This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/cpzictopgP_W9ifWySv9e6ehOOc.roa File: cpzictopgP_W9ifWySv9e6ehOOc.roa (raw, json) Hash identifier: 5rHP/vfqqkxl9562AQVwm1f2nGTx9rXW1y4VWn7ksEw= Subject key identifier: 72:9C:E2:72:DA:29:80:FF:D6:F6:27:D6:C9:2B:FD:7B:A7:A1:38:E7 Certificate issuer: /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d Certificate serial: 019B7BA4450FA6F604FA306D2AFB7D281A2B Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/cpzictopgP_W9ifWySv9e6ehOOc.roa Signing time: Thu 01 Jan 2026 22:18:41 +0000 ROA not before: Thu 01 Jan 2026 22:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59779 IP address blocks: 185.12.180.0/23 maxlen: 23 185.12.182.0/24 maxlen: 24 185.57.48.0/23 maxlen: 23 185.57.50.0/24 maxlen: 24 2a02:57e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:45:0f:a6:f6:04:fa:30:6d:2a:fb:7d:28:1a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d Validity Not Before: Jan 1 22:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=729ce272da2980ffd6f627d6c92bfd7ba7a138e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ad:3e:ca:fa:4f:6f:eb:20:51:9e:40:28:c2: 68:38:dd:db:ee:f3:c6:f0:66:43:ae:3e:1e:81:b9: 1a:45:a3:0d:ae:5f:d0:ee:0c:0d:f4:53:fc:09:e7: 90:31:3d:79:51:0c:ec:6c:d1:d4:c4:0a:72:18:2b: bc:04:73:67:c5:c7:63:13:13:5b:d1:f8:ed:7e:0d: 8c:06:5e:f2:a8:f5:33:e4:fb:68:0c:c8:f7:af:a0: 56:02:ef:67:02:c7:ba:43:7c:7b:f2:a2:63:8d:fc: 0a:03:a2:c6:e5:16:b2:d8:47:d3:c4:55:7a:ad:ac: c7:7f:f7:26:17:7e:8a:ec:33:b4:c6:bf:3b:e6:af: 98:19:2b:d3:9a:a6:11:0b:3c:85:26:8d:2b:45:f3: 15:49:4d:65:47:4f:82:7d:16:aa:24:40:3b:fc:10: 38:01:08:ee:1c:31:99:8f:88:60:81:3a:34:7d:c3: 62:b7:0b:09:fc:ec:7c:87:9d:b6:2a:76:19:82:2e: 0e:13:46:ca:e5:97:c2:63:fd:0f:88:70:64:e3:85: c5:be:5e:fd:88:62:d8:0d:0c:80:1a:8f:24:ee:89: f2:12:ce:f0:55:5c:6c:fc:90:20:87:71:9f:77:46: 70:70:65:dc:8c:c5:3a:9a:63:b7:09:10:f3:db:9d: a2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:9C:E2:72:DA:29:80:FF:D6:F6:27:D6:C9:2B:FD:7B:A7:A1:38:E7 X509v3 Authority Key Identifier: keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/cpzictopgP_W9ifWySv9e6ehOOc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.12.180.0-185.12.182.255 185.57.48.0-185.57.50.255 IPv6: 2a02:57e0::/32 Signature Algorithm: sha256WithRSAEncryption 6c:c6:52:78:64:4e:f7:93:c4:8a:05:b3:82:35:3b:84:d1:12: a1:48:e9:7a:b0:47:60:fd:59:8d:92:bc:53:41:ed:ea:3a:ac: ef:c4:58:25:1b:7c:f8:ec:6c:d3:5d:03:fa:a1:5a:5b:52:f0: 