This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/8l0SWe3b28HgD7mm-CfnmnFy7uE.roa File: 8l0SWe3b28HgD7mm-CfnmnFy7uE.roa (raw, json) Hash identifier: /HXGsu05kBaXf36m4kHjfdsrMe8Gwl63OVzSaOcPq2E= Subject key identifier: F2:5D:12:59:ED:DB:DB:C1:E0:0F:B9:A6:F8:27:E7:9A:71:72:EE:E1 Certificate issuer: /CN=f8ad543624f8d3281ec970458ee752f10a424529 Certificate serial: 019B7BA4B36BEF9F1FEE382FDB3089E63018 Authority key identifier: F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/8l0SWe3b28HgD7mm-CfnmnFy7uE.roa Signing time: Thu 01 Jan 2026 22:19:09 +0000 ROA not before: Thu 01 Jan 2026 22:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197412 IP address blocks: 185.230.172.0/22 maxlen: 24 185.230.172.0/24 maxlen: 24 185.230.173.0/24 maxlen: 24 185.230.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:b3:6b:ef:9f:1f:ee:38:2f:db:30:89:e6:30:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8ad543624f8d3281ec970458ee752f10a424529 Validity Not Before: Jan 1 22:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f25d1259eddbdbc1e00fb9a6f827e79a7172eee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:97:43:85:25:5e:ef:9b:c5:75:6a:c4:23:4d: fd:ba:7c:97:be:7c:81:01:42:c3:da:8c:32:1e:28: e6:ae:da:cc:da:29:46:23:a6:5c:2a:26:3c:92:ce: 60:8f:82:b0:78:85:4c:fc:f0:3e:bd:4e:c5:ab:24: 98:bc:2e:bc:3f:d4:31:51:cd:c4:46:2b:34:aa:7c: f2:9c:f5:46:28:f2:35:68:7a:ef:28:25:9a:4b:0d: 96:71:75:04:92:1f:9c:01:cb:4a:4e:35:79:de:32: d0:1a:94:97:ce:3d:96:cb:2c:d1:fb:3b:b0:13:fc: 63:a6:45:9c:3b:b5:fd:4c:d1:8d:21:6f:cd:f4:ca: 6f:5e:f3:35:9f:7f:cf:c5:17:2d:41:92:bf:27:6a: f6:ec:a9:62:db:6f:f5:07:44:1a:a1:c4:95:6d:b6: 29:f2:3d:55:4c:33:a6:3f:9d:13:89:e2:4c:76:b6: e4:75:cb:4a:2f:f9:a8:40:d7:dc:ae:3f:cf:17:e6: bb:98:61:f1:bc:3a:8f:92:ba:f9:47:34:a9:cb:c1: a1:6e:db:17:05:79:38:e4:22:6f:5e:ae:c1:ad:fa: 7a:aa:c1:67:87:07:c6:92:37:d1:fe:40:bb:2f:8e: b5:8f:d4:ab:11:f3:7a:fa:2c:92:10:75:4c:8e:6a: b4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:5D:12:59:ED:DB:DB:C1:E0:0F:B9:A6:F8:27:E7:9A:71:72:EE:E1 X509v3 Authority Key Identifier: keyid:F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/8l0SWe3b28HgD7mm-CfnmnFy7uE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.230.172.0/22 Signature Algorithm: sha256WithRSAEncryption 59:97:02:be:d2:3e:b4:53:9a:75:89:14:15:87:e4:31:e3:1d: 5a:06:cc:9a:48:cc:4e:9f:66:21:4a:94:f1:47:cd:9b:44:e0: