This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/DC8uPJEFDADbc7eU0WC635sNG_4.roa File: DC8uPJEFDADbc7eU0WC635sNG_4.roa (raw, json) Hash identifier: l9TwArS14WF8qyEIjsmb3OXqr5AUTtyP0F2ywy5w4vY= Subject key identifier: 0C:2F:2E:3C:91:05:0C:00:DB:73:B7:94:D1:60:BA:DF:9B:0D:1B:FE Certificate issuer: /CN=8d1b5809c6c54c9f1c4e8cb3bec41da02c03d764 Certificate serial: 019C0E583D3F66DF20FCED92B2BDCE8D2AFD Authority key identifier: 8D:1B:58:09:C6:C5:4C:9F:1C:4E:8C:B3:BE:C4:1D:A0:2C:03:D7:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/DC8uPJEFDADbc7eU0WC635sNG_4.roa Signing time: Fri 30 Jan 2026 09:59:49 +0000 ROA not before: Fri 30 Jan 2026 09:59:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43888 IP address blocks: 185.122.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0e:58:3d:3f:66:df:20:fc:ed:92:b2:bd:ce:8d:2a:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1b5809c6c54c9f1c4e8cb3bec41da02c03d764 Validity Not Before: Jan 30 09:59:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c2f2e3c91050c00db73b794d160badf9b0d1bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a4:49:6e:89:f4:91:6d:b7:8a:d5:5c:bb:28: ba:2b:fd:8f:be:0c:b2:2c:3a:f1:b4:60:ea:43:da: 54:bd:ea:59:18:ac:3a:f2:21:a9:77:85:40:5f:8e: 32:d3:eb:1e:ea:f7:37:92:8b:7a:ff:93:99:2d:eb: eb:4d:9c:48:cd:60:b1:99:62:63:65:f1:0a:d2:28: 1f:fb:a0:85:87:5e:34:d3:e5:ce:3d:1c:c4:ef:59: 04:26:7e:22:1c:bd:ac:a4:b4:f2:50:98:e8:5e:b5: f3:00:d2:2a:6e:0a:08:26:0e:80:06:82:53:a3:96: cf:2c:78:67:c1:8e:8a:20:66:32:f5:a6:99:be:aa: 75:92:c4:7a:72:d9:7c:03:05:c1:8b:d8:1a:1b:26: e9:14:0a:d6:ba:f3:5b:30:b3:a1:09:11:ad:bc:48: 25:95:6e:39:fb:a7:72:3b:02:7b:c6:c7:c2:45:3a: 86:32:20:dc:bf:b3:c4:80:21:f2:23:cb:db:4e:7f: 56:35:f6:4d:41:40:58:53:7c:e6:88:f0:db:8b:e0: 67:da:04:48:5c:f3:a1:9f:e7:05:ed:ed:dd:dd:9d: ce:62:fa:3c:e0:ac:fc:fc:79:34:8c:6c:a8:7f:d7: dd:f3:3f:50:39:db:0b:0d:ff:69:a7:5c:7f:d7:f7: 88:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2F:2E:3C:91:05:0C:00:DB:73:B7:94:D1:60:BA:DF:9B:0D:1B:FE X509v3 Authority Key Identifier: keyid:8D:1B:58:09:C6:C5:4C:9F:1C:4E:8C:B3:BE:C4:1D:A0:2C:03:D7:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/DC8uPJEFDADbc7eU0WC635sNG_4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.122.146.0/24 Signature Algorithm: sha256WithRSAEncryption 09:39:64:8d:58:9e:c1:34:4d:fd:05:42:1c:9d:44:aa:d3:64: 85:92:28:d9:a6:b2:f1:61:d8:d3:91:4b:e4:57:56:a1:1b:d3: 