This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/R_zL9EhetPG627p64jnL_1AQk_k.roa File: R_zL9EhetPG627p64jnL_1AQk_k.roa (raw, json) Hash identifier: /ASm15I9YtFuL/r1IrLrMNiCv/23kZabo3hMsyygvPM= Subject key identifier: 47:FC:CB:F4:48:5E:B4:F1:BA:DB:BA:7A:E2:39:CB:FF:50:10:93:F9 Certificate issuer: /CN=b586a8643633e9874111a8bcf3518a0905f28609 Certificate serial: 019B79100577E27AF7E7C06A278C67547766 Authority key identifier: B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/R_zL9EhetPG627p64jnL_1AQk_k.roa Signing time: Thu 01 Jan 2026 10:17:31 +0000 ROA not before: Thu 01 Jan 2026 10:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202085 IP address blocks: 185.160.140.0/24 maxlen: 24 2a0d:1580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:05:77:e2:7a:f7:e7:c0:6a:27:8c:67:54:77:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b586a8643633e9874111a8bcf3518a0905f28609 Validity Not Before: Jan 1 10:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47fccbf4485eb4f1badbba7ae239cbff501093f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6a:9b:a7:ed:89:17:33:35:1e:e6:2f:f6:70: 48:7b:32:0d:bd:f1:af:a9:40:5d:d4:db:96:26:d5: 95:f0:2a:0b:22:3f:43:64:5b:98:33:30:33:f4:1c: 2e:ce:42:f0:0e:93:02:94:18:b3:41:a9:e2:cf:c1: 6d:af:68:3f:3d:40:08:65:f1:04:df:2b:f7:f5:64: 25:96:6a:a6:df:c3:6a:07:5b:d2:72:36:dc:ec:15: d7:7c:a8:02:cb:8f:6f:ef:a7:3d:21:f8:8d:8e:1a: 47:9c:33:02:35:97:b5:d5:37:c8:51:81:9e:d0:fa: 94:ca:cb:7f:26:06:dd:89:3a:03:99:e5:e1:ac:8b: 4d:9e:3e:10:d8:ec:86:55:bd:e0:64:e9:e9:88:47: 53:f3:94:52:a4:41:0d:46:c9:f3:fb:d3:be:13:26: e9:63:66:ee:6b:ee:2c:6e:19:26:1d:a6:b5:93:1d: f9:fc:78:37:eb:e9:01:34:93:0c:2c:82:27:bf:26: 1b:e3:d8:78:16:4e:49:b8:6a:a7:a6:09:a5:45:e8: 3d:3c:ae:57:37:4b:58:1c:31:8f:da:b2:86:73:8b: 2c:0f:86:c4:39:f4:92:d5:73:56:fe:b0:ef:53:03: f3:d6:5a:da:e2:b7:a1:05:0c:78:66:30:3e:ec:61: eb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:FC:CB:F4:48:5E:B4:F1:BA:DB:BA:7A:E2:39:CB:FF:50:10:93:F9 X509v3 Authority Key Identifier: keyid:B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/R_zL9EhetPG627p64jnL_1AQk_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.160.140.0/24 IPv6: 2a0d:1580::/48 Signature Algorithm: sha256WithRSAEncryption 32:2f:b6:d1:86:b8:7c:6d:c8:db:1b:26:a8:e1:1e:37:5c:4a: 34:e5:ac:ce:95:00:5b:3d:41:ed:22:da:1c:4c:7e:5b:bd:13: a0:d7:8e:4a:63:11:ed:c4:35:72:81:5c:d1:3d:0a:35:08:81: