This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/Ac8vxDLO-J9cTY-JVdTmb3EHJDs.roa File: Ac8vxDLO-J9cTY-JVdTmb3EHJDs.roa (raw, json) Hash identifier: 2eX5MHu5LgyU0k8rt9ef2wRehXYhklKEAnQA55C4vII= Subject key identifier: 01:CF:2F:C4:32:CE:F8:9F:5C:4D:8F:89:55:D4:E6:6F:71:07:24:3B Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Certificate serial: 019B76EB9EFE0AEA2D620A08A1E532C6B2B5 Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/Ac8vxDLO-J9cTY-JVdTmb3EHJDs.roa Signing time: Thu 01 Jan 2026 00:18:31 +0000 ROA not before: Thu 01 Jan 2026 00:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49349 IP address blocks: 185.11.145.0/24 maxlen: 32 185.11.146.0/24 maxlen: 32 185.11.147.0/24 maxlen: 32 185.62.188.0/23 maxlen: 32 185.62.190.0/24 maxlen: 32 188.209.49.0/24 maxlen: 24 188.209.52.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:9e:fe:0a:ea:2d:62:0a:08:a1:e5:32:c6:b2:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Validity Not Before: Jan 1 00:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01cf2fc432cef89f5c4d8f8955d4e66f7107243b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:85:f6:bd:08:8b:47:b7:4b:1c:de:c4:83:f3: 6b:03:c0:89:34:99:8b:f6:d6:43:d3:00:c6:37:77: 64:b2:35:41:f3:89:a9:c6:f7:15:e5:e8:b6:a0:89: 53:86:af:35:e7:b0:92:3d:d1:b6:4c:6a:9a:4d:cf: fb:9d:fb:28:8c:75:2a:ac:ed:88:c3:0a:53:7a:d6: d6:55:53:ab:1b:c2:12:96:52:4d:94:5e:5f:01:b7: 3e:31:ae:bf:c2:34:09:b2:47:28:4f:20:21:79:dc: bd:28:76:ef:ac:ca:a0:1b:93:1b:0c:b2:be:06:88: 66:67:61:4e:e4:a9:5a:bc:b1:a2:de:fc:4b:5e:e3: eb:30:c2:a1:2d:37:06:c4:f6:76:a9:56:b0:08:f5: 9c:36:45:02:20:e7:76:fa:d8:59:e5:0c:82:3d:0b: 27:d0:c4:e3:24:ec:c9:bf:b4:17:c7:d3:d7:4d:0b: 1b:ff:b1:0f:95:1f:8b:fd:01:2f:17:cd:b0:01:62: e1:3c:8c:83:b5:8f:84:e6:bb:ee:40:21:40:cf:c0: a6:04:27:e1:92:73:ca:c1:e1:f7:6d:4f:01:74:3a: be:b3:5e:b3:6a:f9:7e:de:2b:1e:0e:c5:f3:22:9b: d6:a2:c0:04:1f:f4:04:99:9f:19:52:f4:4d:30:94: 87:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CF:2F:C4:32:CE:F8:9F:5C:4D:8F:89:55:D4:E6:6F:71:07:24:3B X509v3 Authority Key Identifier: keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/Ac8vxDLO-J9cTY-JVdTmb3EHJDs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.11.145.0-185.11.147.255 185.62.188.0-185.62.190.255 188.209.49.0/24 188.209.52.0/23 Signature Algorithm: sha256WithRSAEncryption