This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/8w6m5NnR1eePjTKAqLOZw1rjRI8.roa File: 8w6m5NnR1eePjTKAqLOZw1rjRI8.roa (raw, json) Hash identifier: exUf5APWb8SL2WI1lWDH0JBlU8x3ngmAqcoAjSEqKyY= Subject key identifier: F3:0E:A6:E4:D9:D1:D5:E7:8F:8D:32:80:A8:B3:99:C3:5A:E3:44:8F Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B791076FC7690A17A6A7BC9C42FC953E9 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/8w6m5NnR1eePjTKAqLOZw1rjRI8.roa Signing time: Thu 01 Jan 2026 10:18:00 +0000 ROA not before: Thu 01 Jan 2026 10:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215812 IP address blocks: 188.132.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:76:fc:76:90:a1:7a:6a:7b:c9:c4:2f:c9:53:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f30ea6e4d9d1d5e78f8d3280a8b399c35ae3448f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c9:95:bb:d1:86:46:54:d6:80:39:8e:b1:1f: c0:3c:c0:91:9a:a5:09:b0:3e:f0:a1:3a:18:2e:d3: 36:db:2e:9b:e0:bc:f5:c7:a0:66:1c:b7:6c:74:1e: 32:0d:74:b7:d6:27:31:e6:63:9f:37:8f:86:7f:84: 63:ed:ec:f7:69:41:67:92:ff:ae:e3:eb:7a:24:fe: aa:9e:a3:1d:bb:4f:e0:e3:c1:6c:54:64:ac:b6:ed: b8:01:cc:80:d4:51:18:b8:e4:ce:2e:19:34:f9:82: 9a:e9:04:c9:e6:72:5b:d5:64:ba:04:c2:38:04:eb: fe:81:2f:b8:66:06:16:53:79:98:05:39:ca:2d:c8: 8c:92:9c:2e:bd:79:4b:79:44:30:30:45:e0:99:f5: 7a:f9:de:f8:80:43:f5:94:45:e6:82:ff:78:0b:d4: 71:fb:09:7c:b0:f5:f8:de:4a:f8:bc:57:93:ab:a0: 63:a0:3b:c0:f4:13:8c:79:ca:bb:07:2c:91:92:86: 4f:d1:c4:bc:d0:da:15:c2:2c:61:37:d0:d4:1f:b2: ac:da:f2:7e:f4:fb:3e:06:d3:3f:35:54:fb:65:84: ea:df:57:b3:7f:ff:13:98:4b:37:99:24:31:01:d8: 26:53:73:d7:53:49:f6:cd:39:0f:18:4f:aa:df:26: 05:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:0E:A6:E4:D9:D1:D5:E7:8F:8D:32:80:A8:B3:99:C3:5A:E3:44:8F X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/8w6m5NnR1eePjTKAqLOZw1rjRI8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.132.220.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:44:68:2a:e5:78:f2:13:6d:fd:93:a6:c6:2f:1a:3b:5c:55: dc:c6:53:eb:e5:45:c2:4e:35:0f:72:17:c8:af:74:2c:d4:0b: 51:09:76:37:12:92:ee:77:37:f7:77:b2:6e:72:31:1e:51:63: e2:65:94:2e:6a:a4:a3:42:d8:5a:32:e4:47:3e:f3:ec:ac:2b: 30:2b:3a:6a:d6:54:e3:81:be:6a:de:da:c4:b8:78:50:b9:a8: 00:35:86:c1:01:45:b5:60:ee:b4:22:37:84:40:f9:fe:ec:42: 88:cd:58:7c:d4:7d:9d:12:ff:eb:1d:04:fd:dd:32:88:16:8d: bb:ca:52:5b:27:28:14:75:11:fb:0d:e8:91:ca:d2:d6:cf:3f: 13:b4:90:52:54:a3:f8:88:a7:e1:11:10:ae:c4:10:65:29:e5: 95:e7:25:46:9b:b3:81:b0:f7:e9:94:e7:44:4b:1e:9d:67:dd: e7:05:8b:ce:b9:3b:7c:f9:d0:8b:24:01:9d:1a:7c:c3:62:01: 2a:78:0c:02:59:69:f1:c9:24:24:d7:c8:86:f8:69:7f:3e:5e: 92:fa:ee:95:09:d9:e4:a9:f3:35:d4:36:32:71:47:8a:a7:d0: 35:15:8e:e1:87:12:d3:14:e0:96:00:81:ab:11:07:fe:00:18: a3:6e:a6:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EHb8dpChemp7ycQvyVPpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzBlYTZlNGQ5ZDFkNWU3OGY4ZDMyODBhOGIzOTljMzVhZTM0NDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1smVu9GGRlTWgDmOsR/APMCRmqUJ sD7woToYLtM22y6b4Lz1x6BmHLdsdB4yDXS31icx5mOfN4+Gf4Rj7ez3aUFnkv+u 4+t6JP6qnqMdu0/g48FsVGSstu24AcyA1FEYuOTOLhk0+YKa6QTJ5nJb1WS6BMI4 BOv+gS+4ZgYWU3mYBTnKLciMkpwuvXlLeUQwMEXgmfV6+d74gEP1lEXmgv94C9Rx +wl8sPX43kr4vFeTq6BjoDvA9BOMecq7ByyRkoZP0cS80NoVwixhN9DUH7Ks2vJ+ 9Ps+BtM/NVT7ZYTq31ezf/8TmEs3mSQxAdgmU3PXU0n2zTkPGE+q3yYFVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPMOpuTZ0dXnj40ygKizmcNa40SPMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvOHc2bTVOblIxZWVQalRLQXFMT1p3MXJqUkk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvITcMA0G CSqGSIb3DQEBCwUAA4IBAQBvRGgq5XjyE239k6bGLxo7XFXcxlPr5UXCTjUPchfI r3Qs1AtRCXY3EpLudzf3d7JucjEeUWPiZZQuaqSjQthaMuRHPvPsrCswKzpq1lTj gb5q3trEuHhQuagANYbBAUW1YO60IjeEQPn+7EKIzVh81H2dEv/rHQT93TKIFo27 ylJbJygUdRH7DeiRytLWzz8TtJBSVKP4iKfhERCuxBBlKeWV5yVGm7OBsPfplOdE Sx6dZ93nBYvOuTt8+dCLJAGdGnzDYgEqeAwCWWnxySQk18iG+Gl/Pl6S+u6VCdnk qfM11DYycUeKp9A1FY7hhxLTFOCWAIGrEQf+ABijbqZi -----END CERTIFICATE-----Generated at Wed Jan 21 13:33:08 2026 by rpki-client