This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0K8i7axnX85fzKfjYfqjWpnyJuw.roa File: 0K8i7axnX85fzKfjYfqjWpnyJuw.roa (raw, json) Hash identifier: hxSq8ifE/F1rbur9JneOiIOPslpgNivURiUYMCEkVo0= Subject key identifier: D0:AF:22:ED:AC:67:5F:CE:5F:CC:A7:E3:61:FA:A3:5A:99:F2:26:EC Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B7DBA931C3BAC21FCC2430554BFAAA385 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0K8i7axnX85fzKfjYfqjWpnyJuw.roa Signing time: Fri 02 Jan 2026 08:02:17 +0000 ROA not before: Fri 02 Jan 2026 08:02:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213282 IP address blocks: 185.72.9.0/24 maxlen: 24 188.240.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ba:93:1c:3b:ac:21:fc:c2:43:05:54:bf:aa:a3:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 2 08:02:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0af22edac675fce5fcca7e361faa35a99f226ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e9:26:27:f4:cc:e2:46:1f:80:f8:29:28:ab: eb:12:35:d9:82:47:c7:c0:a9:21:21:60:f3:c2:55: 80:19:20:b7:4a:72:9e:4e:a5:05:df:76:bf:89:81: 22:68:7a:15:7a:77:bf:50:39:15:cf:4d:8a:f2:4a: 67:e1:cd:96:6a:a9:9f:49:6c:72:d9:5c:b7:84:98: 86:94:10:9b:63:fc:a6:bd:d5:8e:e6:9e:6a:1b:a5: d7:eb:75:70:9a:ac:1c:7e:c7:66:30:20:a5:c3:f1: 7a:86:6c:4a:0b:20:d0:e8:1d:58:1b:d7:c3:aa:54: fc:e6:f1:47:f4:8f:37:84:2c:49:ab:7b:39:fd:34: f4:6c:6b:e0:bd:c8:15:d6:3f:14:91:54:6e:1b:29: ee:bb:b9:72:c4:5d:88:b0:f5:28:37:0c:34:93:e8: 4f:4d:c1:11:b7:44:b4:b4:6e:51:16:5c:a4:77:0e: b3:4d:cd:8c:70:f0:5b:42:69:f2:ed:8f:c2:a3:69: 5f:68:30:32:1c:5d:c0:ec:cc:54:1b:42:cf:39:d6: c1:bc:f5:58:04:f7:2c:80:dc:a0:f8:24:e3:45:0f: c6:e3:c9:5a:bc:b7:02:06:3a:92:8a:c2:4c:53:c1: 21:bd:c3:b4:d1:63:03:6a:f7:db:15:78:55:94:d3: ce:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:AF:22:ED:AC:67:5F:CE:5F:CC:A7:E3:61:FA:A3:5A:99:F2:26:EC X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0K8i7axnX85fzKfjYfqjWpnyJuw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.72.9.0/24 188.240.81.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:90:d8:fc:3c:5a:20:56:8e:58:e8:fb:bf:05:08:57:c5:0c: cd:f5:a2:99:33:8e:81:5a:6c:6e:c8:65:b6:4b:7f:cd:c7:84: bd:15:0a:e2:88:20:93:ed:06:42:3e:52:ce:c4:c0:b3:53:ea: 27:b3:d3:5b:98:bf:a7:77:ce:3d:45:6e:53:cd:ce:38:a5:7a: b8:3e:0d:0d:ed:1c:d3:73:29:19:0c:cf:aa:39:71:a4:7d:1d: 20:1c:e6:fb:c2:cc:91:11:dd:0c:cf:43:de:45:90:50:18:2a: 13:c4:53:e5:be:2e:55:38:ae:6c:2f:3c:5e:1f:a5:b4:c1:21: 47:21:91:76:57:1f:04:84:87:21:c0:94:35:22:26:8d:fd:48: 9e:0d:d2:8a:c0:15:bd:39:c1:4a:10:78:fc:13:5f:bd:31:f4: 64:a5:60:f3:f1:49:f0:da:db:1c:38:00:a4:a2:6c:c2:16:97: d0:36:85:ba:7a:d5:bb:40:63:81:41:97:90:07:03:ed:ce:42: 19:fa:db:ed:8c:08:16:5d:00:e4:3f:89:02:e1:ed:19:d9:7c: 9c:34:ea:1e:bf:dc:69:5d:ee:cc:be:e4:2c:65:e5:47:cb:58: 48:59:a2:bb:e0:06:47:d6:f6:fa:b4:29:47:f9:40:22:c9:f6: 5f:a1:a2:68 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9upMcO6wh/MJDBVS/qqOFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAyMDgwMjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGFmMjJlZGFjNjc1ZmNlNWZjY2E3ZTM2MWZhYTM1YTk5ZjIyNmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+kmJ/TM4kYfgPgpKKvrEjXZgkfH wKkhIWDzwlWAGSC3SnKeTqUF33a/iYEiaHoVene/UDkVz02K8kpn4c2WaqmfSWxy 2Vy3hJiGlBCbY/ymvdWO5p5qG6XX63VwmqwcfsdmMCClw/F6hmxKCyDQ6B1YG9fD qlT85vFH9I83hCxJq3s5/TT0bGvgvcgV1j8UkVRuGynuu7lyxF2IsPUoNww0k+hP TcERt0S0tG5RFlykdw6zTc2McPBbQmny7Y/Co2lfaDAyHF3A7MxUG0LPOdbBvPVY BPcsgNyg+CTjRQ/G48lavLcCBjqSisJMU8EhvcO00WMDavfbFXhVlNPOcQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNCvIu2sZ1/OX8yn42H6o1qZ8ibsMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvMEs4aTdheG5YODVmektmallmcWpXcG55SnV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuUgJAwQA vPBRMA0GCSqGSIb3DQEBCwUAA4IBAQAvkNj8PFogVo5Y6Pu/BQhXxQzN9aKZM46B WmxuyGW2S3/Nx4S9FQriiCCT7QZCPlLOxMCzU+ons9NbmL+nd849RW5Tzc44pXq4 Pg0N7RzTcykZDM+qOXGkfR0gHOb7wsyREd0Mz0PeRZBQGCoTxFPlvi5VOK5sLzxe H6W0wSFHIZF2Vx8EhIchwJQ1IiaN/UieDdKKwBW9OcFKEHj8E1+9MfRkpWDz8Unw 2tscOACkomzCFpfQNoW6etW7QGOBQZeQBwPtzkIZ+tvtjAgWXQDkP4kC4e0Z2Xyc NOoev9xpXe7MvuQsZeVHy1hIWaK74AZH1vb6tClH+UAiyfZfoaJo -----END CERTIFICATE-----Generated at Mon Jan 19 14:41:01 2026 by rpki-client