This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/zBODcHHYAYEI2vkzLWIhkVORhVc.roa File: zBODcHHYAYEI2vkzLWIhkVORhVc.roa (raw, json) Hash identifier: 3o1N6TODhD9ZWWnGrLvkWRiz/fr7H8KId5ejA3JXzi8= Subject key identifier: CC:13:83:70:71:D8:01:81:08:DA:F9:33:2D:62:21:91:53:91:85:57 Certificate issuer: /CN=845d042f65e1b1303a44e43e0e02748a75837b44 Certificate serial: 019B7F1428CCE9232D93C65B2DD1C8CF8495 Authority key identifier: 84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/zBODcHHYAYEI2vkzLWIhkVORhVc.roa Signing time: Fri 02 Jan 2026 14:19:45 +0000 ROA not before: Fri 02 Jan 2026 14:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207604 IP address blocks: 185.119.88.0/24 maxlen: 24 185.119.89.0/24 maxlen: 24 185.119.90.0/24 maxlen: 24 185.119.91.0/24 maxlen: 24 185.241.212.0/24 maxlen: 24 185.241.214.0/24 maxlen: 24 2a0c:bf80:5a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:28:cc:e9:23:2d:93:c6:5b:2d:d1:c8:cf:84:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845d042f65e1b1303a44e43e0e02748a75837b44 Validity Not Before: Jan 2 14:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc13837071d8018108daf9332d62219153918557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:33:fb:cf:8c:c5:a0:23:2e:49:51:89:ad:a5: 31:02:31:1f:c2:ef:f2:8a:f6:34:1c:ca:07:20:d1: 99:3f:22:18:66:51:bf:ca:b3:cc:e4:34:02:58:34: be:66:99:d7:4f:30:3d:20:ec:7e:c5:33:d7:00:fc: 4b:d4:03:cc:89:0b:bd:fb:99:01:90:7b:63:dd:dc: a1:61:a0:74:1e:ad:0c:0a:47:fc:2c:83:fd:7f:59: db:1a:7a:a3:10:5d:97:28:13:ed:00:1b:d3:2d:94: ba:05:56:e3:eb:21:55:8c:e0:8f:ae:aa:49:4c:7a: b1:e4:f0:19:09:11:76:9c:b9:de:8a:97:81:e6:45: ba:2f:7d:70:7c:ee:8e:08:02:e4:0c:a2:60:47:f3: ab:d5:96:50:22:20:68:b9:bf:73:3f:8c:a2:6d:c7: 99:11:14:43:6a:d3:e6:b4:2a:ce:4e:24:6f:eb:cd: d1:67:a9:c3:bb:a5:1e:92:aa:a8:94:11:81:21:18: 4d:a4:5d:57:e1:ce:b8:aa:32:b4:39:93:7d:4d:5e: d0:c7:c7:fb:c7:95:62:54:ea:4d:f3:9d:c8:9f:41: f1:6c:74:21:5e:a3:1f:94:e2:5d:42:09:32:a9:5c: 05:1b:82:46:d2:1c:e5:20:e2:b3:7d:e1:e4:7c:01: 94:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:13:83:70:71:D8:01:81:08:DA:F9:33:2D:62:21:91:53:91:85:57 X509v3 Authority Key Identifier: keyid:84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/zBODcHHYAYEI2vkzLWIhkVORhVc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.119.88.0/22 185.241.212.0/24 185.241.214.0/24 IPv6: 2a0c:bf80:5a::/48 Signature Algorithm: sha256WithRSAEncryption f1:b3:6d:f7:a1:a6:f3:12:00:75:2a:34:bf:c3:bb:1d:b5:87: 