This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/G8Xjmm3bP-hXRGstLE8Fpo1sPVM.roa File: G8Xjmm3bP-hXRGstLE8Fpo1sPVM.roa (raw, json) Hash identifier: fWJBQMog1YWkp2bEy9v1fjvr2kKDsca319UpenUU6lI= Subject key identifier: 1B:C5:E3:9A:6D:DB:3F:E8:57:44:6B:2D:2C:4F:05:A6:8D:6C:3D:53 Certificate issuer: /CN=293d1044cd48d61716d759e020ddbdaa814d5cd5 Certificate serial: 019B7DC979DCD1D069D599D88A5B38DBF32A Authority key identifier: 29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/G8Xjmm3bP-hXRGstLE8Fpo1sPVM.roa Signing time: Fri 02 Jan 2026 08:18:34 +0000 ROA not before: Fri 02 Jan 2026 08:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204592 IP address blocks: 185.230.112.0/22 maxlen: 24 2a0c:7300::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:79:dc:d1:d0:69:d5:99:d8:8a:5b:38:db:f3:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=293d1044cd48d61716d759e020ddbdaa814d5cd5 Validity Not Before: Jan 2 08:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bc5e39a6ddb3fe857446b2d2c4f05a68d6c3d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:aa:42:ed:e8:57:6f:39:ff:5f:bd:10:98:f3: bd:56:67:56:9a:eb:b1:06:b1:ab:b2:1d:40:b5:f4: 55:84:01:8d:c7:0f:22:9c:a5:82:11:ca:8c:5c:32: b7:d9:d7:e0:cd:3d:9a:3d:f5:4c:7c:b1:18:f0:18: 4a:8c:70:0a:ac:2f:8b:78:8d:29:92:f1:60:2c:0e: ec:51:c6:ba:32:74:71:db:ab:80:69:34:8c:77:89: b9:1f:b9:0b:a0:6b:05:d1:c6:c3:93:30:2d:f8:b2: 9d:67:9c:d2:cc:b5:e7:b2:ed:ef:ea:c1:22:6d:d2: 2f:f7:69:ec:e4:70:38:e0:fb:68:34:dd:06:9d:32: 2e:2b:89:4b:fa:7f:7d:4b:04:8b:5e:12:a6:c4:57: 5d:bd:b0:6f:8c:b7:4e:03:68:21:4a:60:66:c3:03: d2:be:2e:87:60:ec:98:95:f3:2d:ec:dc:55:16:ff: 02:4e:28:85:c6:1d:ee:5b:e4:30:03:d9:b5:5b:85: 6c:9b:b4:ec:08:d8:98:d8:29:22:8c:1c:1b:c4:a8: 46:14:cb:e0:d5:a8:cc:cd:64:50:07:36:b8:de:d0: 29:5d:21:ce:bc:22:d9:31:5c:6e:37:f6:49:ba:10: 99:3d:ed:46:be:f7:43:61:bb:90:d6:33:ad:cd:9a: 3c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C5:E3:9A:6D:DB:3F:E8:57:44:6B:2D:2C:4F:05:A6:8D:6C:3D:53 X509v3 Authority Key Identifier: keyid:29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/G8Xjmm3bP-hXRGstLE8Fpo1sPVM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.230.112.0/22 IPv6: 2a0c:7300::/32 Signature Algorithm: sha256WithRSAEncryption 49:54:8b:f0:df:9e:67:7b:11:87:85:fe:83:aa:d4:ec:8f:1f: 5f:44:17:2a:dd:e8:7f:05:ec:16:82:76:e9:be:59:9b:db:ff: 19:4a:dd:c2:22:9a:6e:14:2b:29:4f:fa:78:63:d3:54:da:1e: 