This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/8-wFFgA4OvNKHGb8MgfFztzqA74.roa File: 8-wFFgA4OvNKHGb8MgfFztzqA74.roa (raw, json) Hash identifier: QZDt0FNy31r1NvcCJ40L40oICgrP3WV0AgSwtMUSfrE= Subject key identifier: F3:EC:05:16:00:38:3A:F3:4A:1C:66:FC:32:07:C5:CE:DC:EA:03:BE Certificate issuer: /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8 Certificate serial: 019B7E38C7CE71C2A0668A05EDEA4A59E176 Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/8-wFFgA4OvNKHGb8MgfFztzqA74.roa Signing time: Fri 02 Jan 2026 10:20:08 +0000 ROA not before: Fri 02 Jan 2026 10:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203997 IP address blocks: 185.205.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c7:ce:71:c2:a0:66:8a:05:ed:ea:4a:59:e1:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8 Validity Not Before: Jan 2 10:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3ec051600383af34a1c66fc3207c5cedcea03be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:24:66:6e:1f:78:46:c0:9e:f2:2c:cd:d3:e0: 76:c7:38:55:a6:79:32:0f:cd:cc:98:93:1f:3a:f7: 00:b1:2a:a2:64:f5:50:92:0e:08:fb:e7:79:a7:70: 7c:14:bb:79:a4:68:12:fd:ba:ee:66:38:e2:92:d1: f7:50:e6:0e:17:22:cc:72:1c:a9:ff:f7:19:34:6a: d1:9e:f0:25:96:a5:e0:4d:b9:76:6a:5d:7b:f8:7e: 10:43:20:b2:4b:b9:d6:4e:47:91:fe:5d:1f:0e:b5: b0:06:33:4d:1d:d9:79:23:7c:94:b1:58:3f:dd:14: f0:8b:18:b5:5d:c9:8e:95:22:d0:a8:1f:60:70:ae: c8:0b:d0:1c:b6:fd:b0:2e:9e:01:4b:c3:58:79:fd: 06:59:0b:46:0b:fb:a9:4c:23:18:d2:67:e4:f2:cf: 34:48:f3:62:7e:a3:10:ac:04:d3:05:72:5b:2d:cf: 2d:1a:0d:00:87:54:0e:d7:a2:87:90:e3:e5:a2:0f: 7c:c9:fe:75:72:26:b0:f7:50:f2:7a:86:4a:d1:44: 12:ed:44:cd:86:35:10:15:48:36:9e:58:62:7c:4f: 2e:36:ae:c4:c3:f5:40:71:6e:37:58:6a:20:62:58: e7:0c:ae:f5:65:39:6b:4e:2c:94:f6:be:19:ae:61: 01:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:EC:05:16:00:38:3A:F3:4A:1C:66:FC:32:07:C5:CE:DC:EA:03:BE X509v3 Authority Key Identifier: keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/8-wFFgA4OvNKHGb8MgfFztzqA74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.205.32.0/24 Signature Algorithm: sha256WithRSAEncryption 42:bc:d4:7d:a5:7b:45:7f:ad:33:64:dd:45:de:ca:b5:75:fa: 70:60:f3:d6:b5:1c:18:64:94:af:84:76:1c:5c:3b:d0:d9:11: ef:6b:e6:50:99:40:4b:0b:de:ef:f3:b2:d4:2a:62:48:6d:80: 79:74:58:bf:0b:b2:25:f3:5a:b5:4c:1c:b4:75:ec:d2:97:a0: f6:fd:c5:c2:32:c3:4e:9f:f2:ab:d5:4e:ca:84:ff:f8:65:68: 2e:59:dc:21:16:5f:d2:b6:80:0d:e5:cf:7b:f6:f0:5f:57:ad: f8:b7:33:d6:60:04:a5:a0:77:00:a7:b0:df:34:bc:73:37:7d: ff:c9:4e:98:77:d3:7d:0f:49:2f:01:09:9f:8a:53:5c:fd:4b: 9a:ab:13:74:60:74:01:77:ce:ee:c0:1f:f2:f5:be:bd:e6:a9: 3d:4e:44:2a:53:c5:8d:2c:f7:37:a7:b0:06:9b:5d:b1:1c:ad: 46:5f:46:4f:74:8d:f9:6e:72:f0:30:7b:88:a4:61:d7:11:10: c2:c0:fc:1e:e3:34:0e:86:9c:21:52:c4:79:d0:1a:e5:1d:08: 25:7b:04:eb:1b:95:9b:4a:fc:95:2a:90:43:e5:83:3c:b0:a4: e0:4a:9d:e9:e3:df:2f:5e:0c:57:60:a6:c7:fc:e4:2e:0f:6e: 1c:1f:fa:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OMfOccKgZooF7epKWeF2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZDk0NDc3YzhiNTRkMTJlYzhiM2Y3YjZkOWFlNzhlNTEw YjIzZDgwHhcNMjYwMTAyMTAyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2VjMDUxNjAwMzgzYWYzNGExYzY2ZmMzMjA3YzVjZWRjZWEwM2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCRmbh94RsCe8izN0+B2xzhVpnky D83MmJMfOvcAsSqiZPVQkg4I++d5p3B8FLt5pGgS/bruZjjiktH3UOYOFyLMchyp //cZNGrRnvAllqXgTbl2al17+H4QQyCyS7nWTkeR/l0fDrWwBjNNHdl5I3yUsVg/ 3RTwixi1XcmOlSLQqB9gcK7IC9Actv2wLp4BS8NYef0GWQtGC/upTCMY0mfk8s80 SPNifqMQrATTBXJbLc8tGg0Ah1QO16KHkOPlog98yf51ciaw91DyeoZK0UQS7UTN hjUQFUg2nlhifE8uNq7Ew/VAcW43WGogYljnDK71ZTlrTiyU9r4ZrmEBWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPPsBRYAODrzShxm/DIHxc7c6gO+MB8GA1UdIwQY MBaAFEbZRHfItU0S7Is/e22a545RCyPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81NGE0NTctM2M0OC00ZTAxLTkwYjAt NWViNzVjMjMxOGFhLzEvOC13RkZnQTRPdk5LSEdiOE1nZkZ6dHpxQTc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81NGE0NTctM2M0OC00ZTAxLTkwYjAtNWViNzVjMjMxOGFh LzEvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc0gMA0G CSqGSIb3DQEBCwUAA4IBAQBCvNR9pXtFf60zZN1F3sq1dfpwYPPWtRwYZJSvhHYc XDvQ2RHva+ZQmUBLC97v87LUKmJIbYB5dFi/C7Il81q1TBy0dezSl6D2/cXCMsNO n/Kr1U7KhP/4ZWguWdwhFl/StoAN5c979vBfV634tzPWYASloHcAp7DfNLxzN33/ yU6Yd9N9D0kvAQmfilNc/UuaqxN0YHQBd87uwB/y9b695qk9TkQqU8WNLPc3p7AG m12xHK1GX0ZPdI35bnLwMHuIpGHXERDCwPwe4zQOhpwhUsR50BrlHQglewTrG5Wb SvyVKpBD5YM8sKTgSp3p498vXgxXYKbH/OQuD24cH/p0 -----END CERTIFICATE-----Generated at Tue Feb 3 12:58:27 2026 by rpki-client