This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/L8oCmS4T50WKr1Qz2U4dM5WYKzs.roa File: L8oCmS4T50WKr1Qz2U4dM5WYKzs.roa (raw, json) Hash identifier: NqWC3xwvdbSHlgQvSj5Xo3AqKmt1gtvX7gkzwKodYiM= Subject key identifier: 2F:CA:02:99:2E:13:E7:45:8A:AF:54:33:D9:4E:1D:33:95:98:2B:3B Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F83B224F6DDEF97B9E196611225AC8B Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/L8oCmS4T50WKr1Qz2U4dM5WYKzs.roa Signing time: Fri 02 Jan 2026 16:21:35 +0000 ROA not before: Fri 02 Jan 2026 16:21:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204112 IP address blocks: 37.230.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:b2:24:f6:dd:ef:97:b9:e1:96:61:12:25:ac:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2fca02992e13e7458aaf5433d94e1d3395982b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:40:9b:19:ab:37:48:b6:1c:28:2a:07:a1:e2: 66:5e:3a:5d:34:df:91:76:91:b4:89:b2:db:6f:ad: 60:90:96:f8:b9:15:78:1d:64:f9:eb:7c:bc:34:46: 9b:9b:8d:71:7a:fe:7f:af:e9:ca:d6:ef:47:0f:e2: 97:7a:c9:d5:bd:7a:f3:e9:0c:0d:ee:25:ce:db:38: 21:1b:f4:30:6d:70:25:b1:3b:39:25:fb:a0:00:8c: ea:1e:73:9f:e5:b8:2c:6f:89:15:5c:8e:2a:be:97: bb:42:7c:fa:97:5a:84:5f:5f:e1:43:00:10:4f:e9: f5:0c:4a:31:4b:a4:ad:7b:c2:97:02:e5:7b:83:de: 67:0d:c1:8e:2d:b2:76:d1:32:20:ef:be:4e:1a:28: 76:b3:90:8e:42:62:ea:85:96:30:53:09:3e:70:95: 08:e2:9b:fe:99:bd:b3:75:f3:3e:db:9c:c0:12:08: 88:e1:8d:c0:6b:b7:d9:d3:13:80:ce:da:54:ec:ae: ce:9e:30:2b:d6:42:17:2c:45:b0:65:ed:46:b3:17: 64:2a:9e:0f:7e:7c:88:ae:bc:8c:ea:1d:87:94:1b: 81:f7:b4:53:3d:a5:65:ce:1f:9a:b0:29:db:b0:f2: a9:1d:36:e5:22:47:d8:ba:2d:bc:66:09:b7:44:71: 54:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:CA:02:99:2E:13:E7:45:8A:AF:54:33:D9:4E:1D:33:95:98:2B:3B X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/L8oCmS4T50WKr1Qz2U4dM5WYKzs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.225.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:20:00:48:93:8c:cc:b7:f9:84:a4:15:c1:31:fb:c3:d5:57: 1e:cd:f5:ee:ee:7e:8b:e0:81:1c:93:07:6f:76:bf:08:de:a9: 7c:cf:21:6d:b8:6f:a1:89:63:ec:4f:c1:62:a3:d5:86:b1:6c: 1c:96:77:28:16:95:63:88:55:25:34:12:32:6c:73:25:c6:4e: 3b:6e:45:e6:43:c9:04:6e:7a:e4:72:de:9d:df:3d:1c:b5:4f: b1:d6:10:d4:b7:48:bb:b4:60:dd:54:bb:86:4b:67:76:da:55: a2:a2:42:87:bc:83:32:dc:4c:f2:d1:f7:b3:4e:8a:5a:98:da: 12:6e:95:28:fd:86:9b:e0:09:47:ff:27:6f:ef:c9:22:72:84: 61:a6:ef:df:8b:43:56:05:17:40:d2:4e:5e:22:b0:14:ec:2a: 3e:3f:9a:b9:49:08:e0:fd:40:e2:a0:cf:00:2d:08:9e:75:ce: 02:c6:a9:1e:9c:bf:e6:8c:7c:5c:44:2b:61:b9:e9:62:68:f5: 45:e5:4c:59:5b:ae:ed:ce:a5:f7:43:a8:e4:e4:9b:3f:3f:04: 8e:55:da:25:91:55:d2:4f:cd:12:66:ff:82:1f:26:9b:64:80: 8a:d6:29:92:54:24:26:00:61:83:1a:34:c5:68:1a:6c:19:9d: 1a:9d:13:cc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g7Ik9t3vl7nhlmESJayLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmNhMDI5OTJlMTNlNzQ1OGFhZjU0MzNkOTRlMWQzMzk1OTgyYjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwECbGas3SLYcKCoHoeJmXjpdNN+R dpG0ibLbb61gkJb4uRV4HWT563y8NEabm41xev5/r+nK1u9HD+KXesnVvXrz6QwN 7iXO2zghG/QwbXAlsTs5JfugAIzqHnOf5bgsb4kVXI4qvpe7Qnz6l1qEX1/hQwAQ T+n1DEoxS6Ste8KXAuV7g95nDcGOLbJ20TIg775OGih2s5COQmLqhZYwUwk+cJUI 4pv+mb2zdfM+25zAEgiI4Y3Aa7fZ0xOAztpU7K7OnjAr1kIXLEWwZe1GsxdkKp4P fnyIrryM6h2HlBuB97RTPaVlzh+asCnbsPKpHTblIkfYui28Zgm3RHFUBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC/KApkuE+dFiq9UM9lOHTOVmCs7MB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvTDhvQ21TNFQ1MFdLcjFRejJVNGRNNVdZS3pzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJebhMA0G CSqGSIb3DQEBCwUAA4IBAQAPIABIk4zMt/mEpBXBMfvD1VcezfXu7n6L4IEckwdv dr8I3ql8zyFtuG+hiWPsT8Fio9WGsWwclncoFpVjiFUlNBIybHMlxk47bkXmQ8kE bnrkct6d3z0ctU+x1hDUt0i7tGDdVLuGS2d22lWiokKHvIMy3Ezy0fezTopamNoS bpUo/Yab4AlH/ydv78kicoRhpu/fi0NWBRdA0k5eIrAU7Co+P5q5SQjg/UDioM8A LQiedc4CxqkenL/mjHxcRCthueliaPVF5UxZW67tzqX3Q6jk5Js/PwSOVdolkVXS T80SZv+CHyabZICK1imSVCQmAGGDGjTFaBpsGZ0anRPM -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:35 2026 by rpki-client