This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/ao8cSCiGJ7ClPx10CHs-9lIIGq8.roa File: ao8cSCiGJ7ClPx10CHs-9lIIGq8.roa (raw, json) Hash identifier: P9VwufsfbDvR02msSd4m6J1kCxDfxah00sWQYJJy8SE= Subject key identifier: 6A:8F:1C:48:28:86:27:B0:A5:3F:1D:74:08:7B:3E:F6:52:08:1A:AF Certificate issuer: /CN=2cfaa22bd65cac82858ea091686d5b3b4be3bd39 Certificate serial: 019B76EB94E00BCAEAB70074BED098B985CD Authority key identifier: 2C:FA:A2:2B:D6:5C:AC:82:85:8E:A0:91:68:6D:5B:3B:4B:E3:BD:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/ao8cSCiGJ7ClPx10CHs-9lIIGq8.roa Signing time: Thu 01 Jan 2026 00:18:29 +0000 ROA not before: Thu 01 Jan 2026 00:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204046 IP address blocks: 185.116.104.0/22 maxlen: 24 2a06:7d80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:94:e0:0b:ca:ea:b7:00:74:be:d0:98:b9:85:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cfaa22bd65cac82858ea091686d5b3b4be3bd39 Validity Not Before: Jan 1 00:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a8f1c48288627b0a53f1d74087b3ef652081aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:18:7b:6d:ed:26:53:84:3e:3a:74:58:cf:26: 40:ab:23:85:bf:fb:86:3b:0c:87:69:16:e1:65:bc: 47:3d:4e:27:11:54:69:3b:bd:b7:3d:28:0d:4e:db: d8:da:4e:bb:15:66:b8:90:97:e1:a4:9c:5e:66:6f: fd:1e:81:0a:f7:d1:00:fd:24:33:fd:7b:7b:74:e7: 3f:2a:b6:03:3c:65:34:bb:39:51:4f:76:84:be:be: 7f:c3:1d:be:09:61:53:ab:90:e7:d1:70:41:fe:a4: eb:a1:0f:57:3f:e7:b5:e4:91:7b:6d:38:f1:10:f4: 10:00:ea:04:cf:2c:6c:25:bc:08:32:8a:af:05:49: 9d:f4:be:4f:a5:d4:4d:af:4d:90:a5:7b:8a:2c:ad: 52:60:e3:57:47:5f:1d:fe:3a:74:43:7e:2a:ff:c5: b9:73:3f:bc:84:f3:90:9f:04:b0:d8:81:30:72:bb: fd:dd:50:f5:2f:65:64:31:d7:b1:e3:3e:0c:dd:4c: 14:15:97:f8:73:05:66:9e:4a:78:bf:2a:75:c2:e8: 86:e3:a9:be:45:a1:a8:95:9a:3a:5d:a9:b4:c3:d4: b0:c0:93:64:31:ae:97:c4:14:3f:3f:60:c4:61:a0: 93:fc:65:1b:a4:b8:0a:ae:b2:26:35:07:2a:09:d7: 2e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:8F:1C:48:28:86:27:B0:A5:3F:1D:74:08:7B:3E:F6:52:08:1A:AF X509v3 Authority Key Identifier: keyid:2C:FA:A2:2B:D6:5C:AC:82:85:8E:A0:91:68:6D:5B:3B:4B:E3:BD:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/ao8cSCiGJ7ClPx10CHs-9lIIGq8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.116.104.0/22 IPv6: 2a06:7d80::/29 Signature Algorithm: sha256WithRSAEncryption 76:e9:df:5c:10:8f:ff:36:3f:de:f2:ea:a5:9a:ad:9e:5f:95: 5b:53:c1:fa:b9:df:92:96:c8:6e:be:c7:8f:c9:89:55:3c:1d: 