This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/B8AGidGKLoQLti3y3WxY0M6Ums8.roa File: B8AGidGKLoQLti3y3WxY0M6Ums8.roa (raw, json) Hash identifier: GW4/8IG15yoULapMWSUA1tjQmytW8th3DPjNUReuGJY= Subject key identifier: 07:C0:06:89:D1:8A:2E:84:0B:B6:2D:F2:DD:6C:58:D0:CE:94:9A:CF Certificate issuer: /CN=1627573c68929ab2a4590e92a51abc40ea9e5817 Certificate serial: 019B7834D7DEE99726DEC645B65662C35A34 Authority key identifier: 16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/B8AGidGKLoQLti3y3WxY0M6Ums8.roa Signing time: Thu 01 Jan 2026 06:18:07 +0000 ROA not before: Thu 01 Jan 2026 06:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43220 IP address blocks: 185.60.160.0/24 maxlen: 24 185.60.161.0/24 maxlen: 24 185.60.162.0/24 maxlen: 24 185.60.163.0/24 maxlen: 24 185.161.124.0/22 maxlen: 22 185.211.52.0/22 maxlen: 22 2a07:c3c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:d7:de:e9:97:26:de:c6:45:b6:56:62:c3:5a:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1627573c68929ab2a4590e92a51abc40ea9e5817 Validity Not Before: Jan 1 06:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07c00689d18a2e840bb62df2dd6c58d0ce949acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ed:d5:c5:3b:0f:52:f1:3b:8f:35:0b:12:e6: f2:5b:65:de:89:c5:60:ca:d4:27:dd:b9:5a:6b:31: ea:dc:de:8f:9d:c4:0a:aa:91:5d:af:03:ec:e7:57: 76:6c:42:7f:1a:bd:0c:70:60:98:c1:cd:28:65:e8: 71:e0:bc:86:08:4d:a8:4e:fa:fb:6e:70:1c:1f:20: e8:48:ae:3c:62:c6:6a:f6:f6:f3:f9:4a:58:ec:4d: 6e:a3:ed:a1:2b:fe:b6:f4:65:93:8a:53:e1:3e:70: 58:6f:3d:e4:f0:be:08:3b:1c:c8:90:35:9a:15:4b: d5:82:6c:0c:3d:51:c0:bc:fe:c9:1c:13:f2:1a:e6: fe:95:98:52:63:93:3c:50:8d:44:bd:1e:00:c9:13: 89:63:37:ee:eb:2e:18:8d:d7:59:b3:3b:ee:45:9a: e1:46:96:cc:da:0d:45:ed:27:ab:41:8b:99:9a:9f: 75:3e:91:60:42:73:8a:a9:0f:1a:80:5d:42:59:88: 0f:f8:f7:7c:7f:9d:20:5d:d4:fd:6e:4c:d6:19:7d: 1b:ad:ab:9d:4b:90:a8:a8:54:1d:96:bd:dc:6b:6d: af:49:96:02:69:cf:b3:af:8d:39:a1:ce:80:ce:21: f0:44:fc:7f:fc:4a:f2:41:57:59:ca:9a:f1:49:08: 5c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C0:06:89:D1:8A:2E:84:0B:B6:2D:F2:DD:6C:58:D0:CE:94:9A:CF X509v3 Authority Key Identifier: keyid:16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/B8AGidGKLoQLti3y3WxY0M6Ums8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.160.0/22 185.161.124.0/22 185.211.52.0/22 IPv6: 2a07:c3c0::/29 Signature Algorithm: sha256WithRSAEncryption b2:91:32:a7:be:4d:41:8d:50:d6:1e:dc:6c:94:fe:af:88:67: 