This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/1zl8hvX3_gPGXE5X8R_qEDtuWNE.roa File: 1zl8hvX3_gPGXE5X8R_qEDtuWNE.roa (raw, json) Hash identifier: fVmkH8rl9RfajUFgYehLLo2+tJYzAA36TeZ8+xZ0XpI= Subject key identifier: D7:39:7C:86:F5:F7:FE:03:C6:5C:4E:57:F1:1F:EA:10:3B:6E:58:D1 Certificate issuer: /CN=946733318c62c47920fe375ad99cb729ee90a1ad Certificate serial: 019B7E3939F5B22B773C94AB916CF85671D4 Authority key identifier: 94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/1zl8hvX3_gPGXE5X8R_qEDtuWNE.roa Signing time: Fri 02 Jan 2026 10:20:38 +0000 ROA not before: Fri 02 Jan 2026 10:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203474 IP address blocks: 185.114.196.0/22 maxlen: 22 185.114.196.0/24 maxlen: 24 2a03:3780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:39:f5:b2:2b:77:3c:94:ab:91:6c:f8:56:71:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=946733318c62c47920fe375ad99cb729ee90a1ad Validity Not Before: Jan 2 10:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7397c86f5f7fe03c65c4e57f11fea103b6e58d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:85:90:0b:47:02:83:d5:0e:89:73:dc:38:f9: 38:eb:56:ba:11:f3:83:aa:13:af:ed:44:72:a0:37: 70:b5:29:a0:3a:1a:70:7f:c0:4c:cc:74:1d:35:27: 4c:f4:90:14:4b:c5:5d:7e:6e:8c:d4:04:06:1f:cb: 33:84:bc:01:53:49:79:e5:6f:52:a5:e4:97:4d:f7: bf:59:e6:2b:92:68:4f:f2:2f:17:29:20:77:99:9d: f3:ee:fb:84:e7:3c:29:5a:e7:68:8c:c3:9e:87:5e: f9:4f:34:11:a3:d8:81:0f:1e:49:f2:83:c1:83:0b: b2:29:04:02:b7:2a:08:41:cc:76:56:c0:be:06:6f: 6e:2c:66:19:25:e1:eb:92:2a:d5:72:ca:d5:4a:0d: b2:e6:72:e4:68:8f:c0:8b:85:c6:81:87:1b:1a:c3: 97:22:0f:dd:b4:0d:47:24:6c:9c:03:2a:ea:20:ae: 1f:75:78:08:6f:e6:0d:99:fd:ee:1c:1f:06:ca:01: 8e:b4:d9:f2:e9:90:35:36:6c:71:cc:4f:f6:57:31: ff:23:06:93:5c:bf:e8:b9:7a:35:bc:b6:57:e4:d5: 09:23:47:06:1b:80:85:0b:e6:aa:0c:99:30:18:fd: 45:c3:5e:12:24:39:95:fa:26:9c:e7:c5:82:45:2c: 0f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:39:7C:86:F5:F7:FE:03:C6:5C:4E:57:F1:1F:EA:10:3B:6E:58:D1 X509v3 Authority Key Identifier: keyid:94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/1zl8hvX3_gPGXE5X8R_qEDtuWNE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.114.196.0/22 IPv6: 2a03:3780::/48 Signature Algorithm: sha256WithRSAEncryption 47:60:ca:64:6c:e9:d0:cd:72:da:94:98:cb:b1:47:c4:59:b6: e9:82:c6:59:07:8a:89:b3:45:39:8c:a7:3e:6a:56:6c:35:27: 