07:f5:40:91:c3:6c:6d:66:cf:16:71:d9:28:d7:8c:0f:f2:ea: c9:ea:10:69:b2:d0:49:2b:05:68:fd:d1:c7:ae:be:17:ff:db: ac:52:3f:2a:7d:64:bc:5d:d4:9d:b4:8d:a9:e1:68:d9:aa:4f: 79:82:c5:fa:3d:c4:84:d9:4e:b3:94:ac:7f:55:20:3e:91:82: f3:f0:2e:ac:4c:4f:ec:b6:d7:ae:44:c2:c5:96:c6:0f:fb:d4: 8f:49:14:f8:41:36:e6:78:12:3f:88:d1:19:0b:8c:43:63:59: 65:75:93:3e:6a:bd:ea:7c:85:82:60:c7:c9:c6:98:7b:aa:69: bd:21:e1:c5:7f:d8:23:e5:9d:94:e5:57:27:8f:7f:d8:3f:ba: b5:31:c2:db:e7:12:80:83:43:5e:45:41:12:1a:f5:f7:88:63: fd:c8:1a:64:f8:83:26:00:b5:02:e7:c7:8c:c5:e5:4c:3b:2b: a0:28:1d:7e:c0:59:7f:89:15:99:da:28:e3:c3:6f:0b:51:93: ff:f2:59:5f:5e:b2:29:10:76:ef:cd:85:c0:23:4c:a4:1f:b9: e0:17:7d:e8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt265TgC8rqtwB0vtCYuYXNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZmFhMjJiZDY1Y2FjODI4NThlYTA5MTY4NmQ1YjNiNGJl M2JkMzkwHhcNMjYwMTAxMDAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YThmMWM0ODI4ODYyN2IwYTUzZjFkNzQwODdiM2VmNjUyMDgxYWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xh7be0mU4Q+OnRYzyZAqyOFv/uG OwyHaRbhZbxHPU4nEVRpO723PSgNTtvY2k67FWa4kJfhpJxeZm/9HoEK99EA/SQz /Xt7dOc/KrYDPGU0uzlRT3aEvr5/wx2+CWFTq5Dn0XBB/qTroQ9XP+e15JF7bTjx EPQQAOoEzyxsJbwIMoqvBUmd9L5PpdRNr02QpXuKLK1SYONXR18d/jp0Q34q/8W5 cz+8hPOQnwSw2IEwcrv93VD1L2VkMdex4z4M3UwUFZf4cwVmnkp4vyp1wuiG46m+ RaGolZo6Xam0w9SwwJNkMa6XxBQ/P2DEYaCT/GUbpLgKrrImNQcqCdcuowIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGqPHEgohiewpT8ddAh7PvZSCBqvMB8GA1UdIwQY MBaAFCz6oivWXKyChY6gkWhtWztL4705MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFBxaUs5WmNySUtGanFDUmFHMWJPMHZqdlRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81YmU0NGMtYTRmMi00YmQwLWI1YTct YjQ2ODgzOGM3ZmRmLzEvYW84Y1NDaUdKN0NsUHgxMENIcy05bElJR3E4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS81YmU0NGMtYTRmMi00YmQwLWI1YTctYjQ2ODgzOGM3ZmRm LzEvTFBxaUs5WmNySUtGanFDUmFHMWJPMHZqdlRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuXRoMA0E AgACMAcDBQMqBn2AMA0GCSqGSIb3DQEBCwUAA4IBAQB26d9cEI//Nj/e8uqlmq2e X5VbU8H6ud+SlshuvsePyYlVPB0H9UCRw2xtZs8Wcdko14wP8urJ6hBpstBJKwVo /dHHrr4X/9usUj8qfWS8XdSdtI2p4WjZqk95gsX6PcSE2U6zlKx/VSA+kYLz8C6s TE/stteuRMLFlsYP+9SPSRT4QTbmeBI/iNEZC4xDY1lldZM+ar3qfIWCYMfJxph7 qmm9IeHFf9gj5Z2U5Vcnj3/YP7q1McLb5xKAg0NeRUESGvX3iGP9yBpk+IMmALUC 58eMxeVMOyugKB1+wFl/iRWZ2ijjw28LUZP/8llfXrIpEHbvzYXAI0ykH7ngF33o -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:52 2026 by rpki-client