This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/8qW5WIwsVOQW_10NjspfVcCuuSc.roa File: 8qW5WIwsVOQW_10NjspfVcCuuSc.roa (raw, json) Hash identifier: r1x7zQ5TZM4rcKDvM9ZAVRQMVnjc/3alw9vfRxbhcao= Subject key identifier: F2:A5:B9:58:8C:2C:54:E4:16:FF:5D:0D:8E:CA:5F:55:C0:AE:B9:27 Certificate issuer: /CN=b8155ac34b6ec15f226ae9913d6aecfca7a784d4 Certificate serial: 019B79EC6C785B8CB182D7ACBFDB97E7C69E Authority key identifier: B8:15:5A:C3:4B:6E:C1:5F:22:6A:E9:91:3D:6A:EC:FC:A7:A7:84:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBVaw0tuwV8iaumRPWrs_KenhNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/8qW5WIwsVOQW_10NjspfVcCuuSc.roa Signing time: Thu 01 Jan 2026 14:18:15 +0000 ROA not before: Thu 01 Jan 2026 14:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61094 IP address blocks: 185.103.216.0/22 maxlen: 24 185.111.190.0/23 maxlen: 24 185.245.12.0/22 maxlen: 24 2a02:e220::/30 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uBVaw0tuwV8iaumRPWrs_KenhNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:6c:78:5b:8c:b1:82:d7:ac:bf:db:97:e7:c6:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8155ac34b6ec15f226ae9913d6aecfca7a784d4 Validity Not Before: Jan 1 14:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2a5b9588c2c54e416ff5d0d8eca5f55c0aeb927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ea:e1:cf:61:fc:09:9e:28:d4:33:3f:a7:a4: 6d:65:d9:1b:79:7c:d7:d8:26:57:81:64:df:54:05: 2a:aa:9b:29:4a:8a:b8:80:5e:b9:3d:88:78:33:02: 45:57:85:fb:42:82:88:71:f3:23:89:36:a7:92:21: 3e:39:f7:57:d5:70:75:21:79:ca:84:4b:ac:e7:73: d7:00:39:9a:c4:3f:80:9d:20:de:74:8a:47:0e:54: 3f:0d:dd:24:ac:9f:c5:cd:d6:f5:fd:de:30:45:5f: fa:5b:e3:9d:1e:24:eb:21:bd:4f:e1:5f:aa:92:1b: 33:c2:03:5f:cb:57:b7:d2:1f:d1:48:2b:3a:c7:12: 6f:f3:4c:93:1d:39:6f:65:a0:ab:1b:69:4e:cb:35: ad:1a:64:d7:c9:f3:63:34:bf:90:a6:b1:ac:6e:79: e9:29:4f:ce:6a:93:2e:6a:8a:89:16:11:b4:53:ed: ad:9d:9a:d4:fa:f3:2c:16:fe:2d:3e:96:ce:ab:29: 3a:95:9b:e1:0a:66:35:a3:a2:cc:c2:14:45:e7:1e: 04:55:a9:71:9b:74:60:78:4a:63:4d:07:6b:55:3e: 93:8e:73:20:eb:33:9c:0e:96:a9:71:aa:f0:35:78: 5f:86:d9:d7:96:87:88:99:57:34:2f:3c:ca:4a:c6: 7c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A5:B9:58:8C:2C:54:E4:16:FF:5D:0D:8E:CA:5F:55:C0:AE:B9:27 X509v3 Authority Key Identifier: keyid:B8:15:5A:C3:4B:6E:C1:5F:22:6A:E9:91:3D:6A:EC:FC:A7:A7:84:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBVaw0tuwV8iaumRPWrs_KenhNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/8qW5WIwsVOQW_10NjspfVcCuuSc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.103.216.0/22 185.111.190.0/23 185.245.12.0/22 