This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/8Blpmhg56UtYFzHPUGEc8r1tGxk.roa File: 8Blpmhg56UtYFzHPUGEc8r1tGxk.roa (raw, json) Hash identifier: ZeBRyf2GdsztNKgCVDcLxg6L0hXsn4muZMO3aaOgEDY= Subject key identifier: F0:19:69:9A:18:39:E9:4B:58:17:31:CF:50:61:1C:F2:BD:6D:1B:19 Certificate issuer: /CN=36b55fb34d29f962545132a025b52644fdffbf6f Certificate serial: 019B7F15FF326E5CE92F985FCC96B230F88D Authority key identifier: 36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/8Blpmhg56UtYFzHPUGEc8r1tGxk.roa Signing time: Fri 02 Jan 2026 14:21:46 +0000 ROA not before: Fri 02 Jan 2026 14:21:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 185.206.123.0/24 maxlen: 24 2a10:ca00:1::/48 maxlen: 48 2a10:ca00:2::/48 maxlen: 48 2a10:ca00:3::/48 maxlen: 48 2a10:ca00:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ff:32:6e:5c:e9:2f:98:5f:cc:96:b2:30:f8:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36b55fb34d29f962545132a025b52644fdffbf6f Validity Not Before: Jan 2 14:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f019699a1839e94b581731cf50611cf2bd6d1b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6f:05:94:0c:02:9b:03:ea:54:d1:9f:52:b1: 47:64:2f:33:e1:7c:00:bf:c4:71:f3:97:65:2e:ae: a5:63:39:4b:98:b8:d5:0f:53:70:f2:d9:9d:bb:e6: 3a:a5:97:b7:ef:c9:58:cb:5b:f6:17:d8:b6:94:fc: 89:88:c5:29:32:b0:11:e3:ad:59:c2:93:a7:92:c1: c3:3a:bf:71:74:99:63:50:e2:f8:0e:bc:e4:48:ce: e5:43:1e:30:c3:79:7d:71:01:dd:03:fd:7f:c2:45: 66:8f:f8:bf:60:f4:8f:09:dd:6a:c7:7c:0e:c5:49: f4:b8:79:bb:5e:0f:b5:b9:a3:43:bb:1b:08:83:56: 45:73:48:46:e3:8c:25:10:bf:5d:10:4d:79:9c:de: 4e:1a:70:ce:b9:61:11:69:f3:b6:f4:ed:80:9b:84: a3:de:5c:f8:22:96:8b:3f:a8:7f:27:9c:c4:7b:21: 40:e4:c9:c9:67:98:43:fe:d4:aa:6b:2c:60:6a:e3: 89:bf:b3:57:be:2b:67:89:b5:95:e5:9d:0d:dd:c6: 57:9b:d1:21:4c:b5:e1:6d:80:c9:74:f7:ab:1f:93: 57:48:03:ca:9d:53:0c:54:a2:35:43:39:52:31:6e: 1b:48:bc:ed:a7:8c:59:7c:e7:bc:80:db:51:80:5c: ba:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:19:69:9A:18:39:E9:4B:58:17:31:CF:50:61:1C:F2:BD:6D:1B:19 X509v3 Authority Key Identifier: keyid:36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/8Blpmhg56UtYFzHPUGEc8r1tGxk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.206.123.0/24 IPv6: 2a10:ca00:1::-2a10:ca00:4:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption ca:d8:a8:05:70:b9:10:19:cd:a0:f7:a4:36:72:fc:54:a3:5c: