This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/B0GjFFho4L3mRU1i2gZen9fWf8o.roa File: B0GjFFho4L3mRU1i2gZen9fWf8o.roa (raw, json) Hash identifier: 0wLIwQSadFn+t/oVNRPg5fGLqnyacncDio6VpgbB62M= Subject key identifier: 07:41:A3:14:58:68:E0:BD:E6:45:4D:62:DA:06:5E:9F:D7:D6:7F:CA Certificate issuer: /CN=58d2d2715f43f747bea762dce166bca4b8e965eb Certificate serial: 019BDEB376C649C0AC0ABDEE400F3183B00A Authority key identifier: 58:D2:D2:71:5F:43:F7:47:BE:A7:62:DC:E1:66:BC:A4:B8:E9:65:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/B0GjFFho4L3mRU1i2gZen9fWf8o.roa Signing time: Wed 21 Jan 2026 03:57:41 +0000 ROA not before: Wed 21 Jan 2026 03:57:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8560 IP address blocks: 81.169.190.0/24 maxlen: 24 85.214.6.0/24 maxlen: 24 85.214.10.0/24 maxlen: 24 85.214.12.0/24 maxlen: 24 85.214.180.0/22 maxlen: 24 85.215.32.0/19 maxlen: 24 85.215.64.0/20 maxlen: 24 85.215.96.0/19 maxlen: 24 85.215.128.0/17 maxlen: 24 185.56.148.0/22 maxlen: 24 192.67.197.0/24 maxlen: 24 2a01:239::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.mft rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:de:b3:76:c6:49:c0:ac:0a:bd:ee:40:0f:31:83:b0:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2d2715f43f747bea762dce166bca4b8e965eb Validity Not Before: Jan 21 03:57:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0741a3145868e0bde6454d62da065e9fd7d67fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ed:49:3e:48:b4:38:f1:1b:9d:4b:66:2a:58: a0:67:ff:5f:c0:af:5b:c9:0f:55:24:c1:a8:01:43: 58:4d:57:72:6f:c3:b2:ad:93:88:19:5a:3f:ba:9c: 71:11:e8:64:35:b1:7e:df:1c:57:5f:f3:17:70:4b: c2:33:f2:eb:f5:08:07:35:d9:cb:65:1c:93:9b:1a: 3d:28:5a:8b:84:cc:86:39:df:8f:05:5b:94:44:fb: bc:54:70:2a:6e:d0:47:3f:ea:52:28:34:8a:f5:2a: 28:b4:2b:a5:f0:a2:96:da:26:16:ce:0c:cd:dd:95: 07:30:96:2e:39:09:69:e3:7a:18:f9:4e:38:4c:3f: fe:15:8d:83:54:d2:e4:32:e6:83:9c:be:1c:eb:d5: 2b:09:a7:a8:13:ac:da:ef:55:f2:48:30:7e:b1:70: ac:6b:d6:6e:42:52:70:78:ea:ae:ae:ff:95:39:67: eb:42:25:e7:b4:55:45:5d:22:dd:df:92:71:95:95: ac:1e:2f:96:09:23:03:5f:0b:85:3d:9e:10:6e:93: 4e:42:97:8a:fd:11:ba:ed:fe:3b:36:32:32:7e:03: f2:93:93:30:e0:a0:20:3a:77:6d:60:47:49:9f:f2: ee:76:92:f6:3c:8e:ee:06:44:94:f9:ed:bb:71:d5: a0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:41:A3:14:58:68:E0:BD:E6:45:4D:62:DA:06:5E:9F:D7:D6:7F:CA X509v3 Authority Key Identifier: keyid:58:D2:D2:71:5F:43:F7:47:BE:A7:62:DC:E1:66:BC:A4:B8:E9:65:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/B0GjFFho4L3mRU1i2gZen9fWf8o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.169.190.0/24 85.214.6.0/24 85.214.10.0/24 85.214.12.0/24 85.214.180.0/22 85.215.32.0-85.215.79.255 85.215.96.0-85.215.255.255 