This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/8OFbkkZ6KALpSp0mWSybPWGsd-Q.roa File: 8OFbkkZ6KALpSp0mWSybPWGsd-Q.roa (raw, json) Hash identifier: Hw9+SZD9UoFrhny7ksS/HOCqMMmBRPOx+MzOwmt/YbM= Subject key identifier: F0:E1:5B:92:46:7A:28:02:E9:4A:9D:26:59:2C:9B:3D:61:AC:77:E4 Certificate issuer: /CN=293e0cd8b3e044edb823aef688aafb0b75de8675 Certificate serial: 019B7A5B2AB009909DAB3DE6A1C522ED1AF4 Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/8OFbkkZ6KALpSp0mWSybPWGsd-Q.roa Signing time: Thu 01 Jan 2026 16:19:13 +0000 ROA not before: Thu 01 Jan 2026 16:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209782 IP address blocks: 185.126.202.0/24 maxlen: 24 185.126.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:2a:b0:09:90:9d:ab:3d:e6:a1:c5:22:ed:1a:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675 Validity Not Before: Jan 1 16:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0e15b92467a2802e94a9d26592c9b3d61ac77e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:05:b6:bb:1f:d2:1e:89:7a:c4:e0:60:67:1a: 76:8e:22:b6:2d:87:a5:9f:72:4b:a4:09:ff:ff:60: f1:5a:e7:62:c7:ba:f7:5f:43:e3:e1:0a:f0:22:2b: 82:f0:cc:94:75:2b:43:cb:5a:be:40:08:8e:75:92: 9d:89:fd:f8:b5:5b:ac:cb:99:b3:f6:5b:d7:4b:58: 82:ac:08:d7:bf:50:95:e1:1f:d2:c3:a6:ff:da:f7: 17:2f:76:eb:35:94:77:48:07:45:f8:78:b8:68:78: 16:75:c4:6e:68:23:67:fa:ee:11:3d:a8:00:48:4f: 93:ea:56:8e:97:87:2b:12:e7:ff:40:59:aa:9d:ab: 0e:73:64:6f:5a:c8:69:bd:94:7e:21:f8:98:6e:a0: 3d:ac:8b:7b:d8:17:28:22:2a:99:4c:76:4c:61:a5: bd:0a:61:f9:df:62:1d:de:6f:de:d5:b1:cd:82:41: f1:17:a6:eb:9b:49:25:af:84:98:ba:23:96:0f:e2: 09:e0:c6:c2:1b:61:37:05:f8:b6:21:a5:3e:2c:88: e4:f5:c0:db:17:f6:fe:03:ce:75:4b:fd:82:74:16: f5:8f:b6:b9:b9:f5:c9:62:2b:1f:dd:6d:88:50:de: 77:0e:54:3d:1f:60:f7:40:df:60:ba:91:43:f4:6c: d7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E1:5B:92:46:7A:28:02:E9:4A:9D:26:59:2C:9B:3D:61:AC:77:E4 X509v3 Authority Key Identifier: keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/8OFbkkZ6KALpSp0mWSybPWGsd-Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.126.202.0/23 Signature Algorithm: sha256WithRSAEncryption 7b:f7:c2:ba:4b:3a:1f:f3:35:24:ab:7c:fd:86:19:67:8a:68: b1:18:54:b7:74:3e:bb:4a:7b:e2:74:2a:0d:6c:c5:64:5f:58: 5e:9d:01:17:3a:b2:ac:51:46:dd:ba:75:96:c7:0f:32:a0:4c: 5d:83:64:cd:c9:2d:8d:31:1f:55:62:c6:d6:10:b6:0e:7d:e3: db:f7:8f:61:04:19:ae:7e:a5:57:ad:36:cc:53:cc:60:70:50: 02:ff:62:18:02:bc:e8:bb:35:36:e0:19:37:4e:42:50:59:ac: c3:d6:cc:66:94:ac:cd:75:f2:29:e1:8c:4f:10:16:ee:4e:36: 1d:f2:fe:3e:1c:a6:a0:ac:30:62:ab:25:f9:ee:25:2d:9d:fe: e8:f6:30:8f:b3:95:2f:e7:5b:0e:97:5b:73:eb:a9:d6:b2:c7: dc:b6:a3:a7:4f:d8:58:51:37:13:15:56:7a:29:65:fc:c5:c4: 57:09:9c:2f:c1:d2:c1:93:f8:30:13:2c:38:24:36:d8:e6:e7: fe:5d:6d:ce:7d:aa:49:55:cd:35:22:07:7b:f1:68:1b:75:f4: 59:1c:ae:ba:36:c5:ea:a1:82:c4:1f:73:54:2d:0e:f7:98:76: 2e:e3:a8:bc:01:5d:e4:00:96:f7:1f:95:54:6a:ab:1e:71:fb: 0d:b5:2a:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WyqwCZCdqz3mocUi7Rr0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5M2UwY2Q4YjNlMDQ0ZWRiODIzYWVmNjg4YWFmYjBiNzVk ZTg2NzUwHhcNMjYwMTAxMTYxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGUxNWI5MjQ2N2EyODAyZTk0YTlkMjY1OTJjOWIzZDYxYWM3N2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wW2ux/SHol6xOBgZxp2jiK2LYel n3JLpAn//2DxWudix7r3X0Pj4QrwIiuC8MyUdStDy1q+QAiOdZKdif34tVusy5mz 9lvXS1iCrAjXv1CV4R/Sw6b/2vcXL3brNZR3SAdF+Hi4aHgWdcRuaCNn+u4RPagA SE+T6laOl4crEuf/QFmqnasOc2RvWshpvZR+IfiYbqA9rIt72BcoIiqZTHZMYaW9 CmH532Id3m/e1bHNgkHxF6brm0klr4SYuiOWD+IJ4MbCG2E3Bfi2IaU+LIjk9cDb F/b+A851S/2CdBb1j7a5ufXJYisf3W2IUN53DlQ9H2D3QN9gupFD9GzXqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPDhW5JGeigC6UqdJlksmz1hrHfkMB8GA1UdIwQY MBaAFCk+DNiz4ETtuCOu9oiq+wt13oZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1Q0TTJMUGdSTzI0STY3MmlLcjdDM1hlaG5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82ZGExYzItMjUyZC00YmQyLWI1NmMt YmIyMTdjYzNiNzhkLzEvOE9GYmtrWjZLQUxwU3AwbVdTeWJQV0dzZC1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC82ZGExYzItMjUyZC00YmQyLWI1NmMtYmIyMTdjYzNiNzhk LzEvS1Q0TTJMUGdSTzI0STY3MmlLcjdDM1hlaG5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuX7KMA0G CSqGSIb3DQEBCwUAA4IBAQB798K6Szof8zUkq3z9hhlnimixGFS3dD67SnvidCoN bMVkX1henQEXOrKsUUbdunWWxw8yoExdg2TNyS2NMR9VYsbWELYOfePb949hBBmu fqVXrTbMU8xgcFAC/2IYArzouzU24Bk3TkJQWazD1sxmlKzNdfIp4YxPEBbuTjYd 8v4+HKagrDBiqyX57iUtnf7o9jCPs5Uv51sOl1tz66nWssfctqOnT9hYUTcTFVZ6 KWX8xcRXCZwvwdLBk/gwEyw4JDbY5uf+XW3OfapJVc01Igd78WgbdfRZHK66NsXq oYLEH3NULQ73mHYu46i8AV3kAJb3H5VUaqsecfsNtSqa -----END CERTIFICATE-----Generated at Mon Jan 26 04:55:26 2026 by rpki-client