This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/r8t0mnOfuf-XZlUByZSmwxL5C8U.roa File: r8t0mnOfuf-XZlUByZSmwxL5C8U.roa (raw, json) Hash identifier: NIHY9VYRcz1i7SUH3PrDl1wZP8mWVi3+Xuf3Zc+uw+M= Subject key identifier: AF:CB:74:9A:73:9F:B9:FF:97:66:55:01:C9:94:A6:C3:12:F9:0B:C5 Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1 Certificate serial: 019B78A34348BFEB9E40FDC8EC20A4E72A98 Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/r8t0mnOfuf-XZlUByZSmwxL5C8U.roa Signing time: Thu 01 Jan 2026 08:18:43 +0000 ROA not before: Thu 01 Jan 2026 08:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50427 IP address blocks: 185.112.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:43:48:bf:eb:9e:40:fd:c8:ec:20:a4:e7:2a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1 Validity Not Before: Jan 1 08:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afcb749a739fb9ff97665501c994a6c312f90bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:04:10:14:66:62:10:59:7a:3b:2d:59:cc:7f: f6:a7:14:0e:5d:fe:b4:34:af:c5:c2:58:60:c7:c3: 36:88:49:f6:2b:4c:c0:fb:8e:6f:19:38:77:ff:22: 6b:00:67:2e:17:3d:44:55:62:b5:e5:3f:c3:25:47: 14:1c:f0:9d:04:cf:9a:9c:a4:ed:16:11:37:e7:6a: cd:6a:a3:2c:42:b8:a7:2e:11:6e:ed:86:b9:4e:5b: ba:58:63:ac:8f:f1:27:88:1b:72:a6:5c:b9:8c:2f: 71:da:cf:42:02:81:d3:95:4d:15:b2:7e:c1:70:18: 0c:fa:f4:34:12:f1:93:ce:f5:b3:b0:9c:57:f3:23: 48:8e:33:46:38:ce:17:f9:23:0e:a7:03:3c:e2:85: af:e2:7e:ef:06:76:cd:3f:f9:5b:32:55:bd:a1:79: c2:63:71:d7:c6:83:37:8d:c5:7d:15:ab:28:53:8e: cf:5f:5b:1a:d4:fa:6c:6d:19:b1:7c:2c:d5:59:56: 29:b0:cc:bc:f0:bc:3f:11:26:2c:16:b4:cf:24:4f: 71:d3:09:d2:87:f7:93:e0:18:1c:72:71:3c:12:db: 69:bd:0d:0d:b7:51:ac:69:ff:9c:69:b7:61:3f:3a: b1:3a:06:4b:5f:58:4d:b1:a5:ed:80:0e:38:a8:d6: 24:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:CB:74:9A:73:9F:B9:FF:97:66:55:01:C9:94:A6:C3:12:F9:0B:C5 X509v3 Authority Key Identifier: keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/r8t0mnOfuf-XZlUByZSmwxL5C8U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.112.224.0/22 Signature Algorithm: sha256WithRSAEncryption 06:dc:b6:c3:b1:b0:bc:42:a5:bb:70:78:9c:a3:36:1f:4e:6c: 63:75:65:21:6a:14:d4:57:93:bd:8d:05:ef:ff:fd:0d:cc:37: 15:cb:ec:3e:94:0b:44:54:53:2c:7d:2f:fc:e9:3d:f9:70:5c: 5e:46:e3:9a:9f:ae:57:e0:4c:35:6d:fe:32:1a:c8:47:78:f9: 65:13:be:56:78:13:fd:62:a0:17:9d:2b:f9:00:8d:6f:4e:9a: ed:98:10:5e:4c:cf:02:4c:3e:d2:55:0b:ee:0b:26:d7:57:00: f1:a6:01:de:61:cc:d9:3d:6a:b8:ee:68:1b:0c:6d:0b:b9:df: 4c:0b:6b:d4:ea:7e:8c:f3:d9:7a:0f:86:92:e7:20:30:41:66: 41:98:83:16:91:02:56:f1:9c:55:56:77:bf:2e:11:b0:5b:9d: f1:6a:be:e9:66:18:6d:f6:f7:3d:8c:07:7d:47:09:98:12:6b: ed:aa:6d:5d:6d:98:93:8c:36:cf:ef:14:ff:4e:9f:26:52:d7: e9:e1:94:2b:21:98:bd:2e:0d:9f:40:3e:bc:4e:aa:a0:89:38: 9e:39:6e:0b:80:ff:8e:c2:19:00:44:fe:59:1f:24:bc:f2:6a: 9d:0f:cb:aa:7e:0d:37:9a:48:37:39:6b:c0:30:b0:43:4c:03: ea:25:dc:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o0NIv+ueQP3I7CCk5yqYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMjFkZmYzNWVkZjBjZTZlNDI4ZDZhZmZjMjEyYzQ3MTc2 NzllZTEwHhcNMjYwMTAxMDgxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmNiNzQ5YTczOWZiOWZmOTc2NjU1MDFjOTk0YTZjMzEyZjkwYmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQQQFGZiEFl6Oy1ZzH/2pxQOXf60 NK/Fwlhgx8M2iEn2K0zA+45vGTh3/yJrAGcuFz1EVWK15T/DJUcUHPCdBM+anKTt FhE352rNaqMsQrinLhFu7Ya5Tlu6WGOsj/EniBtyply5jC9x2s9CAoHTlU0Vsn7B cBgM+vQ0EvGTzvWzsJxX8yNIjjNGOM4X+SMOpwM84oWv4n7vBnbNP/lbMlW9oXnC Y3HXxoM3jcV9FasoU47PX1sa1PpsbRmxfCzVWVYpsMy88Lw/ESYsFrTPJE9x0wnS h/eT4BgccnE8EttpvQ0Nt1Gsaf+cabdhPzqxOgZLX1hNsaXtgA44qNYklQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK/LdJpzn7n/l2ZVAcmUpsMS+QvFMB8GA1UdIwQY MBaAFEAh3/Ne3wzm5CjWr/whLEcXZ57hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wMTQwODgtNTY4NC00OWMyLWI2MzAt ZWI1M2E1MThjMjYzLzEvcjh0MG1uT2Z1Zi1YWmxVQnlaU213eEw1QzhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8wMTQwODgtNTY4NC00OWMyLWI2MzAtZWI1M2E1MThjMjYz LzEvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXDgMA0G CSqGSIb3DQEBCwUAA4IBAQAG3LbDsbC8QqW7cHicozYfTmxjdWUhahTUV5O9jQXv //0NzDcVy+w+lAtEVFMsfS/86T35cFxeRuOan65X4Ew1bf4yGshHePllE75WeBP9 YqAXnSv5AI1vTprtmBBeTM8CTD7SVQvuCybXVwDxpgHeYczZPWq47mgbDG0Lud9M C2vU6n6M89l6D4aS5yAwQWZBmIMWkQJW8ZxVVne/LhGwW53xar7pZhht9vc9jAd9 RwmYEmvtqm1dbZiTjDbP7xT/Tp8mUtfp4ZQrIZi9Lg2fQD68TqqgiTieOW4LgP+O whkARP5ZHyS88mqdD8uqfg03mkg3OWvAMLBDTAPqJdx8 -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:36 2026 by rpki-client