This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/aS0hnguB3wClSQpmYD5FzYEMPg0.roa File: aS0hnguB3wClSQpmYD5FzYEMPg0.roa (raw, json) Hash identifier: 31GWKlXGu0Qmox7TLiPrHYDKyJ/J1v6CE/ERUrNKaLk= Subject key identifier: 69:2D:21:9E:0B:81:DF:00:A5:49:0A:66:60:3E:45:CD:81:0C:3E:0D Certificate issuer: /CN=8d3402eae027abcd926090cc0ddeff80aab92c35 Certificate serial: 019B79ED359541918A170F1F3FF864B19705 Authority key identifier: 8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/aS0hnguB3wClSQpmYD5FzYEMPg0.roa Signing time: Thu 01 Jan 2026 14:19:07 +0000 ROA not before: Thu 01 Jan 2026 14:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 185.186.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.crl rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 02:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:35:95:41:91:8a:17:0f:1f:3f:f8:64:b1:97:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3402eae027abcd926090cc0ddeff80aab92c35 Validity Not Before: Jan 1 14:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=692d219e0b81df00a5490a66603e45cd810c3e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:76:4f:83:07:71:e0:18:93:25:55:be:b6:e8: cb:d5:c2:3b:2b:7c:17:aa:c9:f8:f3:24:bc:aa:a5: d2:ce:64:e3:70:0c:7c:bf:b3:b8:41:6f:2c:4d:e9: 58:37:a6:2b:a0:8d:13:32:ff:61:20:47:74:48:e3: 50:b8:5f:17:95:96:a8:d8:b0:34:70:15:cd:79:47: 07:7e:e8:bb:d8:cc:c8:42:24:3d:89:86:b2:0c:6f: b0:67:ac:e8:bf:c8:05:47:db:52:85:bb:34:2b:c5: 19:36:27:15:b7:c3:78:4e:cc:b3:7b:c4:46:e5:89: 44:2a:78:f9:b2:a1:74:f5:b2:33:0f:31:87:ff:b3: 20:4f:59:45:6a:8b:5f:a8:f5:0e:e8:4c:cc:c8:55: 45:13:b3:a9:1a:23:bf:68:5d:19:ae:11:3f:63:99: bd:06:83:68:21:83:bb:8b:db:05:46:85:0f:b2:1f: fb:27:0c:a6:22:8f:69:35:19:5d:8e:38:8f:9f:fa: 8b:3e:45:04:c1:bd:63:0b:c4:d8:ea:75:f0:07:d4: ae:b0:e8:ea:e9:49:e9:37:e4:a9:4d:f0:77:b3:d2: ec:6f:05:4a:f9:89:78:ce:7f:87:8c:b0:a2:95:fd: a0:01:96:78:b5:bc:7f:9e:23:49:b4:08:2f:73:46: bb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2D:21:9E:0B:81:DF:00:A5:49:0A:66:60:3E:45:CD:81:0C:3E:0D X509v3 Authority Key Identifier: keyid:8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/aS0hnguB3wClSQpmYD5FzYEMPg0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.186.76.0/24 Signature Algorithm: sha256WithRSAEncryption cf:ed:7d:82:39:70:cc:a6:c6:b2:45:01:f6:66:6e:fb:51:9c: ad:90:14:b7:7e:87:34:da:fc:25:6e:06:a1:4d:d9:15:a3:e8: 33:d7:c0:19:7f:c2:29:f0:a9:27:99:f4:72:98:b2:82:7d:da: 45:38:3e:e9:f9:d6:6c:e9:d7:a8:00:52:64:3c:7d:db:ad:55: 9c:13:9b:75:3c:c0:47:45:2c:9f:ff:f8:34:d2:89:23:4e:e5: 9c:aa:d1:7c:96:f4:37:01:8a:86:66:18:b1:67:58:ba:f6:c0: f2:6e:21:dd:c7:37:9c:46:a7:5a:9e:94:3a:0e:8c:62:9b:91: 09:fc:37:f0:b6:59:54:ac:72:55:3d:fc:e7:0d:4d:4a:7b:18: 4f:fe:20:7b:1f:a9:19:0e:f3:55:b9:ca:28:bd:0d:3d:45:99: f1:5e:39:a1:c1:a1:64:4f:db:eb:d7:17:8c:68:51:57:fa:53: 98:f1:0d:f3:ea:4d:19:d7:71:0f:d4:79:2b:9a:13:5e:a5:4b: 9b:3c:ba:4e:b3:2c:b2:ff:f2:f6:01:6c:16:9f:dd:6f:d1:96: e0:61:0d:c2:2f:27:94:80:3d:98:43:a9:59:10:cf:bc:dc:f6: 8a:ca:d9:d7:f5:cd:d9:d3:a9:a9:e7:75:28:83:f4:73:c1:7a: 6d:11:e8:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57TWVQZGKFw8fP/hksZcFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMzQwMmVhZTAyN2FiY2Q5MjYwOTBjYzBkZGVmZjgwYWFi OTJjMzUwHhcNMjYwMTAxMTQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTJkMjE5ZTBiODFkZjAwYTU0OTBhNjY2MDNlNDVjZDgxMGMzZTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3ZPgwdx4BiTJVW+tujL1cI7K3wX qsn48yS8qqXSzmTjcAx8v7O4QW8sTelYN6YroI0TMv9hIEd0SONQuF8XlZao2LA0 cBXNeUcHfui72MzIQiQ9iYayDG+wZ6zov8gFR9tShbs0K8UZNicVt8N4Tsyze8RG 5YlEKnj5sqF09bIzDzGH/7MgT1lFaotfqPUO6EzMyFVFE7OpGiO/aF0ZrhE/Y5m9 BoNoIYO7i9sFRoUPsh/7JwymIo9pNRldjjiPn/qLPkUEwb1jC8TY6nXwB9SusOjq 6UnpN+SpTfB3s9LsbwVK+Yl4zn+HjLCilf2gAZZ4tbx/niNJtAgvc0a7QQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGktIZ4Lgd8ApUkKZmA+Rc2BDD4NMB8GA1UdIwQY MBaAFI00AurgJ6vNkmCQzA3e/4CquSw1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalRRQzZ1QW5xODJTWUpETURkN19nS3E1TERVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81NTgzNDgtNDkxMi00YmMxLThlNTgt ZjkyZDdkYzM3ZDJlLzEvYVMwaG5ndUIzd0NsU1FwbVlENUZ6WUVNUGcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81NTgzNDgtNDkxMi00YmMxLThlNTgtZjkyZDdkYzM3ZDJl LzEvalRRQzZ1QW5xODJTWUpETURkN19nS3E1TERVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubpMMA0G CSqGSIb3DQEBCwUAA4IBAQDP7X2COXDMpsayRQH2Zm77UZytkBS3foc02vwlbgah TdkVo+gz18AZf8Ip8KknmfRymLKCfdpFOD7p+dZs6deoAFJkPH3brVWcE5t1PMBH RSyf//g00okjTuWcqtF8lvQ3AYqGZhixZ1i69sDybiHdxzecRqdanpQ6Doxim5EJ /DfwtllUrHJVPfznDU1KexhP/iB7H6kZDvNVucoovQ09RZnxXjmhwaFkT9vr1xeM aFFX+lOY8Q3z6k0Z13EP1HkrmhNepUubPLpOsyyy//L2AWwWn91v0ZbgYQ3CLyeU gD2YQ6lZEM+83PaKytnX9c3Z06mp53Uog/RzwXptEeh/ -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:54 2026 by rpki-client