This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b984d6-167a-4c0d-b544-58d5bb71c2a1/1/pZOi8KgLQPZzvVybSS9PPvYIKdA.roa File: pZOi8KgLQPZzvVybSS9PPvYIKdA.roa (raw, json) Hash identifier: PNYuRFnux4k2df/b/Jh2UtMM43qZz0BzvbZ7UBzhxHY= Subject key identifier: A5:93:A2:F0:A8:0B:40:F6:73:BD:5C:9B:49:2F:4F:3E:F6:08:29:D0 Certificate issuer: /CN=8ddc04351c858a6a7fe0f90812bb10655e5af8ca Certificate serial: 019B77C74D2AB2C4D6424ECF3F79CBC63F5D Authority key identifier: 8D:DC:04:35:1C:85:8A:6A:7F:E0:F9:08:12:BB:10:65:5E:5A:F8:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jdwENRyFimp_4PkIErsQZV5a-Mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b984d6-167a-4c0d-b544-58d5bb71c2a1/1/pZOi8KgLQPZzvVybSS9PPvYIKdA.roa Signing time: Thu 01 Jan 2026 04:18:28 +0000 ROA not before: Thu 01 Jan 2026 04:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51560 IP address blocks: 185.139.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b984d6-167a-4c0d-b544-58d5bb71c2a1/1/jdwENRyFimp_4PkIErsQZV5a-Mo.crl rsync://rpki.ripe.net/repository/DEFAULT/89/b984d6-167a-4c0d-b544-58d5bb71c2a1/1/jdwENRyFimp_4PkIErsQZV5a-Mo.mft rsync://rpki.ripe.net/repository/DEFAULT/jdwENRyFimp_4PkIErsQZV5a-Mo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4d:2a:b2:c4:d6:42:4e:cf:3f:79:cb:c6:3f:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ddc04351c858a6a7fe0f90812bb10655e5af8ca Validity Not Before: Jan 1 04:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a593a2f0a80b40f673bd5c9b492f4f3ef60829d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:82:8c:87:99:43:72:dc:b1:b9:ed:00:e6:41: ce:9d:2d:8b:22:fd:a6:78:45:40:ec:2f:57:89:19: 05:f7:1d:14:d7:f4:24:d6:39:e6:78:3a:f8:fd:f3: 60:02:c8:3f:47:c3:72:48:0a:ab:56:c9:09:9f:19: 0c:3f:4a:68:a7:fe:c2:5e:c1:42:35:52:a4:f2:44: 4e:5f:25:f9:6b:56:3c:4c:bb:70:6a:c9:f3:6c:48: d0:4a:f0:96:f5:dc:39:4b:15:de:f7:fc:4b:c5:45: 50:77:ff:40:9b:9a:47:a8:77:01:39:c5:39:5e:1c: 11:bd:1c:e6:90:27:4b:15:dc:44:86:cd:61:1e:92: e0:c1:46:c3:72:2f:88:3c:02:fc:ac:2a:bd:5f:76: 0c:3d:8b:3c:da:a2:cb:50:3a:8f:69:c1:26:77:b6: 53:c5:08:96:60:7f:eb:db:f6:9b:34:40:fb:5c:91: 96:b9:0b:f1:4c:52:33:17:1e:f7:96:55:ab:20:9c: 22:d0:2e:6f:d6:73:c8:c9:f8:dd:08:67:4a:3a:eb: 78:69:7d:71:0c:97:61:ef:3f:7b:c8:ca:92:13:5e: 32:20:1b:9a:68:16:7a:84:63:76:bd:13:6d:d0:be: fe:d7:2c:95:a1:8f:87:64:33:ae:ad:ed:52:91:8a: 0e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:93:A2:F0:A8:0B:40:F6:73:BD:5C:9B:49:2F:4F:3E:F6:08:29:D0 X509v3 Authority Key Identifier: keyid:8D:DC:04:35:1C:85:8A:6A:7F:E0:F9:08:12:BB:10:65:5E:5A:F8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jdwENRyFimp_4PkIErsQZV5a-Mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b984d6-167a-4c0d-b544-58d5bb71c2a1/1/pZOi8KgLQPZzvVybSS9PPvYIKdA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b984d6-167a-4c0d-b544-58d5bb71c2a1/1/jdwENRyFimp_4PkIErsQZV5a-Mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.139.208.0/22 