This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/8GdtZSFoX1vaGkCpGmBlFouEiVo.roa File: 8GdtZSFoX1vaGkCpGmBlFouEiVo.roa (raw, json) Hash identifier: O6P4xNLVg+cJ7e2yv3WOenrZOTPYwO68uBRfw1gd8JE= Subject key identifier: F0:67:6D:65:21:68:5F:5B:DA:1A:40:A9:1A:60:65:16:8B:84:89:5A Certificate issuer: /CN=468b68141796ca95e4c72f4bfa696acea5083af3 Certificate serial: 019B7DCA5014E99052EE974052F439386A9A Authority key identifier: 46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/8GdtZSFoX1vaGkCpGmBlFouEiVo.roa Signing time: Fri 02 Jan 2026 08:19:29 +0000 ROA not before: Fri 02 Jan 2026 08:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200632 IP address blocks: 185.82.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:50:14:e9:90:52:ee:97:40:52:f4:39:38:6a:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468b68141796ca95e4c72f4bfa696acea5083af3 Validity Not Before: Jan 2 08:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0676d6521685f5bda1a40a91a6065168b84895a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2f:e8:a4:d5:fa:40:7a:cc:28:b7:0a:12:39: 81:f6:64:2c:d9:af:3e:61:0d:15:ae:f3:dd:39:eb: f6:81:a9:3f:44:d1:ee:fd:aa:0a:38:25:4a:1c:73: 79:9a:5f:68:78:31:f4:cc:c3:6f:7c:29:1f:a6:59: 47:53:89:fb:ee:c0:f5:46:5c:3c:85:c0:69:d2:c3: d9:87:b6:eb:ac:af:36:af:ea:9d:a4:f1:fc:23:49: be:63:a5:4c:3f:43:25:61:b7:88:71:c5:86:3a:bd: 22:3c:7d:1d:df:df:96:5f:a5:16:93:b8:6b:a6:81: 92:79:b7:de:02:26:a5:ae:f5:48:d2:c9:77:20:cc: 10:33:b9:e4:2a:59:7d:6b:3d:76:ee:14:bd:90:3b: d2:8c:b7:70:ee:ea:48:51:8a:56:c2:93:46:53:3a: 03:83:61:94:a8:a9:2a:94:ab:fb:35:85:0a:99:d8: 70:ab:13:f3:d8:c3:30:ce:e7:a1:9d:4f:29:8a:b6: 8c:e7:5b:1e:18:d2:cd:7d:68:31:6a:3d:e7:9c:54: 86:09:3c:30:be:8c:ab:09:02:ca:88:51:2d:ea:f0: 76:12:40:8e:87:c5:ae:51:74:54:54:21:25:c3:86: 9e:97:78:1e:f0:f3:fe:5a:70:96:bf:cf:82:7e:37: 44:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:67:6D:65:21:68:5F:5B:DA:1A:40:A9:1A:60:65:16:8B:84:89:5A X509v3 Authority Key Identifier: keyid:46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/8GdtZSFoX1vaGkCpGmBlFouEiVo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.82.68.0/22 Signature Algorithm: sha256WithRSAEncryption 82:1b:93:47:5f:e4:89:8d:9f:c5:bd:65:c8:e2:d7:0a:81:e7: 76:53:05:a9:80:5f:e4:b1:48:e1:3a:79:b2:8b:9b:7c:80:67: 6e:0e:a6:b3:6a:81:45:8f:24:a6:87:48:59:40:0b:c5:b0:d6: 17:5b:40:ed:f4:0e:4f:e7:36:a7:3b:66:24:5c:b8:a3:b0:b2: 33:14:a1:0d:d0:b7:f2:dd:6c:6f:fa:19:17:f5:45:54:33:dc: 04:bd:f7:5f:c5:fc:25:fb:f1:ab:f1:8d:29:3d:0e:b8:26:39: 19:51:0f:bc:61:42:ba:55:10:f0:d7:df:95:87:e0:94:7e:5c: 99:bb:9c:00:ce:dd:5e:7e:6f:08:97:37:1a:d2:18:f7:ec:9f: e5:3d:cc:75:14:bc:06:83:59:ef:ca:01:dd:9e:32:08:e4:3a: a8:d6:02:73:7c:49:dc:12:b8:69:c0:ab:d8:e9:3a:83:56:c3: f4:e2:92:62:ae:53:78:f3:1b:66:8e:6a:fe:80:66:94:8c:8d: 7d:65:4d:82:0f:e6:b1:f1:60:2e:e5:90:fb:ef:16:a7:f0:23: 00:33:89:7c:f3:d8:e2:10:33:7e:80:dd:84:bc:67:8b:35:93: 85:be:f0:ee:dd:21:9c:93:9a:ec:e3:37:21:0d:b1:c3:4e:bf: c0:99:42:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ylAU6ZBS7pdAUvQ5OGqaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGI2ODE0MTc5NmNhOTVlNGM3MmY0YmZhNjk2YWNlYTUw ODNhZjMwHhcNMjYwMTAyMDgxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDY3NmQ2NTIxNjg1ZjViZGExYTQwYTkxYTYwNjUxNjhiODQ4OTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4C/opNX6QHrMKLcKEjmB9mQs2a8+ YQ0VrvPdOev2gak/RNHu/aoKOCVKHHN5ml9oeDH0zMNvfCkfpllHU4n77sD1Rlw8 hcBp0sPZh7brrK82r+qdpPH8I0m+Y6VMP0MlYbeIccWGOr0iPH0d39+WX6UWk7hr poGSebfeAialrvVI0sl3IMwQM7nkKll9az127hS9kDvSjLdw7upIUYpWwpNGUzoD g2GUqKkqlKv7NYUKmdhwqxPz2MMwzuehnU8piraM51seGNLNfWgxaj3nnFSGCTww voyrCQLKiFEt6vB2EkCOh8WuUXRUVCElw4ael3ge8PP+WnCWv8+CfjdExwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPBnbWUhaF9b2hpAqRpgZRaLhIlaMB8GA1UdIwQY MBaAFEaLaBQXlsqV5McvS/ppas6lCDrzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm90b0ZCZVd5cFhreHk5TC1tbHF6cVVJT3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81OThlOGItYTYzZi00MjVlLWI0Zjct NDUyZDZkMzgyNmY3LzEvOEdkdFpTRm9YMXZhR2tDcEdtQmxGb3VFaVZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi81OThlOGItYTYzZi00MjVlLWI0ZjctNDUyZDZkMzgyNmY3 LzEvUm90b0ZCZVd5cFhreHk5TC1tbHF6cVVJT3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVJEMA0G CSqGSIb3DQEBCwUAA4IBAQCCG5NHX+SJjZ/FvWXI4tcKged2UwWpgF/ksUjhOnmy i5t8gGduDqazaoFFjySmh0hZQAvFsNYXW0Dt9A5P5zanO2YkXLijsLIzFKEN0Lfy 3Wxv+hkX9UVUM9wEvfdfxfwl+/Gr8Y0pPQ64JjkZUQ+8YUK6VRDw19+Vh+CUflyZ u5wAzt1efm8Ilzca0hj37J/lPcx1FLwGg1nvygHdnjII5Dqo1gJzfEncErhpwKvY 6TqDVsP04pJirlN48xtmjmr+gGaUjI19ZU2CD+ax8WAu5ZD77xan8CMAM4l889ji EDN+gN2EvGeLNZOFvvDu3SGck5rs4zchDbHDTr/AmUKv -----END CERTIFICATE-----Generated at Sun Jan 25 15:06:38 2026 by rpki-client