This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/9oyMDlFUMJCEeicvl7UFwOHgYsE.roa File: 9oyMDlFUMJCEeicvl7UFwOHgYsE.roa (raw, json) Hash identifier: f8s6l8eBEajunCZ6gmMPJ0g+5TCwQ3SpFosYHbC5O4E= Subject key identifier: F6:8C:8C:0E:51:54:30:90:84:7A:27:2F:97:B5:05:C0:E1:E0:62:C1 Certificate issuer: /CN=1de5dbc0b610485d0f7e2194d8f816d6c1445326 Certificate serial: 019B7FF1F7483DE06603C9912AFB0C778E02 Authority key identifier: 1D:E5:DB:C0:B6:10:48:5D:0F:7E:21:94:D8:F8:16:D6:C1:44:53:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/9oyMDlFUMJCEeicvl7UFwOHgYsE.roa Signing time: Fri 02 Jan 2026 18:22:02 +0000 ROA not before: Fri 02 Jan 2026 18:22:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29611 IP address blocks: 185.119.52.0/22 maxlen: 22 185.119.52.0/24 maxlen: 24 185.119.53.0/24 maxlen: 24 185.119.54.0/24 maxlen: 24 185.119.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft rsync://rpki.ripe.net/repository/DEFAULT/HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:f7:48:3d:e0:66:03:c9:91:2a:fb:0c:77:8e:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1de5dbc0b610485d0f7e2194d8f816d6c1445326 Validity Not Before: Jan 2 18:22:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f68c8c0e51543090847a272f97b505c0e1e062c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:a2:13:40:c5:6b:f1:89:c8:16:86:87:88:13: 99:28:f9:da:13:5b:d1:66:c5:94:41:1c:49:c5:31: 07:6f:e1:51:b7:ca:11:10:dc:80:0b:73:53:b1:9a: f1:db:e4:82:48:50:5e:ee:34:fe:4a:ad:86:25:7c: e8:1c:5e:8e:e5:bf:c3:ca:0b:3c:69:ef:80:6a:f5: 4a:ff:e1:ac:d9:aa:62:2d:11:68:c5:61:f0:c9:50: 19:a0:5d:87:8d:9f:52:9b:21:c9:25:bd:7e:49:6f: 92:e5:c6:05:f9:2a:64:dc:e3:b6:82:3b:f5:94:ad: 02:f2:4d:37:e1:35:9c:51:94:89:cb:0f:6f:59:0f: 4e:27:74:cb:a8:14:bd:05:26:cf:be:ad:02:47:48: 84:64:d3:67:0b:c1:20:c7:33:00:c0:72:9a:94:3a: 76:57:c8:e0:b4:a3:91:70:0c:8d:f8:67:64:57:b0: a9:e0:07:c1:fd:62:77:8b:4b:43:aa:66:98:4b:d2: 89:19:a6:d1:f7:0c:58:b1:79:b4:62:91:57:c6:ed: 0c:a4:42:24:84:12:dc:63:30:82:f6:ab:9b:64:33: 34:85:0b:44:c4:10:ad:bc:d8:01:54:8f:ef:55:7a: 57:1b:22:eb:4f:42:7b:01:ec:c4:dd:7b:33:b0:52: 16:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:8C:8C:0E:51:54:30:90:84:7A:27:2F:97:B5:05:C0:E1:E0:62:C1 X509v3 Authority Key Identifier: keyid:1D:E5:DB:C0:B6:10:48:5D:0F:7E:21:94:D8:F8:16:D6:C1:44:53:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/9oyMDlFUMJCEeicvl7UFwOHgYsE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.119.52.0/22 Signature Algorithm: sha256WithRSAEncryption 