This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/cIznhG-7FFlY99slwXQBHSyGArI.roa File: cIznhG-7FFlY99slwXQBHSyGArI.roa (raw, json) Hash identifier: 6HAUnj4ChowrLAx0R+vc3a/ycSWndHfVoayw20SNgbQ= Subject key identifier: 70:8C:E7:84:6F:BB:14:59:58:F7:DB:25:C1:74:01:1D:2C:86:02:B2 Certificate issuer: /CN=34d519247402bcfbdf0ece9020ad64622e9d3bae Certificate serial: 019B7B36875CBB40446693FD6039EECA0B40 Authority key identifier: 34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/cIznhG-7FFlY99slwXQBHSyGArI.roa Signing time: Thu 01 Jan 2026 20:18:49 +0000 ROA not before: Thu 01 Jan 2026 20:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197152 IP address blocks: 185.120.88.0/22 maxlen: 22 185.120.88.0/23 maxlen: 23 185.120.90.0/23 maxlen: 23 195.54.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.crl rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:87:5c:bb:40:44:66:93:fd:60:39:ee:ca:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34d519247402bcfbdf0ece9020ad64622e9d3bae Validity Not Before: Jan 1 20:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=708ce7846fbb145958f7db25c174011d2c8602b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:06:4c:fa:a3:1f:15:bc:90:e9:dc:35:88:1d: a3:43:38:7d:06:9c:1a:df:e5:65:ff:9a:32:25:39: bf:11:95:80:8f:25:0c:a2:5e:59:69:77:24:3c:0d: a1:dc:a9:20:a3:9d:68:e8:ca:4c:72:2b:17:05:d0: 12:db:ab:3a:73:db:6f:e1:c3:e2:38:26:60:91:e5: 88:a5:1e:2b:a1:94:e7:e5:e3:eb:29:fa:04:44:c9: c5:a3:39:69:07:5b:86:43:13:11:0e:1e:3a:e8:b9: 41:09:c2:a3:a7:ea:71:35:c9:8a:38:37:2d:61:9e: 5a:5d:78:e4:c4:3d:24:e5:8c:90:55:b1:b6:25:c4: 81:05:03:2a:93:76:34:db:f0:cc:11:12:0f:42:87: 2f:9b:bc:d1:07:24:36:e4:9a:24:8d:7a:ab:89:d1: 8f:2e:3a:6e:78:1a:62:bd:c8:4d:18:4f:c4:f6:26: 39:aa:e0:25:f9:52:8f:03:40:49:f6:bf:92:14:f1: df:e7:0f:4a:05:03:c9:a5:28:ca:0d:2d:6d:f3:9a: 9b:77:61:5c:e4:da:0b:a3:02:af:20:ff:ee:9a:00: 24:f9:d3:3d:df:1c:6a:e1:3f:ea:2c:10:63:c6:17: e4:a3:f5:63:03:61:4b:2e:b4:9d:7e:24:e1:f0:c2: 50:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8C:E7:84:6F:BB:14:59:58:F7:DB:25:C1:74:01:1D:2C:86:02:B2 X509v3 Authority Key Identifier: keyid:34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/cIznhG-7FFlY99slwXQBHSyGArI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.120.88.0/22 195.54.42.