This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/z_fYCrrGSV54cj1knb3xBk4SK5U.roa File: z_fYCrrGSV54cj1knb3xBk4SK5U.roa (raw, json) Hash identifier: EFlql6uKuI4YQL66OtBnNw+c0chssYW8DVC7ieJRlbY= Subject key identifier: CF:F7:D8:0A:BA:C6:49:5E:78:72:3D:64:9D:BD:F1:06:4E:12:2B:95 Certificate issuer: /CN=84920213cb230bfe51121ce5fb4dece28018bed0 Certificate serial: 019B77C702E89ECDB373430BE570DE8F322C Authority key identifier: 84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/z_fYCrrGSV54cj1knb3xBk4SK5U.roa Signing time: Thu 01 Jan 2026 04:18:09 +0000 ROA not before: Thu 01 Jan 2026 04:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25540 IP address blocks: 185.140.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.crl rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:02:e8:9e:cd:b3:73:43:0b:e5:70:de:8f:32:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84920213cb230bfe51121ce5fb4dece28018bed0 Validity Not Before: Jan 1 04:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cff7d80abac6495e78723d649dbdf1064e122b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cb:4e:e3:43:82:fa:81:0a:e2:72:36:21:29: 86:a7:a8:30:59:7d:88:19:fa:87:2e:ff:eb:ab:bf: 9c:29:e9:5e:27:cc:1b:a0:8c:0a:90:ee:15:04:9f: d2:fd:a5:28:fd:11:6d:97:55:7f:db:30:e0:07:c2: f6:b8:58:c2:d6:8e:ac:36:7e:0a:21:ee:f2:9f:c8: 67:f3:4b:8a:89:e9:87:6f:9b:ec:b6:39:bd:74:e9: e5:d5:bd:23:7a:56:23:28:f1:35:7f:07:0f:56:c8: 7b:3a:a1:9d:5f:ca:2f:11:9f:86:0b:e2:93:99:c1: a8:85:76:d8:3c:31:de:6d:9d:ac:d6:b9:9f:e1:e3: f5:3c:58:c5:14:04:74:79:c2:ba:48:2d:67:94:a3: ec:92:aa:53:db:e2:78:cc:ea:e6:5a:14:90:25:1f: 1e:da:4c:79:42:b3:6a:cd:34:b9:89:0b:b9:75:88: 53:58:bd:36:56:ec:c1:da:5a:b3:a2:a8:af:0b:4e: 33:b2:3f:85:b7:d9:03:68:44:aa:c2:b4:bf:d6:12: d7:32:b4:f6:69:bf:36:b5:2b:4a:b5:d3:36:7b:d3: 04:c0:35:27:03:d6:d9:a3:37:e0:c2:4e:29:dc:fd: 47:7c:3e:af:52:2d:b4:0e:4f:66:23:c2:de:00:3c: 44:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F7:D8:0A:BA:C6:49:5E:78:72:3D:64:9D:BD:F1:06:4E:12:2B:95 X509v3 Authority Key Identifier: keyid:84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/z_fYCrrGSV54cj1knb3xBk4SK5U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.140.70.0/24 Signature Algorithm: sha256WithRSAEncryption 34:20:7e:9f:79:8a:20:cc:76:98:f2:cc:7e:c7:74:da:bf:e3: b7:58:fc:95:b2:0b:ae:a8:7e:7c:e9:90:54:c9:3e:39:0b:56: 