This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/kZxYAWzX74NAE37QVjZYwdiy08g.roa File: kZxYAWzX74NAE37QVjZYwdiy08g.roa (raw, json) Hash identifier: UpUGn6BX93JUf+igiqvnQCmLw41MVtW2FFB1GnAAkLs= Subject key identifier: 91:9C:58:01:6C:D7:EF:83:40:13:7E:D0:56:36:58:C1:D8:B2:D3:C8 Certificate issuer: /CN=36b55fb34d29f962545132a025b52644fdffbf6f Certificate serial: 019B7F16001D341B2CF0DF4E5E47BADDCB42 Authority key identifier: 36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/kZxYAWzX74NAE37QVjZYwdiy08g.roa Signing time: Fri 02 Jan 2026 14:21:46 +0000 ROA not before: Fri 02 Jan 2026 14:21:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212217 IP address blocks: 185.206.123.0/24 maxlen: 24 2a10:ca00:1::/48 maxlen: 48 2a10:ca00:2::/48 maxlen: 48 2a10:ca00:3::/48 maxlen: 48 2a10:ca00:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:16:00:1d:34:1b:2c:f0:df:4e:5e:47:ba:dd:cb:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36b55fb34d29f962545132a025b52644fdffbf6f Validity Not Before: Jan 2 14:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=919c58016cd7ef8340137ed0563658c1d8b2d3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cf:f0:8e:f9:77:ad:d1:f9:f9:f7:fb:54:37: da:0b:e7:94:0a:b5:28:12:9d:01:6c:7c:25:c7:71: 54:48:02:27:23:9c:c9:d4:19:57:8a:87:bc:76:e5: a5:25:69:99:b6:52:fa:ba:b6:df:25:28:90:98:f2: f8:b1:31:57:dd:42:c0:50:ce:98:66:1a:d9:58:64: b2:e1:71:21:a2:70:74:18:2a:c9:e4:17:a6:45:57: d1:98:69:9f:55:17:9d:6c:7c:ec:4a:c3:c1:b4:17: b2:6e:e0:de:74:23:f3:09:be:e3:b2:44:43:55:87: de:34:94:66:53:89:b6:07:a8:15:c8:c6:50:0f:1d: b7:93:de:f0:3c:50:64:7d:c2:45:1b:41:e0:5e:15: 3a:70:a1:d7:64:eb:5c:b9:06:90:0a:ae:82:40:2e: 26:1d:7e:39:ed:54:96:05:cd:6d:c1:58:a7:03:0e: f8:8a:60:96:9c:82:d3:3b:ec:e4:80:a7:88:96:9b: 8b:74:d1:d8:f8:1c:b4:de:09:5f:86:72:95:61:4a: d3:ff:1c:64:d3:41:06:b6:9d:a9:a8:6b:49:cb:10: e2:cc:6e:87:4f:31:0d:ff:f2:84:52:9d:13:35:ec: 61:f0:8c:13:86:96:a5:eb:42:9b:ff:dd:ce:82:bb: cb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9C:58:01:6C:D7:EF:83:40:13:7E:D0:56:36:58:C1:D8:B2:D3:C8 X509v3 Authority Key Identifier: keyid:36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/kZxYAWzX74NAE37QVjZYwdiy08g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.206.123.0/24 IPv6: 2a10:ca00:1::-2a10:ca00:4:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 2e:de:df:9a:a6:ab:93:c8:a1:cf:f6:14:0d:c2:f8:60:10:12: d4:7c:1e:1b:f1:3c:2e:c5:71:93:d9:e1:dd:8f:dd:9c:c6:b3: c5:e8:b7:08:5e:28:e7:6c:95:4c:87:7f:49:1d:34:73:49:d6: ce:6d:f0:37:3a:0d:40:04:f6:ec:84:a8:a0:15:69:55:4b:91: 6a:8e:1a:45:9e:c7:17:b9:d1:14:42:08:85:09:86:44:90:86: 2d:83:ce:f2:3b:dd:ec:5e:da:87:ba:68:f6:d0:bf:85:b3:5a: fa:90:2b:be:65:2f:e6:9f:54:ba:e9:fa:3b:c3:33:92:7e:c6: 8a:ed:04:ec:ea:42:67:8e:8d:87:98:a4:64:69:3e:90:e2:4d: 25:67:82:6a:f6:bd:58:3a:8e:7c:17:b4:db:b6:2a:e2:63:73: e9:4d:8c:d8:a3:84:8b:81:5a:e5:b9:11:8a:62:c9:08:76:75: 0f:4e:c3:d1:66:92:24:10:c8:5c:52:ea:46:56:ea:53:c2:47: 8d:76:51:3d:8a:16:45:48:42:14:59:34:3f:2b:7d:16:ae:87: 7f:1f:a9:fe:02:17:5f:ed:e3:b5:46:17:5b:67:77:47:a1:63: ea:c2:e1:9e:64:18:7b:2b:44:0c:e7:7c:96:64:e0:5a:28:46: df:ae:f7:19 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt/FgAdNBss8N9OXke63ctCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YjU1ZmIzNGQyOWY5NjI1NDUxMzJhMDI1YjUyNjQ0ZmRm ZmJmNmYwHhcNMjYwMTAyMTQyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTljNTgwMTZjZDdlZjgzNDAxMzdlZDA1NjM2NThjMWQ4YjJkM2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3M/wjvl3rdH5+ff7VDfaC+eUCrUo Ep0BbHwlx3FUSAInI5zJ1BlXioe8duWlJWmZtlL6urbfJSiQmPL4sTFX3ULAUM6Y ZhrZWGSy4XEhonB0GCrJ5BemRVfRmGmfVRedbHzsSsPBtBeybuDedCPzCb7jskRD VYfeNJRmU4m2B6gVyMZQDx23k97wPFBkfcJFG0HgXhU6cKHXZOtcuQaQCq6CQC4m HX457VSWBc1twVinAw74imCWnILTO+zkgKeIlpuLdNHY+By03glfhnKVYUrT/xxk 00EGtp2pqGtJyxDizG6HTzEN//KEUp0TNexh8IwThpal60Kb/93OgrvLfwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJGcWAFs1++DQBN+0FY2WMHYstPIMB8GA1UdIwQY MBaAFDa1X7NNKfliVFEyoCW1JkT9/79vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yYmYwMGItYmZiYy00ZjZiLWExM2Ut ZjEwZjczYTllY2IzLzEva1p4WUFXelg3NE5BRTM3UVZqWll3ZGl5MDhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yYmYwMGItYmZiYy00ZjZiLWExM2UtZjEwZjczYTllY2Iz LzEvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQAuc57MBoE AgACMBQwEgMHACoQygAAAQMHACoQygAABDANBgkqhkiG9w0BAQsFAAOCAQEALt7f mqark8ihz/YUDcL4YBAS1HweG/E8LsVxk9nh3Y/dnMazxei3CF4o52yVTId/SR00 c0nWzm3wNzoNQAT27ISooBVpVUuRao4aRZ7HF7nRFEIIhQmGRJCGLYPO8jvd7F7a h7po9tC/hbNa+pArvmUv5p9Uuun6O8Mzkn7Giu0E7OpCZ46Nh5ikZGk+kOJNJWeC ava9WDqOfBe027Yq4mNz6U2M2KOEi4Fa5bkRimLJCHZ1D07D0WaSJBDIXFLqRlbq U8JHjXZRPYoWRUhCFFk0Pyt9Fq6Hfx+p/gIXX+3jtUYXW2d3R6Fj6sLhnmQYeytE DOd8lmTgWihG3673GQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:58:58 2026 by rpki-client