This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/m8_a0R-In6zPsMQtCZU7ofRpJV8.roa File: m8_a0R-In6zPsMQtCZU7ofRpJV8.roa (raw, json) Hash identifier: 9Klia2LNkTjTOYme1PTO2tY3GfAWev/ji3owResFBFg= Subject key identifier: 9B:CF:DA:D1:1F:88:9F:AC:CF:B0:C4:2D:09:95:3B:A1:F4:69:25:5F Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390 Certificate serial: 019B76EB8F6B2CFFF392D660709F5638AE8D Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/m8_a0R-In6zPsMQtCZU7ofRpJV8.roa Signing time: Thu 01 Jan 2026 00:18:27 +0000 ROA not before: Thu 01 Jan 2026 00:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35732 IP address blocks: 185.118.24.0/24 maxlen: 24 185.118.25.0/24 maxlen: 24 185.118.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8f:6b:2c:ff:f3:92:d6:60:70:9f:56:38:ae:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390 Validity Not Before: Jan 1 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bcfdad11f889faccfb0c42d09953ba1f469255f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:31:b0:64:d7:e1:27:a7:7f:42:1a:c8:41:fc: 26:aa:d8:58:9b:06:dd:8c:2a:be:40:12:73:a8:27: 2a:3e:a4:11:98:f4:90:1e:ea:f8:53:9f:74:49:8b: 06:8b:79:c3:d3:d6:50:5d:af:89:cd:85:41:1a:9a: 60:61:b4:e8:4e:60:ef:69:25:58:d3:ec:3a:c0:ea: ff:d8:79:b2:b1:0e:7f:46:76:f3:94:ff:5c:e7:fa: 66:19:ab:f4:a1:13:70:b8:ae:05:64:fe:a6:34:5a: ce:f9:5f:4d:16:4d:04:1c:4d:5d:aa:62:a0:7c:bf: 9f:0a:5e:39:ec:6c:74:a5:77:0a:93:44:3f:c3:c8: 6b:ab:e7:c5:ca:ce:10:e6:30:89:b5:af:e7:a1:eb: 81:44:b6:ae:6c:65:af:58:8c:1d:b1:6a:f6:4a:eb: 61:cf:00:fc:55:a2:27:75:c5:4a:f7:44:36:d1:46: 3c:13:79:dc:1f:4c:54:92:c3:ec:97:c2:d2:11:c7: 0a:fa:55:22:91:4e:c2:fa:49:3c:7f:68:38:c5:65: b1:23:64:6d:df:63:1f:fd:3c:3a:28:73:2c:4f:52: ae:15:23:cc:a3:ef:44:64:68:8b:e2:15:38:57:14: 9d:7f:82:01:cc:db:ee:ac:60:0b:37:7a:c4:7e:42: 76:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CF:DA:D1:1F:88:9F:AC:CF:B0:C4:2D:09:95:3B:A1:F4:69:25:5F X509v3 Authority Key Identifier: keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/m8_a0R-In6zPsMQtCZU7ofRpJV8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.118.24.0/23 185.118.27.0/24 Signature Algorithm: sha256WithRSAEncryption ac:4a:92:2b:7c:b1:1e:ba:24:39:8a:19:a4:82:bb:0d:80:cc: f9:88:54:af:69:fb:8a:cc:6e:45:23:b8:bd:ed:ca:bb:ce:49: 41:79:07:20:b9:f7:53:41:24:25:dd:1c:9b:ee:18:57:1c:36: 7b:22:66:fd:f0:61:e7:90:63:ce:f0:19:33:b4:ef:f2:0b:13: 8d:80:84:7f:af:2b:c1:5b:0d:1b:a0:80:a1:18:ba:8e:8a:45: a6:a1:bf:e4:58:12:c7:56:4f:d3:cd:05:3f:49:f0:93:6a:39: 3a:9b:f6:02:01:cd:5e:4d:2b:ef:c7:18:90:29:e9:6c:ed:54: e0:25:4a:e6:bc:64:51:c2:0d:3c:f1:36:7b:56:bf:0c:95:15: 6f:be:f2:ce:58:3e:4c:27:fc:7b:0c:ae:d2:79:56:71:d0:0c: 39:e5:1c:35:fd:26:9a:56:f5:5c:8d:a5:5a:9f:db:3c:dc:09: bf:ba:d6:5d:e2:87:b2:58:4a:77:62:65:a7:ed:3f:80:2c:65: 91:90:81:01:e1:e1:2c:f9:63:77:4d:dc:64:42:7e:74:44:6f: d0:d3:8f:0a:f4:a5:26:4f:b7:f0:ac:9f:59:94:ee:ed:6b:2a: 55:46:b5:d3:dc:9f:a5:fd:af:ff:2a:37:60:ac:b0:6e:ba:94: 22:80:25:41 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt2649rLP/zktZgcJ9WOK6NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZjdmMTZiMDVhMTEyMzE1MWE2NzdhNDdhYzJkOGQ5MDYx ZGYzOTAwHhcNMjYwMTAxMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmNmZGFkMTFmODg5ZmFjY2ZiMGM0MmQwOTk1M2JhMWY0NjkyNTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjGwZNfhJ6d/QhrIQfwmqthYmwbd jCq+QBJzqCcqPqQRmPSQHur4U590SYsGi3nD09ZQXa+JzYVBGppgYbToTmDvaSVY 0+w6wOr/2HmysQ5/RnbzlP9c5/pmGav0oRNwuK4FZP6mNFrO+V9NFk0EHE1dqmKg fL+fCl457Gx0pXcKk0Q/w8hrq+fFys4Q5jCJta/noeuBRLaubGWvWIwdsWr2Suth zwD8VaIndcVK90Q20UY8E3ncH0xUksPsl8LSEccK+lUikU7C+kk8f2g4xWWxI2Rt 32Mf/Tw6KHMsT1KuFSPMo+9EZGiL4hU4VxSdf4IBzNvurGALN3rEfkJ2MwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJvP2tEfiJ+sz7DELQmVO6H0aSVfMB8GA1UdIwQY MBaAFNf38WsFoRIxUaZ3pHrC2NkGHfOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYt NmNiZTk0OTUzMmU0LzEvbThfYTBSLUluNnpQc01RdENaVTdvZlJwSlY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYtNmNiZTk0OTUzMmU0 LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuXYYAwQA uXYbMA0GCSqGSIb3DQEBCwUAA4IBAQCsSpIrfLEeuiQ5ihmkgrsNgMz5iFSvafuK zG5FI7i97cq7zklBeQcgufdTQSQl3Ryb7hhXHDZ7Imb98GHnkGPO8BkztO/yCxON gIR/ryvBWw0boIChGLqOikWmob/kWBLHVk/TzQU/SfCTajk6m/YCAc1eTSvvxxiQ Kels7VTgJUrmvGRRwg088TZ7Vr8MlRVvvvLOWD5MJ/x7DK7SeVZx0Aw55Rw1/Saa VvVcjaVan9s83Am/utZd4oeyWEp3YmWn7T+ALGWRkIEB4eEs+WN3TdxkQn50RG/Q 048K9KUmT7fwrJ9ZlO7taypVRrXT3J+l/a//KjdgrLBuupQigCVB -----END CERTIFICATE-----Generated at Mon Jan 26 01:39:53 2026 by rpki-client