This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/Z5oga0vgbQ3IfY7AuGU9kvMREF8.roa File: Z5oga0vgbQ3IfY7AuGU9kvMREF8.roa (raw, json) Hash identifier: S/HDTLw/C2HlzUoz5QYaSY1KLwcsf1KpKUZ68xZPy3s= Subject key identifier: 67:9A:20:6B:4B:E0:6D:0D:C8:7D:8E:C0:B8:65:3D:92:F3:11:10:5F Certificate issuer: /CN=1c217c8086be29d50f83c8fd8fc917b009de3c81 Certificate serial: 019B7B3598A91D5D3E1FD96DEF1AB61483CF Authority key identifier: 1C:21:7C:80:86:BE:29:D5:0F:83:C8:FD:8F:C9:17:B0:09:DE:3C:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/Z5oga0vgbQ3IfY7AuGU9kvMREF8.roa Signing time: Thu 01 Jan 2026 20:17:48 +0000 ROA not before: Thu 01 Jan 2026 20:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15547 IP address blocks: 37.0.32.0/19 maxlen: 19 185.42.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:98:a9:1d:5d:3e:1f:d9:6d:ef:1a:b6:14:83:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c217c8086be29d50f83c8fd8fc917b009de3c81 Validity Not Before: Jan 1 20:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=679a206b4be06d0dc87d8ec0b8653d92f311105f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f0:2d:a8:90:0b:c5:1f:88:a3:cb:8f:7a:94: 6b:7f:3a:9b:bc:dc:32:54:12:94:67:f6:f2:0e:20: 83:c9:1d:98:0c:a9:f6:18:1a:c4:f7:04:b0:b4:be: 4d:96:b6:57:66:eb:c9:0b:b6:ed:9d:ba:82:4c:d4: 0e:1d:f7:97:82:5e:4d:58:1c:4d:88:4e:90:bb:36: 37:26:24:23:55:c9:f5:fd:bb:74:30:37:6f:91:a9: 7d:6c:f6:28:d5:ef:73:35:78:80:d8:63:b1:b5:27: b7:62:e4:a3:75:10:ac:9d:fe:ca:51:68:ba:fe:fb: 39:61:4a:88:5d:85:b7:52:8e:a2:67:28:3f:4e:4b: a6:48:01:71:45:6d:89:9e:9f:a2:db:96:45:0e:35: 13:63:ca:f9:98:47:a5:77:7d:9d:60:cc:c7:b7:ae: 02:26:46:2b:92:71:66:af:4f:9c:0f:49:9f:6a:64: c5:90:f9:3c:31:49:96:de:9f:12:89:4b:bc:7a:3c: d2:9e:60:4c:03:94:d4:a1:8b:f2:75:23:83:33:87: 4c:aa:69:b8:a4:0f:cb:a8:9a:c3:24:d6:43:b3:d7: df:93:3e:da:df:a7:b2:fc:72:2c:23:ec:b6:ae:0e: e0:54:9e:f8:a4:a0:00:c6:90:3d:63:84:a3:57:9d: de:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:9A:20:6B:4B:E0:6D:0D:C8:7D:8E:C0:B8:65:3D:92:F3:11:10:5F X509v3 Authority Key Identifier: keyid:1C:21:7C:80:86:BE:29:D5:0F:83:C8:FD:8F:C9:17:B0:09:DE:3C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/Z5oga0vgbQ3IfY7AuGU9kvMREF8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.0.32.0/19 185.42.248.0/22 Signature Algorithm: sha256WithRSAEncryption 14:7a:84:47:1a:6c:f2:89:f0:99:1d:47:c4:81:80:70:1a:f0: d2:f7:b8:46:21:f7:02:ab:d3:91:c0:6f:61:7b:06:fb:07:c0: 