This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/l8hfM0tA1hlOp9-gmuJ6WOfIhu0.roa File: l8hfM0tA1hlOp9-gmuJ6WOfIhu0.roa (raw, json) Hash identifier: IAmuOAJMto9pgwbf2c7PBZN6/VWyoBQiETP/DoJwG+Y= Subject key identifier: 97:C8:5F:33:4B:40:D6:19:4E:A7:DF:A0:9A:E2:7A:58:E7:C8:86:ED Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb Certificate serial: 019B7A5A8236DEB1418D3C0A80701B961C75 Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/l8hfM0tA1hlOp9-gmuJ6WOfIhu0.roa Signing time: Thu 01 Jan 2026 16:18:30 +0000 ROA not before: Thu 01 Jan 2026 16:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211343 IP address blocks: 185.53.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:82:36:de:b1:41:8d:3c:0a:80:70:1b:96:1c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb Validity Not Before: Jan 1 16:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97c85f334b40d6194ea7dfa09ae27a58e7c886ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c6:9d:ab:5c:b0:fe:60:82:1b:4e:53:8d:b1: a3:ef:de:0c:a1:3e:81:69:45:f2:b6:96:96:bb:8d: a2:52:81:44:2d:20:56:4c:2d:cd:ee:6d:9a:b7:56: 36:91:42:09:eb:63:41:67:b3:6b:69:9c:3f:78:9f: 03:37:25:ba:b7:c3:e8:c3:a4:1b:f2:d5:9a:a0:00: 85:e7:6f:69:f8:ab:5a:88:2e:fa:b0:62:ec:f3:e8: 0d:19:e0:01:de:10:13:8e:70:d6:16:c8:ad:90:85: e8:42:3c:f5:a7:08:c6:6b:de:48:17:a4:47:36:08: ed:be:c6:f5:c7:2b:25:71:cd:89:81:9c:4a:cd:06: 3e:92:70:d5:95:a3:e1:b8:47:9b:e9:ff:a8:26:2f: ac:3f:40:bd:cc:6e:d9:e6:2c:b4:50:74:3f:96:94: a7:a0:28:ec:2d:eb:65:41:44:69:2a:83:aa:7a:8a: c2:ca:13:aa:21:9c:9f:f4:0c:cb:7f:87:49:ba:ab: 6a:77:6a:8b:54:07:47:d6:79:d7:99:3e:4e:c5:09: 92:7f:de:55:a6:11:98:d0:08:de:e5:73:01:35:ce: 98:c9:ae:34:74:d4:18:97:67:eb:a2:a0:ce:70:f7: 82:88:60:36:16:10:35:b7:42:2f:70:c3:96:53:1b: bd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C8:5F:33:4B:40:D6:19:4E:A7:DF:A0:9A:E2:7A:58:E7:C8:86:ED X509v3 Authority Key Identifier: keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/l8hfM0tA1hlOp9-gmuJ6WOfIhu0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.53.106.0/24 Signature Algorithm: sha256WithRSAEncryption 85:d1:e5:88:46:81:d5:67:9b:ca:65:f7:45:cc:99:07:0a:04: ce:42:41:e4:9e:6f:50:b1:24:a5:ba:15:3a:3e:0b:37:c2:59: 09:40:6d:ed:e5:5a:59:3e:cf:a9:dc:22:3c:2d:66:25:35:be: 8a:a6:21:5f:cc:df:c2:fd:bb:9f:a2:9f:3f:69:d9:6d:b0:eb: 08:02:fd:58:25:90:04:25:34:50:94:c0:24:62:92:06:91:75: 1c:ed:fe:57:25:e5:a0:c1:10:ed:b3:f3:c2:44:cf:a8:44:3d: f6:3f:02:c3:d4:37:a6:87:70:b4:35:88:7c:27:65:68:48:7a: 0a:8d:af:fe:98:93:75:c2:7b:ec:83:9d:1b:ba:3e:2c:f1:01: 89:59:a7:6b:95:cc:fa:c2:8e:0d:00:3a:b9:41:ec:6c:96:16: 46:3e:3f:70:97:3d:3c:31:43:5e:2c:2b:16:dc:e3:28:72:7f: 91:13:89:49:6d:2e:3a:6c:2a:8a:42:de:ec:a3:aa:d2:9d:68: 62:a8:21:cc:9e:71:5c:3e:ef:2c:47:64:56:8d:39:fb:8b:db: bb:46:ac:5a:a9:ce:4d:b8:f7:ee:8a:6c:16:7c:ac:f0:2b:87: 8e:92:f5:a7:73:9e:e0:7f:8d:4f:f7:a4:e7:97:14:ad:3e:f4: 67:33:40:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WoI23rFBjTwKgHAblhx1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MTM1ZDYzOTc2OGEzYTYzZWQ5YzVmZjQwYWY1ZWQwMWRm NzQxY2IwHhcNMjYwMTAxMTYxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2M4NWYzMzRiNDBkNjE5NGVhN2RmYTA5YWUyN2E1OGU3Yzg4NmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsadq1yw/mCCG05TjbGj794MoT6B aUXytpaWu42iUoFELSBWTC3N7m2at1Y2kUIJ62NBZ7NraZw/eJ8DNyW6t8Pow6Qb 8tWaoACF529p+KtaiC76sGLs8+gNGeAB3hATjnDWFsitkIXoQjz1pwjGa95IF6RH Ngjtvsb1xyslcc2JgZxKzQY+knDVlaPhuEeb6f+oJi+sP0C9zG7Z5iy0UHQ/lpSn oCjsLetlQURpKoOqeorCyhOqIZyf9AzLf4dJuqtqd2qLVAdH1nnXmT5OxQmSf95V phGY0Aje5XMBNc6Yya40dNQYl2froqDOcPeCiGA2FhA1t0IvcMOWUxu9BQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJfIXzNLQNYZTqffoJrieljnyIbtMB8GA1UdIwQY MBaAFOYTXWOXaKOmPtnF/0CvXtAd90HLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83NDZhNzUtZDM2MS00ZTkxLTg3M2Et MGE3NzBmMGM3NjA4LzEvbDhoZk0wdEExaGxPcDktZ211SjZXT2ZJaHUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS83NDZhNzUtZDM2MS00ZTkxLTg3M2EtMGE3NzBmMGM3NjA4 LzEvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTVqMA0G CSqGSIb3DQEBCwUAA4IBAQCF0eWIRoHVZ5vKZfdFzJkHCgTOQkHknm9QsSSluhU6 Pgs3wlkJQG3t5VpZPs+p3CI8LWYlNb6KpiFfzN/C/bufop8/adltsOsIAv1YJZAE JTRQlMAkYpIGkXUc7f5XJeWgwRDts/PCRM+oRD32PwLD1Demh3C0NYh8J2VoSHoK ja/+mJN1wnvsg50buj4s8QGJWadrlcz6wo4NADq5QexslhZGPj9wlz08MUNeLCsW 3OMocn+RE4lJbS46bCqKQt7so6rSnWhiqCHMnnFcPu8sR2RWjTn7i9u7Rqxaqc5N uPfuimwWfKzwK4eOkvWnc57gf41P96TnlxStPvRnM0Dv -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:44 2026 by rpki-client