This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/AV8o_HRJCYQ0OsTpD-wRX5B7CZE.roa File: AV8o_HRJCYQ0OsTpD-wRX5B7CZE.roa (raw, json) Hash identifier: IbeU1AeOys6rseJf5ugRnLAWWP/7mZIxuUtqX7netkk= Subject key identifier: 01:5F:28:FC:74:49:09:84:34:3A:C4:E9:0F:EC:11:5F:90:7B:09:91 Certificate issuer: /CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba Certificate serial: 019B7F8091FEB100955EA0F7614485A3A5D8 Authority key identifier: 0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/AV8o_HRJCYQ0OsTpD-wRX5B7CZE.roa Signing time: Fri 02 Jan 2026 16:18:10 +0000 ROA not before: Fri 02 Jan 2026 16:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8758 IP address blocks: 194.35.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:91:fe:b1:00:95:5e:a0:f7:61:44:85:a3:a5:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba Validity Not Before: Jan 2 16:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=015f28fc74490984343ac4e90fec115f907b0991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a0:2d:8b:3e:f3:e5:33:b1:5f:7d:57:cc:06: c9:d2:c0:38:cf:0b:6f:1d:30:6f:78:c3:81:15:67: 7e:cb:96:10:df:3b:5d:4e:2c:28:e1:91:8a:42:f4: 77:79:4c:81:f9:2c:e7:d0:c5:64:94:0f:bf:1b:a2: f4:44:95:a3:0c:5b:7e:8a:aa:63:bc:65:37:53:99: 4c:3a:81:2e:ff:d2:46:44:51:0c:bd:0c:5c:ab:46: 84:ce:8d:b5:5e:28:1b:73:30:e8:09:41:a8:05:30: 60:7f:a4:89:e1:7d:f8:60:51:9f:95:48:63:95:39: d3:c5:3b:9d:53:d9:ee:0a:75:e4:d2:22:5e:19:be: b5:5f:f5:96:1e:67:a5:85:a0:db:c9:17:6f:fb:bd: 6d:cf:cb:f7:cc:aa:e4:d4:b9:1d:9f:cd:5c:85:c4: 30:08:3b:fe:7c:ef:f2:d8:bd:ac:e4:b0:21:75:b9: 6d:97:93:8b:ba:67:c5:85:e1:7b:99:39:90:71:e0: 19:96:e7:70:39:17:20:ee:07:d2:09:00:61:a3:15: d2:28:05:a1:64:90:4c:21:1e:98:d4:78:a1:ab:c9: 53:62:7a:2a:b9:45:53:4f:35:0c:c1:d4:b2:aa:f7: a0:73:3f:36:29:f4:90:96:0c:f6:be:4f:b7:30:d5: 90:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5F:28:FC:74:49:09:84:34:3A:C4:E9:0F:EC:11:5F:90:7B:09:91 X509v3 Authority Key Identifier: keyid:0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/AV8o_HRJCYQ0OsTpD-wRX5B7CZE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.35.252.0/22 Signature Algorithm: sha256WithRSAEncryption 44:cc:da:0e:b2:b3:d2:3e:8f:b0:38:b1:55:6d:5f:50:5c:9e: ad:09:bb:06:26:d5:91:dd:aa:66:1e:6d:6c:bb:2e:aa:93:a9: cd:63:8b:49:23:63:8c:20:37:41:de:59:d9:fa:7f:4f:76:b7: 40:aa:67:4e:d2:2f:d5:a7:3e:84:53:0c:12:eb:70:f4:16:90: 54:80:3e:9b:b7:17:71:28:87:d9:6f:1d:d7:c5:be:e7:06:f1: 6b:9e:68:52:f1:04:79:e4:b7:35:58:64:74:92:9a:c4:a9:4f: ca:45:d2:2f:cd:44:08:84:d8:82:5f:50:1d:33:56:f3:a6:a2: b6:29:03:d7:56:e8:5f:4f:95:d0:7f:41:22:57:2c:e2:76:e6: c7:61:c5:7f:84:7e:8d:38:dc:21:25:77:ab:48:7a:85:0c:c1: 43:18:dc:67:99:d0:17:4c:a2:10:fd:b6:3d:59:c7:81:c0:ed: 5f:9b:fb:80:cb:a7:98:29:0d:b0:6e:cf:e4:3c:5c:af:df:b7: 47:44:b1:36:5f:09:d0:e5:cd:a4:60:87:ba:17:60:4d:fe:07: 40:29:10:93:37:ef:35:03:64:b0:eb:68:f9:dc:79:a8:b9:82: 67:e7:ed:b5:ca:62:a6:00:4b:2c:55:e1:9b:7e:4e:ba:e1:a2: f2:73:84:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gJH+sQCVXqD3YUSFo6XYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjNjMzE2NGQzZDhjMjY0NGNmMjliMzIzNjc2MWE1NzFl ZTU4YmEwHhcNMjYwMTAyMTYxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTVmMjhmYzc0NDkwOTg0MzQzYWM0ZTkwZmVjMTE1ZjkwN2IwOTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaAtiz7z5TOxX31XzAbJ0sA4zwtv HTBveMOBFWd+y5YQ3ztdTiwo4ZGKQvR3eUyB+Szn0MVklA+/G6L0RJWjDFt+iqpj vGU3U5lMOoEu/9JGRFEMvQxcq0aEzo21XigbczDoCUGoBTBgf6SJ4X34YFGflUhj lTnTxTudU9nuCnXk0iJeGb61X/WWHmelhaDbyRdv+71tz8v3zKrk1Lkdn81chcQw CDv+fO/y2L2s5LAhdbltl5OLumfFheF7mTmQceAZludwORcg7gfSCQBhoxXSKAWh ZJBMIR6Y1Hihq8lTYnoquUVTTzUMwdSyqvegcz82KfSQlgz2vk+3MNWQ+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAFfKPx0SQmENDrE6Q/sEV+QewmRMB8GA1UdIwQY MBaAFA2zwxZNPYwmRM8psyNnYaVx7li6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJQREZrMDlqQ1pFenltekkyZGhwWEh1V0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi82Y2QzNjYtMzU1Ny00MmIyLTg4NWIt M2Q0NjQzOWFhNDFjLzEvQVY4b19IUkpDWVEwT3NUcEQtd1JYNUI3Q1pFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi82Y2QzNjYtMzU1Ny00MmIyLTg4NWItM2Q0NjQzOWFhNDFj LzEvRGJQREZrMDlqQ1pFenltekkyZGhwWEh1V0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwiP8MA0G CSqGSIb3DQEBCwUAA4IBAQBEzNoOsrPSPo+wOLFVbV9QXJ6tCbsGJtWR3apmHm1s uy6qk6nNY4tJI2OMIDdB3lnZ+n9PdrdAqmdO0i/Vpz6EUwwS63D0FpBUgD6btxdx KIfZbx3Xxb7nBvFrnmhS8QR55Lc1WGR0kprEqU/KRdIvzUQIhNiCX1AdM1bzpqK2 KQPXVuhfT5XQf0EiVyzidubHYcV/hH6NONwhJXerSHqFDMFDGNxnmdAXTKIQ/bY9 WceBwO1fm/uAy6eYKQ2wbs/kPFyv37dHRLE2XwnQ5c2kYIe6F2BN/gdAKRCTN+81 A2Sw62j53HmouYJn5+21ymKmAEssVeGbfk664aLyc4Rk -----END CERTIFICATE-----Generated at Mon Jan 26 12:26:11 2026 by rpki-client