185.56.148.0/22 192.67.197.0/24 IPv6: 2a01:239::/32 Signature Algorithm: sha256WithRSAEncryption 76:99:4e:db:4f:84:bf:af:5f:f7:a9:e2:bb:0d:fa:99:3d:58: 0b:61:3a:e3:19:d7:d3:f0:5f:84:b7:c2:df:1c:ed:fa:07:14: b1:85:71:4f:4a:cf:c7:ff:f6:ee:46:0d:1e:f7:7b:dc:6d:5e: b6:90:47:c0:e4:31:1f:7c:cf:35:7b:f4:ab:8e:41:b8:88:2c: 09:18:66:84:50:7c:e0:d8:4d:34:75:11:70:08:1d:f8:00:fe: 22:12:11:f6:58:74:8c:bc:af:97:64:94:9d:e9:16:cf:11:69: 5c:77:67:da:32:c3:92:90:c2:00:83:a3:df:1f:da:f5:0b:bc: 9e:fc:71:59:09:10:02:1e:2c:0d:cb:90:e4:4a:cd:a2:48:2d: 87:b6:99:d7:48:9f:dd:b6:81:c2:f7:e0:9d:fd:9e:28:3b:04: de:10:03:55:f9:48:7b:de:df:bc:f6:19:80:1e:3e:05:95:0e: 7e:bc:6c:1c:fb:2c:2c:71:23:6d:9e:15:66:e7:e8:89:27:7d: 2b:2e:ff:83:9d:08:1f:9f:ab:e5:72:8b:06:c4:57:f8:22:f2: ec:cd:6e:c1:ee:e2:03:2e:6b:ac:29:79:85:f6:36:f4:0d:8d: 23:54:e6:8d:e8:0e:8d:a8:59:15:ff:1b:71:86:93:06:33:86: 8b:61:0d:05 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZves3bGScCsCr3uQA8xg7AKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZDJkMjcxNWY0M2Y3NDdiZWE3NjJkY2UxNjZiY2E0Yjhl OTY1ZWIwHhcNMjYwMTIxMDM1NzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzQxYTMxNDU4NjhlMGJkZTY0NTRkNjJkYTA2NWU5ZmQ3ZDY3ZmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO1JPki0OPEbnUtmKligZ/9fwK9b yQ9VJMGoAUNYTVdyb8OyrZOIGVo/upxxEehkNbF+3xxXX/MXcEvCM/Lr9QgHNdnL ZRyTmxo9KFqLhMyGOd+PBVuURPu8VHAqbtBHP+pSKDSK9SootCul8KKW2iYWzgzN 3ZUHMJYuOQlp43oY+U44TD/+FY2DVNLkMuaDnL4c69UrCaeoE6za71XySDB+sXCs a9ZuQlJweOqurv+VOWfrQiXntFVFXSLd35JxlZWsHi+WCSMDXwuFPZ4QbpNOQpeK /RG67f47NjIyfgPyk5Mw4KAgOndtYEdJn/LudpL2PI7uBkSU+e27cdWgAwIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFAdBoxRYaOC95kVNYtoGXp/X1n/KMB8GA1UdIwQY MBaAFFjS0nFfQ/dHvqdi3OFmvKS46WXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV05MU2NWOUQ5MGUtcDJMYzRXYThwTGpwWmVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kNjdiN2ItYzc5OC00OTAxLTgwZjkt ZTM4MzQ1MTZmYzA4LzEvQjBHakZGaG80TDNtUlUxaTJnWmVuOWZXZjhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9kNjdiN2ItYzc5OC00OTAxLTgwZjktZTM4MzQ1MTZmYzA4 LzEvV05MU2NWOUQ5MGUtcDJMYzRXYThwTGpwWmVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBLBAIAATBFAwQAUam+AwQA VdYGAwQAVdYKAwQAVdYMAwQCVda0MAwDBAVV1yADBARV10AwCwMEBVXXYAMDA1XQ AwQCuTiUAwQAwEPFMA0EAgACMAcDBQAqAQI5MA0GCSqGSIb3DQEBCwUAA4IBAQB2 mU7bT4S/r1/3qeK7DfqZPVgLYTrjGdfT8F+Et8LfHO36BxSxhXFPSs/H//buRg0e 93vcbV62kEfA5DEffM81e/SrjkG4iCwJGGaEUHzg2E00dRFwCB34AP4iEhH2WHSM vK+XZJSd6RbPEWlcd2faMsOSkMIAg6PfH9r1C7ye/HFZCRACHiwNy5DkSs2iSC2H tpnXSJ/dtoHC9+Cd/Z4oOwTeEANV+Uh73t+89hmAHj4FlQ5+vGwc+ywscSNtnhVm 5+iJJ30rLv+DnQgfn6vlcosGxFf4IvLszW7B7uIDLmusKXmF9jb0DY0jVOaN6A6N qFkV/xtxhpMGM4aLYQ0F -----END CERTIFICATE-----Generated at Mon Jan 26 09:40:48 2026 by rpki-client