4f:33:6b:6c:c0:12:a5:5e:91:a2:37:f2:b6:e6:86:7a:0d:49: ee:28:e8:a2:38:50:df:0f:21:15:c4:7d:50:77:1e:95:cf:f4: 0d:12:1a:18:53:35:88:a4:dd:b3:71:9f:ea:b4:69:c1:c5:f5: b3:1e:bf:b7:00:04:60:c0:e3:b6:bb:7a:32:ad:ca:5e:43:63: 33:6a:2d:4b:85:0c:6b:af:43:91:b3:59:8d:0e:54:c2:20:53: 47:7c:08:1b:cb:b2:72:06:4c:d7:f1:ca:b2:c1:dd:2d:aa:1e: 76:65:60:97:28:32:9c:ca:0e:89:f0:24:ab:cb:01:ae:72:38: 82:37:86:a2:c3:8c:ae:e6:56:14:79:1c:90:13:0a:50:05:b1: b1:7c:b4:62:4b:1a:76:b1:06:3b:39:06:23:9d:cf:85:99:26: c7:5c:13:d5:8e:6a:35:d1:5b:4c:ff:56:1b:01:94:1b:e4:5f: a3:39:dc:9d:25:f9:04:e6:eb:3c:97:a4:fb:2a:a8:b8:ba:a9: 9c:5a:1b:f8:cc:01:64:59:54:68:73:0d:26:9a:12:4e:e6:d7: 34:59:d7:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xwLons2zc0ML5XDejzIsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0OTIwMjEzY2IyMzBiZmU1MTEyMWNlNWZiNGRlY2UyODAx OGJlZDAwHhcNMjYwMTAxMDQxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmY3ZDgwYWJhYzY0OTVlNzg3MjNkNjQ5ZGJkZjEwNjRlMTIyYjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzstO40OC+oEK4nI2ISmGp6gwWX2I GfqHLv/rq7+cKeleJ8wboIwKkO4VBJ/S/aUo/RFtl1V/2zDgB8L2uFjC1o6sNn4K Ie7yn8hn80uKiemHb5vstjm9dOnl1b0jelYjKPE1fwcPVsh7OqGdX8ovEZ+GC+KT mcGohXbYPDHebZ2s1rmf4eP1PFjFFAR0ecK6SC1nlKPskqpT2+J4zOrmWhSQJR8e 2kx5QrNqzTS5iQu5dYhTWL02VuzB2lqzoqivC04zsj+Ft9kDaESqwrS/1hLXMrT2 ab82tStKtdM2e9MEwDUnA9bZozfgwk4p3P1HfD6vUi20Dk9mI8LeADxEPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM/32Aq6xkleeHI9ZJ298QZOEiuVMB8GA1UdIwQY MBaAFISSAhPLIwv+URIc5ftN7OKAGL7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEpJQ0U4c2pDXzVSRWh6bC0wM3M0b0FZdnRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9hOGEwOWMtMGY4NC00YTg5LThhMTYt YjA0YjRkMDQzZjlmLzEvel9mWUNyckdTVjU0Y2oxa25iM3hCazRTSzVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9hOGEwOWMtMGY4NC00YTg5LThhMTYtYjA0YjRkMDQzZjlm LzEvaEpJQ0U4c2pDXzVSRWh6bC0wM3M0b0FZdnRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYxGMA0G CSqGSIb3DQEBCwUAA4IBAQA0IH6feYogzHaY8sx+x3Tav+O3WPyVsguuqH586ZBU yT45C1ZPM2tswBKlXpGiN/K25oZ6DUnuKOiiOFDfDyEVxH1Qdx6Vz/QNEhoYUzWI pN2zcZ/qtGnBxfWzHr+3AARgwOO2u3oyrcpeQ2Mzai1LhQxrr0ORs1mNDlTCIFNH fAgby7JyBkzX8cqywd0tqh52ZWCXKDKcyg6J8CSrywGucjiCN4aiw4yu5lYUeRyQ EwpQBbGxfLRiSxp2sQY7OQYjnc+FmSbHXBPVjmo10VtM/1YbAZQb5F+jOdydJfkE 5us8l6T7Kqi4uqmcWhv4zAFkWVRocw0mmhJO5tc0WdfK -----END CERTIFICATE-----Generated at Mon Jan 26 04:51:35 2026 by rpki-client