This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/P8qRXIUXFRxLqpqPgoGyj2ksP4E.roa File: P8qRXIUXFRxLqpqPgoGyj2ksP4E.roa (raw, json) Hash identifier: c/qoc2pQET/0jm2wOTLQC7x1KXfZ+jeD/PYJBR55Ebk= Subject key identifier: 3F:CA:91:5C:85:17:15:1C:4B:AA:9A:8F:82:81:B2:8F:69:2C:3F:81 Certificate issuer: /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78 Certificate serial: 019B78355A21228CE5FA7A67214686505BDD Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/P8qRXIUXFRxLqpqPgoGyj2ksP4E.roa Signing time: Thu 01 Jan 2026 06:18:40 +0000 ROA not before: Thu 01 Jan 2026 06:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60975 IP address blocks: 185.19.184.0/24 maxlen: 24 185.19.185.0/24 maxlen: 24 185.19.187.0/24 maxlen: 24 2a00:43e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:5a:21:22:8c:e5:fa:7a:67:21:46:86:50:5b:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78 Validity Not Before: Jan 1 06:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fca915c8517151c4baa9a8f8281b28f692c3f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:20:a8:ef:e2:f5:e7:44:96:31:da:aa:07:f8: b5:90:f5:4f:85:c6:98:2f:f4:c1:fc:57:2a:cd:9b: f7:fe:8e:a6:04:87:b1:a5:ec:64:88:26:e5:ef:9b: c5:7a:1e:15:4a:b4:92:c3:23:25:46:a5:a9:33:bc: 89:97:3c:b0:6e:c5:76:e5:8b:25:ee:82:35:0b:1a: af:1a:31:b8:31:a1:7e:c6:b3:ca:3e:bf:3f:02:00: 8c:d0:9c:7b:80:83:2e:66:97:7b:52:34:b1:50:12: 75:56:0a:2e:74:66:fe:a3:bc:03:b0:fe:64:b2:aa: 33:1c:7c:2f:6a:04:f7:94:b4:55:01:e0:38:f5:3f: b4:ca:34:f6:64:29:a8:33:66:fb:1e:68:cd:21:23: 95:c6:88:27:4f:5c:13:ab:a6:4c:d4:83:ab:cc:eb: ed:f9:bf:15:07:3f:31:fb:41:af:00:70:65:9a:e2: 6a:ef:71:39:97:a2:d8:f1:f9:96:64:ab:17:cf:1f: bd:70:16:25:bb:0b:fd:a8:0f:04:77:c8:02:e5:9a: cf:ba:56:b7:6c:34:7d:a7:40:a8:12:be:41:27:ce: 2f:c7:ed:83:55:2a:74:33:28:27:0d:87:73:9f:d0: 6a:2c:ea:f7:ce:94:9e:07:e2:4e:18:76:ea:fc:aa: 81:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CA:91:5C:85:17:15:1C:4B:AA:9A:8F:82:81:B2:8F:69:2C:3F:81 X509v3 Authority Key Identifier: keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/P8qRXIUXFRxLqpqPgoGyj2ksP4E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.19.184.0/23 185.19.187.0/24 IPv6: 2a00:43e0::/32 Signature Algorithm: sha256WithRSAEncryption 8d:7a:bb:d2:7a:65:e1:13:a8:ac:03:2d:5f:9e:ff:f7:4c:d1: 53:b7:31:2c:ab:a4:c9:da:b4:0c:fa:92:da:b1:06:f0:64:30: 92:08:f3:c7:f6:40:1a:2e:40:0c:a9:dd:5d:66:35:6e:66:37: