This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/J4UCVAcwWyMQiy7Ru5nI6nUIlKs.roa File: J4UCVAcwWyMQiy7Ru5nI6nUIlKs.roa (raw, json) Hash identifier: K0a1hsmq8k2+rfaUptvdh5+6B/4bXHELmZDPbzQl5PY= Subject key identifier: 27:85:02:54:07:30:5B:23:10:8B:2E:D1:BB:99:C8:EA:75:08:94:AB Certificate issuer: /CN=3a5d3ce819a08150500a8f4a2df79eb70145d158 Certificate serial: 019B78A242B22124A41683BD11067A48834B Authority key identifier: 3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/J4UCVAcwWyMQiy7Ru5nI6nUIlKs.roa Signing time: Thu 01 Jan 2026 08:17:38 +0000 ROA not before: Thu 01 Jan 2026 08:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215025 IP address blocks: 185.226.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:42:b2:21:24:a4:16:83:bd:11:06:7a:48:83:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a5d3ce819a08150500a8f4a2df79eb70145d158 Validity Not Before: Jan 1 08:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2785025407305b23108b2ed1bb99c8ea750894ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:79:8d:d6:ad:0e:73:d4:f5:cf:01:09:3d:96: 36:9c:6c:a7:71:a7:97:0a:d0:f7:09:7c:12:37:4f: 03:dc:5b:91:5c:3c:16:eb:85:79:0f:14:7b:f3:ac: 18:4f:92:9c:42:57:a7:22:85:c8:a7:6a:b0:77:e9: 60:8d:a7:76:a0:20:00:51:dc:8d:6f:11:4b:88:cd: 7e:0b:83:b7:6d:4c:c5:fa:5e:47:83:6c:87:92:64: 4c:62:a1:e2:7b:5b:4a:e4:0b:d6:a8:62:08:7c:09: 02:01:8f:e4:6d:b7:74:1c:a6:1a:59:59:3f:c2:ae: cb:ee:43:30:5f:e4:bc:2f:3b:1f:d3:ff:43:57:67: 0d:be:47:d9:f6:c4:04:c3:09:e3:d4:e4:e2:c8:50: fb:b9:6a:8e:2e:36:56:90:30:eb:e6:0b:5f:fe:c7: a5:33:d5:f3:cf:0b:49:a1:b6:01:9e:6b:2f:bf:ed: 29:08:95:1c:34:3c:d0:8d:63:77:22:ce:79:a2:b5: c4:b4:65:8b:b7:6b:9e:23:9c:ad:42:ca:c6:c3:9a: 6c:aa:6c:ea:15:d9:b1:0b:0a:a0:9e:68:88:7d:73: fc:4c:62:37:f8:e2:a0:f6:ed:e7:ae:42:9d:a1:ba: b3:4e:93:b2:a1:46:c3:7b:10:f3:75:09:b7:f1:28: 37:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:85:02:54:07:30:5B:23:10:8B:2E:D1:BB:99:C8:EA:75:08:94:AB X509v3 Authority Key Identifier: keyid:3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/J4UCVAcwWyMQiy7Ru5nI6nUIlKs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.226.89.0/24 Signature Algorithm: sha256WithRSAEncryption c1:0b:a2:43:d2:bf:69:9e:ec:73:f3:f0:fd:11:6a:ff:80:d4: c9:28:c4:db:fc:41:f4:9c:3a:04:71:e0:16:22:52:2f:ac:47: ee:4a:ae:c7:05:a8:44:91:15:a5:21:74:9e:bc:66:e3:98:45: 9d:5d:1d:df:e0:75:c7:ee:98:7c:c9:9e:a7:c2:a0:03:06:9c: 5e:e5:ae:97:fe:0a:20:95:d3:ec:48:1c:be:37:c5:2e:eb:ef: 18:fc:2e:eb:42:f2:22:8c:15:ef:3d:52:6a:ab:52:0c:07:75: bc:0e:42:dc:c6:dd:b7:1e:50:9c:51:05:63:68:f1:f1:d9:5d: 5f:7d:6a:a4:48:33:92:d1:aa:3d:99:88:cd:4c:85:5a:97:a5: d8:d6:4f:e4:4a:d3:98:a4:62:e2:f7:56:b3:ff:db:0e:1c:a4: f9:6b:f5:6e:41:21:a4:c0:a4:43:08:2c:a6:da:42:de:27:20: b8:2d:1c:91:98:e9:4b:63:66:a9:c3:d6:c5:9f:77:be:00:17: d4:83:79:4a:40:a0:fc:f2:79:c8:32:5b:e2:a3:1e:92:d6:17: 65:3d:d6:fa:e9:32:fe:48:2e:e7:f8:94:e2:ae:87:4e:5a:eb: bd:c9:a9:2b:d2:0f:f1:38:02:f7:28:d3:b7:c4:d8:12:13:38: 96:4d:8b:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4okKyISSkFoO9EQZ6SINLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNWQzY2U4MTlhMDgxNTA1MDBhOGY0YTJkZjc5ZWI3MDE0 NWQxNTgwHhcNMjYwMTAxMDgxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzg1MDI1NDA3MzA1YjIzMTA4YjJlZDFiYjk5YzhlYTc1MDg5NGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXmN1q0Oc9T1zwEJPZY2nGyncaeX CtD3CXwSN08D3FuRXDwW64V5DxR786wYT5KcQlenIoXIp2qwd+lgjad2oCAAUdyN bxFLiM1+C4O3bUzF+l5Hg2yHkmRMYqHie1tK5AvWqGIIfAkCAY/kbbd0HKYaWVk/ wq7L7kMwX+S8Lzsf0/9DV2cNvkfZ9sQEwwnj1OTiyFD7uWqOLjZWkDDr5gtf/sel M9XzzwtJobYBnmsvv+0pCJUcNDzQjWN3Is55orXEtGWLt2ueI5ytQsrGw5psqmzq FdmxCwqgnmiIfXP8TGI3+OKg9u3nrkKdobqzTpOyoUbDexDzdQm38Sg3wwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCeFAlQHMFsjEIsu0buZyOp1CJSrMB8GA1UdIwQY MBaAFDpdPOgZoIFQUAqPSi33nrcBRdFYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2wwODZCbWdnVkJRQ285S0xmZWV0d0ZGMFZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9kOGZkY2YtOTU0Zi00ZTcyLThlMmMt YWJhZWM4MmJkOGJiLzEvSjRVQ1ZBY3dXeU1RaXk3UnU1bkk2blVJbEtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9kOGZkY2YtOTU0Zi00ZTcyLThlMmMtYWJhZWM4MmJkOGJi LzEvT2wwODZCbWdnVkJRQ285S0xmZWV0d0ZGMFZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueJZMA0G CSqGSIb3DQEBCwUAA4IBAQDBC6JD0r9pnuxz8/D9EWr/gNTJKMTb/EH0nDoEceAW IlIvrEfuSq7HBahEkRWlIXSevGbjmEWdXR3f4HXH7ph8yZ6nwqADBpxe5a6X/gog ldPsSBy+N8Uu6+8Y/C7rQvIijBXvPVJqq1IMB3W8DkLcxt23HlCcUQVjaPHx2V1f fWqkSDOS0ao9mYjNTIVal6XY1k/kStOYpGLi91az/9sOHKT5a/VuQSGkwKRDCCym 2kLeJyC4LRyRmOlLY2apw9bFn3e+ABfUg3lKQKD88nnIMlviox6S1hdlPdb66TL+ SC7n+JTirodOWuu9yakr0g/xOAL3KNO3xNgSEziWTYtD -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:45 2026 by rpki-client