This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/jI8kE_edmCe6nU3HjTS6dGcZn4c.roa File: jI8kE_edmCe6nU3HjTS6dGcZn4c.roa (raw, json) Hash identifier: bpSk5eGaUyyPipTCLYLXXztA6txMxswrw9EiMZYwCO0= Subject key identifier: 8C:8F:24:13:F7:9D:98:27:BA:9D:4D:C7:8D:34:BA:74:67:19:9F:87 Certificate issuer: /CN=2183b256a215b4d6fe2617d1262b638bfa7d6d40 Certificate serial: 019B76EB324C3DCE2353D2A85D51A98D73A9 Authority key identifier: 21:83:B2:56:A2:15:B4:D6:FE:26:17:D1:26:2B:63:8B:FA:7D:6D:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYOyVqIVtNb-JhfRJitji_p9bUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/jI8kE_edmCe6nU3HjTS6dGcZn4c.roa Signing time: Thu 01 Jan 2026 00:18:03 +0000 ROA not before: Thu 01 Jan 2026 00:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210952 IP address blocks: 185.170.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.mft rsync://rpki.ripe.net/repository/DEFAULT/IYOyVqIVtNb-JhfRJitji_p9bUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:32:4c:3d:ce:23:53:d2:a8:5d:51:a9:8d:73:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2183b256a215b4d6fe2617d1262b638bfa7d6d40 Validity Not Before: Jan 1 00:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c8f2413f79d9827ba9d4dc78d34ba7467199f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:13:2e:2a:72:f4:ab:bb:ef:84:8d:8e:2a:f4: 17:3c:2d:ee:ac:a2:f8:01:a5:dc:07:81:07:e2:1e: 51:ad:3a:d8:2c:c1:5d:2e:58:a2:ec:20:e7:ad:15: 80:55:1e:b3:b1:2a:db:98:54:ef:c8:06:46:29:4a: 53:7a:5b:61:35:d2:bd:da:18:09:fe:58:0d:c2:40: 2e:08:5b:b6:fe:df:1d:bb:f1:76:61:fc:d3:a6:0c: 9d:7f:b0:64:87:6d:b2:5d:11:95:8a:36:2f:27:09: 94:9c:22:bf:13:e5:74:de:84:7c:41:96:10:ca:27: ff:57:62:14:fe:b4:47:fc:51:50:22:e9:b1:a3:93: 2e:9b:60:fb:4c:9b:1c:07:5f:dc:7f:30:49:bf:8b: fe:6f:f0:c9:cb:fc:d9:13:ed:f0:33:4f:c6:a6:fc: 3a:9d:10:97:7f:13:9f:f2:7a:4d:d2:1f:03:0d:2a: e6:15:98:67:2f:f6:96:d9:a5:d3:5e:30:5d:1c:d8: 50:f3:e9:7e:91:06:86:57:f0:f6:ad:9d:8a:8f:04: e3:7a:fb:02:5f:e5:6b:95:59:cf:ed:bb:7e:e1:16: 15:5a:74:c3:fc:f1:ec:0e:78:87:8a:f7:de:7e:3a: 95:1c:64:9e:f0:4b:3a:04:94:b2:d0:09:1a:3c:0e: f4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8F:24:13:F7:9D:98:27:BA:9D:4D:C7:8D:34:BA:74:67:19:9F:87 X509v3 Authority Key Identifier: keyid:21:83:B2:56:A2:15:B4:D6:FE:26:17:D1:26:2B:63:8B:FA:7D:6D:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYOyVqIVtNb-JhfRJitji_p9bUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/jI8kE_edmCe6nU3HjTS6dGcZn4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.170.126.0/24 