This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/LD8OWpI1obkdnjkX8kmxb_IamiA.roa File: LD8OWpI1obkdnjkX8kmxb_IamiA.roa (raw, json) Hash identifier: RMRCf8c6qT05wLKTTfxT0EUrLvsEv29MJgHXniMipJs= Subject key identifier: 2C:3F:0E:5A:92:35:A1:B9:1D:9E:39:17:F2:49:B1:6F:F2:1A:9A:20 Certificate issuer: /CN=a8ab7d68d69a52aa50c799990b9218419c147935 Certificate serial: 019B77C7046D74CB50D833D2A05F18D8816A Authority key identifier: A8:AB:7D:68:D6:9A:52:AA:50:C7:99:99:0B:92:18:41:9C:14:79:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKt9aNaaUqpQx5mZC5IYQZwUeTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/LD8OWpI1obkdnjkX8kmxb_IamiA.roa Signing time: Thu 01 Jan 2026 04:18:09 +0000 ROA not before: Thu 01 Jan 2026 04:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211676 IP address blocks: 185.244.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/qKt9aNaaUqpQx5mZC5IYQZwUeTU.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/qKt9aNaaUqpQx5mZC5IYQZwUeTU.mft rsync://rpki.ripe.net/repository/DEFAULT/qKt9aNaaUqpQx5mZC5IYQZwUeTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:04:6d:74:cb:50:d8:33:d2:a0:5f:18:d8:81:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8ab7d68d69a52aa50c799990b9218419c147935 Validity Not Before: Jan 1 04:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c3f0e5a9235a1b91d9e3917f249b16ff21a9a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:51:1e:26:25:71:38:27:a0:23:88:26:4f:bf: 18:71:2e:eb:8a:be:da:5a:70:d3:a4:41:2c:b9:68: d4:4e:65:bb:48:be:33:58:7e:39:16:17:62:7e:6f: c8:04:1e:49:5a:4b:9f:ad:07:1b:ca:85:2a:92:7f: 03:46:26:fd:b9:8a:14:29:98:79:17:d9:60:85:96: b7:51:50:d6:fb:04:da:49:b4:9f:7a:84:93:59:a8: 7d:f5:8f:cd:56:c5:4e:64:21:f4:30:e9:70:6d:cd: 1b:6a:cd:b9:28:5e:95:54:ea:95:ce:0a:e5:9a:69: 9a:2e:3a:40:ff:d4:72:9e:95:9b:71:ce:e6:31:80: 42:d8:09:8a:45:44:09:1d:39:1d:11:a9:ec:52:86: 9f:f0:39:ab:8f:45:07:09:e7:5a:6d:79:28:a1:a5: 5c:d9:39:08:9d:3c:e7:f2:21:0d:66:0f:5b:c3:67: 16:4d:32:c9:09:46:75:bc:ac:89:5c:c1:a5:7e:3c: 2a:32:00:05:7c:f8:cf:73:6d:e6:a8:17:d8:4f:76: b5:16:fe:39:a7:d6:9c:6e:3e:0b:fe:88:8d:bd:e6: e4:bb:20:e6:4e:46:c4:51:66:04:fe:09:f1:ef:33: cf:56:22:a8:9f:3b:74:4e:84:28:24:b6:9a:40:2b: b7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3F:0E:5A:92:35:A1:B9:1D:9E:39:17:F2:49:B1:6F:F2:1A:9A:20 X509v3 Authority Key Identifier: keyid:A8:AB:7D:68:D6:9A:52:AA:50:C7:99:99:0B:92:18:41:9C:14:79:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKt9aNaaUqpQx5mZC5IYQZwUeTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/LD8OWpI1obkdnjkX8kmxb_IamiA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/qKt9aNaaUqpQx5mZC5IYQZwUeTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.244.224.0/24 