This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/C8g7Pi5B0RKpnrlAYnkGNfdVaNI.roa File: C8g7Pi5B0RKpnrlAYnkGNfdVaNI.roa (raw, json) Hash identifier: wxMFCVvSA3tdy7i3OaSOQ9SIAg2wmBIcYz9jkUGPtlk= Subject key identifier: 0B:C8:3B:3E:2E:41:D1:12:A9:9E:B9:40:62:79:06:35:F7:55:68:D2 Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Certificate serial: 019B7CEDE8F4B064842885CCB565FA1E29B0 Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/C8g7Pi5B0RKpnrlAYnkGNfdVaNI.roa Signing time: Fri 02 Jan 2026 04:18:45 +0000 ROA not before: Fri 02 Jan 2026 04:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214359 IP address blocks: 185.239.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:e8:f4:b0:64:84:28:85:cc:b5:65:fa:1e:29:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Validity Not Before: Jan 2 04:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bc83b3e2e41d112a99eb94062790635f75568d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a1:21:71:45:95:0a:a6:61:06:c4:13:7c:79: ce:99:5c:cd:f7:c6:d9:d1:05:dd:ff:86:1d:6d:d2: 35:87:ce:1f:bc:10:ba:37:20:88:88:c5:12:13:be: 08:32:95:18:18:22:6c:18:b4:bb:a3:bf:c6:13:f1: 1e:51:50:5e:09:18:6a:f0:2c:12:36:1f:f1:57:65: b5:48:42:f3:fd:11:a1:c3:b7:ab:95:c8:fc:df:6c: c7:90:5e:08:40:b6:6d:39:cc:49:41:ab:cc:20:59: 42:4b:60:a6:0b:79:1c:be:df:37:88:f7:8a:9f:be: 95:1e:51:8e:b7:d2:26:46:d9:3a:91:07:09:32:53: c6:31:f9:8e:37:e9:6d:c7:bf:7f:34:7a:14:9f:f5: 01:d6:e6:29:9a:fc:c1:b5:bd:ea:89:f2:4d:d7:68: 8a:92:49:fd:ef:15:4e:0e:df:07:2f:f7:25:2c:f7: aa:ab:5f:00:0d:82:3f:f7:45:79:74:c2:73:b0:d5: b7:6d:c8:eb:e9:a6:fc:1f:a3:20:40:2e:e6:59:09: 3c:28:5f:e7:92:54:b3:9b:ca:b4:60:fb:95:83:de: d1:76:0f:55:bf:4f:76:1b:fd:e3:21:8e:28:53:80: 5b:9b:21:03:2f:90:05:25:4a:ce:b6:c8:8a:76:1e: 9b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C8:3B:3E:2E:41:D1:12:A9:9E:B9:40:62:79:06:35:F7:55:68:D2 X509v3 Authority Key Identifier: keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/C8g7Pi5B0RKpnrlAYnkGNfdVaNI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.239.178.0/24 Signature Algorithm: sha256WithRSAEncryption 10:fe:9b:69:f5:ba:e5:d6:57:e1:91:81:31:f1:40:a4:ce:50: ef:fc:e9:b3:a9:25:ca:4b:23:e8:e2:bd:81:35:09:c8:d2:29: 70:23:d4:50:3e:cd:cb:9e:d8:e6:33:72:b1:31:7f:fa:4c:17: 2d:c2:92:4d:96:cb:4f:0d:fe:bb:d5:22:b2:69:57:43:37:0c: 44:07:4e:61:f7:d9:43:3b:98:d6:6c:dd:e0:e8:e1:f0:9d:3a: e8:99:4e:58:1e:ee:9e:02:6c:77:27:2c:9d:d2:db:b9:54:10: e4:bd:3f:e5:34:c6:d9:5e:f7:7d:52:18:58:12:b7:d5:b7:a0: 69:0c:60:09:08:25:9e:63:3e:27:4e:d8:06:da:c7:46:b6:68: 0c:b3:31:eb:2f:95:aa:54:5f:58:db:b7:39:a9:a1:f7:5a:11: 67:9e:8d:5c:72:a6:87:c6:49:7d:32:89:01:63:a6:03:c5:4d: 43:19:ab:57:14:a0:ab:c0:16:00:57:f4:67:d2:94:47:f8:e5: 62:ca:ee:bd:b9:10:46:3e:d4:57:97:89:b9:c8:69:d9:67:4a: 75:aa:35:bf:18:a2:a7:63:2f:70:40:f9:0b:5e:15:5a:e5:e8: 1e:23:c9:eb:30:8f:ca:18:d1:96:72:12:00:52:79:cb:dd:01: b6:8d:5e:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87ej0sGSEKIXMtWX6HimwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Nzg1NzczZGYzMTNiOTE3MTFiZjZiYzViMTQ5ZWNjMjQ2 YjllODkwHhcNMjYwMTAyMDQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmM4M2IzZTJlNDFkMTEyYTk5ZWI5NDA2Mjc5MDYzNWY3NTU2OGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKEhcUWVCqZhBsQTfHnOmVzN98bZ 0QXd/4YdbdI1h84fvBC6NyCIiMUSE74IMpUYGCJsGLS7o7/GE/EeUVBeCRhq8CwS Nh/xV2W1SELz/RGhw7erlcj832zHkF4IQLZtOcxJQavMIFlCS2CmC3kcvt83iPeK n76VHlGOt9ImRtk6kQcJMlPGMfmON+ltx79/NHoUn/UB1uYpmvzBtb3qifJN12iK kkn97xVODt8HL/clLPeqq18ADYI/90V5dMJzsNW3bcjr6ab8H6MgQC7mWQk8KF/n klSzm8q0YPuVg97Rdg9Vv092G/3jIY4oU4BbmyEDL5AFJUrOtsiKdh6bLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAvIOz4uQdESqZ65QGJ5BjX3VWjSMB8GA1UdIwQY MBaAFKZ4V3PfMTuRcRv2vFsUnswka56JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEt ZDc1ODY5YzBjNzFlLzEvQzhnN1BpNUIwUktwbnJsQVlua0dOZmRWYU5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEtZDc1ODY5YzBjNzFl LzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue+yMA0G CSqGSIb3DQEBCwUAA4IBAQAQ/ptp9brl1lfhkYEx8UCkzlDv/OmzqSXKSyPo4r2B NQnI0ilwI9RQPs3LntjmM3KxMX/6TBctwpJNlstPDf671SKyaVdDNwxEB05h99lD O5jWbN3g6OHwnTromU5YHu6eAmx3Jyyd0tu5VBDkvT/lNMbZXvd9UhhYErfVt6Bp DGAJCCWeYz4nTtgG2sdGtmgMszHrL5WqVF9Y27c5qaH3WhFnno1ccqaHxkl9MokB Y6YDxU1DGatXFKCrwBYAV/Rn0pRH+OViyu69uRBGPtRXl4m5yGnZZ0p1qjW/GKKn Yy9wQPkLXhVa5egeI8nrMI/KGNGWchIAUnnL3QG2jV7a -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:02 2026 by rpki-client