This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/z4dC7BchYgJeEJVK0u1hQk0LX9w.roa File: z4dC7BchYgJeEJVK0u1hQk0LX9w.roa (raw, json) Hash identifier: eWL2mFtDMtr2WhkRkhhO2F6MQbo7HgvI3DvROQrIYRQ= Subject key identifier: CF:87:42:EC:17:21:62:02:5E:10:95:4A:D2:ED:61:42:4D:0B:5F:DC Certificate issuer: /CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6 Certificate serial: 019B7C11A7DA4B3609DBDA378830C13C39F5 Authority key identifier: D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/z4dC7BchYgJeEJVK0u1hQk0LX9w.roa Signing time: Fri 02 Jan 2026 00:18:10 +0000 ROA not before: Fri 02 Jan 2026 00:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205260 IP address blocks: 185.223.196.0/22 maxlen: 22 185.223.199.0/24 maxlen: 24 2a0c:4c00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:a7:da:4b:36:09:db:da:37:88:30:c1:3c:39:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6 Validity Not Before: Jan 2 00:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf8742ec172162025e10954ad2ed61424d0b5fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:20:ac:2e:9c:82:3a:a0:03:ab:e0:d2:fe:b0: 4a:00:73:1c:6a:20:48:4a:6c:81:40:28:df:74:99: 69:33:1b:2a:5b:90:09:d2:05:d4:44:c9:dd:85:e2: c3:83:95:7d:c8:21:b4:e3:8a:43:aa:d8:d5:cc:55: 95:44:81:c9:c8:40:33:01:6a:73:c0:13:f7:fa:95: bb:57:75:52:73:24:1a:fe:9f:cd:af:86:c3:f3:f5: 66:4b:7d:88:1a:fe:69:1b:16:f2:2c:44:90:5b:11: 23:91:ee:89:e7:49:ad:ec:c1:61:9f:ef:84:2c:cd: bd:b9:c2:f0:df:fa:77:9f:b9:6c:6b:7b:28:34:40: 91:e2:d1:46:f5:fe:7f:52:e6:bb:fb:5d:eb:48:fe: 63:6f:3a:10:bc:4f:4d:33:b2:fa:c1:cb:cf:db:86: 30:94:50:f9:4a:18:d9:45:03:0d:d0:b4:2e:f0:4c: e1:59:4a:5a:54:1f:77:f5:91:ce:11:da:ad:8e:3f: 23:ba:bf:47:6b:cb:6e:f2:e8:a4:d1:ef:61:35:c3: 80:91:a3:f9:1e:68:7c:7a:0d:27:3c:8b:d3:ed:97: a9:9a:6b:34:b2:7a:26:b6:be:ea:c3:70:b4:af:1e: 9f:e0:f4:e3:b6:f2:28:34:e2:29:ac:8a:cb:81:0a: 1a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:87:42:EC:17:21:62:02:5E:10:95:4A:D2:ED:61:42:4D:0B:5F:DC X509v3 Authority Key Identifier: keyid:D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/z4dC7BchYgJeEJVK0u1hQk0LX9w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.223.196.0/22 IPv6: 2a0c:4c00::/29 Signature Algorithm: sha256WithRSAEncryption cb:83:f1:d3:66:07:ec:1d:50:30:a3:bf:f5:74:6b:1e:ff:6f: f3:6a:88:2a:19:92:2c:9f:74:14:a4:1d:52:26:c1:12:af:18: 