This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/8dKEBvqW0GYmkZiIWQJZSYQLqLU.roa File: 8dKEBvqW0GYmkZiIWQJZSYQLqLU.roa (raw, json) Hash identifier: kjvVcc0xOxJUg+x1ocm3gLplTcfZBpQ+nllVK3oSP4I= Subject key identifier: F1:D2:84:06:FA:96:D0:66:26:91:98:88:59:02:59:49:84:0B:A8:B5 Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Certificate serial: 019B8CFB4B89E25A9869F14B3C575654FC06 Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/8dKEBvqW0GYmkZiIWQJZSYQLqLU.roa Signing time: Mon 05 Jan 2026 07:07:17 +0000 ROA not before: Mon 05 Jan 2026 07:07:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212400 IP address blocks: 185.177.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8c:fb:4b:89:e2:5a:98:69:f1:4b:3c:57:56:54:fc:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Validity Not Before: Jan 5 07:07:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1d28406fa96d0662691988859025949840ba8b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:03:a1:1a:9b:b1:cf:66:26:c7:30:e3:e5:fe: 1c:8d:03:e8:d9:51:f9:a6:00:04:57:2b:12:34:d9: 22:e1:19:b3:00:c3:8a:06:b8:a9:21:6e:3c:7e:b2: b0:4f:b2:e6:9d:40:03:a5:7d:9f:9d:c2:d2:d2:a7: 35:ea:fa:55:4b:42:fa:b6:56:ba:81:42:95:57:6a: bf:3b:d9:7f:9d:91:bd:5a:2b:f2:07:81:19:72:87: 60:13:15:9c:b6:a3:27:7a:cb:09:b9:9b:62:bc:f6: 39:99:4d:0e:2e:e9:c1:8b:84:6b:65:c0:ba:de:f4: 42:e4:97:d8:7d:6f:57:44:b6:24:a0:75:8b:e3:a8: b5:02:67:a9:8a:25:44:a7:07:92:e7:44:5f:98:42: 6c:37:5b:82:46:66:f8:b9:c3:51:48:d0:57:bd:bb: 3f:38:f5:56:99:7a:1c:71:29:2f:fc:d3:4a:2a:b1: a0:5e:60:cb:39:f9:ed:44:92:1c:f1:43:9e:f2:e8: f0:61:d5:70:a4:08:19:04:6f:2a:93:0e:59:14:86: f1:15:72:9c:44:5c:8f:14:9d:f5:ed:fa:7f:b5:cc: 14:5b:cb:8b:10:96:8d:34:ee:2f:25:6b:c3:d4:3d: 22:e4:83:ad:1f:3f:98:04:8e:93:dd:3c:09:53:ce: 13:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D2:84:06:FA:96:D0:66:26:91:98:88:59:02:59:49:84:0B:A8:B5 X509v3 Authority Key Identifier: keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/8dKEBvqW0GYmkZiIWQJZSYQLqLU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.177.228.0/24 Signature Algorithm: sha256WithRSAEncryption 58:21:c2:0c:c6:97:cd:e8:5d:8d:06:08:7c:03:e9:5d:91:d2: d3:dc:0a:e6:8b:d1:ed:6d:e4:95:94:95:e9:99:88:9e:e4:5f: e7:19:28:b6:14:0d:50:aa:ab:ce:27:75:c2:86:5e:c3:4b:28: d7:ab:10:5e:a5:7d:de:32:f3:08:17:b6:93:6e:9c:94:ab:17: 66:70:7d:c1:48:01:c7:82:8e:cc:17:f5:5f:bd:61:3a:f5:fb: 2e:b6:4e:6c:bc:6e:39:1b:82:9c:ac:40:af:62:b2:8e:2d:87: 04:b4:53:2d:33:a1:9b:1f:5b:30:ce:1c:7e:27:8b:64:92:d1: a2:e7:dc:2e:b7:74:42:48:84:ad:5c:66:5e:87:47:e6:01:e6: 1e:f0:c8:93:5a:e3:8f:73:31:f9:80:7e:9e:7e:5e:6d:58:f7: e6:6f:86:95:77:0a:4c:71:bf:a7:05:81:14:b7:ab:3a:c2:13: 0f:3b:ea:fd:fc:0c:a9:6f:4c:3c:41:c2:31:e8:81:fc:f1:e4: 02:48:0e:2e:7d:a7:1c:88:ac:4f:0d:e3:5e:f0:8e:f3:ea:31: df:7a:72:4a:6b:2d:30:52:61:e0:dd:27:95:fe:7f:f4:cf:bd: ec:d4:14:36:9f:da:9a:6e:7b:09:ba:2f:ca:52:74:ae:c7:75: 0f:b4:0b:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuM+0uJ4lqYafFLPFdWVPwGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NTRhYzRjN2Y0NTFjNWJiOTM4MmZiY2Q0NmQ3MGM0YzBm OWRlNTYwHhcNMjYwMTA1MDcwNzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWQyODQwNmZhOTZkMDY2MjY5MTk4ODg1OTAyNTk0OTg0MGJhOGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQOhGpuxz2YmxzDj5f4cjQPo2VH5 pgAEVysSNNki4RmzAMOKBripIW48frKwT7LmnUADpX2fncLS0qc16vpVS0L6tla6 gUKVV2q/O9l/nZG9WivyB4EZcodgExWctqMnessJuZtivPY5mU0OLunBi4RrZcC6 3vRC5JfYfW9XRLYkoHWL46i1AmepiiVEpweS50RfmEJsN1uCRmb4ucNRSNBXvbs/ OPVWmXoccSkv/NNKKrGgXmDLOfntRJIc8UOe8ujwYdVwpAgZBG8qkw5ZFIbxFXKc RFyPFJ317fp/tcwUW8uLEJaNNO4vJWvD1D0i5IOtHz+YBI6T3TwJU84T6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPHShAb6ltBmJpGYiFkCWUmEC6i1MB8GA1UdIwQY MBaAFHVUrEx/RRxbuTgvvNRtcMTA+d5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4Mjgt ZDkzMzdkYjM5ZDFmLzEvOGRLRUJ2cVcwR1lta1ppSVdRSlpTWVFMcUxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4MjgtZDkzMzdkYjM5ZDFm LzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubHkMA0G CSqGSIb3DQEBCwUAA4IBAQBYIcIMxpfN6F2NBgh8A+ldkdLT3Armi9HtbeSVlJXp mYie5F/nGSi2FA1QqqvOJ3XChl7DSyjXqxBepX3eMvMIF7aTbpyUqxdmcH3BSAHH go7MF/VfvWE69fsutk5svG45G4KcrECvYrKOLYcEtFMtM6GbH1swzhx+J4tkktGi 59wut3RCSIStXGZeh0fmAeYe8MiTWuOPczH5gH6efl5tWPfmb4aVdwpMcb+nBYEU t6s6whMPO+r9/Aypb0w8QcIx6IH88eQCSA4ufacciKxPDeNe8I7z6jHfenJKay0w UmHg3SeV/n/0z73s1BQ2n9qabnsJui/KUnSux3UPtAs2 -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:17 2026 by rpki-client