3b:2c:97:96:0a:21:59:43:e2:10:e4:f3:8d:ab:bf:0c:0e:d1: e4:23:90:5a:c4:33:f2:6c:b9:12:e8:db:dc:08:a1:d4:60:a8: 5a:b2:b5:bb:da:0f:e4:67:80:04:67:ee:6a:44:20:66:f2:9e: 0b:c1:d3:15:d2:3d:a6:03:70:42:62:ab:12:54:7e:48:f6:51: 78:4a:1d:f3:bb:01:3c:81:aa:02:40:8a:77:d3:3b:85:c0:d5: 9f:61:89:a1:2a:d0:e1:79:6b:de:e1:57:62:c4:84:1c:eb:e9: 1a:86:8c:f2:d1:55:53:33:64:03:35:c3:12:86:52:f0:9c:82: c5:a5:db:bd:10:61:9c:e2:76:ae:7a:c1:5e:cd:c2:9d:81:09: 7e:b9:86:e3:b1:9c:09:92:e1:a9:67:38:90:2b:44:90:07:24: df:0a:6d:07:5c:b6:aa:b2:b4:d9:6a:25:2c:61:35:56:4b:1c: b4:a4:0a:79:e4:ef:d1:58:83:15:c6:9b:d6:a5:ac:a0:f0:2d: bc:4b:ca:c8:6d:5e:bc:d1:ab:83:6f:c4:ea:6f:b0:97:5d:96: 1e:8d:73:97 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NZipHV0+H9lt7xq2FIPPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMjE3YzgwODZiZTI5ZDUwZjgzYzhmZDhmYzkxN2IwMDlk ZTNjODEwHhcNMjYwMTAxMjAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzlhMjA2YjRiZTA2ZDBkYzg3ZDhlYzBiODY1M2Q5MmYzMTExMDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPAtqJALxR+Io8uPepRrfzqbvNwy VBKUZ/byDiCDyR2YDKn2GBrE9wSwtL5NlrZXZuvJC7btnbqCTNQOHfeXgl5NWBxN iE6QuzY3JiQjVcn1/bt0MDdvkal9bPYo1e9zNXiA2GOxtSe3YuSjdRCsnf7KUWi6 /vs5YUqIXYW3Uo6iZyg/TkumSAFxRW2Jnp+i25ZFDjUTY8r5mEeld32dYMzHt64C JkYrknFmr0+cD0mfamTFkPk8MUmW3p8SiUu8ejzSnmBMA5TUoYvydSODM4dMqmm4 pA/LqJrDJNZDs9ffkz7a36ey/HIsI+y2rg7gVJ74pKAAxpA9Y4SjV53eHQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGeaIGtL4G0NyH2OwLhlPZLzERBfMB8GA1UdIwQY MBaAFBwhfICGvinVD4PI/Y/JF7AJ3jyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSENGOGdJYS1LZFVQZzhqOWo4a1hzQW5lUElFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC84NmJiMDQtMDlkZi00MjJhLWI1Zjkt ZjM0YjMxZDNiNDNjLzEvWjVvZ2EwdmdiUTNJZlk3QXVHVTlrdk1SRUY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC84NmJiMDQtMDlkZi00MjJhLWI1ZjktZjM0YjMxZDNiNDNj LzEvSENGOGdJYS1LZFVQZzhqOWo4a1hzQW5lUElFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFJQAgAwQC uSr4MA0GCSqGSIb3DQEBCwUAA4IBAQAUeoRHGmzyifCZHUfEgYBwGvDS97hGIfcC q9ORwG9hewb7B8A7LJeWCiFZQ+IQ5PONq78MDtHkI5BaxDPybLkS6NvcCKHUYKha srW72g/kZ4AEZ+5qRCBm8p4LwdMV0j2mA3BCYqsSVH5I9lF4Sh3zuwE8gaoCQIp3 0zuFwNWfYYmhKtDheWve4VdixIQc6+kahozy0VVTM2QDNcMShlLwnILFpdu9EGGc 4nauesFezcKdgQl+uYbjsZwJkuGpZziQK0SQByTfCm0HXLaqsrTZaiUsYTVWSxy0 pAp55O/RWIMVxpvWpayg8C28S8rIbV680auDb8Tqb7CXXZYejXOX -----END CERTIFICATE-----Generated at Sun Jan 25 20:50:19 2026 by rpki-client