This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/q2aBWG2CuEimsjXb18Ou0fyLb7k.roa File: q2aBWG2CuEimsjXb18Ou0fyLb7k.roa (raw, json) Hash identifier: A0AoTuyENlHBNdH6JVEsUQXr8MFCH3cXbTXxCbPc1hg= Subject key identifier: AB:66:81:58:6D:82:B8:48:A6:B2:35:DB:D7:C3:AE:D1:FC:8B:6F:B9 Certificate issuer: /CN=88e719f426793b1e9063771460abd311a3dff116 Certificate serial: 019B7D5CAD2F63BBCFF21065921022273AFD Authority key identifier: 88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/q2aBWG2CuEimsjXb18Ou0fyLb7k.roa Signing time: Fri 02 Jan 2026 06:19:44 +0000 ROA not before: Fri 02 Jan 2026 06:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62528 IP address blocks: 185.134.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ad:2f:63:bb:cf:f2:10:65:92:10:22:27:3a:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88e719f426793b1e9063771460abd311a3dff116 Validity Not Before: Jan 2 06:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab6681586d82b848a6b235dbd7c3aed1fc8b6fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ca:8e:1f:dd:9f:0a:4d:21:e8:ce:2d:80:44: 5f:ee:02:06:e6:ba:42:ce:75:d1:71:82:91:b1:e9: c2:e2:2e:d0:a0:72:7f:f8:d2:4e:c4:37:de:89:89: 04:81:86:88:c3:92:ce:a4:4f:6f:63:ee:72:bd:28: 3a:5f:4f:82:36:65:4a:37:67:93:32:6d:69:ba:8c: b6:81:fe:aa:00:b5:39:75:18:47:5f:f3:6e:4e:ea: 16:71:06:90:e7:bf:c0:9a:de:62:3a:a3:fd:51:84: 46:b3:9a:de:6e:58:29:c8:b4:13:62:58:ce:46:af: cb:46:96:b3:b6:db:f1:ba:42:a7:ed:44:49:b4:42: 41:89:ec:42:fb:6b:b2:3d:a8:7f:ad:24:bf:af:2b: df:71:4d:d5:78:a8:6e:b0:f5:81:be:fe:53:04:dc: d5:27:60:ca:7a:5d:d7:69:8a:58:fe:40:1d:aa:32: a1:b7:1f:fc:f2:ef:04:dd:a1:e2:95:fb:26:86:5b: dd:ca:6d:18:f6:3f:ef:58:96:50:bd:12:1b:be:9d: 25:58:5c:f4:a4:9a:c0:09:68:ce:37:9c:36:44:e9: 8e:0c:93:30:21:72:50:c8:df:c4:a3:5c:15:ad:d8: 06:35:a5:ad:0b:da:2b:cf:d6:6c:0f:67:eb:55:7b: 25:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:66:81:58:6D:82:B8:48:A6:B2:35:DB:D7:C3:AE:D1:FC:8B:6F:B9 X509v3 Authority Key Identifier: keyid:88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/q2aBWG2CuEimsjXb18Ou0fyLb7k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.134.183.0/24 Signature Algorithm: sha256WithRSAEncryption 70:c2:cb:8a:0b:23:93:95:3a:29:76:21:58:4e:ed:e8:93:33: 60:96:27:d5:f4:eb:9b:0a:31:66:f5:8e:66:3f:c4:52:36:db: 12:81:25:4b:ee:ba:7f:73:75:36:11:45:25:ad:93:ca:a1:80: e4:7d:77:87:f3:b9:26:45:16:e8:5a:e9:ba:da:85:fb:de:b2: 55:7d:0a:e4:8b:5b:91:58:35:9c:43:1d:29:7a:b7:7d:e8:25: 66:98:25:66:6d:fa:76:2b:51:be:47:c8:2a:0a:bd:4b:3a:f6: 6c:32:5a:85:71:bd:7f:a5:4a:13:29:bb:fb:35:1b:6e:5e:a1: 26:08:f9:53:14:e5:a2:2b:b5:f7:ca:94:78:8b:10:e7:f3:50: 2d:d8:11:b5:98:9d:c0:d4:34:e9:93:91:e6:73:9c:60:f6:28: 88:30:43:48:57:a4:12:3d:c4:ac:3a:3a:ad:67:3d:2a:1a:af: e0:38:9d:9b:cc:d4:90:44:6d:93:70:b4:52:0e:01:6a:74:7b: 68:16:e2:bb:88:22:69:a7:b7:bb:aa:79:65:82:1b:a5:8c:9e: 6c:43:52:b0:5e:c3:ad:bf:e2:36:b7:a7:55:c8:c2:5b:87:8a: 5d:5c:8f:24:82:f4:0a:2e:23:46:21:f8:95:3e:dd:ac:5b:ac: 9a:6a:ba:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XK0vY7vP8hBlkhAiJzr9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZTcxOWY0MjY3OTNiMWU5MDYzNzcxNDYwYWJkMzExYTNk ZmYxMTYwHhcNMjYwMTAyMDYxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjY2ODE1ODZkODJiODQ4YTZiMjM1ZGJkN2MzYWVkMWZjOGI2ZmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusqOH92fCk0h6M4tgERf7gIG5rpC znXRcYKRsenC4i7QoHJ/+NJOxDfeiYkEgYaIw5LOpE9vY+5yvSg6X0+CNmVKN2eT Mm1puoy2gf6qALU5dRhHX/NuTuoWcQaQ57/Amt5iOqP9UYRGs5reblgpyLQTYljO Rq/LRpazttvxukKn7URJtEJBiexC+2uyPah/rSS/ryvfcU3VeKhusPWBvv5TBNzV J2DKel3XaYpY/kAdqjKhtx/88u8E3aHilfsmhlvdym0Y9j/vWJZQvRIbvp0lWFz0 pJrACWjON5w2ROmODJMwIXJQyN/Eo1wVrdgGNaWtC9orz9ZsD2frVXslYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKtmgVhtgrhIprI129fDrtH8i2+5MB8GA1UdIwQY MBaAFIjnGfQmeTsekGN3FGCr0xGj3/EWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaU9jWjlDWjVPeDZRWTNjVVlLdlRFYVBmOFJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8wMGQ0NWQtNWU0OC00NThkLTkyZjct YWU1MmUxNTZiNzdlLzEvcTJhQldHMkN1RWltc2pYYjE4T3UwZnlMYjdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8wMGQ0NWQtNWU0OC00NThkLTkyZjctYWU1MmUxNTZiNzdl LzEvaU9jWjlDWjVPeDZRWTNjVVlLdlRFYVBmOFJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYa3MA0G CSqGSIb3DQEBCwUAA4IBAQBwwsuKCyOTlTopdiFYTu3okzNglifV9OubCjFm9Y5m P8RSNtsSgSVL7rp/c3U2EUUlrZPKoYDkfXeH87kmRRboWum62oX73rJVfQrki1uR WDWcQx0perd96CVmmCVmbfp2K1G+R8gqCr1LOvZsMlqFcb1/pUoTKbv7NRtuXqEm CPlTFOWiK7X3ypR4ixDn81At2BG1mJ3A1DTpk5Hmc5xg9iiIMENIV6QSPcSsOjqt Zz0qGq/gOJ2bzNSQRG2TcLRSDgFqdHtoFuK7iCJpp7e7qnllghuljJ5sQ1KwXsOt v+I2t6dVyMJbh4pdXI8kgvQKLiNGIfiVPt2sW6yaarqT -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:44 2026 by rpki-client