This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/8IXgDUcsBHamwNyyh9XT3iJYxNA.roa File: 8IXgDUcsBHamwNyyh9XT3iJYxNA.roa (raw, json) Hash identifier: BMgQlxblH/WhJ+bk0jX7MU+yIRN23qtQlofB5DGnOpk= Subject key identifier: F0:85:E0:0D:47:2C:04:76:A6:C0:DC:B2:87:D5:D3:DE:22:58:C4:D0 Certificate issuer: /CN=5b192aa28315f5942d4105d52ebfd6d328f0f405 Certificate serial: 019B7E38B8C953409081BF85B838C5DFEB18 Authority key identifier: 5B:19:2A:A2:83:15:F5:94:2D:41:05:D5:2E:BF:D6:D3:28:F0:F4:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxkqooMV9ZQtQQXVLr_W0yjw9AU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/8IXgDUcsBHamwNyyh9XT3iJYxNA.roa Signing time: Fri 02 Jan 2026 10:20:05 +0000 ROA not before: Fri 02 Jan 2026 10:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57388 IP address blocks: 185.139.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/WxkqooMV9ZQtQQXVLr_W0yjw9AU.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/WxkqooMV9ZQtQQXVLr_W0yjw9AU.mft rsync://rpki.ripe.net/repository/DEFAULT/WxkqooMV9ZQtQQXVLr_W0yjw9AU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b8:c9:53:40:90:81:bf:85:b8:38:c5:df:eb:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b192aa28315f5942d4105d52ebfd6d328f0f405 Validity Not Before: Jan 2 10:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f085e00d472c0476a6c0dcb287d5d3de2258c4d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:80:d7:89:fa:9f:8b:3f:8b:1c:da:b0:c6:54: 9b:b1:64:e9:84:f7:19:87:5c:77:14:9b:08:31:ca: 1a:74:86:48:21:1d:0e:4a:a2:54:e9:01:bb:e1:b3: 11:02:0a:4b:51:93:ab:a1:08:af:b3:45:5a:de:d3: 9d:87:e4:9c:70:ee:0f:69:55:a9:f4:c8:87:9e:b6: 64:fa:40:bc:21:69:07:c8:76:75:4f:23:83:25:9a: 80:e4:45:2a:43:b2:bd:58:20:a1:b0:ae:42:c4:44: 44:f5:68:75:1d:87:b6:f4:0f:81:06:31:3c:89:44: aa:67:cd:66:23:9f:9e:01:67:d6:73:58:11:4b:1a: 1f:d6:1c:bc:fe:c8:59:91:55:08:0a:02:d4:18:91: 6f:b6:f7:91:d4:d2:84:71:3b:dd:be:28:32:50:45: bf:1f:a0:f5:ab:14:55:c4:a9:81:af:73:b2:bd:56: 9d:99:ce:05:f9:c1:be:62:bc:3d:71:94:ea:07:85: 0a:e6:3e:ea:3f:2f:02:88:ee:0d:4d:24:12:f3:c5: 54:7f:49:33:e2:28:91:51:69:b5:9a:fe:1f:c3:24: 0d:af:de:3b:d7:b2:1e:94:2f:a7:68:c0:b2:84:93: 52:04:c5:d5:19:63:f9:a2:be:bb:94:d7:9b:25:1f: 65:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:85:E0:0D:47:2C:04:76:A6:C0:DC:B2:87:D5:D3:DE:22:58:C4:D0 X509v3 Authority Key Identifier: keyid:5B:19:2A:A2:83:15:F5:94:2D:41:05:D5:2E:BF:D6:D3:28:F0:F4:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxkqooMV9ZQtQQXVLr_W0yjw9AU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/8IXgDUcsBHamwNyyh9XT3iJYxNA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/WxkqooMV9ZQtQQXVLr_W0yjw9AU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.139.4.