This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/8GKAWQ23bVaOj62dghwbzfB4KBs.roa File: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (raw, json) Hash identifier: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk= Subject key identifier: F0:62:80:59:0D:B7:6D:56:8E:8F:AD:9D:82:1C:1B:CD:F0:78:28:1B Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019B7B36BB0C920C8FA61F5A4C0E4A5853E8 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/8GKAWQ23bVaOj62dghwbzfB4KBs.roa Signing time: Thu 01 Jan 2026 20:19:02 +0000 ROA not before: Thu 01 Jan 2026 20:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 185.226.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:bb:0c:92:0c:8f:a6:1f:5a:4c:0e:4a:58:53:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Jan 1 20:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f06280590db76d568e8fad9d821c1bcdf078281b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1c:49:35:5f:68:cd:35:36:ff:cc:70:e8:fe: 8a:ef:30:0b:c7:ac:b8:4e:bb:6d:dc:85:7a:a4:90: cc:fc:6d:28:c4:6f:3b:bc:7f:45:1e:1f:fd:70:5f: d0:fe:63:bd:ad:c0:a8:3a:0c:7b:ba:ac:8c:83:52: 7c:f3:b6:bc:4e:e1:a2:a4:26:b7:70:35:d7:49:3b: b9:f5:22:30:6d:f7:f6:d1:d5:4a:a1:88:02:8b:fc: 9a:86:4b:0f:5b:a4:74:ff:63:07:33:67:ce:90:a1: 6e:54:46:97:53:b5:cc:36:37:10:f2:9a:68:59:4e: 29:13:75:c0:cf:15:f4:c5:d5:52:f2:4e:bc:a5:5b: d3:f7:46:86:79:7c:5f:d5:c7:45:03:1c:b5:a5:33: 6c:f4:06:bd:2c:53:2a:d1:fc:be:d3:44:c8:b1:2c: a8:df:3e:97:26:57:a8:26:a4:44:98:ae:90:b9:16: 4e:43:40:77:4c:56:8e:62:95:56:de:6e:bd:11:7f: 29:6b:fe:54:59:3a:83:de:2f:4e:cb:9d:7e:44:89: 3f:5d:9c:a8:33:96:96:af:40:e8:9c:ac:f4:aa:d4: 15:d1:62:31:12:0e:80:01:85:73:d2:e8:03:67:a0: 14:1d:47:e3:de:3c:3d:c6:25:a8:ac:ef:cc:44:de: 8f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:62:80:59:0D:B7:6D:56:8E:8F:AD:9D:82:1C:1B:CD:F0:78:28:1B X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/8GKAWQ23bVaOj62dghwbzfB4KBs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.226.181.0/24 Signature Algorithm: sha256WithRSAEncryption 38:32:d4:43:20:5a:c8:74:cc:91:a8:ea:ce:c6:38:6f:7a:ca: 55:64:84:48:c4:97:4a:f0:b7:e6:a1:66:4e:f5:8f:81:54:30: da:a8:d2:63:49:fc:3e:22:1e:85:51:da:5e:30:60:36:c0:72: bc:8f:9c:db:43:c0:ce:9a:bd:a7:8d:b2:01:11:58:c3:ca:50: 50:7f:85:19:ac:d1:d1:b7:0a:74:90:78:c9:c9:3e:10:24:d4: 01:eb:43:05:c9:07:48:a4:bd:92:4c:12:ed:bc:71:44:6d:67: c6:f7:9b:cf:94:c3:14:9e:36:a1:af:f2:c8:cf:32:39:81:7d: 3c:15:79:10:49:59:17:eb:ed:1a:21:4a:c5:48:cd:35:4e:a8: 80:6d:fe:17:cf:96:6c:52:7d:2f:b2:2b:35:eb:49:39:f6:26: 36:8b:41:38:40:e9:f3:63:fd:71:8e:05:c6:c7:ab:91:fb:41: cc:9b:a1:d3:8f:94:1b:9d:b1:cf:a0:22:66:85:7e:35:ae:31: dc:d8:1b:1e:88:21:49:c5:f6:02:a6:d0:43:7e:43:1d:17:2f: 6d:3c:d5:c4:28:3b:65:4d:33:55:3b:53:ab:36:b4:fc:d8:05: c8:44:1c:4a:d2:cc:9a:43:a8:5d:97:91:b0:3b:cf:8b:c2:c7: 2d:7e:2a:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NrsMkgyPph9aTA5KWFPoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwMTAxMjAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDYyODA1OTBkYjc2ZDU2OGU4ZmFkOWQ4MjFjMWJjZGYwNzgyODFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphxJNV9ozTU2/8xw6P6K7zALx6y4 Trtt3IV6pJDM/G0oxG87vH9FHh/9cF/Q/mO9rcCoOgx7uqyMg1J887a8TuGipCa3 cDXXSTu59SIwbff20dVKoYgCi/yahksPW6R0/2MHM2fOkKFuVEaXU7XMNjcQ8ppo WU4pE3XAzxX0xdVS8k68pVvT90aGeXxf1cdFAxy1pTNs9Aa9LFMq0fy+00TIsSyo 3z6XJleoJqREmK6QuRZOQ0B3TFaOYpVW3m69EX8pa/5UWTqD3i9Oy51+RIk/XZyo M5aWr0DonKz0qtQV0WIxEg6AAYVz0ugDZ6AUHUfj3jw9xiWorO/MRN6PhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPBigFkNt21Wjo+tnYIcG83weCgbMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvOEdLQVdRMjNiVmFPajYyZGdod2J6ZkI0S0JzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueK1MA0G CSqGSIb3DQEBCwUAA4IBAQA4MtRDIFrIdMyRqOrOxjhvespVZIRIxJdK8LfmoWZO 9Y+BVDDaqNJjSfw+Ih6FUdpeMGA2wHK8j5zbQ8DOmr2njbIBEVjDylBQf4UZrNHR twp0kHjJyT4QJNQB60MFyQdIpL2STBLtvHFEbWfG95vPlMMUnjahr/LIzzI5gX08 FXkQSVkX6+0aIUrFSM01TqiAbf4Xz5ZsUn0vsis160k59iY2i0E4QOnzY/1xjgXG x6uR+0HMm6HTj5QbnbHPoCJmhX41rjHc2BseiCFJxfYCptBDfkMdFy9tPNXEKDtl TTNVO1OrNrT82AXIRBxK0syaQ6hdl5GwO8+LwsctfirJ -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:11 2026 by rpki-client