This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/U6BOeXVN1wgSuKm46olbZSkuAos.roa File: U6BOeXVN1wgSuKm46olbZSkuAos.roa (raw, json) Hash identifier: pVLf0mzrr1g9a1Z9BUN5jIi4hj8j9mEtpNH+1HB7UFI= Subject key identifier: 53:A0:4E:79:75:4D:D7:08:12:B8:A9:B8:EA:89:5B:65:29:2E:02:8B Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F853F0A4CDF23E6726839B9410F95E6 Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/U6BOeXVN1wgSuKm46olbZSkuAos.roa Signing time: Fri 02 Jan 2026 16:23:17 +0000 ROA not before: Fri 02 Jan 2026 16:23:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62071 IP address blocks: 185.212.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:3f:0a:4c:df:23:e6:72:68:39:b9:41:0f:95:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53a04e79754dd70812b8a9b8ea895b65292e028b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2d:f5:c1:4a:a1:19:a2:f3:18:10:c2:81:b7: 60:9d:de:9d:2f:50:7f:58:df:4a:3e:27:d4:0d:8d: a7:66:27:74:13:aa:e8:0f:e9:25:9e:8b:4d:23:9a: d5:b1:21:30:a7:70:7d:d8:7c:ba:f4:6c:a8:e1:11: cd:0c:53:43:a4:65:e0:d5:d5:ab:7d:db:3b:7f:e3: cf:51:f6:4f:d4:7b:4a:c3:ce:e0:b8:d1:15:c3:46: 8e:77:c0:bf:e4:ee:1a:1b:b7:52:a6:71:33:0e:9b: a4:e1:54:1e:4b:83:a8:c1:ac:ba:e2:f5:c7:78:c8: 79:27:7a:fa:55:c8:57:e6:62:96:f9:af:84:19:b2: 5e:6e:8a:94:ee:f5:4c:af:69:59:bf:68:43:a8:2b: 48:94:6a:59:04:56:6f:d4:49:bc:ab:ba:c9:ee:22: ce:75:e6:90:29:33:09:f6:68:72:50:af:9b:d6:64: ab:b4:fb:46:f1:40:d3:d3:c1:96:5a:f9:7e:6f:5f: 29:4f:1f:98:71:d1:80:50:b5:81:10:0a:c4:2e:fd: 0f:f2:77:23:d3:39:91:71:54:ef:5d:00:71:31:30: be:a6:6a:18:ff:c8:d4:35:4f:de:41:30:54:a4:53: 36:66:32:0c:42:3f:11:36:7a:de:13:f5:64:d0:66: 5f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A0:4E:79:75:4D:D7:08:12:B8:A9:B8:EA:89:5B:65:29:2E:02:8B X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/U6BOeXVN1wgSuKm46olbZSkuAos.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.212.8.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:db:28:66:f0:ae:27:eb:72:3c:a5:38:af:1e:3f:29:c7:07: be:ab:46:32:99:a7:4e:34:8d:0f:c9:09:41:6c:62:16:b3:08: e3:cf:ae:14:db:7f:f8:e1:1c:e3:6b:d2:e0:7c:0f:e7:11:1e: 51:40:10:a7:02:6e:b1:cf:8e:76:4c:98:51:e8:e5:56:24:e6: f0:34:16:07:04:b3:03:e8:7c:42:3a:2b:04:0a:49:ee:c6:86: 40:9f:c7:30:4b:0b:72:5c:51:d9:b4:aa:dc:3f:40:eb:df:54: d6:82:d0:ed:23:a9:5f:a8:58:0a:d5:a0:ab:4c:32:a3:fd:7a: e1:0c:00:ed:af:cd:97:ec:e6:f5:85:2d:a8:49:9e:99:0b:95: 28:d8:42:e8:fb:ad:74:6d:4f:b5:9d:89:c0:ea:b0:e0:88:9a: c8:1e:0b:20:8f:8b:26:8d:e9:2b:81:5f:21:60:0f:a7:36:f5: fa:47:14:54:a5:ec:94:71:b9:7d:6c:30:0c:13:1e:2c:7f:8a: a0:43:65:0d:8b:92:5e:4b:e3:0f:b8:d1:a3:58:aa:b4:2f:b5: 55:5b:44:6c:70:70:79:b7:87:1c:64:db:41:98:d7:8c:ac:9f: 80:34:49:11:e6:17:85:56:db:0b:7f:cc:62:a8:0b:9f:c1:a1: d4:a4:00:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hT8KTN8j5nJoOblBD5XmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2EwNGU3OTc1NGRkNzA4MTJiOGE5YjhlYTg5NWI2NTI5MmUwMjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS31wUqhGaLzGBDCgbdgnd6dL1B/ WN9KPifUDY2nZid0E6roD+klnotNI5rVsSEwp3B92Hy69Gyo4RHNDFNDpGXg1dWr fds7f+PPUfZP1HtKw87guNEVw0aOd8C/5O4aG7dSpnEzDpuk4VQeS4Ooway64vXH eMh5J3r6VchX5mKW+a+EGbJeboqU7vVMr2lZv2hDqCtIlGpZBFZv1Em8q7rJ7iLO deaQKTMJ9mhyUK+b1mSrtPtG8UDT08GWWvl+b18pTx+YcdGAULWBEArELv0P8ncj 0zmRcVTvXQBxMTC+pmoY/8jUNU/eQTBUpFM2ZjIMQj8RNnreE/Vk0GZfCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFOgTnl1TdcIEripuOqJW2UpLgKLMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvVTZCT2VYVk4xd2dTdUttNDZvbGJaU2t1QW9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudQIMA0G CSqGSIb3DQEBCwUAA4IBAQBN2yhm8K4n63I8pTivHj8pxwe+q0YymadONI0PyQlB bGIWswjjz64U23/44Rzja9LgfA/nER5RQBCnAm6xz452TJhR6OVWJObwNBYHBLMD 6HxCOisECknuxoZAn8cwSwtyXFHZtKrcP0Dr31TWgtDtI6lfqFgK1aCrTDKj/Xrh DADtr82X7Ob1hS2oSZ6ZC5Uo2ELo+610bU+1nYnA6rDgiJrIHgsgj4smjekrgV8h YA+nNvX6RxRUpeyUcbl9bDAMEx4sf4qgQ2UNi5JeS+MPuNGjWKq0L7VVW0RscHB5 t4ccZNtBmNeMrJ+ANEkR5heFVtsLf8xiqAufwaHUpAD+ -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:51 2026 by rpki-client