Signature Algorithm: sha256WithRSAEncryption 44:be:0d:53:03:7f:90:5f:10:33:c2:d9:c3:ee:c3:a5:18:61: 4d:58:5f:08:3a:9a:ae:09:8c:3b:62:04:b3:8a:7d:79:7a:2d: 0f:e4:92:10:ce:85:6c:65:e4:8b:05:8f:af:75:7c:03:92:ae: 80:5e:1b:8f:d5:ee:76:cb:f6:1f:16:e0:92:f0:b9:04:40:56: 54:4a:af:9e:ae:d1:9e:43:99:34:4d:88:54:fc:27:ce:e9:38: 15:cd:fc:9c:08:c4:6c:9d:52:30:54:27:b1:6c:af:d3:11:ea: 27:93:5b:77:a5:05:8b:8a:95:8b:b3:0e:77:31:be:69:fb:d9: 4b:7e:93:58:08:c5:3c:b4:cb:3d:8c:d4:7a:2e:df:2a:c8:c7: e3:18:f6:b6:2e:1a:e6:59:47:95:b0:81:f4:25:53:71:8e:29: b9:d5:dc:a6:a7:54:81:52:64:92:95:4b:b0:c3:7b:1a:af:38: 53:2b:1c:48:08:5a:92:cb:d5:24:ae:45:0f:eb:0c:ed:51:d1: 41:4b:93:f6:c1:90:20:8d:61:5d:0d:62:e9:f5:bd:61:53:7a: 6c:c9:5d:e3:78:d2:cd:f8:e1:b1:ba:9c:7f:2d:8f:3e:46:5c: 08:06:0c:7e:65:d7:03:0c:dc:52:60:54:f0:3a:50:7e:ad:15: cf:10:3e:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xwRtdMtQ2DPSoF8Y2IFqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YWI3ZDY4ZDY5YTUyYWE1MGM3OTk5OTBiOTIxODQxOWMx NDc5MzUwHhcNMjYwMTAxMDQxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzNmMGU1YTkyMzVhMWI5MWQ5ZTM5MTdmMjQ5YjE2ZmYyMWE5YTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FEeJiVxOCegI4gmT78YcS7rir7a WnDTpEEsuWjUTmW7SL4zWH45Fhdifm/IBB5JWkufrQcbyoUqkn8DRib9uYoUKZh5 F9lghZa3UVDW+wTaSbSfeoSTWah99Y/NVsVOZCH0MOlwbc0bas25KF6VVOqVzgrl mmmaLjpA/9RynpWbcc7mMYBC2AmKRUQJHTkdEansUoaf8Dmrj0UHCedabXkooaVc 2TkInTzn8iENZg9bw2cWTTLJCUZ1vKyJXMGlfjwqMgAFfPjPc23mqBfYT3a1Fv45 p9acbj4L/oiNvebkuyDmTkbEUWYE/gnx7zPPViKonzt0ToQoJLaaQCu37wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCw/DlqSNaG5HZ45F/JJsW/yGpogMB8GA1UdIwQY MBaAFKirfWjWmlKqUMeZmQuSGEGcFHk1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUt0OWFOYWFVcXBReDVtWkM1SVlRWndVZVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80ZWM3MjUtNGQ4ZC00MzExLTkzNGYt Mzg4MDU1MmE1NDM5LzEvTEQ4T1dwSTFvYmtkbmprWDhrbXhiX0lhbWlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi80ZWM3MjUtNGQ4ZC00MzExLTkzNGYtMzg4MDU1MmE1NDM5 LzEvcUt0OWFOYWFVcXBReDVtWkM1SVlRWndVZVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufTgMA0G CSqGSIb3DQEBCwUAA4IBAQBEvg1TA3+QXxAzwtnD7sOlGGFNWF8IOpquCYw7YgSz in15ei0P5JIQzoVsZeSLBY+vdXwDkq6AXhuP1e52y/YfFuCS8LkEQFZUSq+ertGe Q5k0TYhU/CfO6TgVzfycCMRsnVIwVCexbK/TEeonk1t3pQWLipWLsw53Mb5p+9lL fpNYCMU8tMs9jNR6Lt8qyMfjGPa2LhrmWUeVsIH0JVNxjim51dymp1SBUmSSlUuw w3sarzhTKxxICFqSy9UkrkUP6wztUdFBS5P2wZAgjWFdDWLp9b1hU3psyV3jeNLN +OGxupx/LY8+RlwIBgx+ZdcDDNxSYFTwOlB+rRXPED41 -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:17 2026 by rpki-client