Signature Algorithm: sha256WithRSAEncryption 10:7a:be:9e:ee:c6:fc:01:cd:38:35:0b:a0:cb:7b:24:e7:e0: 34:8c:6e:84:af:38:29:06:f9:53:18:fb:14:8d:c8:52:3c:cb: 39:30:1b:0d:6c:5c:a4:0e:52:eb:9f:0e:ff:25:fb:bf:68:ba: 5c:46:f7:1d:de:74:30:90:88:fe:4c:50:83:8b:72:2c:cc:e7: c3:0d:86:c3:25:02:b4:ae:c9:fd:3b:18:6c:f3:69:ac:d2:b5: 5b:cb:75:95:13:ed:23:c1:22:ce:8c:f6:b3:3d:57:ea:d1:8d: 26:3b:e0:86:28:7e:cc:d6:1d:b2:da:e2:bf:41:a6:56:cc:6c: c6:a4:4c:67:4c:83:d5:2b:15:f2:bc:fd:90:b9:0e:f7:54:ea: 7c:c6:ca:4e:96:58:df:a6:de:c3:e8:67:df:95:0d:2d:e6:04: 25:19:eb:45:79:80:47:0f:c1:ff:f5:82:5f:6b:9c:85:5c:ec: 5e:2c:9d:11:9c:d7:e2:74:af:be:c4:5a:da:e6:4f:fa:4e:80: cc:6c:ac:f6:d7:8a:e8:65:ca:36:4e:7d:e7:85:2c:82:04:3f: 1e:b2:51:ae:82:03:f8:30:f9:9f:72:4d:dc:b3:f9:d1:35:5a: 65:83:81:b0:29:ce:26:83:0e:9c:07:2e:00:b0:94:44:05:db: f4:2b:81:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x00qssTWQk7PP3nLxj9dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkZGMwNDM1MWM4NThhNmE3ZmUwZjkwODEyYmIxMDY1NWU1 YWY4Y2EwHhcNMjYwMTAxMDQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTkzYTJmMGE4MGI0MGY2NzNiZDVjOWI0OTJmNGYzZWY2MDgyOWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4KMh5lDctyxue0A5kHOnS2LIv2m eEVA7C9XiRkF9x0U1/Qk1jnmeDr4/fNgAsg/R8NySAqrVskJnxkMP0pop/7CXsFC NVKk8kROXyX5a1Y8TLtwasnzbEjQSvCW9dw5SxXe9/xLxUVQd/9Am5pHqHcBOcU5 XhwRvRzmkCdLFdxEhs1hHpLgwUbDci+IPAL8rCq9X3YMPYs82qLLUDqPacEmd7ZT xQiWYH/r2/abNED7XJGWuQvxTFIzFx73llWrIJwi0C5v1nPIyfjdCGdKOut4aX1x DJdh7z97yMqSE14yIBuaaBZ6hGN2vRNt0L7+1yyVoY+HZDOure1SkYoOgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKWTovCoC0D2c71cm0kvTz72CCnQMB8GA1UdIwQY MBaAFI3cBDUchYpqf+D5CBK7EGVeWvjKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamR3RU5SeUZpbXBfNFBrSUVyc1FaVjVhLU1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iOTg0ZDYtMTY3YS00YzBkLWI1NDQt NThkNWJiNzFjMmExLzEvcFpPaThLZ0xRUFp6dlZ5YlNTOVBQdllJS2RBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9iOTg0ZDYtMTY3YS00YzBkLWI1NDQtNThkNWJiNzFjMmEx LzEvamR3RU5SeUZpbXBfNFBrSUVyc1FaVjVhLU1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYvQMA0G CSqGSIb3DQEBCwUAA4IBAQAQer6e7sb8Ac04NQugy3sk5+A0jG6ErzgpBvlTGPsU jchSPMs5MBsNbFykDlLrnw7/Jfu/aLpcRvcd3nQwkIj+TFCDi3IszOfDDYbDJQK0 rsn9Oxhs82ms0rVby3WVE+0jwSLOjPazPVfq0Y0mO+CGKH7M1h2y2uK/QaZWzGzG pExnTIPVKxXyvP2QuQ73VOp8xspOlljfpt7D6GfflQ0t5gQlGetFeYBHD8H/9YJf a5yFXOxeLJ0RnNfidK++xFra5k/6ToDMbKz214roZco2Tn3nhSyCBD8eslGuggP4 MPmfck3cs/nRNVplg4GwKc4mgw6cBy4AsJREBdv0K4EO -----END CERTIFICATE-----Generated at Tue Feb 10 05:55:07 2026 by rpki-client