This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/8AxYPUz9pvHelVo8wz2I9i9BNIA.roa File: 8AxYPUz9pvHelVo8wz2I9i9BNIA.roa (raw, json) Hash identifier: utEz7HUdFnE3+cBxmQiomb42lkLTImzDLbYZMEDfv3U= Subject key identifier: F0:0C:58:3D:4C:FD:A6:F1:DE:95:5A:3C:C3:3D:88:F6:2F:41:34:80 Certificate issuer: /CN=aaab6111e004c2a044f168b8d28273cf6744f3a8 Certificate serial: 019B7C12D367E75EF6D74D226055570F4E5B Authority key identifier: AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/8AxYPUz9pvHelVo8wz2I9i9BNIA.roa Signing time: Fri 02 Jan 2026 00:19:27 +0000 ROA not before: Fri 02 Jan 2026 00:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206833 IP address blocks: 185.44.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:d3:67:e7:5e:f6:d7:4d:22:60:55:57:0f:4e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaab6111e004c2a044f168b8d28273cf6744f3a8 Validity Not Before: Jan 2 00:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f00c583d4cfda6f1de955a3cc33d88f62f413480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:be:a0:dd:0c:5b:32:7c:e8:12:af:f5:0e:7a: ad:1a:5c:43:f4:97:3d:ed:0b:a3:65:16:6e:1c:4d: 40:9c:81:33:db:a1:3c:e2:e0:cb:8f:93:ed:8e:fa: 8b:0b:5a:d7:f5:3a:0e:b8:01:9a:42:37:1b:1e:41: 95:70:7f:1a:5e:7e:65:ec:e7:04:75:5f:10:6b:b1: 6d:67:50:13:15:73:a9:e3:46:38:c4:f6:71:7d:bf: c4:fb:f1:fc:c9:34:25:8b:4e:52:98:43:64:c8:c3: 98:8a:10:d8:e5:93:d4:1d:ad:fe:8d:bf:22:dc:c4: 89:ba:62:d1:c3:56:ff:57:3d:6f:56:87:09:ef:0a: 5c:af:03:a5:7d:b4:5a:de:fc:ea:28:ff:a8:59:04: 56:ae:b8:ee:69:42:a3:f4:89:11:19:9b:c6:6e:eb: 99:04:05:be:43:29:00:5d:54:52:d7:50:d0:d4:dd: eb:eb:f6:53:67:9b:0f:ea:a0:16:42:bf:dc:16:8e: fd:03:0f:02:5d:36:99:e1:5a:de:77:d5:1c:09:9a: 39:1b:8c:df:4d:8b:d7:01:d1:22:38:22:51:39:7c: 24:39:cc:4b:76:0d:b9:a1:69:9d:30:55:d8:0c:7c: 84:cd:6e:30:bd:63:1f:f0:f1:0f:08:45:ff:c3:6d: e9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:0C:58:3D:4C:FD:A6:F1:DE:95:5A:3C:C3:3D:88:F6:2F:41:34:80 X509v3 Authority Key Identifier: keyid:AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/8AxYPUz9pvHelVo8wz2I9i9BNIA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.44.62.0/24 Signature Algorithm: sha256WithRSAEncryption 01:c1:dc:34:17:56:b0:f7:9e:44:28:03:02:4b:73:f4:dd:91: 70:37:c6:f0:f5:1a:e6:29:63:3d:c6:2d:0d:31:95:6a:b4:e4: 9b:b6:6d:91:af:94:d8:a1:56:8d:fd:b1:bb:26:8f:9d:c0:9b: e5:e3:eb:75:b1:09:bd:3d:96:d0:40:ac:3f:e1:d2:d2:c0:79: 6a:0e:f2:a1:60:cf:a5:7c:20:97:25:a9:f0:c2:fd:a9:5d:8a: a0:ea:94:d8:61:fc:b7:f3:af:75:f5:d9:49:31:c7:24:54:4c: f7:ca:22:7f:5c:1f:c5:0e:12:e2:a9:6e:42:40:02:15:cf:e5: 00:97:2e:e2:c2:24:08:dc:05:58:f5:73:3d:a0:97:3e:0e:43: 19:80:29:73:b8:66:2f:68:45:ae:80:85:60:c2:52:81:f4:50: e5:ad:08:34:9c:3d:5c:11:6d:f4:cc:68:53:61:0b:69:d9:ca: 04:56:2d:ad:d0:c3:14:5e:c3:aa:a0:af:12:59:98:21:83:24: 4a:73:13:d7:d1:90:0d:fc:ad:e4:44:dd:78:6d:84:2b:52:4d: 94:f5:fc:6a:84:90:41:f7:61:1c:e7:23:b9:02:2c:b7:3f:2c: 5e:10:18:41:b5:af:22:31:05:4d:18:ff:8e:1b:f4:97:fa:ef: 42:c6:e1:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EtNn5172100iYFVXD05bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYWI2MTExZTAwNGMyYTA0NGYxNjhiOGQyODI3M2NmNjc0 NGYzYTgwHhcNMjYwMTAyMDAxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDBjNTgzZDRjZmRhNmYxZGU5NTVhM2NjMzNkODhmNjJmNDEzNDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA476g3QxbMnzoEq/1DnqtGlxD9Jc9 7QujZRZuHE1AnIEz26E84uDLj5PtjvqLC1rX9ToOuAGaQjcbHkGVcH8aXn5l7OcE dV8Qa7FtZ1ATFXOp40Y4xPZxfb/E+/H8yTQli05SmENkyMOYihDY5ZPUHa3+jb8i 3MSJumLRw1b/Vz1vVocJ7wpcrwOlfbRa3vzqKP+oWQRWrrjuaUKj9IkRGZvGbuuZ BAW+QykAXVRS11DQ1N3r6/ZTZ5sP6qAWQr/cFo79Aw8CXTaZ4Vred9UcCZo5G4zf TYvXAdEiOCJROXwkOcxLdg25oWmdMFXYDHyEzW4wvWMf8PEPCEX/w23pMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPAMWD1M/abx3pVaPMM9iPYvQTSAMB8GA1UdIwQY MBaAFKqrYRHgBMKgRPFouNKCc89nRPOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXF0aEVlQUV3cUJFOFdpNDBvSnp6MmRFODZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNGFkMGYtMGIzMC00MWZmLWE4ZDkt ODJlZGVkYTdmZTdhLzEvOEF4WVBVejlwdkhlbFZvOHd6Mkk5aTlCTklBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNGFkMGYtMGIzMC00MWZmLWE4ZDktODJlZGVkYTdmZTdh LzEvcXF0aEVlQUV3cUJFOFdpNDBvSnp6MmRFODZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSw+MA0G CSqGSIb3DQEBCwUAA4IBAQABwdw0F1aw955EKAMCS3P03ZFwN8bw9RrmKWM9xi0N MZVqtOSbtm2Rr5TYoVaN/bG7Jo+dwJvl4+t1sQm9PZbQQKw/4dLSwHlqDvKhYM+l fCCXJanwwv2pXYqg6pTYYfy386919dlJMcckVEz3yiJ/XB/FDhLiqW5CQAIVz+UA ly7iwiQI3AVY9XM9oJc+DkMZgClzuGYvaEWugIVgwlKB9FDlrQg0nD1cEW30zGhT YQtp2coEVi2t0MMUXsOqoK8SWZghgyRKcxPX0ZAN/K3kRN14bYQrUk2U9fxqhJBB 92Ec5yO5Aiy3PyxeEBhBta8iMQVNGP+OG/SX+u9CxuEK -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:46 2026 by rpki-client