This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/bo4jTmLbavInVB1_Xe56jT6duFc.roa File: bo4jTmLbavInVB1_Xe56jT6duFc.roa (raw, json) Hash identifier: DrLAswJfulupBgy+nF1dC9JnLY+ojBgEGF1LnkBTmLQ= Subject key identifier: 6E:8E:23:4E:62:DB:6A:F2:27:54:1D:7F:5D:EE:7A:8D:3E:9D:B8:57 Certificate issuer: /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1 Certificate serial: 019B7E382D967F19B25B64EBBAFDA6504163 Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/bo4jTmLbavInVB1_Xe56jT6duFc.roa Signing time: Fri 02 Jan 2026 10:19:29 +0000 ROA not before: Fri 02 Jan 2026 10:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34154 IP address blocks: 185.237.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:2d:96:7f:19:b2:5b:64:eb:ba:fd:a6:50:41:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1 Validity Not Before: Jan 2 10:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e8e234e62db6af227541d7f5dee7a8d3e9db857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:17:11:27:e9:f6:c8:c1:c3:8d:0c:de:3e:31: 11:83:98:19:77:d4:e7:1b:f1:39:01:8d:b3:cc:d9: cd:31:c2:89:3c:b1:e0:27:fe:a1:a5:30:ac:a6:55: ca:a5:8b:89:e9:ba:63:6e:9e:56:7e:5c:7e:1a:d0: ea:75:b1:e1:f2:18:a9:40:2e:4d:ae:07:2a:79:98: 16:13:45:04:1e:50:4b:44:28:04:53:82:39:c3:95: c3:4e:6c:9f:29:dd:ab:e0:92:8f:18:5b:d1:46:14: 43:e1:60:fc:cd:3a:83:f2:ac:5b:55:b8:4e:d9:9e: 40:4f:ab:ea:55:85:b3:4b:3e:6b:f9:1b:18:c2:24: c9:d7:23:12:b9:45:2b:f5:75:df:40:3a:fb:31:a2: 08:ed:0c:5b:9e:61:8f:13:23:5c:0e:b1:9c:5a:e2: b8:a1:12:a9:cc:06:29:cd:3f:89:00:0d:21:26:16: 2b:74:39:de:95:a7:db:ff:71:f6:61:40:f3:69:21: 2f:54:19:50:2b:9d:ac:3d:11:4d:5e:66:b9:7a:0e: fb:bc:bd:48:0c:be:28:0a:b6:d3:c6:d5:4b:e8:66: 5e:e2:5f:63:80:39:cd:49:db:7f:0f:b1:e3:1b:04: 38:24:f5:43:64:4c:8d:c3:c3:de:8b:36:41:19:93: 56:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8E:23:4E:62:DB:6A:F2:27:54:1D:7F:5D:EE:7A:8D:3E:9D:B8:57 X509v3 Authority Key Identifier: keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/bo4jTmLbavInVB1_Xe56jT6duFc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.237.34.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:92:6c:b0:5b:ea:c6:4a:a2:42:2b:3d:e1:2c:37:19:08:f6: ad:b6:fe:3e:9f:e2:09:51:24:3e:e6:e6:df:37:c2:33:1f:a2: 80:d8:09:aa:91:f2:11:65:af:d3:c1:04:84:4e:62:b4:45:7d: 45:bc:bd:7e:d3:fc:e6:62:7d:5c:1b:5a:3b:cd:fa:8a:16:84: a3:22:f4:e8:c0:a0:e5:75:97:be:a0:98:ab:d7:31:b5:6e:70: 83:5e:f1:17:4f:62:7f:1b:86:f5:88:c3:d6:e6:f4:59:1d:80: 54:6a:74:58:eb:15:1f:ca:b7:b2:08:dd:03:4f:fe:b9:e5:af: 58:ed:7d:2b:ad:75:75:a1:21:10:64:6f:d6:46:15:61:d9:be: 36:4d:2f:01:6d:86:1b:2b:a3:96:2c:9a:64:34:d7:9d:5e:a3: 41:67:5f:5a:b6:82:ff:38:f3:48:f1:c4:8f:a7:06:1c:c9:49: 38:a9:e2:60:df:ad:fe:5f:2d:28:1c:d5:af:da:ba:a3:9c:67: e2:32:58:4e:ec:fe:d1:30:80:b9:7c:eb:06:6a:9c:ad:13:74: 42:54:a3:f2:44:5a:39:7e:33:57:52:b0:b4:50:e1:88:e3:1a: 0b:25:04:99:a2:29:dd:b9:e8:de:a5:89:54:5c:5d:f5:81:ae: 97:45:d7:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OC2WfxmyW2Truv2mUEFjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxODA4ZjFhYmVmOGU2YjU5Y2Q0MzU5YTZiNDQ4MWZjN2M5 NjMxZDEwHhcNMjYwMTAyMTAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZThlMjM0ZTYyZGI2YWYyMjc1NDFkN2Y1ZGVlN2E4ZDNlOWRiODU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxcRJ+n2yMHDjQzePjERg5gZd9Tn G/E5AY2zzNnNMcKJPLHgJ/6hpTCsplXKpYuJ6bpjbp5Wflx+GtDqdbHh8hipQC5N rgcqeZgWE0UEHlBLRCgEU4I5w5XDTmyfKd2r4JKPGFvRRhRD4WD8zTqD8qxbVbhO 2Z5AT6vqVYWzSz5r+RsYwiTJ1yMSuUUr9XXfQDr7MaII7QxbnmGPEyNcDrGcWuK4 oRKpzAYpzT+JAA0hJhYrdDnelafb/3H2YUDzaSEvVBlQK52sPRFNXma5eg77vL1I DL4oCrbTxtVL6GZe4l9jgDnNSdt/D7HjGwQ4JPVDZEyNw8PeizZBGZNW1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG6OI05i22ryJ1Qdf13ueo0+nbhXMB8GA1UdIwQY MBaAFPGAjxq++Oa1nNQ1mmtEgfx8ljHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFlDUEdyNzQ1cldjMURXYWEwU0JfSHlXTWRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hZTMyNGYtNTRmNS00MWRhLWJlYmYt MDMwNzdlMzdjNjFhLzEvYm80alRtTGJhdkluVkIxX1hlNTZqVDZkdUZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9hZTMyNGYtNTRmNS00MWRhLWJlYmYtMDMwNzdlMzdjNjFh LzEvOFlDUEdyNzQ1cldjMURXYWEwU0JfSHlXTWRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue0iMA0G CSqGSIb3DQEBCwUAA4IBAQBskmywW+rGSqJCKz3hLDcZCPattv4+n+IJUSQ+5ubf N8IzH6KA2AmqkfIRZa/TwQSETmK0RX1FvL1+0/zmYn1cG1o7zfqKFoSjIvTowKDl dZe+oJir1zG1bnCDXvEXT2J/G4b1iMPW5vRZHYBUanRY6xUfyreyCN0DT/655a9Y 7X0rrXV1oSEQZG/WRhVh2b42TS8BbYYbK6OWLJpkNNedXqNBZ19atoL/OPNI8cSP pwYcyUk4qeJg363+Xy0oHNWv2rqjnGfiMlhO7P7RMIC5fOsGapytE3RCVKPyRFo5 fjNXUrC0UOGI4xoLJQSZoinduejepYlUXF31ga6XRddT -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:07 2026 by rpki-client