This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/8y7GNNa3VSZ0w99_9ipLylxWc2w.roa File: 8y7GNNa3VSZ0w99_9ipLylxWc2w.roa (raw, json) Hash identifier: 5mPkRAu5BGZlM5kj1fiinENXANd4dMpIzIY3DWFLsx0= Subject key identifier: F3:2E:C6:34:D6:B7:55:26:74:C3:DF:7F:F6:2A:4B:CA:5C:56:73:6C Certificate issuer: /CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8 Certificate serial: 019B7BA474639A7C74988DE483B75C1DC586 Authority key identifier: A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/8y7GNNa3VSZ0w99_9ipLylxWc2w.roa Signing time: Thu 01 Jan 2026 22:18:53 +0000 ROA not before: Thu 01 Jan 2026 22:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201301 IP address blocks: 185.45.96.0/22 maxlen: 24 2a04:a180::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.crl rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:74:63:9a:7c:74:98:8d:e4:83:b7:5c:1d:c5:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8 Validity Not Before: Jan 1 22:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f32ec634d6b7552674c3df7ff62a4bca5c56736c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d5:f0:e6:71:d9:90:2f:94:e6:1c:d4:84:11: 98:d8:2e:9b:3a:c8:0f:41:db:a7:41:fd:57:b8:de: 11:db:df:3c:8b:7d:24:8f:58:e9:86:1c:a0:b9:d3: bd:b8:a1:31:91:ac:7b:8b:4b:f0:ea:33:00:02:e3: 44:6e:44:bf:ba:6c:40:e2:6b:3b:3a:d5:01:fa:f0: 1d:b9:5f:77:be:46:c4:89:ac:15:8f:38:56:01:de: 8d:d2:e7:85:5c:64:05:53:b0:ea:80:67:cd:bc:b9: 8d:f4:37:dd:42:e1:90:d5:2c:81:79:88:cd:a8:cd: d0:76:b8:8f:ac:3a:1f:ab:88:00:b4:87:fc:14:1f: 63:82:27:fa:d9:d6:b1:cb:12:e0:8d:5a:31:5c:2b: 17:c2:f6:90:b9:ac:f0:70:2b:27:73:05:c5:74:48: 67:89:0b:29:48:44:7e:c4:c4:81:4d:91:ab:c4:93: aa:c4:db:da:fc:e6:ab:9f:3c:d6:03:c4:7d:e3:5d: c3:c4:f8:3e:1a:90:de:3b:84:64:72:8a:8e:1a:fe: ea:ff:43:d6:11:cc:db:63:02:1d:4f:78:8a:d3:d5: 76:23:7d:25:c5:e7:ae:11:bb:08:2e:4a:f4:bc:72: 51:06:2b:24:eb:d1:e4:b3:97:8c:71:31:39:ca:23: fd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:2E:C6:34:D6:B7:55:26:74:C3:DF:7F:F6:2A:4B:CA:5C:56:73:6C X509v3 Authority Key Identifier: keyid:A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/8y7GNNa3VSZ0w99_9ipLylxWc2w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.45.96.0/22 IPv6: 2a04:a180::/29 Signature Algorithm: sha256WithRSAEncryption 82:e8:2f:19:eb:2b:36:9c:45:34:4f:3d:63:4b:91:11:da:a3: 97:05:e8:78:0c:1f:19:09:b7:24:20:1d:fa:b4:91:e2:56:3a: 04:6d:56:14:10:51:4d:61:a3:04:67:80:48:60:66:15:70:6c: a0:67:c0:0e:a8:4c:fe:a1:bd:8a:ae:3d:dc:c5:ce:92:27:cd: e3:5f:64:08:b2:84:fa:6f:a4:14:fe:43:0a:82:58:ae:cc:aa: 5f:43:53:a7:17:c5:0c:95:37:c8:8c:ac:64:95:9e:57:b0:f8: 8f:61:f4:70:c3:44:39:6a:8c:13:27:b4:d4:06:83:08:bb:a8: 44:d5:34:c0:39:75:66:8c:d6:9d:1b:31:c7:29:92:b1:35:19: 1f:b2:7f:f9:6f:27:34:ea:06:1b:e0:5e:55:99:0f:07:0e:a3: 72:bd:2e:ca:0d:60:d1:ad:c2:65:2f:c0:1e:f3:2a:1b:9d:e1: 28:91:c2:62:a0:55:f7:0d:4b:76:94:ff:9c:0f:ce:4a:b5:54: 31:93:d8:43:c1:2f:13:30:f5:24:90:8c:69:f9:7b:73:14:76: 2a:68:d2:27:5f:ed:61:5b:c9:34:ac:de:dd:f3:62:a1:c9:3a: c8:31:c0:e4:d3:4c:55:26:85:30:c6:2c:10:7d:49:9f:36:26: 62:5d:8c:33 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7pHRjmnx0mI3kg7dcHcWGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyY2EzN2RlZDFiNzBjODFiNzRhNDMwZjliNGQ3YWNjNjI4 MDVlZDgwHhcNMjYwMTAxMjIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzJlYzYzNGQ2Yjc1NTI2NzRjM2RmN2ZmNjJhNGJjYTVjNTY3MzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09Xw5nHZkC+U5hzUhBGY2C6bOsgP QdunQf1XuN4R2988i30kj1jphhygudO9uKExkax7i0vw6jMAAuNEbkS/umxA4ms7 OtUB+vAduV93vkbEiawVjzhWAd6N0ueFXGQFU7DqgGfNvLmN9DfdQuGQ1SyBeYjN qM3QdriPrDofq4gAtIf8FB9jgif62daxyxLgjVoxXCsXwvaQuazwcCsncwXFdEhn iQspSER+xMSBTZGrxJOqxNva/OarnzzWA8R9413DxPg+GpDeO4RkcoqOGv7q/0PW EczbYwIdT3iK09V2I30lxeeuEbsILkr0vHJRBisk69Hks5eMcTE5yiP9XwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPMuxjTWt1UmdMPff/YqS8pcVnNsMB8GA1UdIwQY MBaAFKLKN97RtwyBt0pDD5tNesxigF7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3NvMzN0RzNESUczU2tNUG0wMTZ6R0tBWHRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iMmFjZTctNDhkYi00ZjdkLTkxN2Yt MzA2MTg5ZDVjMDQ5LzEvOHk3R05OYTNWU1owdzk5XzlpcEx5bHhXYzJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9iMmFjZTctNDhkYi00ZjdkLTkxN2YtMzA2MTg5ZDVjMDQ5 LzEvb3NvMzN0RzNESUczU2tNUG0wMTZ6R0tBWHRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuS1gMA0E AgACMAcDBQMqBKGAMA0GCSqGSIb3DQEBCwUAA4IBAQCC6C8Z6ys2nEU0Tz1jS5ER 2qOXBeh4DB8ZCbckIB36tJHiVjoEbVYUEFFNYaMEZ4BIYGYVcGygZ8AOqEz+ob2K rj3cxc6SJ83jX2QIsoT6b6QU/kMKgliuzKpfQ1OnF8UMlTfIjKxklZ5XsPiPYfRw w0Q5aowTJ7TUBoMIu6hE1TTAOXVmjNadGzHHKZKxNRkfsn/5byc06gYb4F5VmQ8H DqNyvS7KDWDRrcJlL8Ae8yobneEokcJioFX3DUt2lP+cD85KtVQxk9hDwS8TMPUk kIxp+XtzFHYqaNInX+1hW8k0rN7d82KhyTrIMcDk00xVJoUwxiwQfUmfNiZiXYwz -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:52 2026 by rpki-client