This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/8S8fbH48Zt1BGehjiX35Ir6CDR8.roa File: 8S8fbH48Zt1BGehjiX35Ir6CDR8.roa (raw, json) Hash identifier: QGuQT9cDWohDuhPq0Uc6XDo1ZAygMT/59WjQcx/USTE= Subject key identifier: F1:2F:1F:6C:7E:3C:66:DD:41:19:E8:63:89:7D:F9:22:BE:82:0D:1F Certificate issuer: /CN=518aa4993740df8ad38d92cc0c107234e6dfa05c Certificate serial: 019B7B354C5DCF7A509DEC010A6C251E8133 Authority key identifier: 51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/8S8fbH48Zt1BGehjiX35Ir6CDR8.roa Signing time: Thu 01 Jan 2026 20:17:29 +0000 ROA not before: Thu 01 Jan 2026 20:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50017 IP address blocks: 185.161.128.0/22 maxlen: 22 2a07:c480::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 23:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:4c:5d:cf:7a:50:9d:ec:01:0a:6c:25:1e:81:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=518aa4993740df8ad38d92cc0c107234e6dfa05c Validity Not Before: Jan 1 20:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f12f1f6c7e3c66dd4119e863897df922be820d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:97:77:5e:30:61:76:39:fb:92:f6:64:01:7d: 37:b1:4c:c9:79:8d:87:0a:5d:c0:7f:89:a0:a0:0c: d1:6f:c6:b6:20:09:f9:10:fa:a0:4d:28:8e:f3:90: 61:7e:7b:66:41:c2:1d:d5:35:73:22:e6:d5:72:7c: 1b:b6:7c:2b:d9:55:2c:ad:bd:e2:b7:d0:1f:be:ee: 42:24:87:8c:17:32:d9:36:17:b8:d9:7f:77:ce:2b: 0e:2a:7b:07:19:cf:1d:63:e9:8e:72:6a:58:97:cb: 32:67:d6:e6:7b:3e:87:a9:98:7b:fa:fd:75:62:be: 32:bf:ff:fc:98:58:4a:e0:8a:2c:c6:c7:65:87:e0: eb:18:58:d7:de:25:c4:8b:e4:aa:43:02:a4:64:a7: 0f:73:18:5f:15:5e:2d:b8:38:22:88:46:9a:8f:55: 22:f5:34:b0:a5:a1:32:93:59:b0:a0:6f:ba:d0:48: c6:22:ab:ba:b2:10:db:ba:f3:93:bb:59:a9:82:2c: 0a:6a:58:66:d6:b8:0d:24:b6:ff:10:ba:a9:be:3f: 11:0a:7d:a6:7c:30:01:68:9d:6c:2d:bc:05:57:45: 12:f8:70:22:05:e9:54:c1:0a:69:3d:44:4c:86:7d: 2b:c1:ab:5c:88:e7:9d:a4:3f:8e:0e:28:ca:32:2b: bc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:2F:1F:6C:7E:3C:66:DD:41:19:E8:63:89:7D:F9:22:BE:82:0D:1F X509v3 Authority Key Identifier: keyid:51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/8S8fbH48Zt1BGehjiX35Ir6CDR8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.128.0/22 IPv6: 2a07:c480::/29 Signature Algorithm: sha256WithRSAEncryption 1c:ba:d9:d4:d5:b6:2b:2e:75:43:a3:cd:b6:04:ce:26:db:c4: 52:b7:10:3f:ac:54:6a:e5:c7:e3:19:75:0e:bb:4a:c7:95:28: 