This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Seo64cK5BBL5Z5Lga5yI1lf8M6w.roa File: Seo64cK5BBL5Z5Lga5yI1lf8M6w.roa (raw, json) Hash identifier: LMUW9+NLiMGnI7ZWrV590GSKNkkWYi8Hg05UOVRU3Cc= Subject key identifier: 49:EA:3A:E1:C2:B9:04:12:F9:67:92:E0:6B:9C:88:D6:57:FC:33:AC Certificate issuer: /CN=429b1cf21d20f8c6f94641e3327e4555e2e41102 Certificate serial: 019B7FF11FA1BABA008F5F640F106921CE18 Authority key identifier: 42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Seo64cK5BBL5Z5Lga5yI1lf8M6w.roa Signing time: Fri 02 Jan 2026 18:21:07 +0000 ROA not before: Fri 02 Jan 2026 18:21:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 185.8.140.0/24 maxlen: 24 185.8.141.0/24 maxlen: 24 185.8.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:1f:a1:ba:ba:00:8f:5f:64:0f:10:69:21:ce:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429b1cf21d20f8c6f94641e3327e4555e2e41102 Validity Not Before: Jan 2 18:21:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49ea3ae1c2b90412f96792e06b9c88d657fc33ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d7:3b:b1:6f:3d:6e:7f:ac:6a:8b:ba:0e:e2: 2b:6f:ad:f9:82:bc:c3:c2:3f:6d:74:54:5a:45:74: 10:cf:86:ec:64:7c:bd:45:be:1c:e7:e5:39:f6:09: 72:e3:4b:c7:0a:5a:0b:ea:28:3b:06:a3:8e:69:7f: 93:84:30:6e:78:2c:8f:37:b1:73:da:18:5b:6e:d5: 3e:76:cc:15:2d:e1:fa:87:f2:9b:fb:cf:88:3c:8b: b7:08:27:19:d4:ee:94:34:79:e7:80:00:bb:70:04: 67:c6:a6:4e:b3:29:4d:c4:b5:95:40:b0:ba:70:f8: c9:ce:cd:67:ba:22:9c:9a:e8:9a:1a:df:aa:c2:5e: 9d:b9:5b:4d:69:e8:1e:7c:57:c4:0b:4b:86:47:02: 00:e3:a0:44:a2:22:a7:30:3d:89:0f:6c:1a:e1:62: 4b:49:da:fe:e3:26:52:4e:00:30:24:74:27:42:06: 94:78:29:ca:05:da:1c:6a:52:90:cf:53:22:88:a3: 44:df:5f:16:68:d0:dc:b9:a9:28:5b:7c:46:68:e3: 6d:58:64:07:db:49:af:b9:2d:58:d7:6d:e4:d4:73: 17:80:a7:39:18:64:32:f2:d0:e4:8c:68:3d:7f:a2: 74:30:1c:04:10:0e:92:ef:24:aa:21:92:9e:34:61: 1e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:EA:3A:E1:C2:B9:04:12:F9:67:92:E0:6B:9C:88:D6:57:FC:33:AC X509v3 Authority Key Identifier: keyid:42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Seo64cK5BBL5Z5Lga5yI1lf8M6w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.8.140.0/23 185.8.143.0/24 Signature Algorithm: sha256WithRSAEncryption 43:ee:23:c8:00:1f:d7:f5:3a:65:65:6c:58:2f:aa:80:dc:95: 2d:99:1e:a8:ad:6d:b5:aa:06:01:ff:8d:bd:9d:c2:7c:a1:dd: 