This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/R1cZjQFvpzSoNjH57RozbKUytBQ.roa File: R1cZjQFvpzSoNjH57RozbKUytBQ.roa (raw, json) Hash identifier: 5gILAzn1X9eg8JIPVx1JXogFciolZAFabqgiEM14sEI= Subject key identifier: 47:57:19:8D:01:6F:A7:34:A8:36:31:F9:ED:1A:33:6C:A5:32:B4:14 Certificate issuer: /CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b Certificate serial: 019B7F83148445595774418608B82C830F48 Authority key identifier: CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/R1cZjQFvpzSoNjH57RozbKUytBQ.roa Signing time: Fri 02 Jan 2026 16:20:55 +0000 ROA not before: Fri 02 Jan 2026 16:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50837 IP address blocks: 185.196.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:14:84:45:59:57:74:41:86:08:b8:2c:83:0f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b Validity Not Before: Jan 2 16:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4757198d016fa734a83631f9ed1a336ca532b414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b2:a2:9b:8a:5b:be:0d:d8:67:64:59:d3:11: bb:81:da:30:d2:9a:1a:a5:09:29:43:83:99:dc:08: c7:d2:40:7b:23:cf:07:9b:39:c0:78:6f:1b:33:aa: 4b:05:20:3a:dc:c1:72:9c:1c:41:d9:d9:cb:2c:ec: 1a:52:1d:11:54:df:e8:40:53:da:7a:8b:1e:7d:23: df:64:3c:27:d0:21:10:27:a8:d9:16:ca:4b:99:fc: 48:bd:95:66:a9:2a:25:50:d2:90:e1:9b:22:2e:ce: 34:09:c7:47:ec:ad:05:cc:05:81:57:e6:08:ad:98: 17:37:66:67:49:bd:e2:a7:f7:11:b9:12:7c:98:f3: 59:fe:ed:ab:98:17:d7:f7:29:64:fd:f4:3f:75:5a: 8d:b9:72:66:fe:ee:28:74:19:8b:5a:b1:95:a5:9c: 52:c2:1e:e3:97:68:15:c9:93:60:a0:31:7b:0a:63: 97:58:a7:11:07:7f:42:17:9a:03:bf:7b:2b:a3:46: c3:9f:78:bd:db:2a:5c:a6:58:0c:fd:ca:15:94:ab: 3c:2e:ac:5e:00:e7:b6:6f:d6:de:55:0b:9b:37:10: 2e:0b:80:7b:49:3c:f9:e4:99:0b:66:c6:46:af:09: 60:de:e2:e0:0b:f6:84:f7:de:30:53:fa:2f:a0:ba: 62:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:57:19:8D:01:6F:A7:34:A8:36:31:F9:ED:1A:33:6C:A5:32:B4:14 X509v3 Authority Key Identifier: keyid:CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/R1cZjQFvpzSoNjH57RozbKUytBQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.75.0/24 Signature Algorithm: sha256WithRSAEncryption 87:3a:7b:f1:74:78:23:7d:8f:a5:4c:02:42:19:44:6d:ea:3b: 73:69:21:a7:52:53:64:ab:4a:4e:c7:99:b4:82:a9:bc:05:b2: 8a:13:ac:8e:76:28:02:97:f2:b4:31:66:c1:c1:d9:c5:cf:cd: 98:16:67:fb:7d:da:a7:75:cf:0a:96:11:65:6c:8a:f3:c5:6e: 4a:51:4b:b4:0d:7b:43:7e:60:74:f0:06:7b:87:15:a1:d7:39: ac:c6:11:8f:0e:d1:5b:e9:f3:41:c0:9e:7f:fb:ff:62:73:2d: 0f:95:6d:e7:76:8e:81:d0:f0:5d:78:ff:9d:11:4c:d1:d2:67: a7:3d:77:65:bf:72:2a:8b:74:3c:47:98:8d:2b:77:59:5c:f9: 40:a7:49:08:68:1b:32:fc:90:1b:66:d3:88:52:a8:f3:6e:68: 39:be:e4:57:4d:4f:b8:14:7d:35:28:97:75:1e:89:41:16:24: 79:cf:67:02:6b:2d:19:a7:3b:8b:1e:76:e9:15:83:9c:90:0d: 59:e1:d3:e4:f3:f4:b9:20:f3:58:25:63:61:9b:08:45:bf:51: 9a:c8:01:2c:51:55:fa:a7:ee:6b:60:18:16:eb:9d:38:70:06: bf:31:be:6e:52:3a:3a:21:21:8d:c1:a1:63:60:39:dc:48:bf: cb:63:35:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gxSERVlXdEGGCLgsgw9IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYzBmOTlkNzk3OTNhNmYwMWU5YWQ2MjdkMWY5NjhiMGMy ZDBmM2IwHhcNMjYwMTAyMTYyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzU3MTk4ZDAxNmZhNzM0YTgzNjMxZjllZDFhMzM2Y2E1MzJiNDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrKim4pbvg3YZ2RZ0xG7gdow0poa pQkpQ4OZ3AjH0kB7I88HmznAeG8bM6pLBSA63MFynBxB2dnLLOwaUh0RVN/oQFPa eosefSPfZDwn0CEQJ6jZFspLmfxIvZVmqSolUNKQ4ZsiLs40CcdH7K0FzAWBV+YI rZgXN2ZnSb3ip/cRuRJ8mPNZ/u2rmBfX9ylk/fQ/dVqNuXJm/u4odBmLWrGVpZxS wh7jl2gVyZNgoDF7CmOXWKcRB39CF5oDv3sro0bDn3i92ypcplgM/coVlKs8Lqxe AOe2b9beVQubNxAuC4B7STz55JkLZsZGrwlg3uLgC/aE994wU/ovoLpiTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEdXGY0Bb6c0qDYx+e0aM2ylMrQUMB8GA1UdIwQY MBaAFM/A+Z15eTpvAemtYn0flosMLQ87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejhENW5YbDVPbThCNmExaWZSLVdpd3d0RHpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jNWRkM2UtOTM3Yi00MzRmLWJiYjgt ODBjYzg2ZTUxODIyLzEvUjFjWmpRRnZwelNvTmpINTdSb3piS1V5dEJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9jNWRkM2UtOTM3Yi00MzRmLWJiYjgtODBjYzg2ZTUxODIy LzEvejhENW5YbDVPbThCNmExaWZSLVdpd3d0RHpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucRLMA0G CSqGSIb3DQEBCwUAA4IBAQCHOnvxdHgjfY+lTAJCGURt6jtzaSGnUlNkq0pOx5m0 gqm8BbKKE6yOdigCl/K0MWbBwdnFz82YFmf7fdqndc8KlhFlbIrzxW5KUUu0DXtD fmB08AZ7hxWh1zmsxhGPDtFb6fNBwJ5/+/9icy0PlW3ndo6B0PBdeP+dEUzR0men PXdlv3Iqi3Q8R5iNK3dZXPlAp0kIaBsy/JAbZtOIUqjzbmg5vuRXTU+4FH01KJd1 HolBFiR5z2cCay0ZpzuLHnbpFYOckA1Z4dPk8/S5IPNYJWNhmwhFv1GayAEsUVX6 p+5rYBgW6504cAa/Mb5uUjo6ISGNwaFjYDncSL/LYzUH -----END CERTIFICATE-----Generated at Mon Jan 26 08:58:45 2026 by rpki-client