This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/l8OJDxOWK_P6tGw3DzBmeW303FQ.roa File: l8OJDxOWK_P6tGw3DzBmeW303FQ.roa (raw, json) Hash identifier: oXIpjnFkS1fFSgDZNaFsFyIEm+ATqEEz53svdsFA63g= Subject key identifier: 97:C3:89:0F:13:96:2B:F3:FA:B4:6C:37:0F:30:66:79:6D:F4:DC:54 Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311 Certificate serial: 019B7B35C5890ADEEF57AE772D6B176B26F0 Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/l8OJDxOWK_P6tGw3DzBmeW303FQ.roa Signing time: Thu 01 Jan 2026 20:18:00 +0000 ROA not before: Thu 01 Jan 2026 20:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42337 IP address blocks: 185.128.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c5:89:0a:de:ef:57:ae:77:2d:6b:17:6b:26:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df798581e73704ee38c9be15e72370f176c60311 Validity Not Before: Jan 1 20:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97c3890f13962bf3fab46c370f3066796df4dc54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b4:33:93:ea:ad:98:8e:03:76:33:68:68:c8: 30:51:6a:a4:9b:ca:d3:ad:c3:32:54:d9:2c:88:a9: f8:e7:3c:38:88:6b:eb:c2:80:44:d3:4e:d9:74:36: 1f:de:f6:c3:a6:0b:82:19:71:43:26:8e:56:99:75: f7:9e:67:cc:db:76:23:54:db:34:3c:fa:08:e0:6c: 4a:68:0d:e8:bb:5e:01:d1:59:6a:4f:f8:58:78:23: 7d:b7:3b:42:bb:91:42:97:22:c3:49:c0:55:83:3a: 8b:f6:82:e9:9a:3a:fb:1e:e6:62:b8:04:5a:b7:ca: bb:28:4e:e9:72:10:ed:06:d6:82:9f:d4:4e:59:ba: b7:ef:ff:46:97:d1:4a:1a:80:25:7b:84:fc:b3:e3: 1d:eb:cc:a8:a4:f0:77:39:6a:41:4c:0b:75:05:26: 1f:4d:89:ac:57:55:ba:39:bf:3c:1a:2a:48:c2:54: 02:8b:76:b3:4d:89:fc:8f:47:41:b0:be:72:a1:c1: 8e:f8:23:ac:4f:cc:f1:ae:eb:9c:49:c3:f2:a8:b9: ca:4a:2d:d2:de:31:d3:dc:92:79:54:5a:ae:d1:9b: cc:6e:3b:1b:78:ec:10:28:d4:3f:4e:41:ad:de:08: 45:42:43:c3:2f:0d:36:b4:d5:2c:99:07:de:31:dc: d6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C3:89:0F:13:96:2B:F3:FA:B4:6C:37:0F:30:66:79:6D:F4:DC:54 X509v3 Authority Key Identifier: keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/l8OJDxOWK_P6tGw3DzBmeW303FQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.128.80.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:5b:01:35:3b:a7:bf:56:ee:fa:9f:f4:d3:55:9b:32:d1:f3: d7:6f:4b:78:d2:a7:97:0d:07:17:4a:af:55:b7:62:f0:42:f4: 93:6b:a1:10:50:a6:4b:de:3e:07:46:31:af:fc:4d:69:d7:e1: 2e:54:f4:e6:f9:7f:70:0e:65:36:4a:3c:ac:c9:b2:b4:bc:45: f6:88:14:43:10:59:b2:fb:ba:b6:76:52:1a:18:86:6c:43:7a: 15:29:fc:18:80:4c:8d:a3:fb:99:e1:f3:00:68:9c:02:ab:fa: 6e:d4:e2:14:4a:36:74:ba:28:54:47:05:ef:f3:84:9a:fb:4b: 7f:56:4d:73:f1:5e:32:21:99:72:d9:2a:69:3f:5a:8c:e3:5b: 70:9e:f2:44:01:b0:4b:54:90:d7:a5:20:5f:8a:63:d2:77:69: 43:df:1d:e7:1c:59:2c:5e:a4:7a:54:13:ff:26:be:20:b8:24: 14:db:5f:0f:51:14:d8:cb:e6:15:34:96:a3:be:8b:76:86:9a: 26:25:f8:03:df:32:19:83:98:c3:7f:d7:f8:0a:a2:5b:ac:d8: 37:1c:ca:4d:8f:85:85:8d:f2:f3:4a:29:61:32:95:97:de:0c: 2f:ca:b6:d1:9f:0b:eb:d5:43:7a:30:e9:bf:1b:21:db:bc:a1: 96:38:05:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NcWJCt7vV653LWsXaybwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNzk4NTgxZTczNzA0ZWUzOGM5YmUxNWU3MjM3MGYxNzZj NjAzMTEwHhcNMjYwMTAxMjAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2MzODkwZjEzOTYyYmYzZmFiNDZjMzcwZjMwNjY3OTZkZjRkYzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7Qzk+qtmI4DdjNoaMgwUWqkm8rT rcMyVNksiKn45zw4iGvrwoBE007ZdDYf3vbDpguCGXFDJo5WmXX3nmfM23YjVNs0 PPoI4GxKaA3ou14B0VlqT/hYeCN9tztCu5FClyLDScBVgzqL9oLpmjr7HuZiuARa t8q7KE7pchDtBtaCn9ROWbq37/9Gl9FKGoAle4T8s+Md68yopPB3OWpBTAt1BSYf TYmsV1W6Ob88GipIwlQCi3azTYn8j0dBsL5yocGO+COsT8zxruucScPyqLnKSi3S 3jHT3JJ5VFqu0ZvMbjsbeOwQKNQ/TkGt3ghFQkPDLw02tNUsmQfeMdzWiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJfDiQ8Tlivz+rRsNw8wZnlt9NxUMB8GA1UdIwQY MBaAFN95hYHnNwTuOMm+FecjcPF2xgMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9hODAwN2ItMDhjZS00YWY0LWEzODMt YzRhNTJkY2VlMjNkLzEvbDhPSkR4T1dLX1A2dEd3M0R6Qm1lVzMwM0ZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9hODAwN2ItMDhjZS00YWY0LWEzODMtYzRhNTJkY2VlMjNk LzEvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYBQMA0G CSqGSIb3DQEBCwUAA4IBAQAfWwE1O6e/Vu76n/TTVZsy0fPXb0t40qeXDQcXSq9V t2LwQvSTa6EQUKZL3j4HRjGv/E1p1+EuVPTm+X9wDmU2SjysybK0vEX2iBRDEFmy +7q2dlIaGIZsQ3oVKfwYgEyNo/uZ4fMAaJwCq/pu1OIUSjZ0uihURwXv84Sa+0t/ Vk1z8V4yIZly2SppP1qM41twnvJEAbBLVJDXpSBfimPSd2lD3x3nHFksXqR6VBP/ Jr4guCQU218PURTYy+YVNJajvot2hpomJfgD3zIZg5jDf9f4CqJbrNg3HMpNj4WF jfLzSilhMpWX3gwvyrbRnwvr1UN6MOm/GyHbvKGWOAVM -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:43 2026 by rpki-client