This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/Unz4qfMKNpBLp_nQStP8Rhi7Y0o.roa File: Unz4qfMKNpBLp_nQStP8Rhi7Y0o.roa (raw, json) Hash identifier: CvQQy58T2+JT1V1PpCMrbgGvmKiUqKITp6SsZ8+pjsw= Subject key identifier: 52:7C:F8:A9:F3:0A:36:90:4B:A7:F9:D0:4A:D3:FC:46:18:BB:63:4A Certificate issuer: /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa Certificate serial: 019B77C694996213D320F43BEBBE0CAF6F2D Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/Unz4qfMKNpBLp_nQStP8Rhi7Y0o.roa Signing time: Thu 01 Jan 2026 04:17:41 +0000 ROA not before: Thu 01 Jan 2026 04:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398256 IP address blocks: 185.233.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:94:99:62:13:d3:20:f4:3b:eb:be:0c:af:6f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa Validity Not Before: Jan 1 04:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=527cf8a9f30a36904ba7f9d04ad3fc4618bb634a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3e:47:98:6f:61:1c:32:7e:85:10:9c:09:b4: f3:5d:5a:07:b3:63:dc:8a:d5:dc:ee:4a:30:5a:6c: 18:be:f8:d4:e5:83:5f:a9:df:1e:e3:d2:31:f0:fa: cd:22:19:57:bb:07:bf:6b:f6:65:e2:c2:71:ae:ec: ef:d4:af:4d:84:9e:46:98:9c:93:ef:fb:ab:75:a9: 64:33:c6:07:c5:b6:a4:83:64:d3:c3:26:4e:70:1b: 68:f7:d4:9e:bd:5a:09:ee:58:eb:c9:17:d9:33:b8: c6:84:9e:9f:5b:3a:a5:b6:e6:80:2c:93:93:7a:7e: f3:28:75:d9:1b:bf:51:e9:4a:c0:3a:d4:ab:3c:27: 95:7f:8a:85:66:34:90:e2:fd:4e:a4:d0:45:d9:ec: 48:e2:42:4f:ee:2e:94:5b:0f:ed:06:99:bf:34:34: 4f:76:e6:8b:24:b7:b2:82:dc:e5:c2:55:57:96:38: 5c:24:f3:4f:51:dc:06:98:50:31:eb:f1:e3:d3:3c: d3:04:59:ea:41:47:a3:13:1d:d6:3b:3f:de:52:b8: b4:67:9b:c0:54:55:f6:80:c2:eb:86:83:e6:b3:11: e1:78:a6:ea:eb:66:ab:ba:b5:81:10:87:49:ec:19: 4b:ee:0f:d7:c0:77:d4:41:71:f6:aa:55:20:70:da: bc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7C:F8:A9:F3:0A:36:90:4B:A7:F9:D0:4A:D3:FC:46:18:BB:63:4A X509v3 Authority Key Identifier: keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/Unz4qfMKNpBLp_nQStP8Rhi7Y0o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.233.166.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:76:e6:71:f9:da:37:55:b8:df:13:61:2d:93:55:d6:de:7c: ee:0e:6f:0a:64:53:a4:66:99:d5:41:c8:40:31:7a:42:c6:7d: 7b:16:5b:9b:5e:00:01:7a:16:83:e9:84:1a:72:05:a4:2d:ce: a2:fd:f2:61:67:03:c7:e5:21:2f:07:41:c3:5a:a8:a2:86:30: cf:7d:0e:51:92:f9:d0:a5:76:be:1b:a9:f5:5f:d8:e6:80:2a: 61:64:5d:e8:04:fc:59:b0:f3:1c:6a:87:ce:c3:f8:23:1b:91: ce:55:5c:a8:fe:cf:ba:0c:0a:2d:90:85:c9:73:2d:55:0c:6b: cb:41:f8:43:b0:ef:f2:3c:bb:49:84:15:71:d2:0f:f0:d6:a2: 77:8d:9a:46:36:c7:34:c4:1c:68:61:9c:d1:fa:a7:15:e0:fa: 84:a4:03:8a:65:f1:04:ad:0c:a4:ed:d5:d4:49:da:68:9b:10: 48:33:fb:af:6a:1d:b8:03:61:4f:fc:43:49:43:7d:0b:d8:b1: 44:50:57:85:6c:a4:ca:62:6b:09:f1:0b:cc:39:9c:a4:ab:f1: 9c:fb:4b:51:7c:ae:18:39:c0:7d:aa:41:f5:47:01:d8:5b:f3: c9:a9:f8:d3:41:12:e3:a5:7c:02:7e:f4:44:99:69:0d:7f:07: 2c:fe:fa:4b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xpSZYhPTIPQ7674Mr28tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YjYyM2JiYzU0ZTk4NDY3NDhjZDc3YjJiOGIzNDM4Mjdl NWFlYWEwHhcNMjYwMTAxMDQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjdjZjhhOWYzMGEzNjkwNGJhN2Y5ZDA0YWQzZmM0NjE4YmI2MzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7D5HmG9hHDJ+hRCcCbTzXVoHs2Pc itXc7kowWmwYvvjU5YNfqd8e49Ix8PrNIhlXuwe/a/Zl4sJxruzv1K9NhJ5GmJyT 7/urdalkM8YHxbakg2TTwyZOcBto99SevVoJ7ljryRfZM7jGhJ6fWzqltuaALJOT en7zKHXZG79R6UrAOtSrPCeVf4qFZjSQ4v1OpNBF2exI4kJP7i6UWw/tBpm/NDRP duaLJLeygtzlwlVXljhcJPNPUdwGmFAx6/Hj0zzTBFnqQUejEx3WOz/eUri0Z5vA VFX2gMLrhoPmsxHheKbq62arurWBEIdJ7BlL7g/XwHfUQXH2qlUgcNq8FwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFJ8+KnzCjaQS6f50ErT/EYYu2NKMB8GA1UdIwQY MBaAFMe2I7vFTphGdIzXeyuLNDgn5a6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMt MzRlNGUwNjc5MzMzLzEvVW56NHFmTUtOcEJMcF9uUVN0UDhSaGk3WTBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMtMzRlNGUwNjc5MzMz LzEveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuemmMA0G CSqGSIb3DQEBCwUAA4IBAQBsduZx+do3VbjfE2Etk1XW3nzuDm8KZFOkZpnVQchA MXpCxn17FlubXgABehaD6YQacgWkLc6i/fJhZwPH5SEvB0HDWqiihjDPfQ5RkvnQ pXa+G6n1X9jmgCphZF3oBPxZsPMcaofOw/gjG5HOVVyo/s+6DAotkIXJcy1VDGvL QfhDsO/yPLtJhBVx0g/w1qJ3jZpGNsc0xBxoYZzR+qcV4PqEpAOKZfEErQyk7dXU SdpomxBIM/uvah24A2FP/ENJQ30L2LFEUFeFbKTKYmsJ8QvMOZykq/Gc+0tRfK4Y OcB9qkH1RwHYW/PJqfjTQRLjpXwCfvREmWkNfwcs/vpL -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:03 2026 by rpki-client