ec:9d:81:fa:92:e8:e1:1e:fc:1c:08:d1:39:19:81:10:2f:5c: 0f:01:2c:9d:13:e1:ea:04:58:8b:ec:50:03:9b:aa:83:75:08: 24:1e:ba:eb:a5:e8:ef:e7:f2:11:55:c5:f9:2b:c2:91:7d:3a: 00:c6:d9:25:75:e1:52:af:71:b5:2e:1b:f2:c9:8b:2a:38:01: 4f:7f:9f:3c:56:09:63:b8:80:a9:8f:ac:78:9c:67:d8:1f:a2: f4:50:1f:e3:12:c3:43:b0:2e:04:b7:62:ce:87:82:48:07:a7: 05:45:f9:c9:3a:ae:c1:33:d2:d2:ec:e9:b2:d3:34:3e:7f:d4: 6c:58:73:1f:40:5e:41:9f:7a:2e:f2:0e:84:da:77:5f:a0:5c: 89:e9:c9:ad:c6:54:10:80:19:ad:5b:04:37:ed:f8:37:28:d7: 81:28:50:f7:d5:d3:4a:1f:34:9e:64:42:e3:d0:5a:9e:3b:20: 4d:b1:de:8e:2d:81:b2:b3:20:87:51:84:03:8f:57:22:ad:b3: a2:00:88:2d -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4NVohIozl+npnIUaGUFvdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMzEyNDdmMzU5YTZkNDkyZGM5OTQzYWUwZjAwZmM4YmUy MTZjNzgwHhcNMjYwMTAxMDYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmNhOTE1Yzg1MTcxNTFjNGJhYTlhOGY4MjgxYjI4ZjY5MmMzZjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiCo7+L150SWMdqqB/i1kPVPhcaY L/TB/FcqzZv3/o6mBIexpexkiCbl75vFeh4VSrSSwyMlRqWpM7yJlzywbsV25Ysl 7oI1CxqvGjG4MaF+xrPKPr8/AgCM0Jx7gIMuZpd7UjSxUBJ1VgoudGb+o7wDsP5k sqozHHwvagT3lLRVAeA49T+0yjT2ZCmoM2b7HmjNISOVxognT1wTq6ZM1IOrzOvt +b8VBz8x+0GvAHBlmuJq73E5l6LY8fmWZKsXzx+9cBYluwv9qA8Ed8gC5ZrPula3 bDR9p0CoEr5BJ84vx+2DVSp0MygnDYdzn9BqLOr3zpSeB+JOGHbq/KqBMwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFD/KkVyFFxUcS6qaj4KBso9pLD+BMB8GA1UdIwQY MBaAFLwxJH81mm1JLcmUOuDwD8i+IWx4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkRFa2Z6V2FiVWt0eVpRNjRQQVB5TDRoYkhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zNDZiZWYtMGE1ZS00NDAwLTlmODQt NTY4MDVjYTExYzMzLzEvUDhxUlhJVVhGUnhMcXBxUGdvR3lqMmtzUDRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8zNDZiZWYtMGE1ZS00NDAwLTlmODQtNTY4MDVjYTExYzMz LzEvdkRFa2Z6V2FiVWt0eVpRNjRQQVB5TDRoYkhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBuRO4AwQA uRO7MA0EAgACMAcDBQAqAEPgMA0GCSqGSIb3DQEBCwUAA4IBAQCNervSemXhE6is Ay1fnv/3TNFTtzEsq6TJ2rQM+pLasQbwZDCSCPPH9kAaLkAMqd1dZjVuZjfsnYH6 kujhHvwcCNE5GYEQL1wPASydE+HqBFiL7FADm6qDdQgkHrrrpejv5/IRVcX5K8KR fToAxtkldeFSr3G1LhvyyYsqOAFPf588VgljuICpj6x4nGfYH6L0UB/jEsNDsC4E t2LOh4JIB6cFRfnJOq7BM9LS7Omy0zQ+f9RsWHMfQF5Bn3ou8g6E2ndfoFyJ6cmt xlQQgBmtWwQ37fg3KNeBKFD31dNKHzSeZELj0FqeOyBNsd6OLYGysyCHUYQDj1ci rbOiAIgt -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:43 2026 by rpki-client