IPv6: 2a02:e220::/30 Signature Algorithm: sha256WithRSAEncryption 10:a5:0b:63:d2:db:e5:08:6b:5f:71:4f:c3:fe:eb:59:52:5f: 8d:21:90:06:b4:a1:33:da:85:1e:63:47:bb:b6:e1:ca:73:cf: 77:9e:b2:97:00:5c:46:ef:64:27:27:02:5f:08:71:6f:13:99: 83:23:ae:5a:c7:54:c5:c7:3f:55:22:09:9f:63:73:de:4b:4b: af:26:59:ee:a4:29:80:2b:07:da:ad:f9:a3:e8:13:cf:34:98: 73:69:12:d4:60:c2:14:d5:e5:9c:f3:b9:ae:e7:89:b9:f8:da: c8:32:66:48:4e:21:bc:02:b3:b1:a1:4b:05:b6:70:e3:40:a7: 1f:ec:fc:cb:4a:6c:e9:d8:d1:66:0c:51:06:c3:d6:66:64:03: 7e:69:13:dd:f5:d4:5c:a4:35:83:18:ec:92:e0:c0:76:c1:68: b8:30:e7:ac:81:a7:b6:09:d1:3d:ab:11:0a:d9:0a:13:e9:06: 64:81:81:65:ca:d9:65:c4:36:e7:8d:5a:9c:0f:e4:25:4c:5d: 91:15:08:6f:3b:0b:df:dc:9a:04:a5:e3:10:88:6b:4f:f1:16: e8:38:94:94:af:40:f8:cc:d1:9c:f0:1a:c1:cf:90:b6:1f:ef: ea:64:30:e3:ef:b6:4b:7a:5b:a6:42:01:0e:94:a6:f8:99:55: 53:50:96:2e -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt57Gx4W4yxgtesv9uX58aeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MTU1YWMzNGI2ZWMxNWYyMjZhZTk5MTNkNmFlY2ZjYTdh Nzg0ZDQwHhcNMjYwMTAxMTQxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmE1Yjk1ODhjMmM1NGU0MTZmZjVkMGQ4ZWNhNWY1NWMwYWViOTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApurhz2H8CZ4o1DM/p6RtZdkbeXzX 2CZXgWTfVAUqqpspSoq4gF65PYh4MwJFV4X7QoKIcfMjiTankiE+OfdX1XB1IXnK hEus53PXADmaxD+AnSDedIpHDlQ/Dd0krJ/Fzdb1/d4wRV/6W+OdHiTrIb1P4V+q khszwgNfy1e30h/RSCs6xxJv80yTHTlvZaCrG2lOyzWtGmTXyfNjNL+QprGsbnnp KU/OapMuaoqJFhG0U+2tnZrU+vMsFv4tPpbOqyk6lZvhCmY1o6LMwhRF5x4EValx m3RgeEpjTQdrVT6TjnMg6zOcDpapcarwNXhfhtnXloeImVc0LzzKSsZ85QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFPKluViMLFTkFv9dDY7KX1XArrknMB8GA1UdIwQY MBaAFLgVWsNLbsFfImrpkT1q7Pynp4TUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUJWYXcwdHV3VjhpYXVtUlBXcnNfS2VuaE5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82MmEwMWQtZmVlYy00MGZkLTk4ZWQt YmM4YzZkMjg2ZjFjLzEvOHFXNVdJd3NWT1FXXzEwTmpzcGZWY0N1dVNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC82MmEwMWQtZmVlYy00MGZkLTk4ZWQtYmM4YzZkMjg2ZjFj LzEvdUJWYXcwdHV3VjhpYXVtUlBXcnNfS2VuaE5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuWfYAwQB uW++AwQCufUMMA0EAgACMAcDBQIqAuIgMA0GCSqGSIb3DQEBCwUAA4IBAQAQpQtj 0tvlCGtfcU/D/utZUl+NIZAGtKEz2oUeY0e7tuHKc893nrKXAFxG72QnJwJfCHFv E5mDI65ax1TFxz9VIgmfY3PeS0uvJlnupCmAKwfarfmj6BPPNJhzaRLUYMIU1eWc 87mu54m5+NrIMmZITiG8ArOxoUsFtnDjQKcf7PzLSmzp2NFmDFEGw9ZmZAN+aRPd 9dRcpDWDGOyS4MB2wWi4MOesgae2CdE9qxEK2QoT6QZkgYFlytllxDbnjVqcD+Ql TF2RFQhvOwvf3JoEpeMQiGtP8RboOJSUr0D4zNGc8BrBz5C2H+/qZDDj77ZLelum QgEOlKb4mVVTUJYu -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:33 2026 by rpki-client