This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/o8tO8stgvhxVUDIUNSKHy-JW2fo.roa File: o8tO8stgvhxVUDIUNSKHy-JW2fo.roa (raw, json) Hash identifier: Z08VgX0ivNPtY5zzCzl8jQ6u6U/EFae5aPOCebjGd+I= Subject key identifier: A3:CB:4E:F2:CB:60:BE:1C:55:50:32:14:35:22:87:CB:E2:56:D9:FA Certificate issuer: /CN=4f6a9444adaa523c5768e9f6be14065183ac20a8 Certificate serial: 019B79107ABD766820361C300F715AF41D74 Authority key identifier: 4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/o8tO8stgvhxVUDIUNSKHy-JW2fo.roa Signing time: Thu 01 Jan 2026 10:18:01 +0000 ROA not before: Thu 01 Jan 2026 10:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42910 IP address blocks: 185.7.176.0/22 maxlen: 22 185.7.176.0/24 maxlen: 24 185.7.177.0/24 maxlen: 24 185.7.178.0/24 maxlen: 24 185.7.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:7a:bd:76:68:20:36:1c:30:0f:71:5a:f4:1d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f6a9444adaa523c5768e9f6be14065183ac20a8 Validity Not Before: Jan 1 10:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3cb4ef2cb60be1c55503214352287cbe256d9fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:17:9b:71:3d:91:5a:cb:68:b5:15:22:a2:fb: ff:1a:64:6b:8f:2a:aa:fb:a0:c7:74:12:ff:98:cb: 28:e5:70:f6:8b:59:ce:f1:8d:43:ed:66:90:03:7e: f0:ba:c8:e6:fa:ad:7f:25:89:df:bc:53:d3:db:a3: 0e:05:7f:23:ef:86:fd:ad:84:7e:6f:4f:0e:73:36: 59:6f:24:c1:bc:8a:a3:73:9e:34:41:51:73:f3:a5: a1:81:3b:c8:48:4e:b4:4c:12:91:11:d9:7b:41:1d: f2:6c:79:fa:8f:f4:14:bd:ba:29:cf:b6:7e:f5:22: 09:7c:67:2f:ed:d3:0c:15:ae:0e:49:ed:f4:0f:f2: 5b:9c:31:54:c0:8a:ca:78:8c:5c:f3:99:dd:b3:c8: 36:b6:10:2f:7b:1c:c4:a2:c7:6d:45:c5:91:c9:da: 20:4b:ba:26:9c:76:c0:6c:a6:5f:aa:20:f3:1b:74: cd:b7:96:ce:5e:24:2c:1f:80:32:1e:77:92:c7:be: ed:36:dd:9e:10:33:6f:a0:66:77:5a:10:9f:6b:0e: 70:2b:e0:b2:53:d3:38:ed:8b:b4:d9:6d:0d:39:e4: 30:c9:1f:6d:0c:8e:c1:f6:99:01:41:b7:4d:7f:04: 95:25:5e:9d:03:a7:72:2b:74:13:a2:f8:b8:30:f2: 5d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CB:4E:F2:CB:60:BE:1C:55:50:32:14:35:22:87:CB:E2:56:D9:FA X509v3 Authority Key Identifier: keyid:4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/o8tO8stgvhxVUDIUNSKHy-JW2fo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.7.176.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:8a:b7:40:0a:cd:13:c8:2e:d4:67:fc:39:ca:0a:16:74:ab: 88:b0:59:28:23:8a:7d:f2:83:e0:f3:05:01:06:e4:63:02:1c: 05:a7:c5:10:cb:05:43:d3:fc:d9:b2:57:f2:50:93:10:21:a4: 36:c8:d0:c9:9d:8a:60:0d:e7:dc:27:ae:19:46:a3:85:03:0c: 37:2d:d7:54:9b:3b:da:a5:3d:60:8c:b9:39:99:aa:94:66:1b: 09:25:c2:e5:31:33:9d:ad:8c:7c:d0:06:b9:a8:5a:c0:72:cf: 62:aa:90:74:09:a3:59:52:10:5d:68:fa:78:eb:f3:dd:07:ea: 8b:79:90:e0:f3:78:a5:65:65:24:28:e8:df:70:40:c6:cf:81: 15:66:f1:1e:34:e2:42:c3:f6:50:8b:42:d0:4f:11:43:cb:7c: 06:02:aa:2d:38:31:6a:c1:d2:f5:a3:75:f9:14:59:ca:aa:af: 89:f9:88:99:cb:b9:79:14:51:3a:b3:78:c0:a6:3a:31:65:49: b7:fa:36:ff:4a:c1:4e:de:16:1b:05:d0:54:9a:b8:ff:b8:f6: 7a:29:e8:af:cb:5c:d4:e9:41:45:7d:36:bb:49:74:24:a6:a6: f9:d9:69:6f:03:34:94:60:cc:49:71:5d:a6:3b:47:8e:2d:67: c7:9e:d6:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EHq9dmggNhwwD3Fa9B10MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNmE5NDQ0YWRhYTUyM2M1NzY4ZTlmNmJlMTQwNjUxODNh YzIwYTgwHhcNMjYwMTAxMTAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2NiNGVmMmNiNjBiZTFjNTU1MDMyMTQzNTIyODdjYmUyNTZkOWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBebcT2RWstotRUiovv/GmRrjyqq +6DHdBL/mMso5XD2i1nO8Y1D7WaQA37wusjm+q1/JYnfvFPT26MOBX8j74b9rYR+ b08OczZZbyTBvIqjc540QVFz86WhgTvISE60TBKREdl7QR3ybHn6j/QUvbopz7Z+ 9SIJfGcv7dMMFa4OSe30D/JbnDFUwIrKeIxc85nds8g2thAvexzEosdtRcWRydog S7omnHbAbKZfqiDzG3TNt5bOXiQsH4AyHneSx77tNt2eEDNvoGZ3WhCfaw5wK+Cy U9M47Yu02W0NOeQwyR9tDI7B9pkBQbdNfwSVJV6dA6dyK3QTovi4MPJdVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKPLTvLLYL4cVVAyFDUih8viVtn6MB8GA1UdIwQY MBaAFE9qlEStqlI8V2jp9r4UBlGDrCCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDJxVVJLMnFVanhYYU9uMnZoUUdVWU9zSUtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85YzRmYjAtYzQ3NS00MjA0LTk5ODct MGE5MWNhZGJlZTY2LzEvbzh0TzhzdGd2aHhWVURJVU5TS0h5LUpXMmZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC85YzRmYjAtYzQ3NS00MjA0LTk5ODctMGE5MWNhZGJlZTY2 LzEvVDJxVVJLMnFVanhYYU9uMnZoUUdVWU9zSUtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuQewMA0G CSqGSIb3DQEBCwUAA4IBAQAsirdACs0TyC7UZ/w5ygoWdKuIsFkoI4p98oPg8wUB BuRjAhwFp8UQywVD0/zZslfyUJMQIaQ2yNDJnYpgDefcJ64ZRqOFAww3LddUmzva pT1gjLk5maqUZhsJJcLlMTOdrYx80Aa5qFrAcs9iqpB0CaNZUhBdaPp46/PdB+qL eZDg83ilZWUkKOjfcEDGz4EVZvEeNOJCw/ZQi0LQTxFDy3wGAqotODFqwdL1o3X5 FFnKqq+J+YiZy7l5FFE6s3jApjoxZUm3+jb/SsFO3hYbBdBUmrj/uPZ6Keivy1zU 6UFFfTa7SXQkpqb52WlvAzSUYMxJcV2mO0eOLWfHntbF -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:38 2026 by rpki-client