2c:58:2f:44:10:a9:f8:6a:03:1a:cd:af:f7:28:45:5c:d6:7f: 13:fa:73:82:5c:26:39:f3:2c:0a:b9:2e:00:10:6e:84:26:b8: 8d:59:d1:ab:86:b0:00:a2:ab:00:c9:db:28:1d:ff:d4:2b:95: 3b:45:4d:27:95:43:09:86:dd:4c:00:07:74:54:1a:25:65:06: 3f:d4:a8:97:ac:ce:25:0f:b7:12:f5:89:1b:b8:ae:1f:01:47: 9a:4a:60:63:44:1f:5d:e0:c7:07:94:52:41:2c:63:c3:a8:f9: e0:32:bd:6f:03:26:3c:59:c3:b7:52:8b:eb:4b:b6:b4:72:ce: 1c:88:b7:fb:31:2f:74:33:42:a0:1b:7b:0e:04:52:af:1c:6c: 2c:5c:52:4a:48:38:f9:dc:a4:5a:6a:00:45:18:91:fa:f4:f8: 7e:7b:7f:fb:38:d8:a6:f6:f0:3e:67:5a:d3:1a:fa:61:d3:d9: ce:ae:12:e2:2a:c5:bf:4c:0e:ee:ac:b1:20:e3:05:5b:72:e4: d0:3d:36:91:de:10:12:af:4f:24:a0:02:54:a8:d1:01:d4:c7: b3:fc:4c:79 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8R+huroAj19kDxBpIc4YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOWIxY2YyMWQyMGY4YzZmOTQ2NDFlMzMyN2U0NTU1ZTJl NDExMDIwHhcNMjYwMTAyMTgyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWVhM2FlMWMyYjkwNDEyZjk2NzkyZTA2YjljODhkNjU3ZmMzM2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Nc7sW89bn+saou6DuIrb635grzD wj9tdFRaRXQQz4bsZHy9Rb4c5+U59gly40vHCloL6ig7BqOOaX+ThDBueCyPN7Fz 2hhbbtU+dswVLeH6h/Kb+8+IPIu3CCcZ1O6UNHnngAC7cARnxqZOsylNxLWVQLC6 cPjJzs1nuiKcmuiaGt+qwl6duVtNaegefFfEC0uGRwIA46BEoiKnMD2JD2wa4WJL Sdr+4yZSTgAwJHQnQgaUeCnKBdocalKQz1MiiKNE318WaNDcuakoW3xGaONtWGQH 20mvuS1Y123k1HMXgKc5GGQy8tDkjGg9f6J0MBwEEA6S7ySqIZKeNGEedwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEnqOuHCuQQS+WeS4GuciNZX/DOsMB8GA1UdIwQY MBaAFEKbHPIdIPjG+UZB4zJ+RVXi5BECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBzYzhoMGctTWI1UmtIak1uNUZWZUxrRVFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8yMDQ1MDktOGEzMi00YjI4LTk3Yzgt ZTU2ZTczODM4MGRlLzEvU2VvNjRjSzVCQkw1WjVMZ2E1eUkxbGY4TTZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8yMDQ1MDktOGEzMi00YjI4LTk3YzgtZTU2ZTczODM4MGRl LzEvUXBzYzhoMGctTWI1UmtIak1uNUZWZUxrRVFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuQiMAwQA uQiPMA0GCSqGSIb3DQEBCwUAA4IBAQBD7iPIAB/X9TplZWxYL6qA3JUtmR6orW21 qgYB/429ncJ8od0sWC9EEKn4agMaza/3KEVc1n8T+nOCXCY58ywKuS4AEG6EJriN WdGrhrAAoqsAydsoHf/UK5U7RU0nlUMJht1MAAd0VBolZQY/1KiXrM4lD7cS9Ykb uK4fAUeaSmBjRB9d4McHlFJBLGPDqPngMr1vAyY8WcO3UovrS7a0cs4ciLf7MS90 M0KgG3sOBFKvHGwsXFJKSDj53KRaagBFGJH69Ph+e3/7ONim9vA+Z1rTGvph09nO rhLiKsW/TA7urLEg4wVbcuTQPTaR3hASr08koAJUqNEB1Mez/Ex5 -----END CERTIFICATE-----Generated at Fri Jan 9 06:21:08 2026 by rpki-client