Signature Algorithm: sha256WithRSAEncryption 20:ae:9b:a6:11:9f:fb:56:b9:42:b6:3e:c4:19:c7:9e:ec:00: 40:b3:6e:3e:cf:f4:8c:87:21:d9:ac:d3:6a:be:b4:36:5e:68: 88:94:04:f6:72:4f:78:c0:14:70:55:74:9e:87:37:fb:57:c8: fc:92:c2:d7:7b:da:63:99:7b:2d:2e:0d:b2:b6:9e:4f:6a:de: b2:b4:f0:b8:b9:4d:f9:a0:41:53:90:1d:aa:e7:05:cf:0a:1e: 14:37:2e:78:b1:7d:2d:33:9b:8c:bd:75:f9:c7:17:7e:54:a5: 15:e8:10:92:d2:17:38:e7:02:c1:03:ce:e2:c0:ce:9f:fe:14: c5:a1:6d:de:59:9b:68:69:4c:6c:de:7e:0f:97:b8:73:b9:f7: 45:a9:56:8c:50:f8:70:25:42:12:96:49:b9:59:ca:cb:1f:d0: eb:81:f9:08:48:16:00:10:d1:04:3d:75:09:f0:d7:66:4e:e1: 32:c1:3a:1a:49:7e:fa:0e:09:9d:e8:7d:95:4e:cf:2f:e5:24: a1:52:e0:68:1f:43:28:54:1c:e6:c3:67:35:26:b7:62:b0:42: f2:32:b5:23:5c:1b:a3:b4:eb:ee:9c:5e:9e:a5:bd:73:f6:bf: 5d:ff:93:4c:06:5d:1e:45:bf:90:f8:a9:6e:d7:a9:fa:b6:7d: 55:00:46:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26zJMPc4jU9KoXVGpjXOpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxODNiMjU2YTIxNWI0ZDZmZTI2MTdkMTI2MmI2MzhiZmE3 ZDZkNDAwHhcNMjYwMTAxMDAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzhmMjQxM2Y3OWQ5ODI3YmE5ZDRkYzc4ZDM0YmE3NDY3MTk5Zjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRMuKnL0q7vvhI2OKvQXPC3urKL4 AaXcB4EH4h5RrTrYLMFdLlii7CDnrRWAVR6zsSrbmFTvyAZGKUpTelthNdK92hgJ /lgNwkAuCFu2/t8du/F2YfzTpgydf7Bkh22yXRGVijYvJwmUnCK/E+V03oR8QZYQ yif/V2IU/rRH/FFQIumxo5Mum2D7TJscB1/cfzBJv4v+b/DJy/zZE+3wM0/Gpvw6 nRCXfxOf8npN0h8DDSrmFZhnL/aW2aXTXjBdHNhQ8+l+kQaGV/D2rZ2KjwTjevsC X+VrlVnP7bt+4RYVWnTD/PHsDniHivfefjqVHGSe8Es6BJSy0AkaPA70wQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIyPJBP3nZgnup1Nx400unRnGZ+HMB8GA1UdIwQY MBaAFCGDslaiFbTW/iYX0SYrY4v6fW1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVlPeVZxSVZ0TmItSmhmUkppdGppX3A5YlVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85MTczYTAtMjg4NC00YTc5LThiM2Ut NjlhMjQ1MDk1YWI0LzEvakk4a0VfZWRtQ2U2blUzSGpUUzZkR2NabjRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy85MTczYTAtMjg4NC00YTc5LThiM2UtNjlhMjQ1MDk1YWI0 LzEvSVlPeVZxSVZ0TmItSmhmUkppdGppX3A5YlVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuap+MA0G CSqGSIb3DQEBCwUAA4IBAQAgrpumEZ/7VrlCtj7EGcee7ABAs24+z/SMhyHZrNNq vrQ2XmiIlAT2ck94wBRwVXSehzf7V8j8ksLXe9pjmXstLg2ytp5Pat6ytPC4uU35 oEFTkB2q5wXPCh4UNy54sX0tM5uMvXX5xxd+VKUV6BCS0hc45wLBA87iwM6f/hTF oW3eWZtoaUxs3n4Pl7hzufdFqVaMUPhwJUISlkm5WcrLH9DrgfkISBYAENEEPXUJ 8NdmTuEywToaSX76Dgmd6H2VTs8v5SShUuBoH0MoVBzmw2c1JrdisELyMrUjXBuj tOvunF6epb1z9r9d/5NMBl0eRb+Q+Klu16n6tn1VAEaE -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:53 2026 by rpki-client