This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/8clp5oorAoBsYchPl6cs1_-_yQQ.roa File: 8clp5oorAoBsYchPl6cs1_-_yQQ.roa (raw, json) Hash identifier: aGkbot2FyDEKH3zE5peM5m5OBxwq4qCPpi/iz6/R4Ek= Subject key identifier: F1:C9:69:E6:8A:2B:02:80:6C:61:C8:4F:97:A7:2C:D7:FF:BF:C9:04 Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Certificate serial: 019B7F156BE2CE9CB50742AAAA5663BC6D6F Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/8clp5oorAoBsYchPl6cs1_-_yQQ.roa Signing time: Fri 02 Jan 2026 14:21:08 +0000 ROA not before: Fri 02 Jan 2026 14:21:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51852 IP address blocks: 185.114.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:6b:e2:ce:9c:b5:07:42:aa:aa:56:63:bc:6d:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Validity Not Before: Jan 2 14:21:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1c969e68a2b02806c61c84f97a72cd7ffbfc904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ce:61:ae:8a:ea:7c:4c:34:b3:bb:8c:a6:ff: 31:a3:99:2a:42:64:95:1d:42:71:79:14:e9:7d:5d: 47:37:5b:b5:32:85:82:e3:b8:3c:6a:07:4f:b2:2e: 57:22:41:e3:4c:e5:0a:ed:31:56:63:ff:a5:77:d0: 74:6a:a6:ac:c8:b0:7d:df:22:7a:0f:6a:15:94:de: e7:24:7c:f8:f8:c7:c2:59:95:21:1c:90:f2:1f:d6: fc:3d:a4:c8:63:71:ee:9e:77:d2:f4:cc:03:28:a2: 2b:e6:e5:5f:5a:e6:36:57:7c:b3:cc:14:80:93:02: 9b:83:41:64:a2:6b:c3:ac:e1:bd:05:60:8d:4d:9d: cd:86:87:47:8f:5a:f3:5b:1e:27:41:06:de:ec:00: 42:00:78:d1:7a:37:56:c1:5b:0e:31:d9:cd:de:9b: dc:46:c1:7c:cd:09:a1:ba:f1:cd:5d:14:17:72:81: 0c:fa:39:c4:76:66:70:dc:9d:77:9f:2d:78:80:34: b9:c0:10:a2:91:41:9f:ae:60:fb:b9:53:04:84:fc: 09:57:9a:de:97:13:87:d4:e8:63:4a:25:54:58:d0: 07:79:2d:be:ad:e9:92:49:22:e0:a9:4f:0b:02:a2: 8b:ce:7f:59:8e:65:ea:56:08:bc:59:7e:99:3d:34: f9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C9:69:E6:8A:2B:02:80:6C:61:C8:4F:97:A7:2C:D7:FF:BF:C9:04 X509v3 Authority Key Identifier: keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/8clp5oorAoBsYchPl6cs1_-_yQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.114.117.0/24 Signature Algorithm: sha256WithRSAEncryption 23:fc:d2:e2:f8:a1:53:65:40:06:0a:78:14:e2:ec:af:47:a5: 02:2e:01:21:c6:d2:4d:b3:25:e1:d9:ff:bf:e4:d3:3f:3d:ab: c7:d5:2f:cf:76:f0:2a:13:a9:09:1b:5a:7c:89:63:df:3c:05: 9f:58:07:59:d2:6f:86:fa:75:92:ce:6a:5d:1d:f1:86:e8:aa: d7:1f:74:ee:1b:31:bb:d5:c3:15:7d:49:bb:24:71:6e:5a:b7: bc:6a:d8:f6:47:49:29:39:ea:da:b3:f3:4c:6c:9c:09:1d:94: fa:8d:58:8e:b7:62:c0:f5:e9:3b:56:b6:d6:1b:16:3c:13:76: e8:49:f4:ef:0d:52:69:af:16:77:ca:4e:eb:24:d7:e2:cd:71: 36:33:90:ff:52:5f:b0:cd:e6:d2:13:c4:dc:83:42:a8:0d:95: 5e:43:a7:06:6a:22:d5:f8:8f:95:8d:e6:cc:0c:a9:cd:50:d0: cd:89:31:ef:75:8e:32:11:a5:31:9e:b7:33:bc:ed:fe:cc:b1: a6:8a:1d:cd:df:87:06:47:e0:e9:07:b8:44:a9:d4:c7:d9:52: 26:8d:b4:3a:97:e4:0a:a7:ce:45:32:ee:08:1f:ae:c0:85:e2: 50:7f:2a:1a:91:6d:95:6d:45:8a:9c:3b:0e:ed:c5:bf:93:e6: 47:3c:9b:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FWvizpy1B0KqqlZjvG1vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0 NGY0NDQwHhcNMjYwMTAyMTQyMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWM5NjllNjhhMmIwMjgwNmM2MWM4NGY5N2E3MmNkN2ZmYmZjOTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw85hrorqfEw0s7uMpv8xo5kqQmSV HUJxeRTpfV1HN1u1MoWC47g8agdPsi5XIkHjTOUK7TFWY/+ld9B0aqasyLB93yJ6 D2oVlN7nJHz4+MfCWZUhHJDyH9b8PaTIY3HunnfS9MwDKKIr5uVfWuY2V3yzzBSA kwKbg0FkomvDrOG9BWCNTZ3NhodHj1rzWx4nQQbe7ABCAHjRejdWwVsOMdnN3pvc RsF8zQmhuvHNXRQXcoEM+jnEdmZw3J13ny14gDS5wBCikUGfrmD7uVMEhPwJV5re lxOH1OhjSiVUWNAHeS2+remSSSLgqU8LAqKLzn9ZjmXqVgi8WX6ZPTT5AQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPHJaeaKKwKAbGHIT5enLNf/v8kEMB8GA1UdIwQY MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt ZWU0MzVkM2NkNTg1LzEvOGNscDVvb3JBb0JzWWNoUGw2Y3MxXy1feVFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1 LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXJ1MA0G CSqGSIb3DQEBCwUAA4IBAQAj/NLi+KFTZUAGCngU4uyvR6UCLgEhxtJNsyXh2f+/ 5NM/PavH1S/PdvAqE6kJG1p8iWPfPAWfWAdZ0m+G+nWSzmpdHfGG6KrXH3TuGzG7 1cMVfUm7JHFuWre8atj2R0kpOeras/NMbJwJHZT6jViOt2LA9ek7VrbWGxY8E3bo SfTvDVJprxZ3yk7rJNfizXE2M5D/Ul+wzebSE8Tcg0KoDZVeQ6cGaiLV+I+VjebM DKnNUNDNiTHvdY4yEaUxnrczvO3+zLGmih3N34cGR+DpB7hEqdTH2VImjbQ6l+QK p85FMu4IH67AheJQfyoakW2VbUWKnDsO7cW/k+ZHPJuH -----END CERTIFICATE-----Generated at Thu Jan 8 09:15:05 2026 by rpki-client