This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/rgwz7iF3hHaUl5V19C4BKoY9OnE.roa File: rgwz7iF3hHaUl5V19C4BKoY9OnE.roa (raw, json) Hash identifier: ve1MCW6t2kzIlC3EVE/Neu+wkMeFHcsHuQFg1OD/guU= Subject key identifier: AE:0C:33:EE:21:77:84:76:94:97:95:75:F4:2E:01:2A:86:3D:3A:71 Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b Certificate serial: 019B7AC889FC8F6DED14865DB8335BE4F75A Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/rgwz7iF3hHaUl5V19C4BKoY9OnE.roa Signing time: Thu 01 Jan 2026 18:18:41 +0000 ROA not before: Thu 01 Jan 2026 18:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197075 IP address blocks: 151.248.14.0/24 maxlen: 24 185.219.85.0/24 maxlen: 24 185.219.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:89:fc:8f:6d:ed:14:86:5d:b8:33:5b:e4:f7:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b Validity Not Before: Jan 1 18:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae0c33ee2177847694979575f42e012a863d3a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:36:49:18:07:33:07:43:7f:60:90:45:66:30: 19:8d:f1:7c:1c:07:65:d8:d5:57:6e:9a:84:fb:d2: fd:84:d5:2a:16:b1:02:52:2d:92:da:31:e4:76:80: 5c:5c:6f:c7:b9:b8:e6:9b:60:4e:52:d3:99:49:b3: 9d:9a:cc:67:5f:15:38:e1:a5:83:e5:8c:42:55:c6: 26:68:34:66:a3:e8:2e:e6:a5:57:08:34:2a:2a:0e: fe:a8:0d:63:52:30:b9:a7:7d:42:db:95:4b:c2:a2: 62:6c:40:a9:ee:4d:ff:5e:da:af:f1:4b:c6:6b:9f: a8:19:1b:e4:22:90:73:76:49:d5:3c:e1:9a:fb:37: c1:9f:ec:ac:e5:b7:e0:83:1e:4f:d5:4e:9d:da:ae: 4b:3f:3b:8b:27:7a:88:d1:8e:b0:62:29:44:42:a6: cc:91:87:34:dc:f5:14:fc:cb:91:69:6f:1b:e9:e0: 22:63:d3:7b:ab:a5:e0:94:37:4e:5b:4d:5d:f8:91: 5a:0e:8e:ff:42:44:c6:f7:62:dd:b9:c5:80:cd:d8: c6:39:c0:e7:c1:d8:1e:3f:03:56:7c:60:5a:e0:ac: 76:62:75:4f:00:e0:f6:6e:97:ab:52:43:6e:12:1b: e1:49:90:78:b6:25:04:45:bf:b6:fb:59:d3:d1:94: 50:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0C:33:EE:21:77:84:76:94:97:95:75:F4:2E:01:2A:86:3D:3A:71 X509v3 Authority Key Identifier: keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/rgwz7iF3hHaUl5V19C4BKoY9OnE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.248.14.0/24 185.219.85.0/24 185.219.87.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:56:fd:20:dc:a0:0a:69:46:80:db:a2:76:b3:d1:5c:1a:79: 86:8f:89:e9:02:18:04:ca:9a:c5:0a:63:28:fe:d6:0d:a1:9b: 2b:e4:74:c6:da:20:87:53:f5:c0:5d:ad:8e:99:1c:61:5b:73: bd:5f:cd:36:84:b5:b3:b5:d4:fd:3c:9e:88:74:76:c3:0b:8b: 53:90:90:2f:7e:51:aa:e8:c1:a0:44:ce:98:e6:6f:fa:ae:b7: 3b:a4:c0:c7:cb:bd:59:99:53:ba:51:4d:64:37:0c:33:a1:fc: a5:08:77:22:9e:73:c1:5a:1d:0b:c9:63:0b:36:dd:8e:f3:89: 92:15:30:93:a0:17:2f:40:14:00:41:66:e2:a2:53:4a:8c:cc: 57:c3:b0:54:64:f9:c0:9e:71:ac:7d:7c:99:77:dd:06:42:c7: ae:c2:78:d0:df:59:a0:8a:18:3f:07:28:35:02:9e:6e:0f:5f: ed:9f:b1:1c:f9:e4:27:fb:e7:af:a7:82:3a:a7:e6:bb:ea:07: 0b:be:ce:e3:28:fa:c4:23:4b:29:46:c6:7a:9d:f0:36:13:77: c6:4d:73:3f:f2:e6:8b:f8:a2:56:86:a8:cf:d6:56:fe:96:49: 49:b7:0e:f1:56:eb:cc:b6:77:f9:b9:f8:33:a3:b3:cc:83:e8: 80:ce:70:b6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6yIn8j23tFIZduDNb5PdaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNWMwYzcxMTFlMmY1N2ZjYWY4MTEzYTQyZTU1NmU4ODJk ZDVjNGIwHhcNMjYwMTAxMTgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTBjMzNlZTIxNzc4NDc2OTQ5Nzk1NzVmNDJlMDEyYTg2M2QzYTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjZJGAczB0N/YJBFZjAZjfF8HAdl 2NVXbpqE+9L9hNUqFrECUi2S2jHkdoBcXG/Hubjmm2BOUtOZSbOdmsxnXxU44aWD 5YxCVcYmaDRmo+gu5qVXCDQqKg7+qA1jUjC5p31C25VLwqJibECp7k3/Xtqv8UvG a5+oGRvkIpBzdknVPOGa+zfBn+ys5bfggx5P1U6d2q5LPzuLJ3qI0Y6wYilEQqbM kYc03PUU/MuRaW8b6eAiY9N7q6XglDdOW01d+JFaDo7/QkTG92LducWAzdjGOcDn wdgePwNWfGBa4Kx2YnVPAOD2bperUkNuEhvhSZB4tiUERb+2+1nT0ZRQ1QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFK4MM+4hd4R2lJeVdfQuASqGPTpxMB8GA1UdIwQY MBaAFHJcDHER4vV/yvgROkLlVuiC3VxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wYzliNTQtMTMwYS00OTlhLWJmOWYt NzYxMGFhYmFhMjc0LzEvcmd3ejdpRjNoSGFVbDVWMTlDNEJLb1k5T25FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8wYzliNTQtMTMwYS00OTlhLWJmOWYtNzYxMGFhYmFhMjc0 LzEvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/gOAwQA udtVAwQAudtXMA0GCSqGSIb3DQEBCwUAA4IBAQBMVv0g3KAKaUaA26J2s9FcGnmG j4npAhgEyprFCmMo/tYNoZsr5HTG2iCHU/XAXa2OmRxhW3O9X802hLWztdT9PJ6I dHbDC4tTkJAvflGq6MGgRM6Y5m/6rrc7pMDHy71ZmVO6UU1kNwwzofylCHcinnPB Wh0LyWMLNt2O84mSFTCToBcvQBQAQWbiolNKjMxXw7BUZPnAnnGsfXyZd90GQseu wnjQ31mgihg/Byg1Ap5uD1/tn7Ec+eQn++evp4I6p+a76gcLvs7jKPrEI0spRsZ6 nfA2E3fGTXM/8uaL+KJWhqjP1lb+lklJtw7xVuvMtnf5ufgzo7PMg+iAznC2 -----END CERTIFICATE-----Generated at Mon Jan 26 06:19:28 2026 by rpki-client