99:f4:f9:0b:b4:b1:af:ea:19:1f:e1:11:fe:49:d1:b7:15:38: c6:1d:04:7c:88:d2:a9:63:7b:bf:53:db:2b:6c:93:6b:b3:0e: be:5a:43:47:7c:be:76:8d:9a:5c:62:b9:f1:9f:74:69:0e:79: da:8f:ee:1c:18:51:54:dc:ec:d9:87:fc:cd:77:8f:76:2e:e1: 3f:32:6c:ae:9a:d1:af:dd:6a:9a:65:3d:e9:d0:25:49:79:a2: 22:12:ba:e7:06:ea:11:37:72:46:82:54:9e:7e:c0:80:02:49: e3:ec:12:e2:17:21:1d:ce:94:b7:39:bd:00:f8:75:a3:3d:64: ac:4a:f9:19:9a:c6:8e:c4:27:52:ff:7a:7f:86:13:51:3c:bb: 19:c0:fc:ca:1a:45:51:3c:62:c1:c0:3e:90:3f:00:71:73:32: 02:54:a1:b5:3e:73:4d:37:e7:54:db:af:45:46:f6:02:42:fa: 02:a2:62:c5:50:a6:28:19:ac:ce:94:98:b9:aa:46:2d:ac:ee: 47:b6:4d:cd:78:8f:b7:d2:28:79:a2:20:3d:db:bc:97:dd:9b: aa:98:87:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwOWD0/Zt8g/O2Ssr3OjSr9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWI1ODA5YzZjNTRjOWYxYzRlOGNiM2JlYzQxZGEwMmMw M2Q3NjQwHhcNMjYwMTMwMDk1OTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzJmMmUzYzkxMDUwYzAwZGI3M2I3OTRkMTYwYmFkZjliMGQxYmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaRJbon0kW23itVcuyi6K/2Pvgyy LDrxtGDqQ9pUvepZGKw68iGpd4VAX44y0+se6vc3kot6/5OZLevrTZxIzWCxmWJj ZfEK0igf+6CFh1400+XOPRzE71kEJn4iHL2spLTyUJjoXrXzANIqbgoIJg6ABoJT o5bPLHhnwY6KIGYy9aaZvqp1ksR6ctl8AwXBi9gaGybpFArWuvNbMLOhCRGtvEgl lW45+6dyOwJ7xsfCRTqGMiDcv7PEgCHyI8vbTn9WNfZNQUBYU3zmiPDbi+Bn2gRI XPOhn+cF7e3d3Z3OYvo84Kz8/Hk0jGyof9fd8z9QOdsLDf9pp1x/1/eIbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAwvLjyRBQwA23O3lNFgut+bDRv+MB8GA1UdIwQY MBaAFI0bWAnGxUyfHE6Ms77EHaAsA9dkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJ0WUNjYkZUSjhjVG95enZzUWRvQ3dEMTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9mYzY1ZDgtZDE4My00NzM3LWFmODEt NzM0Y2IyY2JiM2RkLzEvREM4dVBKRUZEQURiYzdlVTBXQzYzNXNOR180LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9mYzY1ZDgtZDE4My00NzM3LWFmODEtNzM0Y2IyY2JiM2Rk LzEvalJ0WUNjYkZUSjhjVG95enZzUWRvQ3dEMTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXqSMA0G CSqGSIb3DQEBCwUAA4IBAQAJOWSNWJ7BNE39BUIcnUSq02SFkijZprLxYdjTkUvk V1ahG9OZ9PkLtLGv6hkf4RH+SdG3FTjGHQR8iNKpY3u/U9srbJNrsw6+WkNHfL52 jZpcYrnxn3RpDnnaj+4cGFFU3OzZh/zNd492LuE/MmyumtGv3WqaZT3p0CVJeaIi ErrnBuoRN3JGglSefsCAAknj7BLiFyEdzpS3Ob0A+HWjPWSsSvkZmsaOxCdS/3p/ hhNRPLsZwPzKGkVRPGLBwD6QPwBxczICVKG1PnNNN+dU269FRvYCQvoComLFUKYo GazOlJi5qkYtrO5Htk3NeI+30ih5oiA927yX3ZuqmIeE -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:46 2026 by rpki-client