This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/RjK8oLQkpJRzAeEdXg6vAbqYOYY.roa File: RjK8oLQkpJRzAeEdXg6vAbqYOYY.roa (raw, json) Hash identifier: Mnx3rs/opPeBY8JJ1GG9XmHg+1e4VxaebybsYn1/rbE= Subject key identifier: 46:32:BC:A0:B4:24:A4:94:73:01:E1:1D:5E:0E:AF:01:BA:98:39:86 Certificate issuer: /CN=d234798e0712f155292d3211f7c447223ccd49ac Certificate serial: 019B7F14D2AFA4364BD2CE60D6025488EA09 Authority key identifier: D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/RjK8oLQkpJRzAeEdXg6vAbqYOYY.roa Signing time: Fri 02 Jan 2026 14:20:29 +0000 ROA not before: Fri 02 Jan 2026 14:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206430 IP address blocks: 185.186.188.0/24 maxlen: 24 185.186.189.0/24 maxlen: 24 185.186.190.0/24 maxlen: 24 185.186.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:d2:af:a4:36:4b:d2:ce:60:d6:02:54:88:ea:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d234798e0712f155292d3211f7c447223ccd49ac Validity Not Before: Jan 2 14:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4632bca0b424a4947301e11d5e0eaf01ba983986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:cd:2c:ff:57:78:d3:0d:67:41:e2:db:eb:48: d2:b3:92:db:6a:64:c3:45:34:d3:c6:2f:7d:1e:76: b4:13:c8:e9:0d:53:5c:a2:b9:91:4c:59:35:c5:3c: fc:a0:81:1c:d6:b8:99:92:c2:f5:af:9e:f3:2f:e1: 24:0d:ca:c4:a7:5c:50:4c:d6:20:99:5b:81:0d:57: 7e:d3:ac:33:6d:94:e0:3c:74:84:b9:ac:9d:d8:8a: 4d:23:95:13:ed:e8:ac:bf:ce:82:1e:ee:d2:03:85: 95:47:86:17:24:fc:2a:02:5d:67:06:5b:f5:2b:15: b9:dd:87:fb:4d:b9:37:76:1f:e0:f9:85:0f:1e:08: a1:f9:25:00:0c:21:64:46:98:98:07:1c:9f:7b:ad: b3:fa:b4:a4:86:f4:1f:fd:3a:ef:fa:fd:84:5d:a9: bb:fb:5b:8c:5a:08:23:09:68:ba:2f:e6:0c:53:76: 97:a3:82:1d:c2:84:bb:f6:94:3c:b9:c4:29:4c:4a: e2:2f:43:89:bd:67:c8:6f:45:a3:9f:f4:af:e5:2c: e3:04:ea:ba:91:16:f1:6d:41:26:e3:86:43:6b:f6: fb:1d:32:b0:1a:1c:69:99:67:5e:9a:ec:55:73:b1: 5d:85:63:95:29:b7:e9:bd:63:35:37:4b:33:c0:fc: 52:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:32:BC:A0:B4:24:A4:94:73:01:E1:1D:5E:0E:AF:01:BA:98:39:86 X509v3 Authority Key Identifier: keyid:D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/RjK8oLQkpJRzAeEdXg6vAbqYOYY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.186.188.