37:ce:8c:3e:a9:77:61:f6:45:da:ef:b5:37:c1:ca:81:80:1e: 2a:5f:58:04:27:ab:fb:64:98:ad:05:60:ac:a6:b1:a3:fb:5a: 4b:ef:4f:0f:63:f5:e0:c4:0a:0a:00:f0:8c:cc:a1:93:34:f3: 53:4d:1a:bc:aa:45:b1:62:2f:f6:bb:5d:52:2b:76:e3:65:c5: a6:5e:65:d2:00:bb:70:15:c9:39:55:d3:c7:c2:46:21:5d:7c: f6:de:b1:e5:97:58:e4:09:de:03:8a:d2:b5:61:09:fb:b8:e1: f2:bd:0f:27:b4:2e:d6:38:f6:af:03:cb:5d:8b:9e:8a:86:e5: 71:31:a3:ef:5a:4f:ba:05:f9:c6:2a:58:a4:17:03:de:69:60: 21:94:ae:8a:1a:0a:05:fc:a8:8d:0e:ca:5e:b6:19:47:48:85: 9a:88:d0:42:a9:8d:68:cc:41:cc:22:ea:f3:42:8e:e4:ba:ed: 82:27:99:ef:f6:49:13:97:61:a7:5d:0b:2f:f7:f9:1e:be:5f: e3:e1:dd:a1:e6:e1:ae:e8:8c:f2:79:34:dd:57:94:16:67:82: b1:63:9a:c2:f0:2d:96:e7:03:6d:3b:7b:39:96:64:eb:25:65: bf:90:52:b9:1c:6d:3a:c8:4c:13:f5:13:32:03:9d:63:fd:54: 5d:8d:05:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8fdIPeBmA8mRKvsMd44CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkZTVkYmMwYjYxMDQ4NWQwZjdlMjE5NGQ4ZjgxNmQ2YzE0 NDUzMjYwHhcNMjYwMTAyMTgyMjAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjhjOGMwZTUxNTQzMDkwODQ3YTI3MmY5N2I1MDVjMGUxZTA2MmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+6ITQMVr8YnIFoaHiBOZKPnaE1vR ZsWUQRxJxTEHb+FRt8oRENyAC3NTsZrx2+SCSFBe7jT+Sq2GJXzoHF6O5b/Dygs8 ae+AavVK/+Gs2apiLRFoxWHwyVAZoF2HjZ9SmyHJJb1+SW+S5cYF+Spk3OO2gjv1 lK0C8k034TWcUZSJyw9vWQ9OJ3TLqBS9BSbPvq0CR0iEZNNnC8EgxzMAwHKalDp2 V8jgtKORcAyN+GdkV7Cp4AfB/WJ3i0tDqmaYS9KJGabR9wxYsXm0YpFXxu0MpEIk hBLcYzCC9qubZDM0hQtExBCtvNgBVI/vVXpXGyLrT0J7AezE3XszsFIWVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPaMjA5RVDCQhHonL5e1BcDh4GLBMB8GA1UdIwQY MBaAFB3l28C2EEhdD34hlNj4FtbBRFMmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGVYYndMWVFTRjBQZmlHVTJQZ1cxc0ZFVXlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lNzdiODMtYTIzYi00ODk3LWI0ZGQt NjhlZWRmNWY2NmJjLzEvOW95TURsRlVNSkNFZWljdmw3VUZ3T0hnWXNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9lNzdiODMtYTIzYi00ODk3LWI0ZGQtNjhlZWRmNWY2NmJj LzEvSGVYYndMWVFTRjBQZmlHVTJQZ1cxc0ZFVXlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXc0MA0G CSqGSIb3DQEBCwUAA4IBAQA3zow+qXdh9kXa77U3wcqBgB4qX1gEJ6v7ZJitBWCs prGj+1pL708PY/XgxAoKAPCMzKGTNPNTTRq8qkWxYi/2u11SK3bjZcWmXmXSALtw Fck5VdPHwkYhXXz23rHll1jkCd4DitK1YQn7uOHyvQ8ntC7WOPavA8tdi56KhuVx MaPvWk+6BfnGKlikFwPeaWAhlK6KGgoF/KiNDspethlHSIWaiNBCqY1ozEHMIurz Qo7kuu2CJ5nv9kkTl2GnXQsv9/kevl/j4d2h5uGu6IzyeTTdV5QWZ4KxY5rC8C2W 5wNtO3s5lmTrJWW/kFK5HG06yEwT9RMyA51j/VRdjQXd -----END CERTIFICATE-----Generated at Mon Jan 26 14:54:25 2026 by rpki-client