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:b7:b6:33:63:bf:10:87:20:52:8a:89:36:cf:9d:f4:d1:39: 84:4f:d8:af:4c:19:f8:91:ec:62:1c:77:a8:b1:9f:94:b1:a1: 04:8a:98:b5:2e:3b:99:7b:f9:94:b9:b2:f0:55:4f:5e:34:a2: 04:a2:c0:34:a7:a4:c9:44:e8:85:8e:fc:91:df:ad:cc:3c:32: f9:fe:14:58:a0:53:d6:48:b1:c7:8f:73:49:87:18:45:6c:35: d5:56:9d:f3:a6:6b:9d:cf:cb:5f:f1:4c:28:68:b0:fd:db:90: 1c:ac:89:84:21:1b:2d:81:ac:2a:dd:9a:88:76:bc:47:02:ac: 6a:7f:54:6c:51:be:89:cd:cc:a2:62:a8:0a:13:1e:72:4c:97: fb:a8:03:f2:50:74:62:12:73:9a:38:7b:ac:24:39:a7:b7:d7: 87:dc:1f:62:ae:51:aa:b5:8d:5f:93:68:64:a8:ae:39:fc:6e: cf:99:46:4f:07:ea:a2:89:a6:0b:62:8c:28:4c:46:39:30:66: aa:ef:f8:2e:c8:b2:c2:3f:c6:f5:85:4d:2f:1f:f5:75:34:5c: 93:32:4c:a5:91:c8:e8:19:07:93:2c:cb:3b:7c:0d:96:af:90: 4f:6b:cc:04:5d:b5:da:c8:42:f9:cf:02:d0:0b:84:7e:e5:a8: 90:77:fc:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OLjJU0CQgb+FuDjF3+sYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMTkyYWEyODMxNWY1OTQyZDQxMDVkNTJlYmZkNmQzMjhm MGY0MDUwHhcNMjYwMTAyMTAyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDg1ZTAwZDQ3MmMwNDc2YTZjMGRjYjI4N2Q1ZDNkZTIyNThjNGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4DXifqfiz+LHNqwxlSbsWTphPcZ h1x3FJsIMcoadIZIIR0OSqJU6QG74bMRAgpLUZOroQivs0Va3tOdh+SccO4PaVWp 9MiHnrZk+kC8IWkHyHZ1TyODJZqA5EUqQ7K9WCChsK5CxERE9Wh1HYe29A+BBjE8 iUSqZ81mI5+eAWfWc1gRSxof1hy8/shZkVUICgLUGJFvtveR1NKEcTvdvigyUEW/ H6D1qxRVxKmBr3OyvVadmc4F+cG+Yrw9cZTqB4UK5j7qPy8CiO4NTSQS88VUf0kz 4iiRUWm1mv4fwyQNr94717IelC+naMCyhJNSBMXVGWP5or67lNebJR9lOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPCF4A1HLAR2psDcsofV094iWMTQMB8GA1UdIwQY MBaAFFsZKqKDFfWULUEF1S6/1tMo8PQFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3hrcW9vTVY5WlF0UVFYVkxyX1cweWp3OUFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9lZTMzZDMtZmYzOC00YThkLWEyZGIt M2ZiYzc5NWE2YmU1LzEvOElYZ0RVY3NCSGFtd055eWg5WFQzaUpZeE5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9lZTMzZDMtZmYzOC00YThkLWEyZGItM2ZiYzc5NWE2YmU1 LzEvV3hrcW9vTVY5WlF0UVFYVkxyX1cweWp3OUFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYsEMA0G CSqGSIb3DQEBCwUAA4IBAQAst7YzY78QhyBSiok2z5300TmET9ivTBn4kexiHHeo sZ+UsaEEipi1LjuZe/mUubLwVU9eNKIEosA0p6TJROiFjvyR363MPDL5/hRYoFPW SLHHj3NJhxhFbDXVVp3zpmudz8tf8UwoaLD925AcrImEIRstgawq3ZqIdrxHAqxq f1RsUb6JzcyiYqgKEx5yTJf7qAPyUHRiEnOaOHusJDmnt9eH3B9irlGqtY1fk2hk qK45/G7PmUZPB+qiiaYLYowoTEY5MGaq7/guyLLCP8b1hU0vH/V1NFyTMkylkcjo GQeTLMs7fA2Wr5BPa8wEXbXayEL5zwLQC4R+5aiQd/wS -----END CERTIFICATE-----Generated at Mon Jan 26 22:32:00 2026 by rpki-client