This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/u8GJzQSAm-GKtJeGy5swVGHnmuw.roa File: u8GJzQSAm-GKtJeGy5swVGHnmuw.roa (raw, json) Hash identifier: XBITkt7W+EBNbhhroLYYPKNKyDfk5alZ3rm7ik7fTf4= Subject key identifier: BB:C1:89:CD:04:80:9B:E1:8A:B4:97:86:CB:9B:30:54:61:E7:9A:EC Certificate issuer: /CN=2b976275547b75df2b04c4f9b291c0710c507740 Certificate serial: 019B78A29AD75D12473E6B4927C20F29BD46 Authority key identifier: 2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/u8GJzQSAm-GKtJeGy5swVGHnmuw.roa Signing time: Thu 01 Jan 2026 08:18:00 +0000 ROA not before: Thu 01 Jan 2026 08:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202975 IP address blocks: 85.116.132.0/22 maxlen: 22 89.105.88.0/24 maxlen: 24 89.105.89.0/24 maxlen: 24 185.89.222.0/23 maxlen: 23 185.135.100.0/23 maxlen: 23 185.135.102.0/24 maxlen: 24 2a06:f2c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:9a:d7:5d:12:47:3e:6b:49:27:c2:0f:29:bd:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b976275547b75df2b04c4f9b291c0710c507740 Validity Not Before: Jan 1 08:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbc189cd04809be18ab49786cb9b305461e79aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:32:ee:c4:a2:94:86:53:69:a3:be:3c:07:e1: c0:1f:26:7d:c5:de:1b:42:cd:5a:49:98:e3:86:1a: ce:92:f7:ea:fa:4e:71:6f:c0:c0:4c:59:31:11:d0: 49:8b:1b:4a:ec:07:bc:64:34:33:88:ce:b5:d4:19: 4c:53:52:96:07:0a:5f:f2:3a:ad:fb:6f:ba:57:00: 7b:ee:50:fc:17:ad:3f:4a:26:7f:ad:95:13:2f:85: 64:1e:3c:6f:15:67:03:ef:a0:a4:36:64:38:55:59: 42:b6:2a:43:eb:8b:22:e4:29:06:f6:8a:f8:4a:c5: 54:03:7b:fd:2d:5b:01:f1:ff:a0:c4:46:f9:df:36: 15:67:83:9e:e0:7b:18:cb:d0:b0:60:06:85:0a:d1: 7f:ed:de:3a:b8:57:d0:08:bf:0c:48:52:09:90:bc: 64:f2:3c:da:2c:a9:2a:29:c9:53:7d:b9:92:5c:99: a9:80:2f:89:f7:fb:75:57:73:28:8d:9c:4d:c3:29: 63:c4:a4:56:63:6e:fe:9f:f6:06:ae:7c:20:64:4d: 07:a0:fe:72:f2:44:dc:18:88:22:4a:8f:fb:d8:94: cb:dd:11:d2:39:ae:65:bc:61:a6:4d:b9:84:18:0b: 59:b4:12:8c:83:9b:ba:30:64:22:07:3a:2a:6a:80: 2e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C1:89:CD:04:80:9B:E1:8A:B4:97:86:CB:9B:30:54:61:E7:9A:EC X509v3 Authority Key Identifier: keyid:2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/u8GJzQSAm-GKtJeGy5swVGHnmuw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.116.132.0/22 89.105.88.0/23 185.89.222.0/23 185.135.100.0-185.135.102.255 IPv6: 2a06:f2c0::/29 Signature Algorithm: sha256WithRSAEncryption 67:7d:69:88:22:0b:18:10:5c:08:b9:6b:ca:0a:63:5d:a2:db: 