ad:2b:41:4f:20:96:ac:97:99:e0:b6:aa:56:bd:3f:7e:c8:7c: d3:e2:9b:67:a4:05:79:17:46:43:9c:60:0d:f7:73:bd:8a:be: d5:a6:3d:3b:da:a3:86:ad:80:8c:ba:b3:47:d7:c5:5d:29:2e: dd:54:b8:e9:86:9a:24:a5:44:ad:f4:27:8b:c7:52:3c:b0:18: 35:66:ea:8e:8c:6d:b5:63:1e:c2:d9:cd:d4:41:cd:6b:22:49: eb:c8:d0:e0:3e:8e:1a:4d:e7:3d:3a:9d:04:5d:3b:7d:fc:83: 01:13:2a:aa:f6:41:fe:3f:f7:24:75:b8:21:ea:53:11:0b:f1: 4c:34:f8:3f:4f:92:f3:3a:c7:6d:58:4f:cd:c7:4a:58:6f:27: 10:cc:0a:53:6a:52:f3:e0:10:3e:a8:8c:bc:13:4c:5f:5c:41: e2:9c:37:a3:20:1b:45:d2:a8:45:12:96:62:1b:f1:96:e0:21: 15:f3:76:f7:31:78:2f:07:7a:65:87:fd:ef:a1:18:cb:26:c5: 46:97:a0:b6 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5EAV34nr358BqJ4xnVHdmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ODZhODY0MzYzM2U5ODc0MTExYThiY2YzNTE4YTA5MDVm Mjg2MDkwHhcNMjYwMTAxMTAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2ZjY2JmNDQ4NWViNGYxYmFkYmJhN2FlMjM5Y2JmZjUwMTA5M2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmqbp+2JFzM1HuYv9nBIezINvfGv qUBd1NuWJtWV8CoLIj9DZFuYMzAz9BwuzkLwDpMClBizQaniz8Ftr2g/PUAIZfEE 3yv39WQllmqm38NqB1vScjbc7BXXfKgCy49v76c9IfiNjhpHnDMCNZe11TfIUYGe 0PqUyst/JgbdiToDmeXhrItNnj4Q2OyGVb3gZOnpiEdT85RSpEENRsnz+9O+Eybp Y2bua+4sbhkmHaa1kx35/Hg36+kBNJMMLIInvyYb49h4Fk5JuGqnpgmlReg9PK5X N0tYHDGP2rKGc4ssD4bEOfSS1XNW/rDvUwPz1lra4rehBQx4ZjA+7GHrpQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFEf8y/RIXrTxutu6euI5y/9QEJP5MB8GA1UdIwQY MBaAFLWGqGQ2M+mHQRGovPNRigkF8oYJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFlhb1pEWXo2WWRCRWFpODgxR0tDUVh5aGdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yMGNjYWMtMzNlZS00NWRjLWJjOWMt NDQ5OWUzMjM5ZjFmLzEvUl96TDlFaGV0UEc2MjdwNjRqbkxfMUFRa19rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8yMGNjYWMtMzNlZS00NWRjLWJjOWMtNDQ5OWUzMjM5ZjFm LzEvdFlhb1pEWXo2WWRCRWFpODgxR0tDUVh5aGdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuaCMMA8E AgACMAkDBwAqDRWAAAAwDQYJKoZIhvcNAQELBQADggEBADIvttGGuHxtyNsbJqjh HjdcSjTlrM6VAFs9Qe0i2hxMflu9E6DXjkpjEe3ENXKBXNE9CjUIga0rQU8glqyX meC2qla9P37IfNPim2ekBXkXRkOcYA33c72KvtWmPTvao4atgIy6s0fXxV0pLt1U uOmGmiSlRK30J4vHUjywGDVm6o6MbbVjHsLZzdRBzWsiSevI0OA+jhpN5z06nQRd O338gwETKqr2Qf4/9yR1uCHqUxEL8Uw0+D9PkvM6x21YT83HSlhvJxDMClNqUvPg ED6ojLwTTF9cQeKcN6MgG0XSqEUSlmIb8ZbgIRXzdvcxeC8HemWH/e+hGMsmxUaX oLY= -----END CERTIFICATE-----Generated at Sun Jan 25 20:49:01 2026 by rpki-client