This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/CitPrvEbL3mSkhY-h3ajKHpia-8.roa File: CitPrvEbL3mSkhY-h3ajKHpia-8.roa (raw, json) Hash identifier: /+PG4/PPRJ0jxjBwjO3qbLw0M09UhMzUiGb+7CaKzGg= Subject key identifier: 0A:2B:4F:AE:F1:1B:2F:79:92:92:16:3E:87:76:A3:28:7A:62:6B:EF Certificate issuer: /CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9 Certificate serial: 019B7EA6AA6741410EA42F5329FA4A797DDC Authority key identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/CitPrvEbL3mSkhY-h3ajKHpia-8.roa Signing time: Fri 02 Jan 2026 12:20:10 +0000 ROA not before: Fri 02 Jan 2026 12:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59441 IP address blocks: 185.165.41.0/24 maxlen: 24 185.165.42.0/24 maxlen: 24 185.165.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:aa:67:41:41:0e:a4:2f:53:29:fa:4a:79:7d:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9 Validity Not Before: Jan 2 12:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a2b4faef11b2f799292163e8776a3287a626bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5d:fb:db:db:80:51:51:c6:42:b3:ee:9e:a7: 63:93:b3:4e:cd:f7:cd:f7:aa:c3:7d:fe:0a:59:ab: 0e:14:5f:3b:e8:7d:4d:5a:f7:fd:1c:de:51:04:c6: 4e:93:2a:96:ea:b7:f6:2b:e8:0b:af:3d:73:2d:b9: 13:dc:53:c8:ff:61:fb:16:f5:39:e0:62:78:40:e1: 76:31:b8:b7:33:6a:c4:2c:1e:15:60:a9:13:a2:18: 8d:b1:32:b7:79:fa:bf:c3:40:ae:65:19:0d:ea:20: 77:e2:f3:26:3b:9a:84:58:94:2a:e1:28:a2:ab:e9: f2:4f:5e:74:96:8e:42:9a:8e:43:76:76:a0:e7:31: 08:0f:91:94:9d:c6:87:c4:22:59:bb:8e:af:56:aa: 37:c2:ca:b8:e9:8c:06:5e:75:1c:8e:e4:c7:ee:79: 1b:fe:31:f4:2e:f3:82:cf:4d:71:c6:1b:e5:5f:7c: 66:39:84:ad:69:c8:e5:99:76:f2:33:77:81:d3:82: b3:a8:b2:58:b6:5d:ac:29:59:2e:f7:17:18:67:cc: 11:13:7c:83:50:2d:94:5a:69:5c:ee:58:69:ea:0d: 9a:18:0c:71:31:71:20:b6:41:b9:d9:cb:54:6d:5f: 21:5a:4c:cf:d2:6e:73:f9:44:4c:3f:ef:04:33:85: a3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2B:4F:AE:F1:1B:2F:79:92:92:16:3E:87:76:A3:28:7A:62:6B:EF X509v3 Authority Key Identifier: keyid:A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/CitPrvEbL3mSkhY-h3ajKHpia-8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.165.41.0-185.165.43.255 Signature Algorithm: sha256WithRSAEncryption 38:3c:83:26:f3:73:8f:4d:d7:c1:3b:83:fc:51:15:2e:b1:e0: dd:0a:bd:30:13:86:0d:b3:bf:a8:b3:6b:6f:17:87:0f:59:4e: 54:3e:45:a7:d2:c1:5a:6a:7b:4f:4f:00:1e:3c:42:9b:61:44: 1c:5b:8b:82:5b:cf:10:94:86:13:1c:8d:98:e9:31:82:de:bb: f2:09:77:05:23:ff:92:b1:1e:ad:d8:72:55:57:84:1e:83:34: 21:03:9b:71:0e:a7:9c:45:39:6d:ad:67:90:3a:32:3e:11:28: f1:91:1e:67:fe:53:44:e7:78:43:3a:f4:66:f7:05:58:bc:21: b6:b6:f5:1e:6b:28:3d:e7:e0:ce:1a:a2:3d:a2:55:df:09:48: b9:d0:a9:1d:38:a4:8c:ae:1f:e5:bc:e1:8b:26:8c:14:b7:6a: 57:91:32:57:50:2b:b7:e7:6c:77:04:b2:14:df:12:75:6b:29: e1:63:b1:25:9d:d8:80:8e:96:a0:05:3a:35:49:da:4b:3c:e5: f1:ca:2c:9d:62:d1:5f:4e:9b:c4:41:22:4d:24:b8:0d:8c:99: 19:f0:bd:22:e5:65:30:95:61:2c:f5:9e:e2:67:4e:61:4b:b4: b4:f6:e0:8c:6d:3a:50:9e:bc:cb:b4:a8:4c:20:2e:07:b5:de: e9:1e:0d:7a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+pqpnQUEOpC9TKfpKeX3cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MmZiOWIzNDE4YzQ1OGNkYmM2Y2ZkNjg0NTE0YmUyNGFk MGMzYzkwHhcNMjYwMTAyMTIyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTJiNGZhZWYxMWIyZjc5OTI5MjE2M2U4Nzc2YTMyODdhNjI2YmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F3729uAUVHGQrPunqdjk7NOzffN 96rDff4KWasOFF876H1NWvf9HN5RBMZOkyqW6rf2K+gLrz1zLbkT3FPI/2H7FvU5 4GJ4QOF2Mbi3M2rELB4VYKkTohiNsTK3efq/w0CuZRkN6iB34vMmO5qEWJQq4Sii q+nyT150lo5Cmo5Ddnag5zEID5GUncaHxCJZu46vVqo3wsq46YwGXnUcjuTH7nkb /jH0LvOCz01xxhvlX3xmOYStacjlmXbyM3eB04KzqLJYtl2sKVku9xcYZ8wRE3yD UC2UWmlc7lhp6g2aGAxxMXEgtkG52ctUbV8hWkzP0m5z+URMP+8EM4WjqwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFAorT67xGy95kpIWPod2oyh6YmvvMB8GA1UdIwQY MBaAFKgvubNBjEWM28bP1oRRS+JK0MPJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUMtNXMwR01SWXpieHNfV2hGRkw0a3JRdzhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84YjdmZTktNWRmMi00NzNlLTgwMTgt YjI2MzQxZDM4YzNmLzEvQ2l0UHJ2RWJMM21Ta2hZLWgzYWpLSHBpYS04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84YjdmZTktNWRmMi00NzNlLTgwMTgtYjI2MzQxZDM4YzNm LzEvcUMtNXMwR01SWXpieHNfV2hGRkw0a3JRdzhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5pSkD BAK5pSgwDQYJKoZIhvcNAQELBQADggEBADg8gybzc49N18E7g/xRFS6x4N0KvTAT hg2zv6iza28Xhw9ZTlQ+RafSwVpqe09PAB48QpthRBxbi4JbzxCUhhMcjZjpMYLe u/IJdwUj/5KxHq3YclVXhB6DNCEDm3EOp5xFOW2tZ5A6Mj4RKPGRHmf+U0TneEM6 9Gb3BVi8Iba29R5rKD3n4M4aoj2iVd8JSLnQqR04pIyuH+W84YsmjBS3aleRMldQ K7fnbHcEshTfEnVrKeFjsSWd2ICOlqAFOjVJ2ks85fHKLJ1i0V9Om8RBIk0kuA2M mRnwvSLlZTCVYSz1nuJnTmFLtLT24IxtOlCevMu0qEwgLge13ukeDXo= -----END CERTIFICATE-----Generated at Sun Jan 25 21:03:27 2026 by rpki-client