4a:3f:90:1b:81:d5:0f:46:cd:7e:9d:43:1e:dd:3f:72:89:ec: d9:75:e7:fe:35:37:93:47:9a:86:ac:67:2f:5c:31:67:3b:47: d4:81:c9:3f:d9:4c:18:da:0e:15:aa:76:88:42:db:fc:44:2f: de:42:35:70:99:64:47:3a:c7:e7:16:ac:48:2d:64:5a:43:8f: ad:65:be:6e:ed:75:ab:df:87:a9:3c:d2:5b:f1:c1:44:d8:ae: 15:11:16:0a:da:cf:8a:a0:84:40:44:e1:4c:6d:d1:1b:86:1d: d4:dc:07:69:56:f8:82:eb:05:10:d1:eb:c0:96:a9:ce:7b:f1: fb:e3:55:27:21:04:3d:e8:ef:a3:0a:56:fb:e0:19:eb:22:d0: 12:c8:ca:4d:38:b5:5c:c9:82:d9:d3:2d:3d:57:5d:cb:2b:6d: 25:be:98:ec:2a:f9:b9:b5:a1:b2:d3:e1:ee:94:fb:bd:96:34: d4:23:de:40:7a:e1:9b:4d:cb:a8:18:4c:1f:87:1f:52:6d:66: ec:ac:17:80:09:b1:92:33:a4:58:a4:bc:bf:d3:4f:7d:34:39: 35:ad:e3:23:16:83:72:f1:c7:c2:83:51:bf:b6:f4:e4:09:a0: e8:29:af:bb -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt/FCjM6SMtk8ZbLdHIz4SVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NWQwNDJmNjVlMWIxMzAzYTQ0ZTQzZTBlMDI3NDhhNzU4 MzdiNDQwHhcNMjYwMTAyMTQxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzEzODM3MDcxZDgwMTgxMDhkYWY5MzMyZDYyMjE5MTUzOTE4NTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zP7z4zFoCMuSVGJraUxAjEfwu/y ivY0HMoHINGZPyIYZlG/yrPM5DQCWDS+ZpnXTzA9IOx+xTPXAPxL1APMiQu9+5kB kHtj3dyhYaB0Hq0MCkf8LIP9f1nbGnqjEF2XKBPtABvTLZS6BVbj6yFVjOCPrqpJ THqx5PAZCRF2nLneipeB5kW6L31wfO6OCALkDKJgR/Or1ZZQIiBoub9zP4yibceZ ERRDatPmtCrOTiRv683RZ6nDu6UekqqolBGBIRhNpF1X4c64qjK0OZN9TV7Qx8f7 x5ViVOpN853In0HxbHQhXqMflOJdQgkyqVwFG4JG0hzlIOKzfeHkfAGU3QIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFMwTg3Bx2AGBCNr5My1iIZFTkYVXMB8GA1UdIwQY MBaAFIRdBC9l4bEwOkTkPg4CdIp1g3tEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEYwRUwyWGhzVEE2Uk9RLURnSjBpbldEZTBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85NmRiY2QtNmEzOS00YzIwLTkxMjgt ZDhjMzUxZDkzZWM2LzEvekJPRGNISFlBWUVJMnZrekxXSWhrVk9SaFZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS85NmRiY2QtNmEzOS00YzIwLTkxMjgtZDhjMzUxZDkzZWM2 LzEvaEYwRUwyWGhzVEE2Uk9RLURnSjBpbldEZTBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQCuXdYAwQA ufHUAwQAufHWMA8EAgACMAkDBwAqDL+AAFowDQYJKoZIhvcNAQELBQADggEBAPGz bfehpvMSAHUqNL/Dux21h0o/kBuB1Q9GzX6dQx7dP3KJ7Nl15/41N5NHmoasZy9c MWc7R9SByT/ZTBjaDhWqdohC2/xEL95CNXCZZEc6x+cWrEgtZFpDj61lvm7tdavf h6k80lvxwUTYrhURFgraz4qghEBE4Uxt0RuGHdTcB2lW+ILrBRDR68CWqc578fvj VSchBD3o76MKVvvgGesi0BLIyk04tVzJgtnTLT1XXcsrbSW+mOwq+bm1obLT4e6U +72WNNQj3kB64ZtNy6gYTB+HH1JtZuysF4AJsZIzpFikvL/TT300OTWt4yMWg3Lx x8KDUb+29OQJoOgpr7s= -----END CERTIFICATE-----Generated at Tue Feb 10 02:58:26 2026 by rpki-client