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:d6:33:a9:66:00:c1:27:4f:95:56:68:b2:28:03:b3:57:ee: a9:29:7f:1a:1a:87:90:ea:8e:a5:58:13:95:ff:a3:70:ee:5a: b0:28:e5:9d:7b:56:58:d3:4c:07:5e:0d:9e:ba:9d:bc:a1:1a: c9:30:9b:c2:18:52:2f:8d:64:f5:a4:7f:7d:12:0b:48:9a:32: a1:f3:97:11:f3:71:ed:5b:53:d0:8a:ae:e0:20:b4:63:a6:9c: 2e:d6:8f:24:57:9c:64:6e:39:16:cd:d1:f0:1a:c9:23:7d:61: 8f:f2:38:e5:59:70:4d:b5:d2:9f:50:79:10:a5:93:88:5d:66: 8b:80:c2:29:59:d7:4c:83:44:ad:39:1f:ee:10:3d:5e:ce:34: 78:da:30:f0:23:d2:3d:3e:e3:99:ae:48:75:8b:40:82:67:de: 61:09:b6:26:52:bd:81:6e:51:02:93:55:2b:1b:15:29:3e:a8: 28:a5:2c:40:89:8d:ef:a0:c4:99:6e:6d:ff:ee:27:dd:d6:de: 64:17:c6:6e:74:a6:10:86:1c:9c:ae:04:ca:e9:01:ea:32:cf: df:d2:08:40:fb:5f:25:67:73:cc:af:88:b5:21:28:d1:d4:df: 72:e3:96:5e:e4:10:84:9b:3b:42:39:f7:f2:24:db:47:03:bd: 7c:45:26:b8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Nodcu0BEZpP9YDnuygtAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZDUxOTI0NzQwMmJjZmJkZjBlY2U5MDIwYWQ2NDYyMmU5 ZDNiYWUwHhcNMjYwMTAxMjAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDhjZTc4NDZmYmIxNDU5NThmN2RiMjVjMTc0MDExZDJjODYwMmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gZM+qMfFbyQ6dw1iB2jQzh9Bpwa 3+Vl/5oyJTm/EZWAjyUMol5ZaXckPA2h3Kkgo51o6MpMcisXBdAS26s6c9tv4cPi OCZgkeWIpR4roZTn5ePrKfoERMnFozlpB1uGQxMRDh466LlBCcKjp+pxNcmKODct YZ5aXXjkxD0k5YyQVbG2JcSBBQMqk3Y02/DMERIPQocvm7zRByQ25JokjXqridGP LjpueBpivchNGE/E9iY5quAl+VKPA0BJ9r+SFPHf5w9KBQPJpSjKDS1t85qbd2Fc 5NoLowKvIP/umgAk+dM93xxq4T/qLBBjxhfko/VjA2FLLrSdfiTh8MJQEQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHCM54RvuxRZWPfbJcF0AR0shgKyMB8GA1UdIwQY MBaAFDTVGSR0Arz73w7OkCCtZGIunTuuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk5VWkpIUUN2UHZmRHM2UUlLMWtZaTZkTzY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zMDgxNzktYmU2OS00YzEwLTg2OTQt ZmJkMzk5YTQ0NzVlLzEvY0l6bmhHLTdGRmxZOTlzbHdYUUJIU3lHQXJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8zMDgxNzktYmU2OS00YzEwLTg2OTQtZmJkMzk5YTQ0NzVl LzEvTk5VWkpIUUN2UHZmRHM2UUlLMWtZaTZkTzY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuXhYAwQB wzYqMA0GCSqGSIb3DQEBCwUAA4IBAQBL1jOpZgDBJ0+VVmiyKAOzV+6pKX8aGoeQ 6o6lWBOV/6Nw7lqwKOWde1ZY00wHXg2eup28oRrJMJvCGFIvjWT1pH99EgtImjKh 85cR83HtW1PQiq7gILRjppwu1o8kV5xkbjkWzdHwGskjfWGP8jjlWXBNtdKfUHkQ pZOIXWaLgMIpWddMg0StOR/uED1ezjR42jDwI9I9PuOZrkh1i0CCZ95hCbYmUr2B blECk1UrGxUpPqgopSxAiY3voMSZbm3/7ifd1t5kF8ZudKYQhhycrgTK6QHqMs/f 0ghA+18lZ3PMr4i1ISjR1N9y45Ze5BCEmztCOffyJNtHA718RSa4 -----END CERTIFICATE-----Generated at Sat Jan 3 02:49:09 2026 by rpki-client