25:ee:14:37:4c:df:01:d3:83:87:d4:e3:ef:44:95:3a:4b:77: 79:23:65:97:70:87:46:9e:fa:45:6d:25:33:2f:85:7f:ab:24: f4:93:81:80:68:9c:b1:b7:f6:6b:ca:0f:51:82:11:94:00:34: 83:97:c4:43:4c:fc:97:84:f1:65:d5:1b:c0:ca:dc:91:e7:c5: e6:ad:79:a9:ab:4d:ca:9c:64:dd:bb:50:e4:02:b6:1e:71:45: bf:c1:0d:cf:7f:50:85:48:08:1d:00:90:5b:5d:1d:ab:09:9f: f2:1b:bb:ec:c5:61:ba:28:a7:c0:a0:67:3d:a3:77:02:62:74: b9:6b:52:23:9e:ad:f2:21:2c:dc:8d:93:19:24:65:54:46:83: 65:d5:22:5a:0e:d8:8f:05:e4:34:8e:db:54:d5:00:a6:a2:84: 52:7b:df:ad:e1:42:80:e2:52:ed:34:87:d5:e0:55:8b:9c:8b: 22:34:14:43:54:06:2e:08:f8:5a:71:84:c8:c9:05:87:31:83: e7:9e:97:af:e3:ba:69:26:7e:81:64:4e:1d:02:16:49:07:34: 63:e7:83:d5:4a:21:0c:74:22:98:9c:b1:f2:99:65:a6:07:9f: 69:49:69:89 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt4NNfe6Zcm3sZFtlZiw1o0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2Mjc1NzNjNjg5MjlhYjJhNDU5MGU5MmE1MWFiYzQwZWE5 ZTU4MTcwHhcNMjYwMTAxMDYxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2MwMDY4OWQxOGEyZTg0MGJiNjJkZjJkZDZjNThkMGNlOTQ5YWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu3VxTsPUvE7jzULEubyW2XeicVg ytQn3blaazHq3N6PncQKqpFdrwPs51d2bEJ/Gr0McGCYwc0oZehx4LyGCE2oTvr7 bnAcHyDoSK48YsZq9vbz+UpY7E1uo+2hK/629GWTilPhPnBYbz3k8L4IOxzIkDWa FUvVgmwMPVHAvP7JHBPyGub+lZhSY5M8UI1EvR4AyROJYzfu6y4YjddZszvuRZrh RpbM2g1F7SerQYuZmp91PpFgQnOKqQ8agF1CWYgP+Pd8f50gXdT9bkzWGX0braud S5CoqFQdlr3ca22vSZYCac+zr405oc6AziHwRPx//EryQVdZyprxSQhc6wIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFAfABonRii6EC7Yt8t1sWNDOlJrPMB8GA1UdIwQY MBaAFBYnVzxokpqypFkOkqUavEDqnlgXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmlkWFBHaVNtcktrV1E2U3BScThRT3FlV0JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wZTBjOTAtNzE3Zi00MGVhLWIxN2Ut ZTZmOWRiNzQxMzlkLzEvQjhBR2lkR0tMb1FMdGkzeTNXeFkwTTZVbXM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wZTBjOTAtNzE3Zi00MGVhLWIxN2UtZTZmOWRiNzQxMzlk LzEvRmlkWFBHaVNtcktrV1E2U3BScThRT3FlV0JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuTygAwQC uaF8AwQCudM0MA0EAgACMAcDBQMqB8PAMA0GCSqGSIb3DQEBCwUAA4IBAQCykTKn vk1BjVDWHtxslP6viGcl7hQ3TN8B04OH1OPvRJU6S3d5I2WXcIdGnvpFbSUzL4V/ qyT0k4GAaJyxt/Zryg9RghGUADSDl8RDTPyXhPFl1RvAytyR58XmrXmpq03KnGTd u1DkArYecUW/wQ3Pf1CFSAgdAJBbXR2rCZ/yG7vsxWG6KKfAoGc9o3cCYnS5a1Ij nq3yISzcjZMZJGVURoNl1SJaDtiPBeQ0jttU1QCmooRSe9+t4UKA4lLtNIfV4FWL nIsiNBRDVAYuCPhacYTIyQWHMYPnnpev47ppJn6BZE4dAhZJBzRj54PVSiEMdCKY nLHymWWmB59pSWmJ -----END CERTIFICATE-----Generated at Mon Jan 26 09:40:51 2026 by rpki-client