This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/z3jiOX0l8XrsI6phSwPZ5D4UGqs.roa File: z3jiOX0l8XrsI6phSwPZ5D4UGqs.roa (raw, json) Hash identifier: CcVgaMQKxvkfawhUGWzE3K5Xi3BSkw5Z4uMhoNWWbsY= Subject key identifier: CF:78:E2:39:7D:25:F1:7A:EC:23:AA:61:4B:03:D9:E4:3E:14:1A:AB Certificate issuer: /CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1 Certificate serial: 019B7CECE0EF3151FB9387869275FB2FE5C7 Authority key identifier: 26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/z3jiOX0l8XrsI6phSwPZ5D4UGqs.roa Signing time: Fri 02 Jan 2026 04:17:37 +0000 ROA not before: Fri 02 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3302 IP address blocks: 185.169.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:e0:ef:31:51:fb:93:87:86:92:75:fb:2f:e5:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1 Validity Not Before: Jan 2 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf78e2397d25f17aec23aa614b03d9e43e141aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:45:28:46:65:40:45:52:73:6b:fa:5e:95:ee: ed:65:2e:da:ed:35:f5:6e:83:02:b3:e3:8b:f3:ea: c9:9a:fa:65:71:3e:0d:e9:1c:56:b4:0e:4f:f3:21: 87:22:9c:49:e6:87:b7:a7:78:b2:c7:99:b9:7e:12: 86:da:f1:96:84:f7:6b:f6:e3:f2:ab:26:11:84:5e: e2:e4:e1:51:04:37:75:87:87:0e:5e:a0:93:a9:62: 71:f6:c7:43:a8:75:63:84:b9:dd:0b:db:76:62:57: 3b:15:cd:be:b0:e9:78:75:c7:1a:20:ab:da:8c:83: 47:80:dc:a1:ae:da:44:c3:ee:8f:d8:d0:40:53:55: 54:e6:ef:04:ac:71:92:84:b3:59:76:7d:fb:68:68: d8:11:e0:6c:98:40:f9:31:88:07:d2:98:8f:e7:61: a8:ac:2c:78:5e:51:d3:fd:f6:a5:e1:e5:89:e8:06: 58:f9:4e:16:c5:0e:c6:70:2b:74:c5:2f:a5:d5:8a: fc:37:a0:0f:57:ed:25:3a:1b:a6:68:c8:8f:9c:ba: 50:15:bd:80:5d:db:75:b8:d7:25:48:2e:45:29:c4: 73:56:7f:4f:c1:e4:a5:5b:ac:b8:55:a4:80:68:c7: c2:96:cb:aa:2b:e5:9e:06:a1:7c:ac:7a:df:bc:ce: c5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:78:E2:39:7D:25:F1:7A:EC:23:AA:61:4B:03:D9:E4:3E:14:1A:AB X509v3 Authority Key Identifier: keyid:26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/z3jiOX0l8XrsI6phSwPZ5D4UGqs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.176.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:fd:f8:00:32:0d:84:49:a6:86:06:d6:3e:ae:78:e9:b1:f9: 0a:81:5f:b6:62:4a:7e:73:9f:a9:c0:df:d9:10:49:1f:f6:b0: 67:e2:ac:27:3d:0a:3c:0b:ed:50:80:03:3d:42:1f:aa:28:7b: 6c:74:41:87:5f:ff:05:9a:49:5b:8c:c5:c4:f9:09:05:66:e7: fa:7a:3a:3f:b8:81:84:e3:e6:43:20:d0:32:8f:d0:f1:b9:44: ab:e9:e7:42:8f:83:28:09:68:c5:72:bb:72:31:50:52:86:ab: d5:ee:81:51:e6:b9:4b:a8:e5:08:d4:23:83:10:76:0c:c4:bb: 89:3f:81:04:08:d6:25:40:67:72:54:0c:09:d6:77:e4:bb:16: 48:24:36:67:95:b7:dc:8a:dc:ca:e2:1a:f8:47:29:e5:9e:8b: c9:b5:df:00:e2:f9:1a:27:f0:2d:47:41:4f:8d:88:19:8d:d6: 34:9f:78:29:a4:2a:57:f9:d6:2b:1e:10:5b:df:56:5e:c9:7f: 14:61:88:c5:0a:7a:c2:00:bd:c6:a6:eb:d8:33:13:41:93:e6: 55:87:6d:af:83:8f:09:03:ce:98:76:f0:07:ce:93:3c:ee:09: 6f:b9:d4:67:5e:54:7c:57:15:cf:64:42:36:66:21:1e:15:bc: a0:b2:a8:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87ODvMVH7k4eGknX7L+XHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YmQ1ZmZiY2U2YmY4NzA3ZmEzZTU5NjdlMGQzOGI0NTVk OWQ0ZTEwHhcNMjYwMTAyMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjc4ZTIzOTdkMjVmMTdhZWMyM2FhNjE0YjAzZDllNDNlMTQxYWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEUoRmVARVJza/pele7tZS7a7TX1 boMCs+OL8+rJmvplcT4N6RxWtA5P8yGHIpxJ5oe3p3iyx5m5fhKG2vGWhPdr9uPy qyYRhF7i5OFRBDd1h4cOXqCTqWJx9sdDqHVjhLndC9t2Ylc7Fc2+sOl4dccaIKva jINHgNyhrtpEw+6P2NBAU1VU5u8ErHGShLNZdn37aGjYEeBsmED5MYgH0piP52Go rCx4XlHT/fal4eWJ6AZY+U4WxQ7GcCt0xS+l1Yr8N6APV+0lOhumaMiPnLpQFb2A Xdt1uNclSC5FKcRzVn9PweSlW6y4VaSAaMfClsuqK+WeBqF8rHrfvM7FBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM944jl9JfF67COqYUsD2eQ+FBqrMB8GA1UdIwQY MBaAFCa9X/vOa/hwf6Plln4NOLRV2dThMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnIxZi04NXItSEJfby1XV2ZnMDR0RlhaMU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mNDk4YTItZDg2ZC00Yzc1LWJmZDMt ZThjNTU5YzcxZDY2LzEvejNqaU9YMGw4WHJzSTZwaFN3UFo1RDRVR3FzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9mNDk4YTItZDg2ZC00Yzc1LWJmZDMtZThjNTU5YzcxZDY2 LzEvSnIxZi04NXItSEJfby1XV2ZnMDR0RlhaMU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuamwMA0G CSqGSIb3DQEBCwUAA4IBAQAa/fgAMg2ESaaGBtY+rnjpsfkKgV+2Ykp+c5+pwN/Z EEkf9rBn4qwnPQo8C+1QgAM9Qh+qKHtsdEGHX/8FmklbjMXE+QkFZuf6ejo/uIGE 4+ZDINAyj9DxuUSr6edCj4MoCWjFcrtyMVBShqvV7oFR5rlLqOUI1CODEHYMxLuJ P4EECNYlQGdyVAwJ1nfkuxZIJDZnlbfcitzK4hr4RynlnovJtd8A4vkaJ/AtR0FP jYgZjdY0n3gppCpX+dYrHhBb31ZeyX8UYYjFCnrCAL3GpuvYMxNBk+ZVh22vg48J A86YdvAHzpM87glvudRnXlR8VxXPZEI2ZiEeFbygsqiD -----END CERTIFICATE-----Generated at Mon Jan 26 06:18:00 2026 by rpki-client