33:16:1e:01:5f:d1:da:ff:c3:d5:ca:7f:1a:23:78:7d:c3:3d: f2:97:e2:a0:3e:82:16:41:8e:51:fa:2f:a6:5d:e5:dd:18:f3: 8c:03:9f:dc:1d:a7:14:c4:0f:7d:1c:f4:fb:17:d8:10:af:fd: e2:50:5e:aa:6f:bf:81:df:a9:8a:3e:2c:61:cd:8c:83:2c:34: 75:6f:f0:46:2e:2c:3c:0c:62:06:9e:d1:c0:16:27:40:68:81: 3d:d9:55:71:c8:cb:5a:7d:88:1c:80:2b:b4:37:a1:71:87:14: aa:37:ca:54:08:f3:2e:5f:ba:95:c3:31:99:a6:0c:41:36:c1: 23:b8:da:b3:cb:44:53:ba:97:e8:df:bf:54:75:9d:45:29:59: 24:8d:f7:0e:80:96:74:82:77:b4:c8:e9:ee:83:0d:a7:5a:2d: b9:e3:e8:fe:48:fd:41:35:5b:82:b3:bf:c7:81:fe:53:82:26: f2:97:1f:ec:09:a2:88:1e:02:b6:95:10:b3:fe:17:7a:ef:fa: 2f:6c:33:ef:24:36:e7:ad:60:a9:6a:8b:c7:31:9a:bb:fd:ae: 93:6e:ec:5f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NUxdz3pQnewBCmwlHoEzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxOGFhNDk5Mzc0MGRmOGFkMzhkOTJjYzBjMTA3MjM0ZTZk ZmEwNWMwHhcNMjYwMTAxMjAxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTJmMWY2YzdlM2M2NmRkNDExOWU4NjM4OTdkZjkyMmJlODIwZDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZd3XjBhdjn7kvZkAX03sUzJeY2H Cl3Af4mgoAzRb8a2IAn5EPqgTSiO85BhfntmQcId1TVzIubVcnwbtnwr2VUsrb3i t9Afvu5CJIeMFzLZNhe42X93zisOKnsHGc8dY+mOcmpYl8syZ9bmez6HqZh7+v11 Yr4yv//8mFhK4Iosxsdlh+DrGFjX3iXEi+SqQwKkZKcPcxhfFV4tuDgiiEaaj1Ui 9TSwpaEyk1mwoG+60EjGIqu6shDbuvOTu1mpgiwKalhm1rgNJLb/ELqpvj8RCn2m fDABaJ1sLbwFV0US+HAiBelUwQppPURMhn0rwatciOedpD+ODijKMiu8owIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPEvH2x+PGbdQRnoY4l9+SK+gg0fMB8GA1UdIwQY MBaAFFGKpJk3QN+K042SzAwQcjTm36BcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVlxa21UZEEzNHJUalpMTURCQnlOT2Jmb0Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xZjc1Y2ItYzdiOS00NTI5LWJkYWYt NDZjNzk3NGJkMThhLzEvOFM4ZmJINDhadDFCR2VoamlYMzVJcjZDRFI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8xZjc1Y2ItYzdiOS00NTI5LWJkYWYtNDZjNzk3NGJkMThh LzEvVVlxa21UZEEzNHJUalpMTURCQnlOT2Jmb0Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaGAMA0E AgACMAcDBQMqB8SAMA0GCSqGSIb3DQEBCwUAA4IBAQAcutnU1bYrLnVDo822BM4m 28RStxA/rFRq5cfjGXUOu0rHlSgzFh4BX9Ha/8PVyn8aI3h9wz3yl+KgPoIWQY5R +i+mXeXdGPOMA5/cHacUxA99HPT7F9gQr/3iUF6qb7+B36mKPixhzYyDLDR1b/BG Liw8DGIGntHAFidAaIE92VVxyMtafYgcgCu0N6FxhxSqN8pUCPMuX7qVwzGZpgxB NsEjuNqzy0RTupfo379UdZ1FKVkkjfcOgJZ0gne0yOnugw2nWi254+j+SP1BNVuC s7/Hgf5Tgibylx/sCaKIHgK2lRCz/hd67/ovbDPvJDbnrWCpaovHMZq7/a6Tbuxf -----END CERTIFICATE-----Generated at Tue Jan 27 07:09:46 2026 by rpki-client