac:d7:bc:5c:76:1a:9f: 91:0c:3c:3b:45:84:58:05:bd:44:4f:bd:85:3a:1c:5a:8e:74: 37:51:8e:47:72:14:8b:9d:34:6f:c7:84:54:b3:9b:b2:26:55: 65:1a:c1:36:d1:d5:32:52:ee:72:75:64:95:89:6b:39:5d:df: dd:52:99:b5:c7:fd:7a:29:01:c7:b1:35:17:f1:2a:d8:18:d0: 56:b5:e6:14:96:ce:5b:02:5d:7f:c4:58:e7:17:70:71:0c:eb: ae:7d:ab:79:dc:7e:54:7c:70:ed:45:2a:89:d5:30:23:08:e2: b5:af:e2:8b:28:14:a1:7b:f7:3d:99:c7:37:43:b1:84:e5:7f: f5:f3:d9:5f:02:25:7b:19:95:7f:0a:86:b3:73:7c:07:4b:48: 7a:1e:05:4c:28:11:cf:bc:bb:3e:fd:ce:66:73:21:42:cc:bf: 62:c1:c1:7e:41:01:f6:e0:1b:68:22:ef:96:cd:e2:d9:12:0b: e2:d6:df:57 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6yR9qpNVyWhmzzgO/qxfBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZjVlNDg2NmJhMDk4MjAxMjRhNmU1MTExMDRmYzQxZmE1 NDE5OTUwHhcNMjYwMTAxMTgxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjNkYjRiYzM3ZTQ5ZmJhMDdmYmFjMTQ4NmQ2N2JhNTQzYTk1ZDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofSnh4JTP2/AiHJTHa0Gvip/kRcO NuMeBGLpY5ZmhU/rSe9spjopAzlcKxSIH82e6X+oYdagCouvkCEjOlgiO/IBizbG JbUGae69ca3tX6wUV5CxycO9TNuTM6JgBgNRnLC8dHVGPfdoIMaEhksYE5iHsK0I 49OXBTprcuSKVHNumXyWDOOCFAqME2BKRYm7h5kRBcl9vybX9QdOZQjKHIkG7bPy l20amCABquT1uQxoAzG+c+Oo8YivoceonemncE9IEgV7L43S8tfHvTFJCxt4VNxF a88HAhuKgsslGp6VxGtLfhl5UtujK3Oiz4afVXMW0wD8yaT3XYXCUF+mPQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPs9tLw35J+6B/usFIbWe6VDqV2LMB8GA1UdIwQY MBaAFCr15IZroJggEkpuUREE/EH6VBmVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3ZYa2htdWdtQ0FTU201UkVRVDhRZnBVR1pVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yNTI3NjEtMDE5YS00ZGU1LTk1N2Qt YzMyMGU1MGEzYzc5LzEvMS16MjB2RGZrbjdvSC02d1VodFo3cFVPcFhZcy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMGIvMjUyNzYxLTAxOWEtNGRlNS05NTdkLWMzMjBlNTBhM2M3 OS8xL0t2WGtobXVnbUNBU1NtNVJFUVQ4UWZwVUdaVS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlu7TAN BgkqhkiG9w0BAQsFAAOCAQEAuqL/j+biTLzgv4EQ8G/3zAMwdoGT9fB0kHqOUS83 gYP9zaJP0x8+xrKTJsr3SpWx3VU924xyf+skBR6lYn4UR0as17xcdhqfkQw8O0WE WAW9RE+9hTocWo50N1GOR3IUi500b8eEVLObsiZVZRrBNtHVMlLucnVklYlrOV3f 3VKZtcf9eikBx7E1F/Eq2BjQVrXmFJbOWwJdf8RY5xdwcQzrrn2redx+VHxw7UUq idUwIwjita/iiygUoXv3PZnHN0OxhOV/9fPZXwIlexmVfwqGs3N8B0tIeh4FTCgR z7y7Pv3OZnMhQsy/YsHBfkEB9uAbaCLvls3i2RIL4tbfVw== -----END CERTIFICATE-----Generated at Mon Jan 26 08:43:06 2026 by rpki-client