This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/8MhUGiidi2m0HnQqAR9gajVbxRM.roa File: 8MhUGiidi2m0HnQqAR9gajVbxRM.roa (raw, json) Hash identifier: H33xML5R5o+4GB2XWvGYGH7H4gss4OnrQcVOqELCXeI= Subject key identifier: F0:C8:54:1A:28:9D:8B:69:B4:1E:74:2A:01:1F:60:6A:35:5B:C5:13 Certificate issuer: /CN=2400b20606314858a7b3f2a975e8e9d919ec753a Certificate serial: 019B7910BC198923BC1F20E9B03546732CCB Authority key identifier: 24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/8MhUGiidi2m0HnQqAR9gajVbxRM.roa Signing time: Thu 01 Jan 2026 10:18:18 +0000 ROA not before: Thu 01 Jan 2026 10:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215018 IP address blocks: 185.74.82.0/23 maxlen: 23 185.74.82.0/24 maxlen: 24 185.74.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:bc:19:89:23:bc:1f:20:e9:b0:35:46:73:2c:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2400b20606314858a7b3f2a975e8e9d919ec753a Validity Not Before: Jan 1 10:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0c8541a289d8b69b41e742a011f606a355bc513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:30:0d:c8:36:5b:c2:c7:bf:3f:c4:3a:9d:d4: 78:59:cd:94:45:49:7d:6f:81:75:b1:8f:8d:ea:c1: 42:c5:9e:df:0c:f2:f8:63:46:40:07:26:08:d2:aa: ff:9c:9a:de:34:ab:24:79:12:c0:3e:85:a1:68:e8: 59:61:a1:2e:ac:80:bd:93:13:98:c1:b7:58:9b:ee: 4b:58:cf:ee:a7:f1:84:91:13:64:8a:29:34:04:91: bc:72:98:b6:2d:c6:de:86:a6:ac:85:94:49:e3:f3: 4d:69:d6:9e:88:80:e1:ee:eb:77:49:d4:5a:3b:58: d6:12:92:04:f4:87:c7:87:95:70:5f:b3:06:a1:f2: 0d:29:14:68:47:72:68:7c:e7:82:af:e3:15:6f:f9: 0d:92:c2:3c:48:c4:34:09:52:f4:91:80:09:ae:12: 6f:ca:d2:47:8a:2b:b8:08:de:be:8d:d2:81:84:e2: 53:aa:52:6a:7e:73:c0:52:d7:1a:f2:f3:44:9b:a9: aa:e1:7b:76:76:1c:57:53:d5:04:d7:cd:3b:da:99: 0e:9b:9f:ac:b7:7f:c2:63:79:dd:e5:ea:de:03:84: d0:41:73:62:c1:73:4a:9b:fc:8b:63:b7:2b:60:d7: 4f:54:3f:d2:9a:f1:2c:6e:4d:7b:5f:ff:47:c9:f8: 44:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C8:54:1A:28:9D:8B:69:B4:1E:74:2A:01:1F:60:6A:35:5B:C5:13 X509v3 Authority Key Identifier: keyid:24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/8MhUGiidi2m0HnQqAR9gajVbxRM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.74.82.0/23 Signature Algorithm: sha256WithRSAEncryption 11:90:85:a7:7c:fb:cb:e0:db:55:61:81:24:b7:95:ce:27:26: b2:43:4c:52:54:63:7a:e2:67:7d:90:fd:5c:24:9c:27:e2:56: 16:53:c1:11:22:fc:96:88:3d:47:d6:82:f9:ba:55:6a:01:94: db:cb:a5:22:5c:e9:35:ef:59:c5:21:ba:da:db:fb:64:20:d3: 8b:bb:4b:fe:7e:a5:8a:d5:c9:11:3b:81:3e:d1:e2:ef:6e:47: aa:ba:93:3a:a8:90:52:d1:fc:b0:5f:e3:4b:b8:34:71:3d:dd: a0:00:31:6e:da:23:27:38:83:3a:93:7e:a3:70:fb:d5:cf:0b: 1f:38:99:9a:00:3f:3c:7c:1b:0d:90:bf:ec:44:68:04:7b:2c: d3:15:4b:b9:85:75:84:4b:0a:c9:b8:5c:37:a1:63:55:24:10: 86:cb:96:9a:99:74:85:d2:8d:c8:ee:b5:64:ab:a2:9a:94:38: ec:43:f7:43:5d:ae:cb:4a:c1:dd:68:5f:0d:60:42:1a:63:16: 15:d0:b9:d5:c7:72:07:99:c3:d9:0c:7f:51:63:45:e7:b8:e7: 8f:a9:ba:25:58:bf:63:b5:e6:0e:85:04:af:82:37:50:64:d3: b9:7c:25:40:18:d6:b9:83:3e:b8:78:22:e3:09:83:32:b8:29: 22:6e:93:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ELwZiSO8HyDpsDVGcyzLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MDBiMjA2MDYzMTQ4NThhN2IzZjJhOTc1ZThlOWQ5MTll Yzc1M2EwHhcNMjYwMTAxMTAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGM4NTQxYTI4OWQ4YjY5YjQxZTc0MmEwMTFmNjA2YTM1NWJjNTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjANyDZbwse/P8Q6ndR4Wc2URUl9 b4F1sY+N6sFCxZ7fDPL4Y0ZAByYI0qr/nJreNKskeRLAPoWhaOhZYaEurIC9kxOY wbdYm+5LWM/up/GEkRNkiik0BJG8cpi2LcbehqashZRJ4/NNadaeiIDh7ut3SdRa O1jWEpIE9IfHh5VwX7MGofINKRRoR3JofOeCr+MVb/kNksI8SMQ0CVL0kYAJrhJv ytJHiiu4CN6+jdKBhOJTqlJqfnPAUtca8vNEm6mq4Xt2dhxXU9UE18072pkOm5+s t3/CY3nd5ereA4TQQXNiwXNKm/yLY7crYNdPVD/SmvEsbk17X/9HyfhEewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPDIVBoonYtptB50KgEfYGo1W8UTMB8GA1UdIwQY MBaAFCQAsgYGMUhYp7PyqXXo6dkZ7HU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkFDeUJnWXhTRmluc19LcGRlanAyUm5zZFRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9kYmQ5NTEtMjU5Yi00NzU5LWE1MTkt OWM1ZTFkZWIyYzMzLzEvOE1oVUdpaWRpMm0wSG5RcUFSOWdhalZieFJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9kYmQ5NTEtMjU5Yi00NzU5LWE1MTktOWM1ZTFkZWIyYzMz LzEvSkFDeUJnWXhTRmluc19LcGRlanAyUm5zZFRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuUpSMA0G CSqGSIb3DQEBCwUAA4IBAQARkIWnfPvL4NtVYYEkt5XOJyayQ0xSVGN64md9kP1c JJwn4lYWU8ERIvyWiD1H1oL5ulVqAZTby6UiXOk171nFIbra2/tkINOLu0v+fqWK 1ckRO4E+0eLvbkequpM6qJBS0fywX+NLuDRxPd2gADFu2iMnOIM6k36jcPvVzwsf OJmaAD88fBsNkL/sRGgEeyzTFUu5hXWESwrJuFw3oWNVJBCGy5aamXSF0o3I7rVk q6KalDjsQ/dDXa7LSsHdaF8NYEIaYxYV0LnVx3IHmcPZDH9RY0XnuOePqbolWL9j teYOhQSvgjdQZNO5fCVAGNa5gz64eCLjCYMyuCkibpPZ -----END CERTIFICATE-----Generated at Mon Jan 26 04:55:01 2026 by rpki-client