71:b8:c9:36:74:56:02:5f:b8:9d:cb:9e:01:da:66:32:c3:20: 39:ac:bd:98:9b:cb:50:32:12:eb:de:2e:c6:94:e7:22:ba:3d: 2b:74:06:6d:ef:ff:6c:2e:28:a4:e4:f8:0e:9a:1b:11:29:5c: 93:45:28:4b:58:ed:bf:57:38:d9:fb:4a:aa:6c:1c:4a:82:e1: eb:8c:e8:4c:e2:06:3f:c8:f9:7e:9c:e0:75:2b:9c:95:48:d3: e6:68:7b:fb:ad:9a:2d:f6:d2:f9:da:b7:4c:8d:75:02:ab:cb: 35:76:ba:f2:1a:e6:c8:c8:06:23:c8:1a:44:49:df:30:e3:e5: 6d:2e:01:31:fa:57:ba:69:08:7a:98:8b:23:69:9a:e1:1a:67: ee:eb:cf:25:58:34:79:83:ff:12:b8:bf:f5:cd:23:32:62:40: 76:bb:e2:6c:94:7f:1f:ed:cb:79:99:e9:e3:a2:08:a7:39:1b: e7:f8:fe:f4:e8:e7:33:a4:73:91:6d:54:ec:57:24:f1:32:61: c9:8d:0d:57 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9yXnc0dBp1ZnYils42/MqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5M2QxMDQ0Y2Q0OGQ2MTcxNmQ3NTllMDIwZGRiZGFhODE0 ZDVjZDUwHhcNMjYwMTAyMDgxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmM1ZTM5YTZkZGIzZmU4NTc0NDZiMmQyYzRmMDVhNjhkNmMzZDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvapC7ehXbzn/X70QmPO9VmdWmuux BrGrsh1AtfRVhAGNxw8inKWCEcqMXDK32dfgzT2aPfVMfLEY8BhKjHAKrC+LeI0p kvFgLA7sUca6MnRx26uAaTSMd4m5H7kLoGsF0cbDkzAt+LKdZ5zSzLXnsu3v6sEi bdIv92ns5HA44PtoNN0GnTIuK4lL+n99SwSLXhKmxFddvbBvjLdOA2ghSmBmwwPS vi6HYOyYlfMt7NxVFv8CTiiFxh3uW+QwA9m1W4Vsm7TsCNiY2CkijBwbxKhGFMvg 1ajMzWRQBza43tApXSHOvCLZMVxuN/ZJuhCZPe1GvvdDYbuQ1jOtzZo83QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBvF45pt2z/oV0RrLSxPBaaNbD1TMB8GA1UdIwQY MBaAFCk9EETNSNYXFtdZ4CDdvaqBTVzVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1QwUVJNMUkxaGNXMTFuZ0lOMjlxb0ZOWE5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9kZWYwOTUtMDU2Yi00ZGQzLWJmMWUt ZTcxYmVkYTFmMjk5LzEvRzhYam1tM2JQLWhYUkdzdExFOEZwbzFzUFZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9kZWYwOTUtMDU2Yi00ZGQzLWJmMWUtZTcxYmVkYTFmMjk5 LzEvS1QwUVJNMUkxaGNXMTFuZ0lOMjlxb0ZOWE5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCueZwMA0E AgACMAcDBQAqDHMAMA0GCSqGSIb3DQEBCwUAA4IBAQBJVIvw355nexGHhf6DqtTs jx9fRBcq3eh/BewWgnbpvlmb2/8ZSt3CIppuFCspT/p4Y9NU2h5xuMk2dFYCX7id y54B2mYywyA5rL2Ym8tQMhLr3i7GlOciuj0rdAZt7/9sLiik5PgOmhsRKVyTRShL WO2/VzjZ+0qqbBxKguHrjOhM4gY/yPl+nOB1K5yVSNPmaHv7rZot9tL52rdMjXUC q8s1drryGubIyAYjyBpESd8w4+VtLgEx+le6aQh6mIsjaZrhGmfu688lWDR5g/8S uL/1zSMyYkB2u+JslH8f7ct5menjoginORvn+P706OczpHORbVTsVyTxMmHJjQ1X -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:52 2026 by rpki-client