28:84:3a:38:a9:6e:45:71:cb:57:a0:30:f2:65:9c:92:97:bf: 1d:21:b2:e4:c0:15:24:70:f1:88:fd:47:8d:17:f4:f3:73:35: f4:d5:1a:7d:1d:f0:2b:3f:80:0a:f4:94:da:b3:0a:e5:36:e6: 84:ed:4a:a1:ea:06:99:d4:80:78:e2:2c:49:22:ab:06:3a:a6: c4:65:d0:be:9a:fc:e0:c9:ff:dc:d4:de:d4:98:bc:86:ea:49: 17:8e:12:e1:41:c1:84:dc:c4:b0:22:9b:a7:10:a1:0b:89:88: a6:9f:14:ea:8b:97:c0:04:c1:53:1c:d9:ba:94:f9:c5:f5:47: 87:3d:56:a0:a0:b1:49:60:88:17:f4:68:8f:63:fa:fe:e5:0d: e5:15:c6:4d:b3:e1:5d:0b:96:d0:9e:95:16:b2:d1:bc:35:de: d0:9d:77:9c:ee:bc:90:7b:87:f6:34:e8:85:25:a0:11:b3:78: eb:5c:d8:67:f6:b9:40:33:4e:d5:92:18:49:12:c9:4a:48:53: c9:88:1d:b8:8d:b8:7d:55:27:6f:b8:86:11:73:20:57:be:cd: d7:10:1a:5e -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+OTn1sit3PJSrkWz4VnHUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NjczMzMxOGM2MmM0NzkyMGZlMzc1YWQ5OWNiNzI5ZWU5 MGExYWQwHhcNMjYwMTAyMTAyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzM5N2M4NmY1ZjdmZTAzYzY1YzRlNTdmMTFmZWExMDNiNmU1OGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYWQC0cCg9UOiXPcOPk461a6EfOD qhOv7URyoDdwtSmgOhpwf8BMzHQdNSdM9JAUS8Vdfm6M1AQGH8szhLwBU0l55W9S peSXTfe/WeYrkmhP8i8XKSB3mZ3z7vuE5zwpWudojMOeh175TzQRo9iBDx5J8oPB gwuyKQQCtyoIQcx2VsC+Bm9uLGYZJeHrkirVcsrVSg2y5nLkaI/Ai4XGgYcbGsOX Ig/dtA1HJGycAyrqIK4fdXgIb+YNmf3uHB8GygGOtNny6ZA1NmxxzE/2VzH/IwaT XL/ouXo1vLZX5NUJI0cGG4CFC+aqDJkwGP1Fw14SJDmV+iac58WCRSwPzwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNc5fIb19/4DxlxOV/Ef6hA7bljRMB8GA1UdIwQY MBaAFJRnMzGMYsR5IP43WtmctynukKGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEdjek1ZeGl4SGtnX2pkYTJaeTNLZTZRb2EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kNzYwOWUtNjM5Ni00MTU1LWFkMzUt Yjc0MDg5ZDhlNTllLzEvMXpsOGh2WDNfZ1BHWEU1WDhSX3FFRHR1V05FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9kNzYwOWUtNjM5Ni00MTU1LWFkMzUtYjc0MDg5ZDhlNTll LzEvbEdjek1ZeGl4SGtnX2pkYTJaeTNLZTZRb2EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCuXLEMA8E AgACMAkDBwAqAzeAAAAwDQYJKoZIhvcNAQELBQADggEBAEdgymRs6dDNctqUmMux R8RZtumCxlkHiomzRTmMpz5qVmw1JyiEOjipbkVxy1egMPJlnJKXvx0hsuTAFSRw 8Yj9R40X9PNzNfTVGn0d8Cs/gAr0lNqzCuU25oTtSqHqBpnUgHjiLEkiqwY6psRl 0L6a/ODJ/9zU3tSYvIbqSReOEuFBwYTcxLAim6cQoQuJiKafFOqLl8AEwVMc2bqU +cX1R4c9VqCgsUlgiBf0aI9j+v7lDeUVxk2z4V0LltCelRay0bw13tCdd5zuvJB7 h/Y06IUloBGzeOtc2Gf2uUAzTtWSGEkSyUpIU8mIHbiNuH1VJ2+4hhFzIFe+zdcQ Gl4= -----END CERTIFICATE-----Generated at Mon Jan 26 07:09:58 2026 by rpki-client