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:5a:94:73:66:15:49:11:1a:43:67:8f:00:8e:62:cf:4c:41: b0:57:8b:bc:29:95:85:d4:d4:a2:f3:be:9a:f8:37:2c:55:56: 2b:b9:e5:d7:dc:1d:bc:3f:71:c4:c3:58:44:80:29:29:b5:d7: ed:68:e1:1b:75:b6:c0:71:7e:81:17:41:94:0c:fe:b3:29:db: 6c:df:ff:ce:46:28:ce:8a:61:44:98:3d:f5:f5:d9:23:89:93: e0:b1:46:5b:94:cf:fd:db:dc:5c:4d:0a:51:52:7e:09:86:a1: 81:0a:db:dd:a8:25:12:aa:46:8f:4c:56:cb:44:7d:5f:2e:57: 22:5d:53:7c:20:00:d8:79:b6:27:99:29:f3:0e:22:a5:af:ea: c7:67:5c:1c:1e:ee:04:38:e5:a1:4e:9c:60:8a:0d:bd:6e:39: 66:be:b8:45:0c:5c:87:db:28:c3:8f:0c:4a:9d:7e:1f:3b:cc: 85:ba:04:b8:a1:0e:9e:a9:d8:36:c7:bb:bc:b7:41:41:de:35: 16:91:e7:41:9b:b6:6a:6a:b9:01:8d:a7:24:a1:21:b2:11:af: 4f:da:cf:e2:7e:f9:ff:67:e1:7d:f3:e4:e1:c5:0f:ff:a6:9a: 43:f9:13:3e:da:9c:1a:2f:2c:4f:0d:81:bc:ce:d1:bb:02:9d: d5:8b:fb:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FNKvpDZL0s5g1gJUiOoJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMzQ3OThlMDcxMmYxNTUyOTJkMzIxMWY3YzQ0NzIyM2Nj ZDQ5YWMwHhcNMjYwMTAyMTQyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjMyYmNhMGI0MjRhNDk0NzMwMWUxMWQ1ZTBlYWYwMWJhOTgzOTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7c0s/1d40w1nQeLb60jSs5LbamTD RTTTxi99Hna0E8jpDVNcormRTFk1xTz8oIEc1riZksL1r57zL+EkDcrEp1xQTNYg mVuBDVd+06wzbZTgPHSEuayd2IpNI5UT7eisv86CHu7SA4WVR4YXJPwqAl1nBlv1 KxW53Yf7Tbk3dh/g+YUPHgih+SUADCFkRpiYBxyfe62z+rSkhvQf/Trv+v2EXam7 +1uMWggjCWi6L+YMU3aXo4IdwoS79pQ8ucQpTEriL0OJvWfIb0Wjn/Sv5SzjBOq6 kRbxbUEm44ZDa/b7HTKwGhxpmWdemuxVc7FdhWOVKbfpvWM1N0szwPxS0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEYyvKC0JKSUcwHhHV4OrwG6mDmGMB8GA1UdIwQY MBaAFNI0eY4HEvFVKS0yEffERyI8zUmsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGpSNWpnY1M4VlVwTFRJUjk4UkhJanpOU2F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wYzlkZGMtMzE5MS00NGIzLTg4YmEt ODJmN2I5OWM1NDY3LzEvUmpLOG9MUWtwSlJ6QWVFZFhnNnZBYnFZT1lZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8wYzlkZGMtMzE5MS00NGIzLTg4YmEtODJmN2I5OWM1NDY3 LzEvMGpSNWpnY1M4VlVwTFRJUjk4UkhJanpOU2F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubq8MA0G CSqGSIb3DQEBCwUAA4IBAQBaWpRzZhVJERpDZ48AjmLPTEGwV4u8KZWF1NSi876a +DcsVVYrueXX3B28P3HEw1hEgCkptdftaOEbdbbAcX6BF0GUDP6zKdts3//ORijO imFEmD319dkjiZPgsUZblM/929xcTQpRUn4JhqGBCtvdqCUSqkaPTFbLRH1fLlci XVN8IADYebYnmSnzDiKlr+rHZ1wcHu4EOOWhTpxgig29bjlmvrhFDFyH2yjDjwxK nX4fO8yFugS4oQ6eqdg2x7u8t0FB3jUWkedBm7ZqarkBjackoSGyEa9P2s/ifvn/ Z+F98+ThxQ//pppD+RM+2pwaLyxPDYG8ztG7Ap3Vi/sm -----END CERTIFICATE-----Generated at Mon Jan 26 01:17:23 2026 by rpki-client