This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/v0WTRVyIOMbnSSTHqyRygXScgPU.roa File: v0WTRVyIOMbnSSTHqyRygXScgPU.roa (raw, json) Hash identifier: AwqC2DBh8s09B6HD8Dw/C/8pvsrZMaYsxFJg6FacTeA= Subject key identifier: BF:45:93:45:5C:88:38:C6:E7:49:24:C7:AB:24:72:81:74:9C:80:F5 Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019B76EB0C353413CC3C3909E8FB99199859 Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/v0WTRVyIOMbnSSTHqyRygXScgPU.roa Signing time: Thu 01 Jan 2026 00:17:54 +0000 ROA not before: Thu 01 Jan 2026 00:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60675 IP address blocks: 185.27.136.0/22 maxlen: 24 185.114.84.0/22 maxlen: 24 185.142.192.0/22 maxlen: 24 185.252.8.0/22 maxlen: 24 185.252.8.0/24 maxlen: 24 185.252.9.0/24 maxlen: 24 185.252.10.0/24 maxlen: 24 185.252.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:0c:35:34:13:cc:3c:39:09:e8:fb:99:19:98:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Jan 1 00:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf4593455c8838c6e74924c7ab247281749c80f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:14:15:c4:3a:f8:cc:00:bf:bd:b0:b3:7b:85: c5:39:8b:e9:e2:61:00:c2:0a:91:c9:80:0f:12:56: 1b:8a:5c:e4:24:67:e2:c4:18:3f:3d:66:84:df:3a: e6:11:03:dd:1d:8e:92:7f:d5:b3:5e:16:0e:07:0c: 5f:3a:41:1a:47:7d:73:a6:33:8b:d6:f0:bc:15:d3: 09:40:e1:90:c3:40:ca:51:15:8c:d4:fe:4d:f0:de: f1:b0:e4:e1:a0:ba:5a:01:ab:10:68:1b:d8:c6:34: da:98:41:54:24:02:e2:38:ad:2a:0f:a2:3b:e1:69: df:62:60:73:ea:5b:45:bd:67:d4:2d:08:5a:ad:8a: cf:cf:86:2e:4d:4d:5d:c4:f7:8b:cf:a8:ce:f6:6d: 68:d9:95:c1:ce:71:31:cb:db:63:39:cf:1b:21:90: 88:89:bc:1f:9e:48:cd:33:aa:ae:8b:87:67:a8:5f: 6a:16:c6:61:d9:ce:63:a6:ca:8a:32:72:dc:3a:40: f0:41:af:50:4c:61:ca:df:ac:ef:1d:f1:a5:e9:52: 7e:53:6c:e1:51:40:60:34:4e:4d:84:3f:da:0d:b3: a8:c1:a1:5c:fb:94:27:c7:09:41:0c:45:1c:59:28: 32:5f:5e:19:8e:b6:76:83:dd:4f:9c:35:01:fe:53: 15:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:45:93:45:5C:88:38:C6:E7:49:24:C7:AB:24:72:81:74:9C:80:F5 X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/v0WTRVyIOMbnSSTHqyRygXScgPU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.27.136.0/22 185.114.84.0/22 185.142.192.0/22 185.252.8.0/22 Signature Algorithm: sha256WithRSAEncryption 97:19:4c:5f:a4:b0:3d:62:a8:a3:ad:ef:f6:5a:e2:a1:f5:c4: 48:5b:0c:34:45:51:94:5d:bc:65:87:e8:9c:19:75:f0:0a:53: 05:e4:6e:ef:0f:4b:cb:ee:68:a0:a7:90:ae:51:9b:5c:7c:2c: 09:71:ca:5d:1f:2a:58:44:a2:f4:b3:45:06:78:f7:03:74:01: 78:dd:e3:2e:56:2c:0a:7e:0b:ef:30:08:6a:86:b4:1b:f7:df: d4:46:bb:f8:6a:0f:e4:7c:0d:78:b4:4f:3c:cd:6c:49:69:3e: 1d:97:ed:3e:38:7a:9b:14:2d:04:11:f7:7a:80:34:fa:db:be: 33:16:87:6f:64:12:48:93:dc:22:a0:74:65:1b:3e:60:9d:22: 92:21:41:8c:3d:37:ad:29:78:f5:c0:97:b5:55:71:8a:1e:97: 25:60:a2:be:b3:b8:75:3a:65:86:55:40:36:08:16:d4:06:34: e6:af:56:cf:d7:47:06:10:90:c8:13:93:76:2e:f6:9c:61:38: c0:30:fd:a0:38:f2:5f:5e:d2:e7:f1:c2:32:2d:d9:a1:bd:3a: 86:79:70:3e:6a:8b:c4:b4:e6:7f:2f:34:a4:5b:8c:8f:09:e8: 76:5a:2b:36:ac:77:8a:8d:f6:82:38:35:e6:6f:99:7b:02:55: 3b:80:16:72 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt26ww1NBPMPDkJ6PuZGZhZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwMTAxMDAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjQ1OTM0NTVjODgzOGM2ZTc0OTI0YzdhYjI0NzI4MTc0OWM4MGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhQVxDr4zAC/vbCze4XFOYvp4mEA wgqRyYAPElYbilzkJGfixBg/PWaE3zrmEQPdHY6Sf9WzXhYOBwxfOkEaR31zpjOL 1vC8FdMJQOGQw0DKURWM1P5N8N7xsOThoLpaAasQaBvYxjTamEFUJALiOK0qD6I7 4WnfYmBz6ltFvWfULQharYrPz4YuTU1dxPeLz6jO9m1o2ZXBznExy9tjOc8bIZCI ibwfnkjNM6qui4dnqF9qFsZh2c5jpsqKMnLcOkDwQa9QTGHK36zvHfGl6VJ+U2zh UUBgNE5NhD/aDbOowaFc+5QnxwlBDEUcWSgyX14ZjrZ2g91PnDUB/lMVrwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFL9Fk0VciDjG50kkx6skcoF0nID1MB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvdjBXVFJWeUlPTWJuU1NUSHF5UnlnWFNjZ1BVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCuRuIAwQC uXJUAwQCuY7AAwQCufwIMA0GCSqGSIb3DQEBCwUAA4IBAQCXGUxfpLA9Yqijre/2 WuKh9cRIWww0RVGUXbxlh+icGXXwClMF5G7vD0vL7migp5CuUZtcfCwJccpdHypY RKL0s0UGePcDdAF43eMuViwKfgvvMAhqhrQb99/URrv4ag/kfA14tE88zWxJaT4d l+0+OHqbFC0EEfd6gDT6274zFodvZBJIk9wioHRlGz5gnSKSIUGMPTetKXj1wJe1 VXGKHpclYKK+s7h1OmWGVUA2CBbUBjTmr1bP10cGEJDIE5N2LvacYTjAMP2gOPJf XtLn8cIyLdmhvTqGeXA+aovEtOZ/LzSkW4yPCeh2Wis2rHeKjfaCODXmb5l7AlU7 gBZy -----END CERTIFICATE-----Generated at Sun Jan 25 17:46:32 2026 by rpki-client