46:ab:4a:b6:d5:9c:29:9f:9c:f9:6e:ed:6e:3d:95:b7:d8:d0: 77:53:0c:ba:76:52:6f:11:75:3d:18:7a:86:fa:80:42:d2:33: eb:0c:d4:92:fc:71:b2:25:b8:6c:92:7c:6b:78:88:f0:fb:ba: 30:37:82:71:e6:d8:d2:d8:c1:0e:53:70:cc:15:84:f9:39:34: ab:c1:4d:0a:8e:25:61:71:0c:c4:81:7d:98:ac:3b:93:b3:fb: 49:f5:19:a0:10:20:88:db:45:15:0e:2f:a0:ca:f6:9e:1f:20: 39:ba:bc:bb:0a:67:0f:85:0b:ff:1d:78:bf:b9:c5:37:0b:51: 87:e1:d0:1e:57:19:ef:c5:3a:df:e0:3a:3b:57:a2:83:e7:55: 6e:dd:cf:6e:63:63:82:69:e0:44:04:5c:b8:f9:c5:53:57:a7: 51:ac:49:c9:f1:60:1d:b9:1c:31:f7:be:63:12:bd:a7:59:96: 06:b7:be:b2:f6:4c:ea:15:ef:42:9f:d0:3d:bd:8f:bc:ac:f6: 27:80:97:d4 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt7pEUPpvYE+jBtKvt9KBorMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NWQwMDQ0NDYxODJkNTFmZDM4ZjdmNzVmZTJhNWM4NjA4 YmM4NmQwHhcNMjYwMTAxMjIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjljZTI3MmRhMjk4MGZmZDZmNjI3ZDZjOTJiZmQ3YmE3YTEzOGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq0+yvpPb+sgUZ5AKMJoON3b7vPG 8GZDrj4egbkaRaMNrl/Q7gwN9FP8CeeQMT15UQzsbNHUxApyGCu8BHNnxcdjExNb 0fjtfg2MBl7yqPUz5PtoDMj3r6BWAu9nAse6Q3x78qJjjfwKA6LG5Ray2EfTxFV6 razHf/cmF36K7DO0xr875q+YGSvTmqYRCzyFJo0rRfMVSU1lR0+CfRaqJEA7/BA4 AQjuHDGZj4hggTo0fcNitwsJ/Ox8h522KnYZgi4OE0bK5ZfCY/0PiHBk44XFvl79 iGLYDQyAGo8k7onyEs7wVVxs/JAgh3Gfd0ZwcGXcjMU6mmO3CRDz252ipQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFHKc4nLaKYD/1vYn1skr/XunoTjnMB8GA1UdIwQY MBaAFPhdAERGGC1R/Tj391/ipchgi8htMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1GMEFSRVlZTFZIOU9QZjNYLUtseUdDTHlHMC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYzlkYjUyLWFjOTEtNDA2YS05Zjk1 LTA4MGVlMGE5N2Y2YS8xL2NwemljdG9wZ1BfVzlpZld5U3Y5ZTZlaE9PYy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMmEvYzlkYjUyLWFjOTEtNDA2YS05Zjk1LTA4MGVlMGE5N2Y2 YS8xLzEtRjBBUkVZWUxWSDlPUGYzWC1LbHlHQ0x5RzAuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwRAYIKwYBBQUHAQcBAf8ENTAzMCIEAgABMBwwDAMEArkM tAMEALkMtjAMAwQEuTkwAwQAuTkyMA0EAgACMAcDBQAqAlfgMA0GCSqGSIb3DQEB CwUAA4IBAQBsxlJ4ZE73k8SKBbOCNTuE0RKhSOl6sEdg/VmNkrxTQe3qOqzvxFgl G3z47GzTXQP6oVpbUvBGq0q21Zwpn5z5bu1uPZW32NB3Uwy6dlJvEXU9GHqG+oBC 0jPrDNSS/HGyJbhsknxreIjw+7owN4Jx5tjS2MEOU3DMFYT5OTSrwU0KjiVhcQzE gX2YrDuTs/tJ9RmgECCI20UVDi+gyvaeHyA5ury7CmcPhQv/HXi/ucU3C1GH4dAe VxnvxTrf4Do7V6KD51Vu3c9uY2OCaeBEBFy4+cVTV6dRrEnJ8WAduRwx975jEr2n WZYGt76y9kzqFe9Cn9A9vY+8rPYngJfU -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:10 2026 by rpki-client