This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/E8tmA0INxy22SoM9WvAlCkcup0w.roa File: E8tmA0INxy22SoM9WvAlCkcup0w.roa (raw, json) Hash identifier: AKi53HmlwOtf4zu9MkVwsUBo5imAVEvf0SU5LXyt7lc= Subject key identifier: 13:CB:66:03:42:0D:C7:2D:B6:4A:83:3D:5A:F0:25:0A:47:2E:A7:4C Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c Certificate serial: 019B7C8066AA67CFA0F2CDC0C588E26BBEB6 Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/E8tmA0INxy22SoM9WvAlCkcup0w.roa Signing time: Fri 02 Jan 2026 02:19:08 +0000 ROA not before: Fri 02 Jan 2026 02:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.98.156.0/24 maxlen: 24 2a12:a900:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:66:aa:67:cf:a0:f2:cd:c0:c5:88:e2:6b:be:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c Validity Not Before: Jan 2 02:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13cb6603420dc72db64a833d5af0250a472ea74c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:57:6c:5a:72:0d:f5:e6:44:0d:ab:69:47:c8: 17:b0:4c:ae:cc:ac:c6:d9:ca:98:37:bc:d4:7d:93: 9a:2d:67:49:13:f5:fa:ed:44:1c:f4:de:4a:db:0d: bf:50:b1:d9:a6:5d:62:9a:f0:84:d2:57:b2:ce:64: 67:d1:b8:db:4c:b7:5a:2d:1a:cc:c9:0a:80:8c:56: b5:6b:be:5b:b8:84:65:4d:5f:70:2a:3a:90:88:1c: 35:34:7d:e9:fc:e1:09:34:ba:44:1f:02:11:01:44: 9b:4b:b0:46:5b:76:b1:d8:9d:b3:d6:6d:80:ea:d0: d0:26:05:72:2d:82:f4:45:c0:1c:63:d1:c4:cd:1d: 3d:a9:11:61:60:6d:3d:1c:c4:3a:7a:99:19:c7:a9: f4:0b:cf:81:3c:3f:54:67:c4:43:b0:77:94:ed:5c: 0e:b6:25:95:1e:84:c9:cb:f6:f8:79:3f:b4:6d:30: 46:54:86:e4:ba:45:83:30:33:1d:79:2b:65:db:41: 39:ef:17:64:74:62:67:e6:52:d4:ea:e1:8c:1d:70: df:e7:10:24:81:61:3f:ec:fa:e0:7c:60:c2:c6:3d: 43:c1:9e:9f:0a:9b:16:81:bb:5e:4b:c5:7d:f6:0d: c0:15:8f:51:80:bb:fd:5e:5c:a0:d1:1e:4c:bc:9b: b9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:CB:66:03:42:0D:C7:2D:B6:4A:83:3D:5A:F0:25:0A:47:2E:A7:4C X509v3 Authority Key Identifier: keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/E8tmA0INxy22SoM9WvAlCkcup0w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.98.156.0/24 IPv6: 2a12:a900:1::/48 Signature Algorithm: sha256WithRSAEncryption 40:25:0a:6a:4b:29:49:e6:07:0f:8a:7e:8b:07:64:66:d4:74: 91:3b:e6:77:9f:d1:bf:f3:60:87:76:36:25:14:ec:c0:22:66: c7:e3:e7:f6:77:9f:e5:4f:c2:0a:79:e8:3e:79:b5:b7:92:67: 10:a4:f6:7f:16:a7:e7:3a:f2:2f:b6:0f:cd:9c:5f:bd:fd:25: 01:56:89:20:8c:38:c5:46:ca:ee:10:de:9d:78:a8:8b:90:2e: 37:fe:b4:91:f3:43:5e:51:e9:26:93:df:a8:91:94:00:f0:ed: c3:19:d7:eb:4d:87:24:82:e3:f6:1c:c0:39:69:e9:50:a8:71: c2:b5:ba:8c:fe:45:03:da:bc:4d:9e:8b:f4:c1:df:cb:31:d6: 52:23:2d:34:16:8a:12:06:65:5a:c1:2e:7b:8f:a5:29:18:19: 25:76:52:2c:e3:b9:b8:a6:2e:96:e5:d5:4e:45:b2:9e:ae:f3: c0:6f:19:52:70:f2:34:10:32:79:55:fa:73:6b:0c:7b:e8:5d: b9:c0:51:2f:98:5b:1c:1b:37:63:ac:c5:d8:96:54:f9:af:9a: 63:be:1c:77:5a:66:85:f7:4c:93:9f:45:dd:f6:b4:87:a7:41: b4:f7:bc:b1:e6:65:db:2c:9d:07:86:ae:5e:76:1a:21:7c:ce: 50:8f:a2:58 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8gGaqZ8+g8s3AxYjia762MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNDFjNjY0YzBjMDEzZGZmYjZlMGRkMWQ3M2IzNjljYmE1 ZmJkMWMwHhcNMjYwMTAyMDIxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2NiNjYwMzQyMGRjNzJkYjY0YTgzM2Q1YWYwMjUwYTQ3MmVhNzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlldsWnIN9eZEDatpR8gXsEyuzKzG 2cqYN7zUfZOaLWdJE/X67UQc9N5K2w2/ULHZpl1imvCE0leyzmRn0bjbTLdaLRrM yQqAjFa1a75buIRlTV9wKjqQiBw1NH3p/OEJNLpEHwIRAUSbS7BGW3ax2J2z1m2A 6tDQJgVyLYL0RcAcY9HEzR09qRFhYG09HMQ6epkZx6n0C8+BPD9UZ8RDsHeU7VwO tiWVHoTJy/b4eT+0bTBGVIbkukWDMDMdeStl20E57xdkdGJn5lLU6uGMHXDf5xAk gWE/7PrgfGDCxj1DwZ6fCpsWgbteS8V99g3AFY9RgLv9Xlyg0R5MvJu5aQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBPLZgNCDccttkqDPVrwJQpHLqdMMB8GA1UdIwQY MBaAFF9BxmTAwBPf+24N0dc7Npy6X70cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDBIR1pNREFFOV83YmczUjF6czJuTHBmdlJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zNzlhMWQtNTJiOS00NjY5LTk2MjUt NjIzMDZhYmRmYTAzLzEvRTh0bUEwSU54eTIyU29NOVd2QWxDa2N1cDB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zNzlhMWQtNTJiOS00NjY5LTk2MjUtNjIzMDZhYmRmYTAz LzEvWDBIR1pNREFFOV83YmczUjF6czJuTHBmdlJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuWKcMA8E AgACMAkDBwAqEqkAAAEwDQYJKoZIhvcNAQELBQADggEBAEAlCmpLKUnmBw+KfosH ZGbUdJE75nef0b/zYId2NiUU7MAiZsfj5/Z3n+VPwgp56D55tbeSZxCk9n8Wp+c6 8i+2D82cX739JQFWiSCMOMVGyu4Q3p14qIuQLjf+tJHzQ15R6SaT36iRlADw7cMZ 1+tNhySC4/YcwDlp6VCoccK1uoz+RQPavE2ei/TB38sx1lIjLTQWihIGZVrBLnuP pSkYGSV2UizjubimLpbl1U5Fsp6u88BvGVJw8jQQMnlV+nNrDHvoXbnAUS+YWxwb N2OsxdiWVPmvmmO+HHdaZoX3TJOfRd32tIenQbT3vLHmZdssnQeGrl52GiF8zlCP olg= -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:13 2026 by rpki-client