This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/Z7_grVtAJU7hfwbq-pCXGjagV74.roa File: Z7_grVtAJU7hfwbq-pCXGjagV74.roa (raw, json) Hash identifier: YxhFU3h3k0uDJ916nZ5V7OvtkvXv5Nzb7/nDDuA04NE= Subject key identifier: 67:BF:E0:AD:5B:40:25:4E:E1:7F:06:EA:FA:90:97:1A:36:A0:57:BE Certificate issuer: /CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a Certificate serial: 019B7FF2969918A274070B984081D02BD5D7 Authority key identifier: 5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/Z7_grVtAJU7hfwbq-pCXGjagV74.roa Signing time: Fri 02 Jan 2026 18:22:43 +0000 ROA not before: Fri 02 Jan 2026 18:22:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60775 IP address blocks: 185.177.144.0/22 maxlen: 22 185.177.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:96:99:18:a2:74:07:0b:98:40:81:d0:2b:d5:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a Validity Not Before: Jan 2 18:22:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67bfe0ad5b40254ee17f06eafa90971a36a057be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2a:97:ca:51:18:14:44:6a:f5:5b:c1:ee:bf: b8:d8:c3:09:67:2d:d5:65:ff:21:02:10:61:98:70: 09:81:15:ce:2a:58:f5:25:ed:64:1f:1f:a3:0e:20: 62:a5:0e:64:eb:2a:12:11:33:87:a0:9f:03:4f:99: 9a:5b:2c:17:cd:fc:b4:37:0c:e8:96:36:86:b8:bc: 61:83:9d:3d:43:25:da:fc:0a:6b:7f:ae:51:d3:c8: f7:ae:bc:53:0d:13:6e:95:88:9e:f0:c7:f9:07:a2: 4e:05:14:fb:20:61:7b:61:d8:c0:ef:b0:e5:0b:47: f6:c9:4f:8c:07:1b:87:e8:a2:b4:cf:f4:a8:01:bc: 18:47:c8:37:f2:fe:b0:96:aa:b2:ac:73:2a:92:92: 20:93:05:f8:f0:36:b3:17:4a:83:e1:5e:73:b3:7a: 2e:fa:d3:43:bd:86:b3:26:c2:e1:7f:17:fd:40:05: 7e:eb:0e:44:2f:6c:a7:57:7c:94:6b:50:6c:f3:7d: f9:30:e2:5e:8d:c7:89:3b:0d:d1:d1:aa:e0:83:fc: f4:9d:2c:b9:08:86:84:87:28:e8:e9:5b:a5:f8:82: 55:df:78:03:52:49:8e:08:05:c3:5a:2b:43:0a:84: ea:f8:b1:a6:c4:83:68:30:87:d3:b2:0a:e1:ef:49: 49:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BF:E0:AD:5B:40:25:4E:E1:7F:06:EA:FA:90:97:1A:36:A0:57:BE X509v3 Authority Key Identifier: keyid:5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/Z7_grVtAJU7hfwbq-pCXGjagV74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.177.144.0/22 Signature Algorithm: sha256WithRSAEncryption ac:8c:a1:f2:41:99:79:a8:23:e0:16:f5:84:7b:17:61:6e:99: 9e:c3:fb:0b:32:99:bc:8a:ef:bb:70:af:12:b0:17:c5:6f:c1: 5f:f7:c6:3b:bc:5b:5a:1d:01:6b:aa:e2:7a:22:8e:cd:0a:04: ee:19:36:51:91:55:c0:4e:38:3f:d8:d9:86:5c:cb:a7:3d:ec: cb:8c:7a:fd:58:35:29:84:ea:a7:aa:82:41:5d:2c:7f:bc:8e: 27:6a:7d:b9:ea:a3:0c:94:22:50:cd:b3:42:48:05:92:84:80: 1c:a7:cc:10:09:b1:b3:42:57:74:e8:6e:61:42:36:1f:5f:bf: ce:e3:e4:8d:11:b0:81:e3:ec:85:31:44:90:b1:1f:d6:7b:50: 4c:20:f5:b4:a8:e5:dc:a7:76:ec:20:97:71:6a:1b:30:2b:27: bf:2f:aa:b3:8c:46:17:2f:68:0c:75:23:a2:c0:f5:c6:69:46: 04:e6:e8:f1:8c:50:81:2d:62:f6:b5:9f:14:97:07:cf:ec:8f: 58:12:d8:44:e0:1f:f4:2f:b4:ff:c7:84:9c:b8:93:fc:e5:c6: 93:df:25:77:eb:07:d7:1b:ce:cc:0d:73:10:3c:2d:7c:f8:6c: 2b:0c:e1:75:48:59:2d:97:25:7a:d8:b3:d0:cc:78:01:85:71: 91:b7:4a:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8paZGKJ0BwuYQIHQK9XXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZDhkNzJiMWNiZmM2N2MzNzlhZDlhOTJjNjZmYWM2Yzhk MzIzM2EwHhcNMjYwMTAyMTgyMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2JmZTBhZDViNDAyNTRlZTE3ZjA2ZWFmYTkwOTcxYTM2YTA1N2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyqXylEYFERq9VvB7r+42MMJZy3V Zf8hAhBhmHAJgRXOKlj1Je1kHx+jDiBipQ5k6yoSETOHoJ8DT5maWywXzfy0Nwzo ljaGuLxhg509QyXa/Aprf65R08j3rrxTDRNulYie8Mf5B6JOBRT7IGF7YdjA77Dl C0f2yU+MBxuH6KK0z/SoAbwYR8g38v6wlqqyrHMqkpIgkwX48DazF0qD4V5zs3ou +tNDvYazJsLhfxf9QAV+6w5EL2ynV3yUa1Bs8335MOJejceJOw3R0argg/z0nSy5 CIaEhyjo6Vul+IJV33gDUkmOCAXDWitDCoTq+LGmxINoMIfTsgrh70lJ5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGe/4K1bQCVO4X8G6vqQlxo2oFe+MB8GA1UdIwQY MBaAFFvY1yscv8Z8N5rZqSxm+sbI0yM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kMjk2YTgtYTViMS00YTM0LTgxMjgt ODkzNTllNzgzMjI0LzEvWjdfZ3JWdEFKVTdoZndicS1wQ1hHamFnVjc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9kMjk2YTgtYTViMS00YTM0LTgxMjgtODkzNTllNzgzMjI0 LzEvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubGQMA0G CSqGSIb3DQEBCwUAA4IBAQCsjKHyQZl5qCPgFvWEexdhbpmew/sLMpm8iu+7cK8S sBfFb8Ff98Y7vFtaHQFrquJ6Io7NCgTuGTZRkVXATjg/2NmGXMunPezLjHr9WDUp hOqnqoJBXSx/vI4nan256qMMlCJQzbNCSAWShIAcp8wQCbGzQld06G5hQjYfX7/O 4+SNEbCB4+yFMUSQsR/We1BMIPW0qOXcp3bsIJdxahswKye/L6qzjEYXL2gMdSOi wPXGaUYE5ujxjFCBLWL2tZ8UlwfP7I9YEthE4B/0L7T/x4ScuJP85caT3yV36wfX G87MDXMQPC18+GwrDOF1SFktlyV62LPQzHgBhXGRt0r1 -----END CERTIFICATE-----Generated at Mon Jan 26 01:43:43 2026 by rpki-client