This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/zBuGPx4Oa1EfV-XsCGY-bD9zp_c.roa File: zBuGPx4Oa1EfV-XsCGY-bD9zp_c.roa (raw, json) Hash identifier: azMbt2aXDQ87R+GfFTp0MD3Qjfmbg3Ev6eygwzq9yrE= Subject key identifier: CC:1B:86:3F:1E:0E:6B:51:1F:57:E5:EC:08:66:3E:6C:3F:73:A7:F7 Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Certificate serial: 019B7BA3C6AC9066B30CD909496D46256BE0 Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/zBuGPx4Oa1EfV-XsCGY-bD9zp_c.roa Signing time: Thu 01 Jan 2026 22:18:09 +0000 ROA not before: Thu 01 Jan 2026 22:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42666 IP address blocks: 185.35.92.0/22 maxlen: 22 185.35.92.0/23 maxlen: 23 185.35.94.0/23 maxlen: 23 185.35.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:c6:ac:90:66:b3:0c:d9:09:49:6d:46:25:6b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Validity Not Before: Jan 1 22:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc1b863f1e0e6b511f57e5ec08663e6c3f73a7f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d8:61:12:16:aa:f4:2e:a0:54:9f:bd:71:21: 49:60:b9:49:7c:c6:78:f4:1a:cf:01:91:2d:49:7d: 16:8d:29:6d:cf:e8:bd:93:dd:0e:b0:cd:5c:52:8c: c3:84:71:8b:84:31:c8:9f:e9:5d:ba:2f:bb:bc:58: 0c:7c:c5:e7:5c:88:3b:bc:00:e3:62:6b:b9:e8:48: 51:ff:00:80:3e:0a:db:2f:8a:06:1f:9f:06:40:01: 24:01:0f:ad:02:8d:ff:1b:a9:25:c0:2f:0c:70:de: cb:be:ca:2d:be:33:db:b9:14:2c:73:80:42:eb:c3: 81:0d:79:10:36:fe:40:e6:6e:7a:d1:25:59:82:2f: 37:89:56:0f:c7:9b:4f:d1:92:f1:0e:77:7b:b2:b5: 85:8c:dc:a5:e1:e2:ff:f4:35:63:45:b3:91:d7:80: c3:3e:d7:af:0e:30:67:0f:90:63:d1:38:80:5d:a8: 6b:e2:c4:8c:8c:ce:33:f7:44:74:e7:c3:d7:1a:9a: 3a:69:28:fb:4b:0a:6f:72:d8:b7:d2:37:3c:0b:53: e7:77:8f:29:bc:8f:e8:79:ec:b0:6a:8f:93:f5:8e: 90:78:52:0c:5d:3a:6a:96:5d:d5:bb:e4:a3:78:4c: 92:a0:28:35:c2:17:b9:fd:5c:bb:fe:b6:49:9b:c4: 25:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1B:86:3F:1E:0E:6B:51:1F:57:E5:EC:08:66:3E:6C:3F:73:A7:F7 X509v3 Authority Key Identifier: keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/zBuGPx4Oa1EfV-XsCGY-bD9zp_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.35.92.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:0f:3a:8b:b3:be:d2:70:6a:d6:2a:6b:72:b2:c0:22:cb:3d: 20:bb:54:29:50:63:7e:28:40:5b:bd:ee:d5:10:35:65:ca:dd: d4:e5:36:2d:e9:15:87:83:47:9d:1d:93:f5:f7:70:c8:fe:00: d8:37:67:81:f0:0e:d9:8b:a5:e2:ea:e9:35:cc:59:88:fc:84: c9:2a:b2:c6:80:73:f3:af:30:ca:2b:7e:b3:ec:3e:41:89:af: 91:a8:42:b6:91:a3:4f:80:df:f9:7f:44:d7:f1:c8:c3:03:93: 09:b8:2d:e2:c5:49:92:2e:fe:54:e3:fb:c4:5c:4a:29:87:af: ed:e2:c6:e7:7d:b2:59:25:d3:1d:c5:42:b7:9c:e3:a1:9e:2c: 1e:69:6e:a5:4a:e7:63:d1:69:58:97:d8:1b:50:00:0d:e6:a3: 97:f7:12:f0:34:b7:4d:14:e2:75:35:64:0d:8d:39:6e:1f:23: 5a:53:f5:c0:fc:0b:3f:70:e5:d4:1c:8e:d6:e3:3b:da:02:15: 4e:09:d8:44:b7:3e:49:15:13:47:7e:19:37:c8:98:4f:b2:36: c2:73:46:ed:75:81:83:aa:57:73:df:61:c1:a9:2e:23:0f:24: 4e:e1:5b:6f:7a:a2:5b:c5:5f:82:f4:8b:3e:81:26:01:67:f9: 9f:59:32:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o8askGazDNkJSW1GJWvgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTM5YjBjZWQzOGQ3NWNjNjNlZDUwZDZlNWNlNzJiYmI1 YjRiMTAwHhcNMjYwMTAxMjIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzFiODYzZjFlMGU2YjUxMWY1N2U1ZWMwODY2M2U2YzNmNzNhN2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39hhEhaq9C6gVJ+9cSFJYLlJfMZ4 9BrPAZEtSX0WjSltz+i9k90OsM1cUozDhHGLhDHIn+ldui+7vFgMfMXnXIg7vADj Ymu56EhR/wCAPgrbL4oGH58GQAEkAQ+tAo3/G6klwC8McN7LvsotvjPbuRQsc4BC 68OBDXkQNv5A5m560SVZgi83iVYPx5tP0ZLxDnd7srWFjNyl4eL/9DVjRbOR14DD PtevDjBnD5Bj0TiAXahr4sSMjM4z90R058PXGpo6aSj7Swpvcti30jc8C1Pnd48p vI/oeeywao+T9Y6QeFIMXTpqll3Vu+SjeEySoCg1whe5/Vy7/rZJm8QlmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMwbhj8eDmtRH1fl7AhmPmw/c6f3MB8GA1UdIwQY MBaAFFqTmwztONdcxj7VDW5c5yu7W0sQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgt ZDYwYjNiNmNjYTZlLzEvekJ1R1B4NE9hMUVmVi1Yc0NHWS1iRDl6cF9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgtZDYwYjNiNmNjYTZl LzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSNcMA0G CSqGSIb3DQEBCwUAA4IBAQBuDzqLs77ScGrWKmtyssAiyz0gu1QpUGN+KEBbve7V EDVlyt3U5TYt6RWHg0edHZP193DI/gDYN2eB8A7Zi6Xi6uk1zFmI/ITJKrLGgHPz rzDKK36z7D5Bia+RqEK2kaNPgN/5f0TX8cjDA5MJuC3ixUmSLv5U4/vEXEoph6/t 4sbnfbJZJdMdxUK3nOOhniweaW6lSudj0WlYl9gbUAAN5qOX9xLwNLdNFOJ1NWQN jTluHyNaU/XA/As/cOXUHI7W4zvaAhVOCdhEtz5JFRNHfhk3yJhPsjbCc0btdYGD qldz32HBqS4jDyRO4VtveqJbxV+C9Is+gSYBZ/mfWTIh -----END CERTIFICATE-----Generated at Mon Jan 26 01:02:10 2026 by rpki-client