This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/_8dqyaacWAiBj7GrWnfshRhnGVY.roa File: _8dqyaacWAiBj7GrWnfshRhnGVY.roa (raw, json) Hash identifier: sW41H20Oh0pfgWyCjhtCKwUXmZEC6nQrjm/lQBX3AVA= Subject key identifier: FF:C7:6A:C9:A6:9C:58:08:81:8F:B1:AB:5A:77:EC:85:18:67:19:56 Certificate issuer: /CN=ab1c29c95d248cbffa744ab34e47eacca73550d1 Certificate serial: 019B79114D8A806C0B1D09262A0315E9EBD6 Authority key identifier: AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/_8dqyaacWAiBj7GrWnfshRhnGVY.roa Signing time: Thu 01 Jan 2026 10:18:55 +0000 ROA not before: Thu 01 Jan 2026 10:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212605 IP address blocks: 185.184.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:4d:8a:80:6c:0b:1d:09:26:2a:03:15:e9:eb:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab1c29c95d248cbffa744ab34e47eacca73550d1 Validity Not Before: Jan 1 10:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffc76ac9a69c5808818fb1ab5a77ec8518671956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:31:36:79:af:65:38:58:a1:27:14:48:ad:e8: 70:0d:7c:f9:ca:3f:6c:ae:42:43:3d:b2:70:86:c2: 16:01:8c:da:5e:90:fb:ba:40:5b:92:ea:f9:24:cf: 55:ea:06:3f:1a:48:cd:ce:b4:be:67:18:59:cf:30: 43:02:46:b1:9d:76:37:cc:7a:31:a1:bd:4f:61:99: a3:2b:4a:b8:cd:0c:48:1b:d4:f3:de:bc:99:a2:0f: 03:7f:b8:7e:59:d8:20:94:b9:06:4e:59:fd:34:af: 3a:e3:03:41:60:86:83:98:4b:51:44:9f:29:f3:b8: 51:53:5c:c7:39:81:71:18:6c:19:94:93:4e:cd:06: f1:10:66:f0:9c:36:b9:7a:9b:9c:cb:01:eb:cf:26: da:76:70:c4:ec:ba:55:73:b8:c9:43:1c:c2:40:aa: 92:ad:79:56:7a:38:af:e6:08:13:67:92:d4:af:9d: ee:e1:ed:dd:dd:15:a7:3e:c3:a4:8f:f6:1e:5a:20: a9:b2:12:0d:1c:7e:02:c0:b2:75:76:66:32:a4:37: 57:3a:f0:b8:b3:c5:e3:a0:bd:1a:51:68:a6:57:8c: b6:79:e9:16:15:1a:5b:7a:53:f0:56:9c:b4:b4:d2: d7:c8:81:5e:22:b5:63:91:92:5e:ce:a9:46:70:f9: b1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C7:6A:C9:A6:9C:58:08:81:8F:B1:AB:5A:77:EC:85:18:67:19:56 X509v3 Authority Key Identifier: keyid:AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/_8dqyaacWAiBj7GrWnfshRhnGVY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.184.230.0/24 Signature Algorithm: sha256WithRSAEncryption 08:40:63:7a:58:44:db:a1:f5:29:b5:93:7f:80:12:36:c0:ce: c0:ed:f1:22:42:79:dc:c4:d2:31:92:15:d5:32:75:8c:56:a0: 48:37:62:db:39:c1:30:0a:b1:83:92:65:6c:b4:5c:e8:ca:af: 5c:22:15:a9:a2:09:6e:0a:99:16:7b:26:e6:68:76:5d:1a:b0: 10:1c:96:af:d7:23:a9:9a:5d:fa:b9:0c:59:9a:9a:96:bd:77: 26:45:1a:3d:d1:8c:61:9f:fe:24:69:b8:18:b7:4f:23:60:d5: 16:22:ae:9c:84:f7:07:3f:f7:88:81:cb:04:72:30:53:a6:5d: e3:23:ce:e5:57:37:d5:67:1f:8d:31:ef:4a:30:63:cc:1f:11: b7:54:3e:d9:c9:ec:23:8d:c7:68:8c:20:ae:a9:fc:b3:b0:6e: ae:f8:0e:ee:b2:37:07:45:c4:bf:2b:e3:fb:86:bb:28:5c:c9: af:6f:d0:1d:3a:2a:92:ba:b9:50:88:6c:2c:f5:f4:9b:9d:d5: f2:83:9e:cc:18:f3:a2:97:7f:df:07:d3:1f:e2:73:7f:e6:3a: be:05:46:63:e2:fc:2f:8e:f1:f7:9d:5d:d8:54:7f:8a:77:1d: d2:6b:d9:2d:bc:6a:3a:fa:ab:1d:92:60:72:55:db:74:46:1c: cf:0c:58:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EU2KgGwLHQkmKgMV6evWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMWMyOWM5NWQyNDhjYmZmYTc0NGFiMzRlNDdlYWNjYTcz NTUwZDEwHhcNMjYwMTAxMTAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmM3NmFjOWE2OWM1ODA4ODE4ZmIxYWI1YTc3ZWM4NTE4NjcxOTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TE2ea9lOFihJxRIrehwDXz5yj9s rkJDPbJwhsIWAYzaXpD7ukBbkur5JM9V6gY/GkjNzrS+ZxhZzzBDAkaxnXY3zHox ob1PYZmjK0q4zQxIG9Tz3ryZog8Df7h+WdgglLkGTln9NK864wNBYIaDmEtRRJ8p 87hRU1zHOYFxGGwZlJNOzQbxEGbwnDa5epucywHrzybadnDE7LpVc7jJQxzCQKqS rXlWejiv5ggTZ5LUr53u4e3d3RWnPsOkj/YeWiCpshINHH4CwLJ1dmYypDdXOvC4 s8XjoL0aUWimV4y2eekWFRpbelPwVpy0tNLXyIFeIrVjkZJezqlGcPmxzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP/HasmmnFgIgY+xq1p37IUYZxlWMB8GA1UdIwQY MBaAFKscKcldJIy/+nRKs05H6synNVDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXh3cHlWMGtqTF82ZEVxelRrZnF6S2MxVU5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My85YWVhOGMtMjE5OS00ZDQ2LTkxZWQt ZWE2Njg0NDE0OWVlLzEvXzhkcXlhYWNXQWlCajdHclduZnNoUmhuR1ZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My85YWVhOGMtMjE5OS00ZDQ2LTkxZWQtZWE2Njg0NDE0OWVl LzEvcXh3cHlWMGtqTF82ZEVxelRrZnF6S2MxVU5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubjmMA0G CSqGSIb3DQEBCwUAA4IBAQAIQGN6WETbofUptZN/gBI2wM7A7fEiQnncxNIxkhXV MnWMVqBIN2LbOcEwCrGDkmVstFzoyq9cIhWpogluCpkWeybmaHZdGrAQHJav1yOp ml36uQxZmpqWvXcmRRo90Yxhn/4kabgYt08jYNUWIq6chPcHP/eIgcsEcjBTpl3j I87lVzfVZx+NMe9KMGPMHxG3VD7ZyewjjcdojCCuqfyzsG6u+A7usjcHRcS/K+P7 hrsoXMmvb9AdOiqSurlQiGws9fSbndXyg57MGPOil3/fB9Mf4nN/5jq+BUZj4vwv jvH3nV3YVH+Kdx3Sa9ktvGo6+qsdkmByVdt0RhzPDFhS -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:15 2026 by rpki-client