This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/0U1eG0GsSbCnBwGZ5F2Z5gLSu9Y.roa File: 0U1eG0GsSbCnBwGZ5F2Z5gLSu9Y.roa (raw, json) Hash identifier: Fhy27ODXOo/iYcrRT3EoyxFDPguM4gwg2roTVU5BtKk= Subject key identifier: D1:4D:5E:1B:41:AC:49:B0:A7:07:01:99:E4:5D:99:E6:02:D2:BB:D6 Certificate issuer: /CN=3e8dd43928edfb1200efbc62c441f9cd29048585 Certificate serial: 019B7EA69D3F2A85EB09C1878939D74863F1 Authority key identifier: 3E:8D:D4:39:28:ED:FB:12:00:EF:BC:62:C4:41:F9:CD:29:04:85:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Po3UOSjt-xIA77xixEH5zSkEhYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/0U1eG0GsSbCnBwGZ5F2Z5gLSu9Y.roa Signing time: Fri 02 Jan 2026 12:20:07 +0000 ROA not before: Fri 02 Jan 2026 12:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60049 IP address blocks: 185.57.232.0/22 maxlen: 24 2a02:46e0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/Po3UOSjt-xIA77xixEH5zSkEhYU.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/Po3UOSjt-xIA77xixEH5zSkEhYU.mft rsync://rpki.ripe.net/repository/DEFAULT/Po3UOSjt-xIA77xixEH5zSkEhYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:9d:3f:2a:85:eb:09:c1:87:89:39:d7:48:63:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e8dd43928edfb1200efbc62c441f9cd29048585 Validity Not Before: Jan 2 12:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d14d5e1b41ac49b0a7070199e45d99e602d2bbd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d3:b2:4a:a9:2a:42:4d:93:18:ff:b7:cb:62: ce:dc:74:75:35:6d:5d:b3:94:a7:65:e6:05:f0:57: 65:9f:72:a9:0c:b8:ea:39:df:3d:86:86:21:8f:da: a8:88:16:07:4e:6e:a9:a7:db:ef:07:da:15:95:89: e2:aa:cf:16:3e:c8:14:97:1c:f5:c5:a6:a2:f1:e0: 17:56:f3:2e:06:0a:15:56:42:6f:49:b6:1b:22:c8: 37:20:86:fb:9c:c6:b2:2d:7c:a2:ad:68:02:a2:8e: 15:25:dc:56:30:48:f0:1e:39:55:60:7c:42:70:74: 0b:66:c7:41:7b:8d:e2:f0:e5:8c:24:aa:a9:c8:d6: b2:61:18:95:8d:a5:c8:d4:b8:bd:bd:1c:42:37:26: 11:a0:f7:61:32:c7:2e:ff:95:57:a3:a8:00:42:9d: e8:e4:42:6a:f4:15:da:d3:29:a0:ea:8a:f0:09:96: 81:5b:db:14:d1:1b:83:7c:20:66:1a:73:ba:35:73: 09:68:dd:30:97:59:83:6b:cc:96:e0:45:23:d7:2f: 4f:f9:8d:fb:2f:dc:78:a2:11:12:2b:ae:be:6a:b8: 8e:75:30:cc:56:d1:b8:e1:0b:24:51:21:b0:9d:01: 53:6e:6d:86:08:b2:95:37:36:a9:83:2e:df:70:b3: f8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4D:5E:1B:41:AC:49:B0:A7:07:01:99:E4:5D:99:E6:02:D2:BB:D6 X509v3 Authority Key Identifier: keyid:3E:8D:D4:39:28:ED:FB:12:00:EF:BC:62:C4:41:F9:CD:29:04:85:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Po3UOSjt-xIA77xixEH5zSkEhYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/0U1eG0GsSbCnBwGZ5F2Z5gLSu9Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/Po3UOSjt-xIA77xixEH5zSkEhYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.57.232.0/22 