This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/8EkWCJKlGUuYCmtpF6giWaBabGQ.roa File: 8EkWCJKlGUuYCmtpF6giWaBabGQ.roa (raw, json) Hash identifier: Sqr1KDT12n1Gb1flLKRN7KU4X7Bc8YqBHnVl5nyK2K4= Subject key identifier: F0:49:16:08:92:A5:19:4B:98:0A:6B:69:17:A8:22:59:A0:5A:6C:64 Certificate issuer: /CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6 Certificate serial: 019B7E390BAB03BB8D725F398DA797598394 Authority key identifier: 51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/8EkWCJKlGUuYCmtpF6giWaBabGQ.roa Signing time: Fri 02 Jan 2026 10:20:26 +0000 ROA not before: Fri 02 Jan 2026 10:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.170.5.0/24 maxlen: 24 185.170.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:0b:ab:03:bb:8d:72:5f:39:8d:a7:97:59:83:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6 Validity Not Before: Jan 2 10:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f049160892a5194b980a6b6917a82259a05a6c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7a:f1:dc:6c:63:1c:50:52:bc:95:f8:04:33: 26:42:35:7d:2f:c0:f3:59:d7:36:80:fd:a4:ba:89: 88:28:af:0f:62:2f:1c:b4:e5:1a:26:fb:d3:b9:6c: e9:a3:a9:8e:e3:51:12:f1:17:3c:03:b8:d1:9b:99: ce:1e:cc:2a:7d:4f:e0:e9:e7:fb:eb:06:2c:ec:59: 78:4c:c2:a1:c4:cf:c5:e9:3e:b5:dc:0c:7c:9c:77: 65:e3:5c:cc:66:05:4e:a5:70:72:1f:a7:d0:c0:75: 02:cc:63:29:97:44:5a:9f:57:ec:37:c2:d7:ff:2e: 3e:80:8f:9d:ac:3e:e2:ba:d5:29:03:be:46:e5:f2: c3:38:d3:07:49:b0:68:4d:d4:20:93:0d:a1:ab:0a: 34:6c:fa:6b:1d:bc:61:cb:10:f7:0b:ad:7c:61:fb: 7e:e2:b2:16:3a:ef:03:3f:b2:ac:03:42:02:94:85: 9e:0b:1d:ac:48:6a:0d:05:ff:d9:14:33:e7:51:33: 92:5f:5a:66:8d:0c:9b:da:90:f4:3d:cc:24:6a:10: 22:e6:a7:39:42:a3:91:51:a2:37:26:7d:92:b5:51: 57:42:fa:6f:74:bf:bb:62:b0:67:2d:be:0d:fd:c6: 2e:eb:8c:06:2c:28:6a:d2:ef:54:ca:94:32:9e:a3: 04:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:49:16:08:92:A5:19:4B:98:0A:6B:69:17:A8:22:59:A0:5A:6C:64 X509v3 Authority Key Identifier: keyid:51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/8EkWCJKlGUuYCmtpF6giWaBabGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.170.5.0-185.170.7.255 Signature Algorithm: sha256WithRSAEncryption 7f:b2:07:4d:ab:1c:9d:10:8d:a3:1f:c4:e9:35:6c:2c:8e:10: c5:63:9b:7a:19:2f:e0:e6:d1:04:b8:f0:fa:e4:90:f0:7e:3e: 26:e5:bc:a9:2c:ea:fd:00:2c:c6:51:52:36:48:6d:80:27:b4: a7:f2:15:53:79:41:d0:72:ef:9b:50:61:0d:49:fa:ee:5a:3e: 07:f7:df:fa:8d:2e:5a:4f:42:2c:f5:7f:9c:6f:96:c2:71:1d: 5b:bc:0d:0e:4d:49:7c:ce:69:a9:a6:0f:7f:db:54:a8:53:73: 3f:7a:04:48:20:11:6e:4d:07:49:aa:49:a0:86:d9:8c:8e:c1: 03:29:b7:b4:04:68:fc:c7:ef:89:71:8d:a4:65:d0:95:06:47: ce:88:67:5f:00:1e:d6:08:77:fd:87:e6:a4:c0:42:35:4c:e0: ed:03:5b:1f:f6:c1:f2:ea:0d:ab:16:1c:a4:14:bf:27:e1:97: a4:3d:df:86:02:b2:e3:e9:90:5a:a1:d2:b4:7a:87:5a:1f:e4: f7:14:f0:ac:8f:14:25:59:7f:7c:47:dd:a9:9a:cb:96:43:be: 1c:20:38:e0:e3:5c:43:b3:4c:0f:65:00:a0:4d:31:3c:ff:9c: b8:2e:18:83:c6:0c:6b:dc:63:32:36:17:fe:35:ff:a3:d8:43: 41:a0:8b:1c -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+OQurA7uNcl85jaeXWYOUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjJjNDAxY2U1YzllODgxY2Q5YTNiZThlZmVjNjAwMjJk YTBlYjYwHhcNMjYwMTAyMTAyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDQ5MTYwODkyYTUxOTRiOTgwYTZiNjkxN2E4MjI1OWEwNWE2YzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnrx3GxjHFBSvJX4BDMmQjV9L8Dz Wdc2gP2kuomIKK8PYi8ctOUaJvvTuWzpo6mO41ES8Rc8A7jRm5nOHswqfU/g6ef7 6wYs7Fl4TMKhxM/F6T613Ax8nHdl41zMZgVOpXByH6fQwHUCzGMpl0Ran1fsN8LX /y4+gI+drD7iutUpA75G5fLDONMHSbBoTdQgkw2hqwo0bPprHbxhyxD3C618Yft+ 4rIWOu8DP7KsA0IClIWeCx2sSGoNBf/ZFDPnUTOSX1pmjQyb2pD0PcwkahAi5qc5 QqORUaI3Jn2StVFXQvpvdL+7YrBnLb4N/cYu64wGLChq0u9UypQynqMEFwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFPBJFgiSpRlLmApraReoIlmgWmxkMB8GA1UdIwQY MBaAFFGyxAHOXJ6IHNmjvo7+xgAi2g62MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJMRUFjNWNub2djMmFPLWp2N0dBQ0xhRHJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83OTRmMzYtOWQyYS00MWJkLTkyOGMt OTRkMWIxZDE2Yjg1LzEvOEVrV0NKS2xHVXVZQ210cEY2Z2lXYUJhYkdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS83OTRmMzYtOWQyYS00MWJkLTkyOGMtOTRkMWIxZDE2Yjg1 LzEvVWJMRUFjNWNub2djMmFPLWp2N0dBQ0xhRHJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5qgUD BAO5qgAwDQYJKoZIhvcNAQELBQADggEBAH+yB02rHJ0QjaMfxOk1bCyOEMVjm3oZ L+Dm0QS48PrkkPB+PiblvKks6v0ALMZRUjZIbYAntKfyFVN5QdBy75tQYQ1J+u5a Pgf33/qNLlpPQiz1f5xvlsJxHVu8DQ5NSXzOaammD3/bVKhTcz96BEggEW5NB0mq SaCG2YyOwQMpt7QEaPzH74lxjaRl0JUGR86IZ18AHtYId/2H5qTAQjVM4O0DWx/2 wfLqDasWHKQUvyfhl6Q934YCsuPpkFqh0rR6h1of5PcU8KyPFCVZf3xH3amay5ZD vhwgOODjXEOzTA9lAKBNMTz/nLguGIPGDGvcYzI2F/41/6PYQ0Ggixw= -----END CERTIFICATE-----Generated at Sat Jan 10 22:50:53 2026 by rpki-client