This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/i8xS2SNRoq_4w2VKsWzO9ZVkL-Y.roa File: i8xS2SNRoq_4w2VKsWzO9ZVkL-Y.roa (raw, json) Hash identifier: J61ECAA02vndrCEVyDU5JqxkNGwrJIPqNyxo3rSAtJg= Subject key identifier: 8B:CC:52:D9:23:51:A2:AF:F8:C3:65:4A:B1:6C:CE:F5:95:64:2F:E6 Certificate issuer: /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674 Certificate serial: 019B7DCA65DF14D071B8713A179186EB7790 Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/i8xS2SNRoq_4w2VKsWzO9ZVkL-Y.roa Signing time: Fri 02 Jan 2026 08:19:34 +0000 ROA not before: Fri 02 Jan 2026 08:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202984 IP address blocks: 185.231.244.0/24 maxlen: 24 185.231.245.0/24 maxlen: 24 185.231.246.0/23 maxlen: 23 194.147.114.0/24 maxlen: 24 2a0c:9300::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:65:df:14:d0:71:b8:71:3a:17:91:86:eb:77:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674 Validity Not Before: Jan 2 08:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bcc52d92351a2aff8c3654ab16ccef595642fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:46:7b:75:d9:aa:48:2f:ad:56:37:16:1b:2a: a5:95:ca:d1:fd:9c:48:c7:8a:6e:96:35:ce:21:fb: e7:d9:26:fc:08:dd:55:3e:fe:a1:12:3b:d1:6d:c2: 1a:2b:4c:af:d2:74:7b:a8:6c:92:00:70:d9:4c:c3: 6c:e7:9e:04:79:83:ad:7e:4d:68:1f:4b:e8:ba:33: 29:c4:49:1b:e4:b0:96:a0:a6:e9:81:f5:39:9e:d2: 42:8d:f1:28:ab:a7:4e:4c:33:24:e9:4e:d5:c1:91: d9:e6:35:de:76:fa:96:40:ef:46:a0:2e:3d:1c:f3: 5a:97:61:37:1d:c0:6e:3f:34:b2:2e:21:d8:5f:dc: 0f:e8:6c:1a:d8:a6:7f:2b:07:44:12:d4:42:73:bf: a4:42:9a:a4:fc:e3:87:19:25:00:79:a2:8f:e2:3e: e0:4f:92:06:b8:04:03:b1:91:a2:20:41:25:7a:70: 2f:37:3f:3b:21:c3:c1:c5:21:90:37:f8:36:f9:d9: 0c:11:ad:11:b9:3b:f1:06:0e:bb:9d:08:6e:2d:8c: ce:70:f6:95:bd:fd:68:73:03:1b:68:94:fa:f4:e9: d2:3f:87:7e:eb:a1:38:2b:23:73:c1:8d:85:87:74: e9:a1:2c:25:e3:a1:fa:4b:61:4c:47:30:d4:95:4d: 45:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CC:52:D9:23:51:A2:AF:F8:C3:65:4A:B1:6C:CE:F5:95:64:2F:E6 X509v3 Authority Key Identifier: keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/i8xS2SNRoq_4w2VKsWzO9ZVkL-Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.244.0/22 194.147.114.0/24 IPv6: 2a0c:9300::/29 Signature Algorithm: sha256WithRSAEncryption 07:ba:05:08:57:0a:a1:ef:24:f2:38:96:22:52:36:bc:df:8f: c3:a2:5f:eb:8f:23:af:18:1e:25:51:74:3d:5b:81:25:74:76: b0:b0:cb:6e:14:7f:01:0c:6b:07:3e:af:75:68:11:9d:20:2b: 7e:5c:8f:16:8a:84:cb:a5:f8:b2:88:49:74:44:73:b8:47:6e: d6:1e:b8:34:95:7b:70:f4:c9:d1:67:96:66:db:93:1a:43:ee: 8d:40:d3:03:a1:70:c4:4e:d3:8c:27:51:47:28:a9:b0:e9:06: 9f:f8:a5:7e:c1:90:1c:6a:49:35:4f:eb:7a:0d:b3:0a:69:8a: 9e:a2:f1:8d:f7:c0:d2:32:c8:e1:e0:13:d7:e4:56:bd:4a:48: fd:cf:52:f3:96:5a:54:11:01:02:aa:a6:f9:05:c6:23:45:7b: 5e:b3:a5:95:fa:d9:b2:54:06:ea:fd:8c:61:db:cc:7c:a9:46: cf:21:09:26:b0:09:a3:e8:81:f2:41:b4:f7:21:60:d1:0a:46: f7:44:3c:d9:db:20:62:9f:b8:dc:6d:f1:18:ec:1d:08:88:60: 69:e8:76:12:89:dd:e1:af:e4:ab:f7:ed:91:48:22:99:17:4a: f2:50:76:d1:c6:5b:9d:31:0a:17:e8:a9:92:b2:bd:69:57:a0: 96:7f:82:99 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9ymXfFNBxuHE6F5GG63eQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMzVjMWY3YjcxNDBjODcyZTdmM2ZmMzQ2MmI0ZWRjNjMx ZDc2NzQwHhcNMjYwMTAyMDgxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmNjNTJkOTIzNTFhMmFmZjhjMzY1NGFiMTZjY2VmNTk1NjQyZmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEZ7ddmqSC+tVjcWGyqllcrR/ZxI x4puljXOIfvn2Sb8CN1VPv6hEjvRbcIaK0yv0nR7qGySAHDZTMNs554EeYOtfk1o H0voujMpxEkb5LCWoKbpgfU5ntJCjfEoq6dOTDMk6U7VwZHZ5jXedvqWQO9GoC49 HPNal2E3HcBuPzSyLiHYX9wP6Gwa2KZ/KwdEEtRCc7+kQpqk/OOHGSUAeaKP4j7g T5IGuAQDsZGiIEElenAvNz87IcPBxSGQN/g2+dkMEa0RuTvxBg67nQhuLYzOcPaV vf1ocwMbaJT69OnSP4d+66E4KyNzwY2Fh3TpoSwl46H6S2FMRzDUlU1FqQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIvMUtkjUaKv+MNlSrFszvWVZC/mMB8GA1UdIwQY MBaAFGE1wfe3FAyHLn8/80YrTtxjHXZ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVRYQjk3Y1VESWN1ZnpfelJpdE8zR01kZG5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80MzNlZGYtYWFmOC00NjY5LTg3N2Mt ZTM3ODFkOGZlNzRjLzEvaTh4UzJTTlJvcV80dzJWS3NXek85WlZrTC1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80MzNlZGYtYWFmOC00NjY5LTg3N2MtZTM3ODFkOGZlNzRj LzEvWVRYQjk3Y1VESWN1ZnpfelJpdE8zR01kZG5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuef0AwQA wpNyMA0EAgACMAcDBQMqDJMAMA0GCSqGSIb3DQEBCwUAA4IBAQAHugUIVwqh7yTy OJYiUja834/Dol/rjyOvGB4lUXQ9W4EldHawsMtuFH8BDGsHPq91aBGdICt+XI8W ioTLpfiyiEl0RHO4R27WHrg0lXtw9MnRZ5Zm25MaQ+6NQNMDoXDETtOMJ1FHKKmw 6Qaf+KV+wZAcakk1T+t6DbMKaYqeovGN98DSMsjh4BPX5Fa9Skj9z1LzllpUEQEC qqb5BcYjRXtes6WV+tmyVAbq/Yxh28x8qUbPIQkmsAmj6IHyQbT3IWDRCkb3RDzZ 2yBin7jcbfEY7B0IiGBp6HYSid3hr+Sr9+2RSCKZF0ryUHbRxludMQoX6KmSsr1p V6CWf4KZ -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:44 2026 by rpki-client