f3:9d:24:6c:44:9c:a7:3d:f1:63:d4:7a:76:b2:53:ef:cc:e3: b3:6d:77:c5:b1:71:04:90:b8:a4:0d:16:28:58:f4:4a:a5:ea: e3:0a:f7:85:3a:7f:13:9e:bb:ab:71:5f:f3:7a:d1:f2:58:ff: aa:14:f4:5b:f0:29:84:81:a7:35:76:10:5a:33:cf:c0:cf:0e: bd:b1:31:14:03:c5:75:5b:81:1f:e5:c5:ff:88:14:30:c5:e3: 8b:75:75:cd:74:be:6b:c2:74:1a:0e:d0:a6:12:63:8f:2c:17: e0:eb:2f:a2:b1:6b:32:a2:2d:2a:a9:b1:71:74:e7:a4:1c:0e: fe:af:e9:8d:dd:23:31:96:95:29:3a:97:22:ba:8d:17:c2:d0: 3b:23:67:14:fa:f7:ae:e5:d0:47:64:87:97:97:1f:e3:48:ac: 6c:2a:fc:bb:f4:eb:04:59:01:30:26:6b:44:bb:b6:84:67:29: fb:91:1d:6a:1f:45:c8:6c:51:f3:f6:be:43:90:ad:9e:a6:36: 2c:78:fb:b8:df:d7:6b:ae:b3:1c:80:1d:3e:21:d9:80:87:57: 98:4b:7c:8b -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt7pLNr758f7jgv2zCJ5jAYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YWQ1NDM2MjRmOGQzMjgxZWM5NzA0NThlZTc1MmYxMGE0 MjQ1MjkwHhcNMjYwMTAxMjIxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjVkMTI1OWVkZGJkYmMxZTAwZmI5YTZmODI3ZTc5YTcxNzJlZWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5dDhSVe75vFdWrEI039unyXvnyB AULD2owyHijmrtrM2ilGI6ZcKiY8ks5gj4KweIVM/PA+vU7FqySYvC68P9QxUc3E Ris0qnzynPVGKPI1aHrvKCWaSw2WcXUEkh+cActKTjV53jLQGpSXzj2WyyzR+zuw E/xjpkWcO7X9TNGNIW/N9MpvXvM1n3/PxRctQZK/J2r27Kli22/1B0QaocSVbbYp 8j1VTDOmP50TieJMdrbkdctKL/moQNfcrj/PF+a7mGHxvDqPkrr5RzSpy8GhbtsX BXk45CJvXq7Brfp6qsFnhwfGkjfR/kC7L461j9SrEfN6+iySEHVMjmq09QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPJdElnt29vB4A+5pvgn55pxcu7hMB8GA1UdIwQY MBaAFPitVDYk+NMoHslwRY7nUvEKQkUpMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LMVVOaVQ0MHlnZXlYQkZqdWRTOFFwQ1JTay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvYWYxZjY0LWMzNWYtNDdlOC04N2M5 LThhMTFiNDcxOWQ4Mi8xLzhsMFNXZTNiMjhIZ0Q3bW0tQ2ZubW5GeTd1RS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjAvYWYxZjY0LWMzNWYtNDdlOC04N2M5LThhMTFiNDcxOWQ4 Mi8xLzEtSzFVTmlUNDB5Z2V5WEJGanVkUzhRcENSU2suY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK55qww DQYJKoZIhvcNAQELBQADggEBAFmXAr7SPrRTmnWJFBWH5DHjHVoGzJpIzE6fZiFK lPFHzZtE4POdJGxEnKc98WPUenayU+/M47Ntd8WxcQSQuKQNFihY9Eql6uMK94U6 fxOeu6txX/N60fJY/6oU9FvwKYSBpzV2EFozz8DPDr2xMRQDxXVbgR/lxf+IFDDF 44t1dc10vmvCdBoO0KYSY48sF+DrL6KxazKiLSqpsXF056QcDv6v6Y3dIzGWlSk6 lyK6jRfC0DsjZxT6967l0Edkh5eXH+NIrGwq/Lv06wRZATAma0S7toRnKfuRHWof RchsUfP2vkOQrZ6mNix4+7jf12uusxyAHT4h2YCHV5hLfIs= -----END CERTIFICATE-----Generated at Mon Jan 26 07:42:49 2026 by rpki-client