This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/D8C_fac31Ie3Mlmm0iY26zsUpPQ.roa File: D8C_fac31Ie3Mlmm0iY26zsUpPQ.roa (raw, json) Hash identifier: aXM4Hau7o88WQaKHyho1aeWalezo3Xwt0vRqN6L/8TQ= Subject key identifier: 0F:C0:BF:7D:A7:37:D4:87:B7:32:59:A6:D2:26:36:EB:3B:14:A4:F4 Certificate issuer: /CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a Certificate serial: 019B7B3590F93367EB03288D3854F01C6015 Authority key identifier: 8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/D8C_fac31Ie3Mlmm0iY26zsUpPQ.roa Signing time: Thu 01 Jan 2026 20:17:46 +0000 ROA not before: Thu 01 Jan 2026 20:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29119 IP address blocks: 185.237.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:90:f9:33:67:eb:03:28:8d:38:54:f0:1c:60:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a Validity Not Before: Jan 1 20:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0fc0bf7da737d487b73259a6d22636eb3b14a4f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:83:48:eb:e9:88:ee:27:3b:dd:0d:01:1b:43: c2:22:be:d6:a4:6c:d2:dc:b3:0a:c2:09:1b:e9:b3: 1b:d0:8a:e5:6a:01:55:5e:03:b9:6e:25:62:1a:2d: ce:5e:a4:b1:e8:cc:3c:ff:d8:de:0e:98:24:01:fb: eb:1e:b7:61:00:d2:ca:e0:83:9e:ea:c6:4f:e7:cc: a0:04:ea:2c:c7:1e:81:9c:49:fb:3e:e6:e3:10:17: 0a:ba:bb:0c:01:01:a1:ca:11:1a:ea:20:a8:35:a1: d1:4a:c8:35:80:fc:21:ef:61:b5:30:a3:10:3e:b9: 9d:08:73:ba:a0:08:71:5c:bb:52:fc:51:ea:00:83: a4:7f:96:8a:6a:62:a3:80:c1:e5:9e:89:8a:80:64: 42:95:28:bc:a1:6c:59:7e:0f:56:f3:ba:f4:c2:6a: 98:dc:69:b6:17:8f:ab:16:80:17:18:23:1a:08:49: f7:a0:7a:08:f8:e0:75:fe:39:19:44:df:d9:a3:a9: b3:cc:b6:34:6d:e9:8a:82:60:1a:57:54:39:4c:9d: e0:16:db:50:b7:15:9d:94:e0:4d:9b:fd:fe:ce:6c: 3f:ac:f1:92:28:e4:09:07:b2:16:53:05:a6:66:db: 19:fd:48:0a:03:08:75:e1:02:ff:72:56:09:9e:49: f9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C0:BF:7D:A7:37:D4:87:B7:32:59:A6:D2:26:36:EB:3B:14:A4:F4 X509v3 Authority Key Identifier: keyid:8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/D8C_fac31Ie3Mlmm0iY26zsUpPQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.237.200.0/22 Signature Algorithm: sha256WithRSAEncryption 68:85:e6:b9:87:b0:68:2f:eb:af:1b:eb:ba:18:e5:4e:54:cb: 82:10:f1:4c:16:81:aa:4a:a4:89:b8:89:48:56:3a:ba:73:6d: a9:cb:a7:e6:de:9f:f7:9a:a8:04:b8:35:67:94:8b:99:25:da: a3:1c:82:81:78:ea:56:4b:57:5d:7e:d3:9b:a6:ac:2a:4d:38: 61:0a:18:07:03:a3:2e:61:09:ea:f1:77:5f:f3:27:c0:5c:20: 5f:36:07:a4:b1:bb:d0:c0:a6:19:86:97:86:ff:74:26:6a:67: 0b:6d:98:11:04:5d:db:2b:42:7d:68:f2:b2:88:2d:3a:c9:92: ed:64:f5:eb:5f:ea:2a:47:6b:2c:22:02:ef:a7:38:61:55:a1: 37:51:0e:aa:5d:b7:c6:40:bb:ab:10:ed:a3:f9:83:6e:23:57: b1:4e:7c:72:fb:a9:20:82:db:ce:8f:28:67:f2:fc:a5:9d:7e: 59:e7:14:c5:63:5b:a1:f9:a5:68:1c:e0:b1:48:41:c2:f4:57: 57:2b:c7:d5:1f:a7:e4:b5:a5:b3:64:af:38:49:26:2d:2a:6a: 01:b2:7a:10:aa:74:e8:df:44:6f:ec:ed:32:50:48:a4:10:9e: 67:64:ab:a9:ca:3f:46:e1:5d:c3:f6:cd:0b:55:8d:75:7a:d0: 5d:3e:6c:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NZD5M2frAyiNOFTwHGAVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMzRlMjkzOGRkNjg4NDliYjQwNmU5ZWI3OWM4OTNlNmMx MmM3OGEwHhcNMjYwMTAxMjAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmMwYmY3ZGE3MzdkNDg3YjczMjU5YTZkMjI2MzZlYjNiMTRhNGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroNI6+mI7ic73Q0BG0PCIr7WpGzS 3LMKwgkb6bMb0IrlagFVXgO5biViGi3OXqSx6Mw8/9jeDpgkAfvrHrdhANLK4IOe 6sZP58ygBOosxx6BnEn7PubjEBcKursMAQGhyhEa6iCoNaHRSsg1gPwh72G1MKMQ PrmdCHO6oAhxXLtS/FHqAIOkf5aKamKjgMHlnomKgGRClSi8oWxZfg9W87r0wmqY 3Gm2F4+rFoAXGCMaCEn3oHoI+OB1/jkZRN/Zo6mzzLY0bemKgmAaV1Q5TJ3gFttQ txWdlOBNm/3+zmw/rPGSKOQJB7IWUwWmZtsZ/UgKAwh14QL/clYJnkn5KwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA/Av32nN9SHtzJZptImNus7FKT0MB8GA1UdIwQY MBaAFIw04pON1ohJu0BunreciT5sEseKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakRUaWs0M1dpRW03UUc2ZXQ1eUpQbXdTeDRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8zMjA3OTctYjgxMC00ZjhlLThlN2Mt ODNjMzhiNzc3NDc4LzEvRDhDX2ZhYzMxSWUzTWxtbTBpWTI2enNVcFBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8zMjA3OTctYjgxMC00ZjhlLThlN2MtODNjMzhiNzc3NDc4 LzEvakRUaWs0M1dpRW03UUc2ZXQ1eUpQbXdTeDRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCue3IMA0G CSqGSIb3DQEBCwUAA4IBAQBohea5h7BoL+uvG+u6GOVOVMuCEPFMFoGqSqSJuIlI Vjq6c22py6fm3p/3mqgEuDVnlIuZJdqjHIKBeOpWS1ddftObpqwqTThhChgHA6Mu YQnq8Xdf8yfAXCBfNgeksbvQwKYZhpeG/3QmamcLbZgRBF3bK0J9aPKyiC06yZLt ZPXrX+oqR2ssIgLvpzhhVaE3UQ6qXbfGQLurEO2j+YNuI1exTnxy+6kggtvOjyhn 8vylnX5Z5xTFY1uh+aVoHOCxSEHC9FdXK8fVH6fktaWzZK84SSYtKmoBsnoQqnTo 30Rv7O0yUEikEJ5nZKupyj9G4V3D9s0LVY11etBdPmzx -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:17 2026 by rpki-client