This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/aG9dVoBqgrqqk06kOEPaSY8Bqzs.roa File: aG9dVoBqgrqqk06kOEPaSY8Bqzs.roa (raw, json) Hash identifier: Orir7PkRZZnMYBwB3ZGIXihY2LtAAjB+kCKoDM/u5+A= Subject key identifier: 68:6F:5D:56:80:6A:82:BA:AA:93:4E:A4:38:43:DA:49:8F:01:AB:3B Certificate issuer: /CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6 Certificate serial: 019B7BA4F21F0E8C64691E69F8470DC3503B Authority key identifier: AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/aG9dVoBqgrqqk06kOEPaSY8Bqzs.roa Signing time: Thu 01 Jan 2026 22:19:26 +0000 ROA not before: Thu 01 Jan 2026 22:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60688 IP address blocks: 185.27.196.0/22 maxlen: 22 185.27.196.0/23 maxlen: 23 185.27.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:f2:1f:0e:8c:64:69:1e:69:f8:47:0d:c3:50:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6 Validity Not Before: Jan 1 22:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=686f5d56806a82baaa934ea43843da498f01ab3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:81:98:f9:0d:cb:10:29:39:04:6c:b6:cf:f5: 38:57:82:e0:aa:1c:d8:13:7f:05:09:72:5b:3d:3d: 05:6d:09:ed:68:16:dc:8e:7b:16:0f:a9:3c:38:5a: eb:c8:40:cc:b7:45:b2:4f:b2:09:5d:0c:d5:5c:c9: 43:4f:23:24:d1:0e:13:43:50:1b:0b:1f:f0:e5:18: 1e:ac:9c:4b:46:9c:43:4b:b6:69:91:d6:0f:9c:76: 3c:b5:b7:34:7b:e0:87:01:6f:51:b3:82:d8:35:93: 57:76:5d:8c:a4:e6:7f:6b:50:84:be:fa:64:73:1f: 69:00:bf:13:b3:cd:2f:ef:47:7f:8b:12:28:7f:2d: 3e:3a:81:25:60:48:fb:00:d6:b2:7d:e8:99:dd:c8: 12:26:ed:39:53:97:66:0b:ac:2f:59:8f:8a:1c:63: 0a:1e:9a:50:e5:9c:f0:5c:19:b6:ce:30:43:d0:87: 1b:b1:bb:f8:1f:d8:a5:55:6a:26:3d:74:5c:59:6e: bf:a0:8d:79:c9:b3:58:5e:2d:19:75:59:ec:fc:a0: 55:a1:11:97:a9:e6:ef:86:fc:52:b2:b5:49:54:ce: 91:bc:1c:28:fd:d4:c5:11:6c:4f:44:d0:4d:8e:53: 07:4e:15:3f:72:3b:90:2f:b1:8a:3b:40:a9:96:ed: f6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:6F:5D:56:80:6A:82:BA:AA:93:4E:A4:38:43:DA:49:8F:01:AB:3B X509v3 Authority Key Identifier: keyid:AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/aG9dVoBqgrqqk06kOEPaSY8Bqzs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.27.196.0/22 Signature Algorithm: sha256WithRSAEncryption 80:e6:7a:8d:9d:bc:4a:f6:cd:be:d2:37:23:5e:10:83:cf:f1: b2:38:f0:6d:c6:08:cc:05:26:af:6b:e0:96:77:d5:d7:41:59: 65:ee:0a:b7:4e:5f:27:b6:b8:32:f2:42:db:b9:a4:af:ab:ad: 19:c1:eb:94:d9:6a:16:9a:47:92:26:11:92:e9:8f:6c:34:bc: 4b:b2:a5:be:06:81:bd:e7:03:66:0c:1a:9a:02:f8:43:c8:18: c6:1f:9e:9f:ce:2b:50:7e:71:ae:84:a3:4f:1c:10:7d:61:7e: f6:f7:a3:50:be:25:1b:56:16:3e:23:15:0a:52:d6:b7:68:af: 6c:90:46:03:fd:4d:c9:a8:4a:d2:07:e8:43:36:6b:46:9e:a1: d5:27:42:b0:f3:d0:45:7a:c6:15:d4:60:85:08:96:97:2e:51: cc:6f:3f:ca:ea:09:0d:df:0f:64:d1:ee:64:8b:3b:db:56:41: fc:0c:bd:93:7f:ff:e2:13:a6:61:17:81:2f:4b:fe:a3:d8:e1: 88:7b:90:17:e4:e1:3c:96:09:8e:e3:01:87:27:87:0e:97:03: b1:19:d6:bf:f0:75:39:8d:2b:07:26:e2:c0:19:7c:71:3c:61: b7:78:be:53:19:c3:4e:0c:d3:a9:4b:1d:df:5e:3e:bc:6d:6e: bd:79:19:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pPIfDoxkaR5p+EcNw1A7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMGNkMWEzMzhlYmY1Yzc5NTJlYjlhMWYwMDYwNTQ5Zjkz NDBhZDYwHhcNMjYwMTAxMjIxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODZmNWQ1NjgwNmE4MmJhYWE5MzRlYTQzODQzZGE0OThmMDFhYjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04GY+Q3LECk5BGy2z/U4V4LgqhzY E38FCXJbPT0FbQntaBbcjnsWD6k8OFrryEDMt0WyT7IJXQzVXMlDTyMk0Q4TQ1Ab Cx/w5RgerJxLRpxDS7ZpkdYPnHY8tbc0e+CHAW9Rs4LYNZNXdl2MpOZ/a1CEvvpk cx9pAL8Ts80v70d/ixIofy0+OoElYEj7ANayfeiZ3cgSJu05U5dmC6wvWY+KHGMK HppQ5ZzwXBm2zjBD0Icbsbv4H9ilVWomPXRcWW6/oI15ybNYXi0ZdVns/KBVoRGX qebvhvxSsrVJVM6RvBwo/dTFEWxPRNBNjlMHThU/cjuQL7GKO0Cplu32LQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGhvXVaAaoK6qpNOpDhD2kmPAas7MB8GA1UdIwQY MBaAFKwM0aM46/XHlS65ofAGBUn5NArWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckF6Um96anI5Y2VWTHJtaDhBWUZTZmswQ3RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wYzVlYzEtOWMzZC00MTYyLTk4MDQt YTMzNTE4YmRkOGZlLzEvYUc5ZFZvQnFncnFxazA2a09FUGFTWThCcXpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8wYzVlYzEtOWMzZC00MTYyLTk4MDQtYTMzNTE4YmRkOGZl LzEvckF6Um96anI5Y2VWTHJtaDhBWUZTZmswQ3RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuRvEMA0G CSqGSIb3DQEBCwUAA4IBAQCA5nqNnbxK9s2+0jcjXhCDz/GyOPBtxgjMBSava+CW d9XXQVll7gq3Tl8ntrgy8kLbuaSvq60ZweuU2WoWmkeSJhGS6Y9sNLxLsqW+BoG9 5wNmDBqaAvhDyBjGH56fzitQfnGuhKNPHBB9YX7296NQviUbVhY+IxUKUta3aK9s kEYD/U3JqErSB+hDNmtGnqHVJ0Kw89BFesYV1GCFCJaXLlHMbz/K6gkN3w9k0e5k izvbVkH8DL2Tf//iE6ZhF4EvS/6j2OGIe5AX5OE8lgmO4wGHJ4cOlwOxGda/8HU5 jSsHJuLAGXxxPGG3eL5TGcNODNOpSx3fXj68bW69eRm1 -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:53 2026 by rpki-client