This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/V4V1l39T5s1HWbLvpZ_dNNrQqrE.roa File: V4V1l39T5s1HWbLvpZ_dNNrQqrE.roa (raw, json) Hash identifier: 2VhJQ/68VuS0vWM3hQGdKSnDSrR+nJHlsrGkam4iQlg= Subject key identifier: 57:85:75:97:7F:53:E6:CD:47:59:B2:EF:A5:9F:DD:34:DA:D0:AA:B1 Certificate issuer: /CN=8812a0a809dc3cd1fbd8951a8f80f69925e11908 Certificate serial: 019B7B3628AF7EF983C160EAEA710B6417B0 Authority key identifier: 88:12:A0:A8:09:DC:3C:D1:FB:D8:95:1A:8F:80:F6:99:25:E1:19:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBKgqAncPNH72JUaj4D2mSXhGQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/V4V1l39T5s1HWbLvpZ_dNNrQqrE.roa Signing time: Thu 01 Jan 2026 20:18:25 +0000 ROA not before: Thu 01 Jan 2026 20:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51013 IP address blocks: 92.118.24.0/22 maxlen: 24 92.118.24.0/24 maxlen: 24 92.118.26.0/24 maxlen: 24 92.118.27.0/24 maxlen: 24 185.111.88.0/22 maxlen: 24 185.111.88.0/24 maxlen: 24 185.111.89.0/24 maxlen: 24 185.111.90.0/24 maxlen: 24 185.111.91.0/24 maxlen: 24 185.140.108.0/24 maxlen: 24 193.32.232.0/22 maxlen: 24 193.32.232.0/24 maxlen: 24 193.32.233.0/24 maxlen: 24 193.32.234.0/24 maxlen: 24 193.32.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.mft rsync://rpki.ripe.net/repository/DEFAULT/iBKgqAncPNH72JUaj4D2mSXhGQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:28:af:7e:f9:83:c1:60:ea:ea:71:0b:64:17:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8812a0a809dc3cd1fbd8951a8f80f69925e11908 Validity Not Before: Jan 1 20:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=578575977f53e6cd4759b2efa59fdd34dad0aab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:76:c8:5e:25:e0:2f:af:62:5c:4c:12:a6:49: 70:ee:02:05:a0:6d:9a:09:d5:ca:19:f9:cd:db:0e: 35:7c:aa:d6:91:26:44:2f:c7:49:00:8b:5f:38:25: ad:6c:fd:85:94:df:d3:e2:07:30:2e:8d:6e:a9:03: 1f:cb:46:a5:8f:74:16:16:d7:67:e2:8a:5a:63:a1: a2:05:71:c1:91:5b:1d:4a:d5:4c:b3:a9:c7:70:b9: af:6f:bd:17:a0:fb:9f:0e:ec:7c:0b:ce:35:50:ee: 1b:2e:48:9f:8f:ef:29:1d:31:90:62:2c:e2:61:14: c2:1f:17:24:e3:b6:30:e8:62:9c:cd:24:0d:f9:b6: 3e:6f:32:cb:c6:8c:b9:03:69:0f:f2:2e:ab:a1:a7: 5b:cb:1a:fc:3e:e9:3e:39:b8:c2:e1:1a:ec:52:7f: 53:80:09:69:c3:52:be:86:1e:e5:3e:d6:b3:e5:c0: 1d:bc:8e:ae:8b:ef:1a:05:ea:b2:cb:ac:a9:bc:9d: 75:e5:d8:c2:cb:bc:0f:e1:81:f8:95:4c:3b:93:15: 20:97:a2:3c:38:46:24:81:71:f1:4f:0d:16:7b:bb: 68:22:91:24:c8:61:7a:7f:7f:7f:05:1f:42:d0:93: 02:c8:b7:e5:b0:2b:b8:32:03:c5:59:f5:9c:a1:da: 11:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:85:75:97:7F:53:E6:CD:47:59:B2:EF:A5:9F:DD:34:DA:D0:AA:B1 X509v3 Authority Key Identifier: keyid:88:12:A0:A8:09:DC:3C:D1:FB:D8:95:1A:8F:80:F6:99:25:E1:19:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBKgqAncPNH72JUaj4D2mSXhGQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/V4V1l39T5s1HWbLvpZ_dNNrQqrE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.118.24.0/22 185.111.88.0/22 185.140.108.0/24 193.32.232.0/22 Signature Algorithm: sha256WithRSAEncryption 58:55:29:e3:56:3a:06:be:40:c4:05:04:f2:87:a5:10:39:e5: bc:17:ba:6a:12:64:5f:a0:63:ed:bd:d9:01:f2:39:54:e8:9a: 46:b2:34:ff:4a:12:88:8d:d7:4f:89:ba:e6:96:e6:d1:44:5c: a0:02:e7:23:ba:2d:00:38:28:60:ad:f9:35:9a:94:20:88:2f: c9:b5:34:7c:6f:42:8d:e3:7a:39:ed:39:ee:8e:19:00:9e:01: fc:a6:ee:9c:8d:b4:fa:7b:9a:d2:d9:63:4b:11:b8:16:36:87: 32:c9:73:92:cd:04:a1:b5:9d:6b:5c:dd:e6:fe:7f:a6:9a:8d: 57:99:fe:44:4d:05:08:07:ac:0b:01:29:6e:29:c5:f0:c4:0d: df:20:ba:0b:89:0a:3e:77:f8:57:39:a9:0a:c8:8f:0b:c2:05: 99:cd:31:7b:e2:45:36:d2:95:02:b9:b8:72:20:1f:39:80:19: 0a:54:75:a3:7d:f1:13:96:47:47:fd:9d:fe:34:b4:4c:4c:3b: 97:1b:28:ac:5a:c6:66:6b:20:90:17:bf:07:96:f2:41:63:e0: 52:42:91:6a:d8:79:75:7a:f9:c3:f6:ea:f8:e2:e3:df:45:f5: 3c:77:77:5b:be:14:9e:96:6b:3c:c5:a3:68:89:ef:43:3e:e5: 79:8b:b9:c0 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7NiivfvmDwWDq6nELZBewMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MTJhMGE4MDlkYzNjZDFmYmQ4OTUxYThmODBmNjk5MjVl MTE5MDgwHhcNMjYwMTAxMjAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Nzg1NzU5NzdmNTNlNmNkNDc1OWIyZWZhNTlmZGQzNGRhZDBhYWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHbIXiXgL69iXEwSpklw7gIFoG2a CdXKGfnN2w41fKrWkSZEL8dJAItfOCWtbP2FlN/T4gcwLo1uqQMfy0alj3QWFtdn 4opaY6GiBXHBkVsdStVMs6nHcLmvb70XoPufDux8C841UO4bLkifj+8pHTGQYizi YRTCHxck47Yw6GKczSQN+bY+bzLLxoy5A2kP8i6roadbyxr8Puk+ObjC4RrsUn9T gAlpw1K+hh7lPtaz5cAdvI6ui+8aBeqyy6ypvJ115djCy7wP4YH4lUw7kxUgl6I8 OEYkgXHxTw0We7toIpEkyGF6f39/BR9C0JMCyLflsCu4MgPFWfWcodoRrQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFFeFdZd/U+bNR1my76Wf3TTa0KqxMB8GA1UdIwQY MBaAFIgSoKgJ3DzR+9iVGo+A9pkl4RkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJLZ3FBbmNQTkg3MkpVYWo0RDJtU1hoR1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9jOGFhMDktYmRmYi00M2NhLTg1MjIt ZmE3NWNiZTliZWFkLzEvVjRWMWwzOVQ1czFIV2JMdnBaX2ROTnJRcXJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9jOGFhMDktYmRmYi00M2NhLTg1MjItZmE3NWNiZTliZWFk LzEvaUJLZ3FBbmNQTkg3MkpVYWo0RDJtU1hoR1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCXHYYAwQC uW9YAwQAuYxsAwQCwSDoMA0GCSqGSIb3DQEBCwUAA4IBAQBYVSnjVjoGvkDEBQTy h6UQOeW8F7pqEmRfoGPtvdkB8jlU6JpGsjT/ShKIjddPibrmlubRRFygAucjui0A OChgrfk1mpQgiC/JtTR8b0KN43o57TnujhkAngH8pu6cjbT6e5rS2WNLEbgWNocy yXOSzQShtZ1rXN3m/n+mmo1Xmf5ETQUIB6wLASluKcXwxA3fILoLiQo+d/hXOakK yI8LwgWZzTF74kU20pUCubhyIB85gBkKVHWjffETlkdH/Z3+NLRMTDuXGyisWsZm ayCQF78HlvJBY+BSQpFq2Hl1evnD9ur44uPfRfU8d3dbvhSelms8xaNoie9DPuV5 i7nA -----END CERTIFICATE-----Generated at Mon Jan 26 16:57:06 2026 by rpki-client