This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/Z12VW2Oj1RQBcgh65gRC_a1KwqE.roa File: Z12VW2Oj1RQBcgh65gRC_a1KwqE.roa (raw, json) Hash identifier: /a7senBqK2MBRmr1Qn/8yhUtEA4NdcKwqwCyWHEGON0= Subject key identifier: 67:5D:95:5B:63:A3:D5:14:01:72:08:7A:E6:04:42:FD:AD:4A:C2:A1 Certificate issuer: /CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7 Certificate serial: 019B77C7222A3AFE08D3635B68CE1EE1CF62 Authority key identifier: AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/Z12VW2Oj1RQBcgh65gRC_a1KwqE.roa Signing time: Thu 01 Jan 2026 04:18:17 +0000 ROA not before: Thu 01 Jan 2026 04:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60848 IP address blocks: 94.127.60.0/22 maxlen: 22 185.247.96.0/24 maxlen: 24 185.247.99.0/24 maxlen: 24 2a02:2188::/48 maxlen: 48 2a02:2188:2000::/36 maxlen: 36 2a02:2188:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:22:2a:3a:fe:08:d3:63:5b:68:ce:1e:e1:cf:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7 Validity Not Before: Jan 1 04:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=675d955b63a3d5140172087ae60442fdad4ac2a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d7:b7:b1:e6:92:27:e3:63:fc:89:4b:4d:4b: df:24:57:f0:2c:30:e3:e5:88:81:49:10:a5:a4:8f: 79:20:94:a5:2f:e8:18:08:b6:2d:2f:ee:11:35:f0: f8:7e:f9:c4:23:4a:ce:1b:98:ed:d4:92:86:15:f2: 87:e2:d0:59:64:a5:25:b8:de:1f:dd:28:1f:f6:be: b4:c0:a0:bd:03:95:0b:ed:b4:31:b9:9d:26:15:96: 06:e2:4c:43:68:68:44:df:6d:16:13:b1:0a:92:28: a8:41:cd:7e:98:e4:8b:f1:86:e0:7a:ed:63:26:cf: f6:da:c6:e6:c1:f4:83:3d:a8:d1:f1:71:71:8c:2f: 04:22:48:8d:45:ae:27:09:0e:f9:cf:65:c0:08:56: 48:ae:a6:d8:54:23:d0:37:ab:ce:d0:0f:65:7a:70: 6f:b8:01:22:82:b6:b0:33:4e:34:54:2e:4c:00:ce: d2:68:49:6a:63:a5:42:27:07:1b:ab:b9:ea:f5:51: 88:f9:86:88:92:67:4c:6a:d6:b3:80:78:9d:c4:fb: bf:70:3c:ff:f7:1d:88:f9:ec:f9:75:c0:31:a6:74: 4c:59:b5:35:3f:36:51:15:08:c7:bf:1e:5c:58:d8: 2e:9e:80:a4:d7:6c:0e:98:66:63:46:24:12:2c:d3: 48:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:5D:95:5B:63:A3:D5:14:01:72:08:7A:E6:04:42:FD:AD:4A:C2:A1 X509v3 Authority Key Identifier: keyid:AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/Z12VW2Oj1RQBcgh65gRC_a1KwqE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.127.60.0/22 185.247.96.0/24 185.247.99.0/24 IPv6: 2a02:2188::/48 2a02:2188:2000::/36 2a02:2188:f000::/36 Signature Algorithm: sha256WithRSAEncryption 39:3d:ac:1d:8d:d5:a2:a4:3e:dd:5b:37:d8:f2:ba:b3:c5:5e: 6e:ab:dc:83:32:dd:71:d5:96:22:f1:d6:64:57:f7:8b:e8:a2: b5:72:9a:5c:4c:4a:0d:a3:3e:e9:37:83:1a:88:0e:56:f2:ff: 33:7c:1e:eb:24:17:3e:d2:14:7a:fb:0a:11:9b:c0:6e:31:f3: 4b:7d:9b:4d:c8:db:68:80:86:1c:fd:47:7b:1f:bc:2c:6a:76: 7e:c7:c6:42:1a:7a:7d:ef:cc:6b:6c:95:ac:ce:3f:0c:9a:0a: cb:ae:cd:8f:3c:00:6d:e7:f1:53:5d:d6:1c:e9:1f:9c:34:ac: 4b:6c:24:a4:89:9a:a6:50:43:d8:1a:0c:1b:ff:17:71:a9:f2: c3:7e:51:9d:8c:5b:d3:23:06:45:41:bc:92:89:eb:b4:6b:2d: 4b:3c:17:14:48:0b:0c:9b:2d:4b:51:73:fa:7a:9a:7d:55:f3: 6b:4c:79:ba:03:30:e6:e7:1a:06:dc:00:7c:52:b7:9e:a4:75: 56:e9:50:88:95:77:49:56:21:b9:26:87:18:f1:23:1e:b5:d1: 44:e2:98:bd:0d:bd:aa:2e:3f:03:6d:5c:d7:5d:cf:7e:06:c1: 7a:a5:5f:de:ec:98:3d:74:4f:37:50:5e:a2:d1:5b:43:81:f0: d1:95:68:4b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt3xyIqOv4I02NbaM4e4c9iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYmUyMTJhMmYxYTExOWVmNjRhYjYyZTFhOTZkNzExNTI0 YzhiYzcwHhcNMjYwMTAxMDQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzVkOTU1YjYzYTNkNTE0MDE3MjA4N2FlNjA0NDJmZGFkNGFjMmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9e3seaSJ+Nj/IlLTUvfJFfwLDDj 5YiBSRClpI95IJSlL+gYCLYtL+4RNfD4fvnEI0rOG5jt1JKGFfKH4tBZZKUluN4f 3Sgf9r60wKC9A5UL7bQxuZ0mFZYG4kxDaGhE320WE7EKkiioQc1+mOSL8Ybgeu1j Js/22sbmwfSDPajR8XFxjC8EIkiNRa4nCQ75z2XACFZIrqbYVCPQN6vO0A9lenBv uAEigrawM040VC5MAM7SaElqY6VCJwcbq7nq9VGI+YaIkmdMatazgHidxPu/cDz/ 9x2I+ez5dcAxpnRMWbU1PzZRFQjHvx5cWNgunoCk12wOmGZjRiQSLNNIHQIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFGddlVtjo9UUAXIIeuYEQv2tSsKhMB8GA1UdIwQY MBaAFKy+ISovGhGe9kq2LhqW1xFSTIvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckw0aEtpOGFFWjcyU3JZdUdwYlhFVkpNaThjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9jNWExNTktODU2OC00OTQ1LTgwMjYt MjNjMzM4NjgwNzcxLzEvWjEyVlcyT2oxUlFCY2doNjVnUkNfYTFLd3FFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9jNWExNTktODU2OC00OTQ1LTgwMjYtMjNjMzM4NjgwNzcx LzEvckw0aEtpOGFFWjcyU3JZdUdwYlhFVkpNaThjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAYBAIAATASAwQCXn88AwQA ufdgAwQAufdjMB8EAgACMBkDBwAqAiGIAAADBgQqAiGIIAMGBCoCIYjwMA0GCSqG SIb3DQEBCwUAA4IBAQA5PawdjdWipD7dWzfY8rqzxV5uq9yDMt1x1ZYi8dZkV/eL 6KK1cppcTEoNoz7pN4MaiA5W8v8zfB7rJBc+0hR6+woRm8BuMfNLfZtNyNtogIYc /Ud7H7wsanZ+x8ZCGnp978xrbJWszj8MmgrLrs2PPABt5/FTXdYc6R+cNKxLbCSk iZqmUEPYGgwb/xdxqfLDflGdjFvTIwZFQbySieu0ay1LPBcUSAsMmy1LUXP6epp9 VfNrTHm6AzDm5xoG3AB8UreepHVW6VCIlXdJViG5JocY8SMetdFE4pi9Db2qLj8D bVzXXc9+BsF6pV/e7Jg9dE83UF6i0VtDgfDRlWhL -----END CERTIFICATE-----Generated at Sun Jan 25 20:50:10 2026 by rpki-client