This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/zPP8T8fW5nYmNXr1z-76QSW13Wk.roa File: zPP8T8fW5nYmNXr1z-76QSW13Wk.roa (raw, json) Hash identifier: U5ca9wIzwUrG3jGkQlOsfKkE/6PvZnPpGQSjql+VyV0= Subject key identifier: CC:F3:FC:4F:C7:D6:E6:76:26:35:7A:F5:CF:EE:FA:41:25:B5:DD:69 Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027 Certificate serial: 019B797EB8EB37A4C9283842F8D9DD4BFC18 Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/zPP8T8fW5nYmNXr1z-76QSW13Wk.roa Signing time: Thu 01 Jan 2026 12:18:26 +0000 ROA not before: Thu 01 Jan 2026 12:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211261 IP address blocks: 185.223.178.0/24 maxlen: 24 185.237.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b8:eb:37:a4:c9:28:38:42:f8:d9:dd:4b:fc:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027 Validity Not Before: Jan 1 12:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ccf3fc4fc7d6e67626357af5cfeefa4125b5dd69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b1:ff:b7:a3:e9:64:69:a4:01:fb:f0:ae:a1: ec:9a:2e:ef:d1:ef:b4:bc:7b:9f:14:11:15:ed:d4: d4:9f:40:6b:f2:de:b2:f6:cf:3a:1e:98:77:a5:1b: 2e:6f:31:0c:f9:29:52:df:f9:22:df:36:2f:c2:52: 1e:a4:ea:1f:be:25:ac:9f:28:fa:33:59:41:29:c6: d9:50:ac:3d:03:c2:86:5d:94:e6:03:00:45:cd:a2: 6d:d5:fa:9c:97:69:2d:19:60:e6:01:45:18:99:19: 1d:5f:78:fc:cd:0d:87:d6:0b:36:c2:b3:1b:7e:5d: 91:47:e8:ff:7d:61:90:2a:7e:d4:51:45:fa:f6:96: 4e:b6:3e:14:60:ed:0a:e4:63:f8:ea:35:4c:f1:e9: 1a:c8:8b:0b:e5:be:92:2b:a2:34:ae:46:fe:9b:f4: cd:d6:aa:f9:b0:61:68:d5:b2:65:18:48:54:4c:ec: f6:ab:fa:d7:21:9c:a7:63:d7:32:ec:b0:6f:f9:6b: 6f:fe:f5:8f:fe:b8:7e:22:3c:14:d6:b0:ed:33:a4: ed:39:82:c7:b6:35:4b:a5:a8:5a:e7:b4:dc:88:3b: 5c:c5:28:5c:c1:1d:86:0b:92:ee:64:28:d4:b2:4a: db:a9:ec:32:75:7b:76:2c:9d:48:6a:e4:be:48:2c: 85:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F3:FC:4F:C7:D6:E6:76:26:35:7A:F5:CF:EE:FA:41:25:B5:DD:69 X509v3 Authority Key Identifier: keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/zPP8T8fW5nYmNXr1z-76QSW13Wk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.223.178.0/24 185.237.215.0/24 Signature Algorithm: sha256WithRSAEncryption 57:28:e7:e2:84:0d:b3:ea:c9:0e:12:64:31:67:b8:3b:a4:62: 7e:2a:d5:ad:70:be:6e:05:7a:af:00:0d:6c:bb:4f:4e:e9:1e: 39:7b:54:bf:b1:5d:c0:24:25:a5:5a:ec:2a:83:fb:8c:a1:59: 99:9e:bc:16:d6:1c:a9:76:b2:4e:3f:8f:18:b5:b2:7d:64:88: 72:b1:8e:ad:5e:fa:d4:46:d4:f6:65:c1:14:ea:8f:92:9a:54: c3:1f:36:8d:27:e0:9d:e1:5f:e8:d7:5c:79:6f:db:06:91:cf: 95:a5:3a:42:95:1e:f7:a7:53:fd:6e:bb:a1:67:27:93:85:18: 00:85:69:d7:39:8b:4e:5a:db:ab:cc:de:df:c3:71:84:2f:48: 47:c0:06:36:d3:61:16:4a:0a:ad:06:24:c4:25:a1:a9:7f:ac: f3:37:e7:f7:86:89:1c:01:8e:07:3f:e5:a9:d5:94:75:45:a2: 51:a8:d2:60:8f:51:05:c2:94:62:f4:27:0f:11:dc:1c:92:06: 55:e8:5f:8b:08:22:c5:e7:b2:ec:cd:51:0b:d2:0d:68:4b:7f: 46:7d:2a:15:02:ea:09:1a:15:0f:59:84:1b:13:0e:ea:47:49: 04:b1:23:d8:6e:4d:dd:91:ae:84:97:2e:db:08:0d:61:98:df: 7b:25:64:35 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5frjrN6TJKDhC+NndS/wYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMWU3MmYzZDA5NTdmNWE2ZTNiZDFiODQ0YTEyYTYxNDc0 NDkwMjcwHhcNMjYwMTAxMTIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2YzZmM0ZmM3ZDZlNjc2MjYzNTdhZjVjZmVlZmE0MTI1YjVkZDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rH/t6PpZGmkAfvwrqHsmi7v0e+0 vHufFBEV7dTUn0Br8t6y9s86Hph3pRsubzEM+SlS3/ki3zYvwlIepOofviWsnyj6 M1lBKcbZUKw9A8KGXZTmAwBFzaJt1fqcl2ktGWDmAUUYmRkdX3j8zQ2H1gs2wrMb fl2RR+j/fWGQKn7UUUX69pZOtj4UYO0K5GP46jVM8ekayIsL5b6SK6I0rkb+m/TN 1qr5sGFo1bJlGEhUTOz2q/rXIZynY9cy7LBv+Wtv/vWP/rh+IjwU1rDtM6TtOYLH tjVLpaha57TciDtcxShcwR2GC5LuZCjUskrbqewydXt2LJ1IauS+SCyF2wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMzz/E/H1uZ2JjV69c/u+kEltd1pMB8GA1UdIwQY MBaAFAsecvPQlX9abjvRuEShKmFHRJAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xYTVhOTYtZDM2ZS00ZjNhLTliMzQt MDU0OGQzODk1YTU1LzEvelBQOFQ4Zlc1blltTlhyMXotNzZRU1cxM1drLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8xYTVhOTYtZDM2ZS00ZjNhLTliMzQtMDU0OGQzODk1YTU1 LzEvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAud+yAwQA ue3XMA0GCSqGSIb3DQEBCwUAA4IBAQBXKOfihA2z6skOEmQxZ7g7pGJ+KtWtcL5u BXqvAA1su09O6R45e1S/sV3AJCWlWuwqg/uMoVmZnrwW1hypdrJOP48YtbJ9ZIhy sY6tXvrURtT2ZcEU6o+SmlTDHzaNJ+Cd4V/o11x5b9sGkc+VpTpClR73p1P9bruh ZyeThRgAhWnXOYtOWturzN7fw3GEL0hHwAY202EWSgqtBiTEJaGpf6zzN+f3hokc AY4HP+Wp1ZR1RaJRqNJgj1EFwpRi9CcPEdwckgZV6F+LCCLF57LszVEL0g1oS39G fSoVAuoJGhUPWYQbEw7qR0kEsSPYbk3dka6Ely7bCA1hmN97JWQ1 -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:46 2026 by rpki-client