This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/H8YoN4cZRGQKS0rAWtWUFSIVNC4.roa File: H8YoN4cZRGQKS0rAWtWUFSIVNC4.roa (raw, json) Hash identifier: OMznwq3IiJ/u8ws+4cjxPVNfDGqlT+0CgLV4+JO0kU0= Subject key identifier: 1F:C6:28:37:87:19:44:64:0A:4B:4A:C0:5A:D5:94:15:22:15:34:2E Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13F2F780A91D372AADB639DA0190FF Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/H8YoN4cZRGQKS0rAWtWUFSIVNC4.roa Signing time: Fri 02 Jan 2026 14:19:32 +0000 ROA not before: Fri 02 Jan 2026 14:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47911 IP address blocks: 188.186.128.0/21 maxlen: 24 2a02:2698:b000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:f2:f7:80:a9:1d:37:2a:ad:b6:39:da:01:90:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fc62837871944640a4b4ac05ad594152215342e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ac:9c:d3:07:5c:7e:a8:fe:88:71:8c:0b:bc: fe:6a:9a:92:a2:e0:ad:ae:43:c5:24:e4:e3:e5:08: 6f:e4:b8:68:e0:96:30:44:e5:e4:ad:68:f6:92:12: a6:41:7b:a6:3d:b0:df:d3:25:ed:7e:70:eb:26:9d: 04:83:7b:69:c9:16:e2:31:90:a4:d3:4a:f5:72:52: a5:89:51:24:7a:ae:9e:4f:2f:f2:a4:62:f4:82:5d: a0:13:ce:09:35:9d:0b:1c:5d:25:10:7a:4b:4b:a1: fe:03:a0:99:ed:11:1f:44:45:ad:1a:55:64:3a:c5: e1:3b:70:84:5a:e3:00:5e:26:18:71:dc:c4:f0:88: d7:5e:d0:62:d5:ef:d6:06:c1:49:d4:04:33:07:d3: 01:8a:55:b5:b0:64:d8:a0:e8:7a:c5:c5:d8:a9:3e: b2:30:75:b6:ea:6e:d4:9d:6e:e8:43:f0:dd:dd:46: fe:9f:81:30:b5:23:67:18:9b:df:7a:2d:35:cd:8c: 97:17:cf:25:f8:0d:27:3d:f1:08:73:80:bb:0b:5f: b6:2b:af:fc:4a:4c:69:9c:32:84:2c:59:cd:72:2d: 13:e1:c4:6f:fd:52:7c:07:15:2e:1e:a2:01:9b:63: 18:5e:e1:47:2c:93:9a:0d:b1:6f:6d:f0:e6:47:c8: aa:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C6:28:37:87:19:44:64:0A:4B:4A:C0:5A:D5:94:15:22:15:34:2E X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/H8YoN4cZRGQKS0rAWtWUFSIVNC4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.186.128.0/21 IPv6: 2a02:2698:b000::/36 Signature Algorithm: sha256WithRSAEncryption ad:bb:57:6f:bd:8c:0a:ad:10:7f:be:13:5b:bd:20:95:c0:55: 17:46:71:69:2e:58:01:a5:d9:9c:ee:2d:af:11:94:c3:2a:5c: f2:55:d8:e3:aa:5e:48:d9:2b:63:26:94:67:cb:cb:f0:1b:37: ee:4e:93:f9:97:68:e9:ef:70:fa:34:d5:46:ef:63:c4:9c:4c: 60:63:46:08:54:73:0f:a1:2c:16:68:71:cd:e2:67:3c:6b:f0: 89:aa:53:69:97:84:73:df:2e:31:94:21:74:42:ef:bf:f6:47: 91:8c:bc:77:d6:32:15:75:f0:78:4f:6c:07:78:b1:6e:18:f2: e8:85:42:a6:28:67:5f:e7:5f:5c:61:42:a1:a2:0b:2a:a0:72: 4f:36:7f:58:2f:73:b5:05:62:fb:13:50:70:9f:0c:b2:e2:db: e2:4b:fa:34:57:4d:08:c4:78:9f:2f:68:d2:76:7b:35:de:6b: 5d:10:2a:12:45:59:3d:28:6b:e1:74:79:b3:05:68:1c:8d:71: d9:ae:7c:6c:92:2b:1d:79:bc:b4:f7:45:fb:26:f6:7e:3f:ae: 80:5a:0f:b7:7d:7c:6d:ee:27:74:75:72:f6:24:a0:d7:8f:fb: c6:9f:23:62:41:be:9a:17:24:43:4a:6e:a0:65:b0:9d:1a:c0: f9:3e:7d:30 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt/E/L3gKkdNyqttjnaAZD/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmM2MjgzNzg3MTk0NDY0MGE0YjRhYzA1YWQ1OTQxNTIyMTUzNDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6yc0wdcfqj+iHGMC7z+apqSouCt rkPFJOTj5Qhv5Lho4JYwROXkrWj2khKmQXumPbDf0yXtfnDrJp0Eg3tpyRbiMZCk 00r1clKliVEkeq6eTy/ypGL0gl2gE84JNZ0LHF0lEHpLS6H+A6CZ7REfREWtGlVk OsXhO3CEWuMAXiYYcdzE8IjXXtBi1e/WBsFJ1AQzB9MBilW1sGTYoOh6xcXYqT6y MHW26m7UnW7oQ/Dd3Ub+n4EwtSNnGJvfei01zYyXF88l+A0nPfEIc4C7C1+2K6/8 SkxpnDKELFnNci0T4cRv/VJ8BxUuHqIBm2MYXuFHLJOaDbFvbfDmR8iqgwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFB/GKDeHGURkCktKwFrVlBUiFTQuMB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEvSDhZb040Y1pSR1FLUzByQVd0V1VGU0lWTkM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4 LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQDvLqAMA4E AgACMAgDBgQqAiaYsDANBgkqhkiG9w0BAQsFAAOCAQEArbtXb72MCq0Qf74TW70g lcBVF0ZxaS5YAaXZnO4trxGUwypc8lXY46peSNkrYyaUZ8vL8Bs37k6T+Zdo6e9w +jTVRu9jxJxMYGNGCFRzD6EsFmhxzeJnPGvwiapTaZeEc98uMZQhdELvv/ZHkYy8 d9YyFXXweE9sB3ixbhjy6IVCpihnX+dfXGFCoaILKqByTzZ/WC9ztQVi+xNQcJ8M suLb4kv6NFdNCMR4ny9o0nZ7Nd5rXRAqEkVZPShr4XR5swVoHI1x2a58bJIrHXm8 tPdF+yb2fj+ugFoPt318be4ndHVy9iSg14/7xp8jYkG+mhckQ0puoGWwnRrA+T59 MA== -----END CERTIFICATE-----Generated at Thu Feb 5 05:53:05 2026 by rpki-client