This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/8cnYIAFov8XyQ7mz1E9Sdbppeps.roa File: 8cnYIAFov8XyQ7mz1E9Sdbppeps.roa (raw, json) Hash identifier: djldwC6E58AUQMRWAx9zysCU5AJ6c7wvZ0F1503TLkk= Subject key identifier: F1:C9:D8:20:01:68:BF:C5:F2:43:B9:B3:D4:4F:52:75:BA:69:7A:9B Certificate issuer: /CN=53d0359f9f8b20815ce4d988e109bf82306e4c74 Certificate serial: 019B7B35BFDEE01AB7AEC500A5A38339E75A Authority key identifier: 53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/8cnYIAFov8XyQ7mz1E9Sdbppeps.roa Signing time: Thu 01 Jan 2026 20:17:58 +0000 ROA not before: Thu 01 Jan 2026 20:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 185.239.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:bf:de:e0:1a:b7:ae:c5:00:a5:a3:83:39:e7:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53d0359f9f8b20815ce4d988e109bf82306e4c74 Validity Not Before: Jan 1 20:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1c9d8200168bfc5f243b9b3d44f5275ba697a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:aa:fa:9f:4b:4f:6e:73:27:09:26:46:fa:b6: e3:1f:22:22:75:35:14:12:19:50:a6:18:f7:f1:2b: ea:1f:71:f1:fe:36:11:55:c1:6e:e0:19:4e:d6:51: 9c:16:32:90:c3:7e:9e:1a:29:07:d5:ea:65:3b:a0: dc:7e:26:c8:05:9e:5a:88:ca:8d:1f:7b:ad:27:41: 58:ee:1a:32:0b:5c:47:ea:79:bd:80:bf:47:8a:28: 0e:cc:50:8a:9d:16:3e:6b:19:f4:a1:db:18:57:2c: b8:4f:a0:c6:0c:d6:22:9c:1d:4b:3f:37:7a:79:5f: 0c:bb:12:86:b4:43:99:3f:29:8d:b8:3e:6e:30:8f: 1f:86:c3:53:23:29:68:f8:3e:b5:a8:31:b3:35:e3: d0:07:e5:7f:03:80:39:bc:9d:79:7c:7a:58:14:31: 38:84:96:ef:56:f5:2d:43:e9:94:cb:34:98:7e:9d: 07:32:0d:a2:65:f4:29:6e:2b:71:2f:a6:5f:41:ba: 2d:0b:40:34:75:91:56:bb:12:b9:a6:eb:1b:d6:61: db:b2:8d:bd:23:b4:ac:30:fe:6b:06:5a:80:b4:61: 7b:7f:22:f0:8e:70:ee:0c:5a:d5:b8:05:3b:19:f9: 0f:0b:71:db:b7:35:bc:98:13:c1:81:0a:08:10:e4: 72:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C9:D8:20:01:68:BF:C5:F2:43:B9:B3:D4:4F:52:75:BA:69:7A:9B X509v3 Authority Key Identifier: keyid:53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/8cnYIAFov8XyQ7mz1E9Sdbppeps.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.239.191.0/24 Signature Algorithm: sha256WithRSAEncryption 05:d4:2e:79:d3:f3:af:c5:36:19:3d:e5:aa:79:e0:f8:b4:d8: 95:28:98:b8:61:ee:1c:d2:cc:50:26:26:82:16:be:6e:af:23: 98:98:68:d3:b0:1e:46:d8:b5:a8:8e:bd:27:83:a2:ba:0f:ae: af:7a:35:e4:01:b6:43:5e:61:70:d3:c8:2c:c4:2f:64:14:b1: b7:e5:1a:ba:ee:d8:84:53:43:03:ba:df:84:c0:b0:5c:54:c2: 23:ea:2e:1c:0d:12:fb:47:f4:22:c5:16:47:be:06:e3:00:d8: a6:fb:e0:a7:a1:0d:c6:77:8f:b2:c8:ad:d2:64:7c:ea:61:88: 48:93:25:47:2a:7a:57:a0:63:33:45:6b:8c:a2:24:1d:95:7c: 65:0d:ae:ed:b1:be:89:0a:aa:5b:57:a3:11:53:8b:fb:65:c6: 33:db:0e:de:51:46:c6:2f:b8:b9:6d:ba:0c:68:6d:54:5d:49: 1b:5e:54:1c:a3:49:2c:25:40:e2:83:fd:9b:10:b3:0a:d0:46: c3:c5:31:3a:32:97:e0:5d:85:65:7d:bf:e6:ed:68:a9:95:64: f8:52:a3:5c:fd:d8:b1:20:b3:e9:25:a8:06:f5:ca:bb:a2:52: 56:e4:5c:53:d1:46:bf:fe:9e:0c:69:a6:cf:b6:95:7f:ef:ab: 7c:a2:1c:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nb/e4Bq3rsUApaODOedaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZDAzNTlmOWY4YjIwODE1Y2U0ZDk4OGUxMDliZjgyMzA2 ZTRjNzQwHhcNMjYwMTAxMjAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWM5ZDgyMDAxNjhiZmM1ZjI0M2I5YjNkNDRmNTI3NWJhNjk3YTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qr6n0tPbnMnCSZG+rbjHyIidTUU EhlQphj38SvqH3Hx/jYRVcFu4BlO1lGcFjKQw36eGikH1eplO6DcfibIBZ5aiMqN H3utJ0FY7hoyC1xH6nm9gL9HiigOzFCKnRY+axn0odsYVyy4T6DGDNYinB1LPzd6 eV8MuxKGtEOZPymNuD5uMI8fhsNTIylo+D61qDGzNePQB+V/A4A5vJ15fHpYFDE4 hJbvVvUtQ+mUyzSYfp0HMg2iZfQpbitxL6ZfQbotC0A0dZFWuxK5pusb1mHbso29 I7SsMP5rBlqAtGF7fyLwjnDuDFrVuAU7GfkPC3HbtzW8mBPBgQoIEORyjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPHJ2CABaL/F8kO5s9RPUnW6aXqbMB8GA1UdIwQY MBaAFFPQNZ+fiyCBXOTZiOEJv4Iwbkx0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTlBMW41LUxJSUZjNU5tSTRRbV9nakJ1VEhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80OTM1NzEtMjEwZS00ZDFhLTg4MTkt YTZjNDljZTkwNzU2LzEvOGNuWUlBRm92OFh5UTdtejFFOVNkYnBwZXBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC80OTM1NzEtMjEwZS00ZDFhLTg4MTktYTZjNDljZTkwNzU2 LzEvVTlBMW41LUxJSUZjNU5tSTRRbV9nakJ1VEhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue+/MA0G CSqGSIb3DQEBCwUAA4IBAQAF1C550/OvxTYZPeWqeeD4tNiVKJi4Ye4c0sxQJiaC Fr5uryOYmGjTsB5G2LWojr0ng6K6D66vejXkAbZDXmFw08gsxC9kFLG35Rq67tiE U0MDut+EwLBcVMIj6i4cDRL7R/QixRZHvgbjANim++CnoQ3Gd4+yyK3SZHzqYYhI kyVHKnpXoGMzRWuMoiQdlXxlDa7tsb6JCqpbV6MRU4v7ZcYz2w7eUUbGL7i5bboM aG1UXUkbXlQco0ksJUDig/2bELMK0EbDxTE6MpfgXYVlfb/m7WiplWT4UqNc/dix ILPpJagG9cq7olJW5FxT0Ua//p4MaabPtpV/76t8ohzg -----END CERTIFICATE-----Generated at Sun Jan 25 15:02:56 2026 by rpki-client