4e:a7:de:06:e5:cd:02:70:07:64:38:c7:c8:2d:3a:bf:69:5f: 5f:06:eb:d3:78:38:42:c6:67:84:ac:d2:0e:f6:7f:80:07:1e: 46:a4:1b:ea:17:ec:74:d0:99:b1:28:61:c3:85:96:f0:7f:b0: 3c:72:8e:c5:45:a0:3b:a8:ab:96:86:3d:67:de:45:45:bf:09: 4c:b8:ba:81:67:b3:5c:fc:1e:50:bd:f6:d0:af:b4:cd:db:03: 6a:76:64:95:52:61:0d:6d:8b:8b:7e:c8:a9:97:76:2d:c6:b8: 04:fa:a0:1c:5a:2d:7f:a0:85:bc:06:cc:06:b7:c5:1e:23:48: c6:e1:ed:e0:f3:9d:73:b7:ab:81:94:0f:ef:8c:ce:3b:93:01: f0:af:5f:56:19:f9:97:95:89:c3:12:61:b4:c7:98:11:4d:c7: cc:cb:00:a5:7f:8b:00:a7:ab:59:32:3f:71:23:06:02:5f:86: 6f:37:97:2d:77:d7:78:d1:d6:bc:4b:0b:e2:4a:cd:8e:50:17: f5:7f:cf:d9:0d:0b:e4:49:e4:61:09:11:6c:47:02:c4:62:fa: a9:b1:8c:74:b2:2d:10:da:de:b5:01:e2:38:88:fb:a2:e6:81: 50:a1:16:d4 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt4oprXXRJHPmtJJ8IPKb1GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiOTc2Mjc1NTQ3Yjc1ZGYyYjA0YzRmOWIyOTFjMDcxMGM1 MDc3NDAwHhcNMjYwMTAxMDgxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmMxODljZDA0ODA5YmUxOGFiNDk3ODZjYjliMzA1NDYxZTc5YWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTLuxKKUhlNpo748B+HAHyZ9xd4b Qs1aSZjjhhrOkvfq+k5xb8DATFkxEdBJixtK7Ae8ZDQziM611BlMU1KWBwpf8jqt +2+6VwB77lD8F60/SiZ/rZUTL4VkHjxvFWcD76CkNmQ4VVlCtipD64si5CkG9or4 SsVUA3v9LVsB8f+gxEb53zYVZ4Oe4HsYy9CwYAaFCtF/7d46uFfQCL8MSFIJkLxk 8jzaLKkqKclTfbmSXJmpgC+J9/t1V3MojZxNwyljxKRWY27+n/YGrnwgZE0HoP5y 8kTcGIgiSo/72JTL3RHSOa5lvGGmTbmEGAtZtBKMg5u6MGQiBzoqaoAuGwIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFLvBic0EgJvhirSXhsubMFRh55rsMB8GA1UdIwQY MBaAFCuXYnVUe3XfKwTE+bKRwHEMUHdAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzVkaWRWUjdkZDhyQk1UNXNwSEFjUXhRZDBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81OGY0NWYtOGIwNy00ZTZhLTk1NDgt ZDViMGY5MWQ5N2MyLzEvdThHSnpRU0FtLUdLdEplR3k1c3dWR0hubXV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi81OGY0NWYtOGIwNy00ZTZhLTk1NDgtZDViMGY5MWQ5N2My LzEvSzVkaWRWUjdkZDhyQk1UNXNwSEFjUXhRZDBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgAwQCVXSEAwQB WWlYAwQBuVneMAwDBAK5h2QDBAC5h2YwDQQCAAIwBwMFAyoG8sAwDQYJKoZIhvcN AQELBQADggEBAGd9aYgiCxgQXAi5a8oKY12i206n3gblzQJwB2Q4x8gtOr9pX18G 69N4OELGZ4Ss0g72f4AHHkakG+oX7HTQmbEoYcOFlvB/sDxyjsVFoDuoq5aGPWfe RUW/CUy4uoFns1z8HlC99tCvtM3bA2p2ZJVSYQ1ti4t+yKmXdi3GuAT6oBxaLX+g hbwGzAa3xR4jSMbh7eDznXO3q4GUD++MzjuTAfCvX1YZ+ZeVicMSYbTHmBFNx8zL AKV/iwCnq1kyP3EjBgJfhm83ly1313jR1rxLC+JKzY5QF/V/z9kNC+RJ5GEJEWxH AsRi+qmxjHSyLRDa3rUB4jiI+6LmgVChFtQ= -----END CERTIFICATE-----Generated at Tue Jan 27 11:30:31 2026 by rpki-client