IPv6: 2a02:46e0::/32 Signature Algorithm: sha256WithRSAEncryption 22:c6:01:e4:41:5a:f8:96:fe:27:d3:ce:ab:c9:8d:9a:29:1a: 34:ec:06:3e:f9:8a:4a:29:d7:d4:10:d5:83:5d:40:c7:5f:b2: d8:20:9e:2f:5d:ae:54:11:d5:29:1d:36:11:09:a4:40:8f:5f: e8:ed:e1:58:f9:5d:57:74:80:6e:c0:12:4b:61:09:1c:24:1c: be:7a:10:f3:b8:73:f3:ea:7b:8f:7b:cd:75:e3:2d:79:51:1b: 42:b7:f7:f9:ad:f9:c6:04:d6:95:e5:54:c8:02:cf:01:4b:d7: 35:6f:3e:b1:45:6b:81:fa:67:09:14:d0:47:ce:16:bb:89:b8: e0:d1:14:3d:bb:c1:9f:73:bd:7e:e5:54:3a:4c:c3:c5:7f:a9: 01:44:60:f7:03:20:cc:be:3d:63:f8:78:4b:d3:e8:f4:75:74: 45:7a:51:dc:1c:4f:56:92:de:f5:ce:e5:df:13:b9:df:6e:aa: 06:c7:0f:68:87:5d:32:86:d9:90:61:87:c0:4c:4c:9e:1d:54: 98:b0:e4:34:21:ff:b3:c2:f0:6a:90:cb:35:3c:9e:9b:0d:86: 4d:e4:9e:7b:4f:56:86:d7:a8:14:c8:3a:f9:92:4a:a7:ef:31: 11:ef:65:72:02:90:aa:e9:9f:2e:69:e3:23:f6:06:07:4b:de: 0b:bf:7d:52 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pp0/KoXrCcGHiTnXSGPxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlOGRkNDM5MjhlZGZiMTIwMGVmYmM2MmM0NDFmOWNkMjkw NDg1ODUwHhcNMjYwMTAyMTIyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTRkNWUxYjQxYWM0OWIwYTcwNzAxOTllNDVkOTllNjAyZDJiYmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtOySqkqQk2TGP+3y2LO3HR1NW1d s5SnZeYF8Fdln3KpDLjqOd89hoYhj9qoiBYHTm6pp9vvB9oVlYniqs8WPsgUlxz1 xaai8eAXVvMuBgoVVkJvSbYbIsg3IIb7nMayLXyirWgCoo4VJdxWMEjwHjlVYHxC cHQLZsdBe43i8OWMJKqpyNayYRiVjaXI1Li9vRxCNyYRoPdhMscu/5VXo6gAQp3o 5EJq9BXa0ymg6orwCZaBW9sU0RuDfCBmGnO6NXMJaN0wl1mDa8yW4EUj1y9P+Y37 L9x4ohESK66+ariOdTDMVtG44QskUSGwnQFTbm2GCLKVNzapgy7fcLP4uQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNFNXhtBrEmwpwcBmeRdmeYC0rvWMB8GA1UdIwQY MBaAFD6N1Dko7fsSAO+8YsRB+c0pBIWFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG8zVU9TanQteElBNzd4aXhFSDV6U2tFaFlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mN2VjYjctZmY2ZC00NWUwLTk4ZDYt Yzc3YmFlM2QzZWQxLzEvMFUxZUcwR3NTYkNuQndHWjVGMlo1Z0xTdTlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mN2VjYjctZmY2ZC00NWUwLTk4ZDYtYzc3YmFlM2QzZWQx LzEvUG8zVU9TanQteElBNzd4aXhFSDV6U2tFaFlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTnoMA0E AgACMAcDBQAqAkbgMA0GCSqGSIb3DQEBCwUAA4IBAQAixgHkQVr4lv4n086ryY2a KRo07AY++YpKKdfUENWDXUDHX7LYIJ4vXa5UEdUpHTYRCaRAj1/o7eFY+V1XdIBu wBJLYQkcJBy+ehDzuHPz6nuPe8114y15URtCt/f5rfnGBNaV5VTIAs8BS9c1bz6x RWuB+mcJFNBHzha7ibjg0RQ9u8Gfc71+5VQ6TMPFf6kBRGD3AyDMvj1j+HhL0+j0 dXRFelHcHE9Wkt71zuXfE7nfbqoGxw9oh10yhtmQYYfATEyeHVSYsOQ0If+zwvBq kMs1PJ6bDYZN5J57T1aG16gUyDr5kkqn7zER72VyApCq6Z8uaeMj9gYHS94Lv31S -----END CERTIFICATE-----Generated at Mon Feb 9 22:14:55 2026 by rpki-client