This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/8nKj6KMKfZ0z-5XqMceZ3bj3i4Q.roa File: 8nKj6KMKfZ0z-5XqMceZ3bj3i4Q.roa (raw, json) Hash identifier: 17wCEbG6rcMyIZkFVfufHOKE2TtwcAezw7dpns8OV7M= Subject key identifier: F2:72:A3:E8:A3:0A:7D:9D:33:FB:95:EA:31:C7:99:DD:B8:F7:8B:84 Certificate issuer: /CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0 Certificate serial: 019B7834394A50AB91F4BF94F22D58E512D0 Authority key identifier: E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/8nKj6KMKfZ0z-5XqMceZ3bj3i4Q.roa Signing time: Thu 01 Jan 2026 06:17:26 +0000 ROA not before: Thu 01 Jan 2026 06:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48314 IP address blocks: 185.237.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:39:4a:50:ab:91:f4:bf:94:f2:2d:58:e5:12:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0 Validity Not Before: Jan 1 06:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f272a3e8a30a7d9d33fb95ea31c799ddb8f78b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2e:36:ce:ee:77:0e:54:f0:ca:f9:bb:63:03: cd:a5:3d:db:46:6f:2c:88:17:cf:fb:48:38:92:75: b7:f3:75:95:81:60:f3:0e:d9:24:c4:2d:3f:c6:e5: 4c:be:ae:2e:45:9d:e3:ca:36:7e:e2:57:2d:74:0b: 78:42:05:05:9e:14:47:a4:58:f4:5e:bb:7e:76:4b: e7:5e:cd:41:cf:3a:28:9a:6b:83:be:73:5c:78:38: 3e:a1:c9:10:c4:28:ff:cd:38:28:14:40:58:81:9e: c2:43:c7:12:bf:72:7e:75:8b:ea:c0:e4:b3:7d:a6: 99:9d:1d:9d:42:29:87:44:5c:3c:de:7b:5c:56:42: e7:fb:d4:df:ab:ec:c5:4c:5b:5e:4a:00:da:d8:eb: 56:09:14:9a:fa:67:da:a4:b1:15:37:20:f3:e4:e6: 29:a3:0c:ed:36:bf:ab:a5:4c:f8:73:ec:12:47:aa: e6:78:fe:a6:d1:d9:c3:6e:75:e4:50:71:cf:e7:b0: f2:68:b9:38:26:ea:8b:c2:b7:fd:5e:7d:a4:10:4e: db:90:5f:ed:e3:e9:ad:81:d4:54:9b:b3:36:2e:b5: bb:8d:e4:e8:2e:f7:68:da:6d:1c:ed:a1:6d:6c:ec: f8:cd:e7:09:23:f0:60:81:16:82:7c:57:38:3e:d2: 1b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:72:A3:E8:A3:0A:7D:9D:33:FB:95:EA:31:C7:99:DD:B8:F7:8B:84 X509v3 Authority Key Identifier: keyid:E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/8nKj6KMKfZ0z-5XqMceZ3bj3i4Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.237.94.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:2d:7e:98:58:54:79:62:44:b2:4e:37:1a:a2:0a:32:f5:bc: 47:c1:aa:87:9d:ce:8b:4d:b1:1a:db:88:0d:84:25:1f:75:da: 55:66:11:bb:c0:be:c5:6f:03:97:c0:75:5c:97:f8:27:24:0d: 27:cd:f1:c7:5f:bb:62:33:25:86:24:d2:6f:d8:f6:8b:b3:35: 22:47:34:ee:50:b9:99:b2:dd:50:4d:26:54:00:b7:fb:66:d1: 70:31:ef:93:28:6b:73:89:10:a5:16:bd:bf:40:d1:04:2a:de: c1:d2:30:6f:77:e1:e3:a0:87:cb:14:a6:bd:6e:08:b7:e7:ce: 59:5c:b8:8b:af:30:29:98:8c:c9:c1:75:21:3f:0a:87:0f:69: 94:85:6a:68:7a:d8:88:86:b7:23:4c:49:5a:8d:c6:55:b0:74: d9:6a:d7:70:ea:97:a4:0d:74:c0:df:12:5a:bc:0d:dd:42:ad: f4:36:42:69:97:78:d4:c1:44:f3:ea:e9:ad:81:33:89:59:0e: 72:37:7f:44:0e:a4:3f:22:c4:07:ec:e8:52:31:4b:9c:5f:da: 23:f3:2b:01:10:e2:18:4a:ed:ae:45:59:d9:28:99:6c:87:ae: 4f:0e:a9:0b:91:ee:8f:dc:f6:1f:34:2a:c7:81:4b:cd:4b:85: 3b:10:1c:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NDlKUKuR9L+U8i1Y5RLQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxODU2YzMwODJhYjJmYzhkZDFiMzU5YTdiMzk5MTM2ODUz OGI0ZDAwHhcNMjYwMTAxMDYxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjcyYTNlOGEzMGE3ZDlkMzNmYjk1ZWEzMWM3OTlkZGI4Zjc4Yjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC42zu53DlTwyvm7YwPNpT3bRm8s iBfP+0g4knW383WVgWDzDtkkxC0/xuVMvq4uRZ3jyjZ+4lctdAt4QgUFnhRHpFj0 Xrt+dkvnXs1BzzoommuDvnNceDg+ockQxCj/zTgoFEBYgZ7CQ8cSv3J+dYvqwOSz faaZnR2dQimHRFw83ntcVkLn+9Tfq+zFTFteSgDa2OtWCRSa+mfapLEVNyDz5OYp owztNr+rpUz4c+wSR6rmeP6m0dnDbnXkUHHP57DyaLk4JuqLwrf9Xn2kEE7bkF/t 4+mtgdRUm7M2LrW7jeToLvdo2m0c7aFtbOz4zecJI/BggRaCfFc4PtIbRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPJyo+ijCn2dM/uV6jHHmd2494uEMB8GA1UdIwQY MBaAFOGFbDCCqy/I3Rs1mns5kTaFOLTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFlWc01JS3JMOGpkR3pXYWV6bVJOb1U0dE5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC81NjRiZDAtN2I1Mi00NGRkLWI1NmIt OGVhYTZiZjQwMzU3LzEvOG5LajZLTUtmWjB6LTVYcU1jZVozYmozaTRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC81NjRiZDAtN2I1Mi00NGRkLWI1NmItOGVhYTZiZjQwMzU3 LzEvNFlWc01JS3JMOGpkR3pXYWV6bVJOb1U0dE5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue1eMA0G CSqGSIb3DQEBCwUAA4IBAQBKLX6YWFR5YkSyTjcaogoy9bxHwaqHnc6LTbEa24gN hCUfddpVZhG7wL7FbwOXwHVcl/gnJA0nzfHHX7tiMyWGJNJv2PaLszUiRzTuULmZ st1QTSZUALf7ZtFwMe+TKGtziRClFr2/QNEEKt7B0jBvd+HjoIfLFKa9bgi3585Z XLiLrzApmIzJwXUhPwqHD2mUhWpoetiIhrcjTElajcZVsHTZatdw6pekDXTA3xJa vA3dQq30NkJpl3jUwUTz6umtgTOJWQ5yN39EDqQ/IsQH7OhSMUucX9oj8ysBEOIY Su2uRVnZKJlsh65PDqkLke6P3PYfNCrHgUvNS4U7EBzN -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:10 2026 by rpki-client