This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/D8drYTgqt32Cqf3EAiV6kDEeJmQ.roa File: D8drYTgqt32Cqf3EAiV6kDEeJmQ.roa (raw, json) Hash identifier: z2zUysrNuxBIuhiC3z6/alcclEfX1JrDjmY7TAheY/g= Subject key identifier: 0F:C7:6B:61:38:2A:B7:7D:82:A9:FD:C4:02:25:7A:90:31:1E:26:64 Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 019B7DCA41F861BB6D39D507DAEA30D92C81 Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/D8drYTgqt32Cqf3EAiV6kDEeJmQ.roa Signing time: Fri 02 Jan 2026 08:19:25 +0000 ROA not before: Fri 02 Jan 2026 08:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42296 IP address blocks: 185.240.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:41:f8:61:bb:6d:39:d5:07:da:ea:30:d9:2c:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: Jan 2 08:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0fc76b61382ab77d82a9fdc402257a90311e2664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1b:2c:e5:76:4c:9f:09:ac:2f:8d:32:3b:c9: 19:a8:3d:26:2b:67:8c:29:99:73:d7:f6:7d:0c:4e: 62:f8:6d:ec:9a:bc:b8:7a:27:45:6d:e5:70:59:67: ff:b8:a5:b8:48:cb:2c:07:3c:15:ee:b5:9c:d3:48: 92:b2:a5:7a:50:79:af:ad:9a:0c:75:72:0d:f9:83: 13:61:c6:32:ac:5d:84:71:02:6f:f0:10:f4:3f:33: 81:bf:62:66:60:e3:9b:59:ba:5d:6a:13:d4:44:08: ab:9d:18:2c:ad:22:80:42:99:c3:d7:45:ea:28:93: fb:57:22:df:c4:ba:76:b0:bb:3f:2b:08:89:aa:fe: 4e:81:6c:7d:79:0c:a6:60:b2:c0:f2:ae:d6:9a:71: 3d:a6:b3:59:c2:b0:e9:86:13:fd:fd:bd:56:3c:89: 39:d1:64:d1:40:1f:50:b5:f5:5a:c5:a6:86:75:03: 5b:4f:b5:58:6a:af:c5:80:a0:9e:89:04:2b:ed:18: 02:1f:0b:b5:45:85:9f:14:63:5a:25:51:2b:b4:98: a9:c3:69:8f:c9:16:f5:47:5c:2f:d6:82:43:05:34: b4:ab:86:33:b5:83:62:58:36:03:02:b7:ac:5a:e7: 6e:8d:09:5b:43:15:8a:48:9c:07:a9:e9:70:1f:1e: 51:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C7:6B:61:38:2A:B7:7D:82:A9:FD:C4:02:25:7A:90:31:1E:26:64 X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/D8drYTgqt32Cqf3EAiV6kDEeJmQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.240.253.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:c2:f3:3e:82:4a:7a:31:28:3c:f2:07:a3:6f:02:a6:e0:a6: 51:df:9e:b9:cd:2c:5c:03:08:93:fe:0f:57:d3:bb:57:50:bf: a8:da:7f:24:af:c4:c2:69:b9:cc:2f:24:14:78:c7:50:fc:74: 5f:31:00:b3:37:c6:b8:69:39:69:15:08:96:b1:ce:61:8c:41: 3c:c9:e1:6b:4b:19:84:ac:94:c1:7f:04:cd:cc:82:3c:df:ce: 84:a7:d7:ce:9f:4e:54:e1:ff:5b:2f:06:0c:a1:64:19:ea:db: eb:2b:9e:ff:25:05:10:c1:7d:a2:7f:42:07:05:91:42:5a:8d: 26:5f:58:97:04:9a:a7:0b:b5:f4:e2:6e:52:e4:d9:1f:3f:ff: 60:b9:ba:0b:96:f1:2c:c1:8e:34:09:05:c7:23:da:4f:71:04: 8a:db:2c:d1:66:4d:1a:b9:ea:ff:28:da:0c:8f:55:66:00:0a: cf:c0:42:fc:c5:3e:7d:6a:cf:22:3b:87:ef:d7:98:a6:ff:6d: bd:00:fa:5b:6e:a7:12:b3:b0:31:76:bc:53:cc:3c:a1:87:21: 14:53:7e:56:e2:3a:9f:36:1b:13:16:e6:a7:34:37:38:b3:bb: dc:1d:da:3b:43:65:93:0b:71:12:7c:02:6a:c7:fa:bf:bc:5d: 4a:98:23:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ykH4YbttOdUH2uow2SyBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjYwMTAyMDgxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmM3NmI2MTM4MmFiNzdkODJhOWZkYzQwMjI1N2E5MDMxMWUyNjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhss5XZMnwmsL40yO8kZqD0mK2eM KZlz1/Z9DE5i+G3smry4eidFbeVwWWf/uKW4SMssBzwV7rWc00iSsqV6UHmvrZoM dXIN+YMTYcYyrF2EcQJv8BD0PzOBv2JmYOObWbpdahPURAirnRgsrSKAQpnD10Xq KJP7VyLfxLp2sLs/KwiJqv5OgWx9eQymYLLA8q7WmnE9prNZwrDphhP9/b1WPIk5 0WTRQB9QtfVaxaaGdQNbT7VYaq/FgKCeiQQr7RgCHwu1RYWfFGNaJVErtJipw2mP yRb1R1wv1oJDBTS0q4YztYNiWDYDAresWudujQlbQxWKSJwHqelwHx5RDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA/Ha2E4Krd9gqn9xAIlepAxHiZkMB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvRDhkcllUZ3F0MzJDcWYzRUFpVjZrREVlSm1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufD9MA0G CSqGSIb3DQEBCwUAA4IBAQAKwvM+gkp6MSg88gejbwKm4KZR3565zSxcAwiT/g9X 07tXUL+o2n8kr8TCabnMLyQUeMdQ/HRfMQCzN8a4aTlpFQiWsc5hjEE8yeFrSxmE rJTBfwTNzII8386Ep9fOn05U4f9bLwYMoWQZ6tvrK57/JQUQwX2if0IHBZFCWo0m X1iXBJqnC7X04m5S5NkfP/9guboLlvEswY40CQXHI9pPcQSK2yzRZk0auer/KNoM j1VmAArPwEL8xT59as8iO4fv15im/229APpbbqcSs7AxdrxTzDyhhyEUU35W4jqf NhsTFuanNDc4s7vcHdo7Q2WTC3ESfAJqx/q/vF1KmCMD -----END CERTIFICATE-----Generated at Mon Jan 26 13:45:49 2026 by rpki-client