This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/v_CzW-gEtbdZtpCnpKHVty7BP7s.roa File: v_CzW-gEtbdZtpCnpKHVty7BP7s.roa (raw, json) Hash identifier: FK1HiNTHGuvdh1/S7hYfIVoOC1e1CT6RxRS6KDmNYRQ= Subject key identifier: BF:F0:B3:5B:E8:04:B5:B7:59:B6:90:A7:A4:A1:D5:B7:2E:C1:3F:BB Certificate issuer: /CN=b586a8643633e9874111a8bcf3518a0905f28609 Certificate serial: 019B791003A11660389B731F7603043A2BFD Authority key identifier: B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/v_CzW-gEtbdZtpCnpKHVty7BP7s.roa Signing time: Thu 01 Jan 2026 10:17:31 +0000 ROA not before: Thu 01 Jan 2026 10:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39067 IP address blocks: 185.160.143.0/24 maxlen: 24 2a0d:1580:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:03:a1:16:60:38:9b:73:1f:76:03:04:3a:2b:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b586a8643633e9874111a8bcf3518a0905f28609 Validity Not Before: Jan 1 10:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bff0b35be804b5b759b690a7a4a1d5b72ec13fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8b:b2:9e:ef:d9:12:51:31:ee:2a:fc:db:3d: e2:68:e5:97:9f:ca:af:ae:c4:4b:38:99:63:4d:a1: 56:34:20:4b:04:fd:48:a8:8e:f1:5b:33:f2:7f:84: 15:0a:7f:d3:46:31:c9:d4:df:a2:14:ac:c3:01:9f: 6b:c2:38:ad:e4:55:d9:13:a5:bd:81:da:c8:f1:83: 4c:b7:f3:23:7f:1d:9a:0d:91:0a:43:15:bf:c9:7c: e5:8d:e3:44:27:ef:79:4e:f5:c9:e5:6f:6e:b7:48: 9e:bf:5a:3f:cb:a5:3d:9c:56:10:86:a4:89:6a:81: 0a:46:11:3c:17:dd:e8:86:80:f7:ff:48:09:b3:63: 90:fd:c2:27:99:e7:fe:f3:e1:a3:71:b1:db:f3:83: 21:e6:cf:b6:05:7b:89:8c:ad:96:62:26:ff:79:9e: 75:29:bb:43:0a:f8:56:1d:26:2d:33:03:12:a3:24: 5b:5a:1e:07:39:56:3d:cc:6f:39:78:73:cb:80:ce: cb:d5:7c:af:9f:7c:9b:34:bb:9a:5b:7a:ba:e3:37: b8:f4:57:61:d8:bd:fb:39:12:be:10:2f:d6:44:18: 92:6e:f2:a7:af:49:dd:2c:1a:b4:f4:d2:6d:0e:15: d8:bc:56:93:80:02:ff:8d:35:36:ee:40:90:60:f2: 01:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F0:B3:5B:E8:04:B5:B7:59:B6:90:A7:A4:A1:D5:B7:2E:C1:3F:BB X509v3 Authority Key Identifier: keyid:B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/v_CzW-gEtbdZtpCnpKHVty7BP7s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.160.143.0/24 IPv6: 2a0d:1580:10::/48 Signature Algorithm: sha256WithRSAEncryption 03:2c:d2:d4:f8:b3:f7:08:a6:10:18:f6:05:34:c3:0c:21:52: d4:02:8c:9e:27:29:78:df:cb:30:38:f8:ba:f5:7b:95:fb:37: 3e:c4:c1:68:58:32:ce:f3:fc:ef:3f:db:88:87:39:e2:b9:bb: 