bb:a3:e3:c8:3a:46:50:be:03:96:65:1a:d6:15:36:b2:c7:4b: fc:e2:3d:c3:af:a4:af:df:d9:67:50:1e:98:67:d1:52:66:0f: 6e:a6:e4:95:3e:c6:eb:80:2d:1e:78:03:35:5f:90:c8:1c:b4: 08:e8:0d:e1:1a:90:aa:36:ed:1e:58:8e:b6:d4:61:d8:3e:eb: e1:84:e0:88:39:c6:83:26:9d:54:c6:f4:0a:f9:66:bc:05:2c: 11:ae:4a:02:37:41:18:2f:a7:9d:5f:b9:27:2c:a6:0e:28:3b: 5a:c7:86:73:f8:30:b5:8f:e1:11:51:78:f2:f8:76:1e:ea:73: a6:19:b6:19:1e:2c:5e:f5:b1:d1:d3:dd:a0:75:8f:55:2d:9c: c9:bd:ec:27:63:71:15:5e:ea:dc:9f:95:67:37:1d:0a:49:67: cd:ed:71:13:11:66:5f:a4:54:b2:cb:d9:c5:dc:59:ad:93:1c: 3e:d0:57:b8:b6:63:16:3e:54:cb:38:f3:65:d6:51:8d:f8:01: 1d:57:1f:3c:35:ed:c8:28:0d:54:ee:69:1f:6e:dc:61:1f:65: 4a:80:e5:0a:09:d4:6b:37:45:97:08:e7:a9:d5:c5:08:5c:c5: 87:ac:b6:0a:e5:ad:28:4a:6b:12:18:81:d7:25:f2:45:dd:4c: cc:f7:15:cd -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt2657+CuotYgoIoeUyxrK1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMzhlYzI0MmE0M2U5YzlkNGNlYjI1ZGM5MGU1NDUzMzcz ZDNmNDYwHhcNMjYwMTAxMDAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWNmMmZjNDMyY2VmODlmNWM0ZDhmODk1NWQ0ZTY2ZjcxMDcyNDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IX2vQiLR7dLHN7Eg/NrA8CJNJmL 9tZD0wDGN3dksjVB84mpxvcV5ei2oIlThq8157CSPdG2TGqaTc/7nfsojHUqrO2I wwpTetbWVVOrG8ISllJNlF5fAbc+Ma6/wjQJskcoTyAhedy9KHbvrMqgG5MbDLK+ BohmZ2FO5KlavLGi3vxLXuPrMMKhLTcGxPZ2qVawCPWcNkUCIOd2+thZ5QyCPQsn 0MTjJOzJv7QXx9PXTQsb/7EPlR+L/QEvF82wAWLhPIyDtY+E5rvuQCFAz8CmBCfh knPKweH3bU8BdDq+s16zavl+3iseDsXzIpvWosAEH/QEmZ8ZUvRNMJSHQwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFAHPL8QyzvifXE2PiVXU5m9xByQ7MB8GA1UdIwQY MBaAFOE47CQqQ+nJ1M6yXckOVFM3PT9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgt Njc4NWNkNDU2ODcxLzEvQWM4dnhETE8tSjljVFktSlZkVG1iM0VISkRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgtNjc4NWNkNDU2ODcx LzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAC5C5ED BAK5C5AwDAMEArk+vAMEALk+vgMEALzRMQMEAbzRNDANBgkqhkiG9w0BAQsFAAOC AQEAu6PjyDpGUL4DlmUa1hU2ssdL/OI9w6+kr9/ZZ1AemGfRUmYPbqbklT7G64At HngDNV+QyBy0COgN4RqQqjbtHliOttRh2D7r4YTgiDnGgyadVMb0CvlmvAUsEa5K AjdBGC+nnV+5JyymDig7WseGc/gwtY/hEVF48vh2Hupzphm2GR4sXvWx0dPdoHWP VS2cyb3sJ2NxFV7q3J+VZzcdCklnze1xExFmX6RUssvZxdxZrZMcPtBXuLZjFj5U yzjzZdZRjfgBHVcfPDXtyCgNVO5pH27cYR9lSoDlCgnUazdFlwjnqdXFCFzFh6y2 CuWtKEprEhiB1yXyRd1MzPcVzQ== -----END CERTIFICATE-----Generated at Sun Jan 25 18:51:27 2026 by rpki-client