6d:8c:ed:34:f3:89:e3:30:8d:d2:3a:48:ee:c1:a8:c0:7d:aa: a1:fa:f1:68:21:1c:79:fb:9f:85:1a:80:e3:61:97:7e:7c:10: 6f:de:3e:67:d3:28:79:5c:61:19:7f:2c:3d:a2:6e:6b:7e:4f: c4:7d:7b:49:ed:69:6e:2b:e5:cb:ea:08:9e:e3:4f:5b:90:0d: 16:6c:4d:66:11:d0:90:fb:db:12:3a:6a:c3:4b:2d:fb:b5:d7: 87:7d:3b:96:5c:dd:3c:d2:73:7b:e1:8e:24:4d:81:b1:35:e2: 69:cb:df:f9:2e:88:23:75:8c:6d:19:2c:60:3f:0a:19:72:98: a5:7c:ee:9a:e7:69:94:f5:51:bc:22:b6:a1:ea:fa:d2:7a:f0: 67:39:c5:a7:71:1a:c9:d9:5e:20:79:91:e9:a2:02:9f:2a:1b: d2:61:23:f7:5b:dc:b0:7f:5a:ce:57:d7:81:e7:9b:14:92:88: a9:79:66:cc:e9:ba:87:26:16:1f:49:3e:df:f5:3e:08:a0:00: 14:c6:da:63:75:49:0d:33:58:f5:0d:74:bb:99:59:3d:87:96: bd:22:59:0e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8EafaSzYJ29o3iDDBPDn1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNTQwYjUxOGQ3NWZiZWZkNjE2YmZkOTRjZjA1ZmQyNWJh NDg4YjYwHhcNMjYwMTAyMDAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjg3NDJlYzE3MjE2MjAyNWUxMDk1NGFkMmVkNjE0MjRkMGI1ZmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyCsLpyCOqADq+DS/rBKAHMcaiBI SmyBQCjfdJlpMxsqW5AJ0gXURMndheLDg5V9yCG044pDqtjVzFWVRIHJyEAzAWpz wBP3+pW7V3VScyQa/p/Nr4bD8/VmS32IGv5pGxbyLESQWxEjke6J50mt7MFhn++E LM29ucLw3/p3n7lsa3soNECR4tFG9f5/Uua7+13rSP5jbzoQvE9NM7L6wcvP24Yw lFD5ShjZRQMN0LQu8EzhWUpaVB939ZHOEdqtjj8jur9Ha8tu8uik0e9hNcOAkaP5 Hmh8eg0nPIvT7Zepmms0snomtr7qw3C0rx6f4PTjtvIoNOIprIrLgQoagwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFM+HQuwXIWICXhCVStLtYUJNC1/cMB8GA1UdIwQY MBaAFNNUC1GNdfvv1ha/2UzwX9JbpIi2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDFRTFVZMTEtLV9XRnJfWlRQQmYwbHVraUxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hY2VlOGUtNzc2MS00MTlmLWI0ODMt YjMwMTYyZTNjY2MwLzEvejRkQzdCY2hZZ0plRUpWSzB1MWhRazBMWDl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9hY2VlOGUtNzc2MS00MTlmLWI0ODMtYjMwMTYyZTNjY2Mw LzEvMDFRTFVZMTEtLV9XRnJfWlRQQmYwbHVraUxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCud/EMA0E AgACMAcDBQMqDEwAMA0GCSqGSIb3DQEBCwUAA4IBAQDLg/HTZgfsHVAwo7/1dGse /2/zaogqGZIsn3QUpB1SJsESrxhtjO0084njMI3SOkjuwajAfaqh+vFoIRx5+5+F GoDjYZd+fBBv3j5n0yh5XGEZfyw9om5rfk/EfXtJ7WluK+XL6gie409bkA0WbE1m EdCQ+9sSOmrDSy37tdeHfTuWXN080nN74Y4kTYGxNeJpy9/5LogjdYxtGSxgPwoZ cpilfO6a52mU9VG8Irah6vrSevBnOcWncRrJ2V4geZHpogKfKhvSYSP3W9ywf1rO V9eB55sUkoipeWbM6bqHJhYfST7f9T4IoAAUxtpjdUkNM1j1DXS7mVk9h5a9IlkO -----END CERTIFICATE-----Generated at Mon Jan 26 06:33:23 2026 by rpki-client