3b:43:48:44:9a:f2:f2:60:c0:ca:43:9e:d5:ef:d1:60:0c:6c: f7:ae:8a:5d:ec:fe:eb:c6:ce:1a:68:03:97:12:96:38:62:29: 62:9f:be:68:4e:e8:ad:fc:85:ea:48:9e:60:df:1c:d3:be:c2: 0f:a9:cf:f3:1a:b9:18:fd:a4:5b:91:9e:15:d6:ed:f9:38:73: 79:c3:6d:60:3c:08:61:40:d5:e3:a0:03:ee:77:fe:fe:65:b6: 93:cc:48:45:63:8c:10:30:71:08:e9:c1:af:96:c6:be:ee:5c: 1d:30:68:9e:38:42:e9:96:e4:ec:8e:d0:d3:2f:3b:3f:5f:92: 8d:9e:23:e4:35:0b:22:87:d5:2f:47:da:aa:85:67:3e:75:a8: 45:b3:36:1d:ea:04:d8:00:4a:5f:5d:e0:1d:7c:c4:72:e0:ae: 9b:72:e2:fb:55:0b:27:5c:dc:ac:6e:4e:70:97:46:9b:1b:7f: 35:4a:ce:bd:58:ed:bf:ec:f9:6f:d0:55:f0:8a:fa:ec:e0:6e: bf:e3:c2:d8 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5EAOhFmA4m3MfdgMEOiv9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ODZhODY0MzYzM2U5ODc0MTExYThiY2YzNTE4YTA5MDVm Mjg2MDkwHhcNMjYwMTAxMTAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmYwYjM1YmU4MDRiNWI3NTliNjkwYTdhNGExZDViNzJlYzEzZmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIuynu/ZElEx7ir82z3iaOWXn8qv rsRLOJljTaFWNCBLBP1IqI7xWzPyf4QVCn/TRjHJ1N+iFKzDAZ9rwjit5FXZE6W9 gdrI8YNMt/Mjfx2aDZEKQxW/yXzljeNEJ+95TvXJ5W9ut0iev1o/y6U9nFYQhqSJ aoEKRhE8F93ohoD3/0gJs2OQ/cInmef+8+GjcbHb84Mh5s+2BXuJjK2WYib/eZ51 KbtDCvhWHSYtMwMSoyRbWh4HOVY9zG85eHPLgM7L1Xyvn3ybNLuaW3q64ze49Fdh 2L37ORK+EC/WRBiSbvKnr0ndLBq09NJtDhXYvFaTgAL/jTU27kCQYPIBJQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFL/ws1voBLW3WbaQp6Sh1bcuwT+7MB8GA1UdIwQY MBaAFLWGqGQ2M+mHQRGovPNRigkF8oYJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFlhb1pEWXo2WWRCRWFpODgxR0tDUVh5aGdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yMGNjYWMtMzNlZS00NWRjLWJjOWMt NDQ5OWUzMjM5ZjFmLzEvdl9DelctZ0V0YmRadHBDbnBLSFZ0eTdCUDdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8yMGNjYWMtMzNlZS00NWRjLWJjOWMtNDQ5OWUzMjM5ZjFm LzEvdFlhb1pEWXo2WWRCRWFpODgxR0tDUVh5aGdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuaCPMA8E AgACMAkDBwAqDRWAABAwDQYJKoZIhvcNAQELBQADggEBAAMs0tT4s/cIphAY9gU0 wwwhUtQCjJ4nKXjfyzA4+Lr1e5X7Nz7EwWhYMs7z/O8/24iHOeK5uztDSESa8vJg wMpDntXv0WAMbPeuil3s/uvGzhpoA5cSljhiKWKfvmhO6K38hepInmDfHNO+wg+p z/MauRj9pFuRnhXW7fk4c3nDbWA8CGFA1eOgA+53/v5ltpPMSEVjjBAwcQjpwa+W xr7uXB0waJ44QumW5OyO0NMvOz9fko2eI+Q1CyKH1S9H2qqFZz51qEWzNh3qBNgA Sl9d4B18xHLgrpty4vtVCydc3KxuTnCXRpsbfzVKzr1Y7b/s+W/QVfCK+uzgbr/j wtg= -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:29 2026 by rpki-client