a8:50:fe:e8:cd:71:24:99:52:b6:32:15:a2:93:8d:8f:d9:80: 09:03:88:05:6a:ab:ba:d4:60:9c:dd:de:e6:f0:90:40:96:bc: 3f:5c:b6:82:31:ce:86:18:a2:b3:d4:a7:b7:1f:fe:47:6b:9f: dc:ba:1e:29:75:50:b7:25:df:e4:e6:1f:9d:6d:d6:ab:f1:1c: c1:fd:b1:51:43:24:c7:69:bc:ab:48:be:ec:1e:4c:51:d4:ff: 28:1b:75:f8:95:64:ad:c9:7b:1b:98:fd:83:ce:28:0d:db:29: a8:b0:06:fa:f7:fb:55:37:ad:1b:c9:58:20:6b:4e:fe:51:a3: 6f:74:47:18:6f:bd:07:b4:1f:d4:9a:0d:12:41:66:f9:40:bb: 81:d0:99:fd:5d:ef:93:0b:5c:eb:f9:73:9f:58:03:0c:2d:1e: 59:aa:42:56:61:96:3a:8d:f5:6e:89:d8:69:30:36:b7:e7:13: 35:0a:14:c3:49:09:43:9d:e1:3e:86:f6:cc:c9:1b:00:01:51: a0:20:55:b8:48:7a:38:49:0c:ec:c9:20:fd:38:74:3b:61:cc: 64:43:46:25:90:63:c4:68:2e:64:1d:0a:48:79:87:03:ea:6a: f7:96:b2:29 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt/Ff8yblzpL5hfzJayMPiNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YjU1ZmIzNGQyOWY5NjI1NDUxMzJhMDI1YjUyNjQ0ZmRm ZmJmNmYwHhcNMjYwMTAyMTQyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDE5Njk5YTE4MzllOTRiNTgxNzMxY2Y1MDYxMWNmMmJkNmQxYjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiG8FlAwCmwPqVNGfUrFHZC8z4XwA v8Rx85dlLq6lYzlLmLjVD1Nw8tmdu+Y6pZe378lYy1v2F9i2lPyJiMUpMrAR461Z wpOnksHDOr9xdJljUOL4DrzkSM7lQx4ww3l9cQHdA/1/wkVmj/i/YPSPCd1qx3wO xUn0uHm7Xg+1uaNDuxsIg1ZFc0hG44wlEL9dEE15nN5OGnDOuWERafO29O2Am4Sj 3lz4IpaLP6h/J5zEeyFA5MnJZ5hD/tSqayxgauOJv7NXvitnibWV5Z0N3cZXm9Eh TLXhbYDJdPerH5NXSAPKnVMMVKI1QzlSMW4bSLztp4xZfOe8gNtRgFy6QQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPAZaZoYOelLWBcxz1BhHPK9bRsZMB8GA1UdIwQY MBaAFDa1X7NNKfliVFEyoCW1JkT9/79vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yYmYwMGItYmZiYy00ZjZiLWExM2Ut ZjEwZjczYTllY2IzLzEvOEJscG1oZzU2VXRZRnpIUFVHRWM4cjF0R3hrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yYmYwMGItYmZiYy00ZjZiLWExM2UtZjEwZjczYTllY2Iz LzEvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQAuc57MBoE AgACMBQwEgMHACoQygAAAQMHACoQygAABDANBgkqhkiG9w0BAQsFAAOCAQEAytio BXC5EBnNoPekNnL8VKNcqFD+6M1xJJlStjIVopONj9mACQOIBWqrutRgnN3e5vCQ QJa8P1y2gjHOhhiis9Sntx/+R2uf3LoeKXVQtyXf5OYfnW3Wq/Ecwf2xUUMkx2m8 q0i+7B5MUdT/KBt1+JVkrcl7G5j9g84oDdspqLAG+vf7VTetG8lYIGtO/lGjb3RH GG+9B7Qf1JoNEkFm+UC7gdCZ/V3vkwtc6/lzn1gDDC0eWapCVmGWOo31bonYaTA2 t+cTNQoUw0kJQ53hPob2zMkbAAFRoCBVuEh6OEkM7Mkg/Th0O2HMZENGJZBjxGgu ZB0KSHmHA+pq95ayKQ== -----END CERTIFICATE-----Generated at Mon Jan 26 03:05:52 2026 by rpki-client