This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/aixU7aQWTrYUDZ_F5DQxr3cy9Xg.roa File: aixU7aQWTrYUDZ_F5DQxr3cy9Xg.roa (raw, json) Hash identifier: MJOY7R7UjuAWICgAMNQpzd46IDtpI4a+2RiBB2nc6WA= Subject key identifier: 6A:2C:54:ED:A4:16:4E:B6:14:0D:9F:C5:E4:34:31:AF:77:32:F5:78 Certificate issuer: /CN=3144e609e361913e3c3b0a78d7486aa45b562401 Certificate serial: 019B7C11CDCFD7582A1A8117C630D94F4F9B Authority key identifier: 31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/aixU7aQWTrYUDZ_F5DQxr3cy9Xg.roa Signing time: Fri 02 Jan 2026 00:18:20 +0000 ROA not before: Fri 02 Jan 2026 00:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200189 IP address blocks: 185.108.36.0/23 maxlen: 24 185.108.36.0/24 maxlen: 24 185.108.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.mft rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:cd:cf:d7:58:2a:1a:81:17:c6:30:d9:4f:4f:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3144e609e361913e3c3b0a78d7486aa45b562401 Validity Not Before: Jan 2 00:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a2c54eda4164eb6140d9fc5e43431af7732f578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9d:ee:38:fe:ec:e3:c4:a0:29:94:b8:e2:b8: 08:ed:46:e0:0d:00:da:da:41:19:5a:e2:c5:c6:1a: ff:0b:a9:cc:20:4e:66:6d:03:01:0c:b2:fd:19:e5: d4:e8:3c:6c:4d:f7:08:d9:b5:6a:a4:fa:4a:30:dc: 95:15:f6:51:79:52:17:ba:e7:9a:f3:28:8f:41:78: 72:a1:2f:1a:da:1e:8c:81:fc:94:9a:26:bc:e4:57: 54:83:39:65:7b:19:68:68:8d:5f:4b:9e:f5:bb:bc: 50:1b:4d:db:f6:9f:5c:47:db:10:26:c7:c1:09:f1: 5d:ec:bb:a1:a8:9f:bf:bc:1b:a3:59:39:38:12:48: 9c:54:f5:6f:e5:dc:46:7d:73:85:20:79:d0:07:3a: 3f:fc:77:2a:ff:90:21:3d:5d:ef:2f:fe:70:59:ad: e2:57:fb:20:fd:24:52:d1:4f:6a:bc:d8:70:d4:7d: f5:59:8d:ee:ce:bc:36:10:c0:44:6c:70:b6:80:9d: dc:b5:e2:ef:69:a2:7d:32:c6:32:f2:90:48:5a:75: 2a:80:8c:46:10:ed:20:63:d2:8b:90:ea:e2:50:b9: f4:4f:40:3e:55:1c:c9:df:d1:29:4f:0b:e8:e1:1c: 91:56:3c:23:fb:66:b7:15:53:00:a6:d4:51:1c:86: 6c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:2C:54:ED:A4:16:4E:B6:14:0D:9F:C5:E4:34:31:AF:77:32:F5:78 X509v3 Authority Key Identifier: keyid:31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/aixU7aQWTrYUDZ_F5DQxr3cy9Xg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.108.36.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:04:f7:76:14:2a:02:29:5f:a6:4a:17:e7:53:c4:cc:32:6c: 46:d9:45:58:61:8e:04:6d:4e:0f:8f:f8:61:7d:0d:d7:b2:0e: 7b:0f:22:36:a7:64:23:69:43:ef:91:cc:a0:d3:f7:a5:5d:7a: a6:05:2b:09:d8:25:90:fa:8a:92:f5:c2:2e:56:3e:ab:b6:89: bf:4f:ca:f9:7a:c6:0b:89:f6:23:ea:b2:79:a4:ed:07:22:30: cd:42:ae:72:32:f9:1b:08:21:b3:11:7c:ed:20:75:3b:55:45: 64:dd:32:f0:21:b8:33:fd:9d:f1:98:60:bd:7c:93:59:4c:9b: cf:70:c3:97:f5:b4:61:78:d3:65:a0:dd:ee:1c:45:2a:bb:82: 0e:7f:50:96:65:1e:db:d3:fa:99:be:eb:08:42:fe:ef:b8:3f: b9:68:8b:70:ef:9d:06:85:26:b5:9b:20:26:a0:b9:ad:a1:c0: bd:02:d1:e8:2d:04:86:4b:33:be:53:8a:19:e3:ce:c1:ed:f8: 06:00:a8:09:ff:fe:de:68:f3:1e:ef:ea:2b:25:8b:20:40:80: 0b:e0:a5:6e:7d:38:61:dd:9d:f9:ce:60:8c:83:c2:b1:66:4b: 50:49:5e:93:bb:31:ec:88:12:18:7a:3e:ce:2d:9b:ae:7f:76: 89:f3:d5:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ec3P11gqGoEXxjDZT0+bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNDRlNjA5ZTM2MTkxM2UzYzNiMGE3OGQ3NDg2YWE0NWI1 NjI0MDEwHhcNMjYwMTAyMDAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTJjNTRlZGE0MTY0ZWI2MTQwZDlmYzVlNDM0MzFhZjc3MzJmNTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ3uOP7s48SgKZS44rgI7UbgDQDa 2kEZWuLFxhr/C6nMIE5mbQMBDLL9GeXU6DxsTfcI2bVqpPpKMNyVFfZReVIXuuea 8yiPQXhyoS8a2h6MgfyUmia85FdUgzllexloaI1fS571u7xQG03b9p9cR9sQJsfB CfFd7LuhqJ+/vBujWTk4EkicVPVv5dxGfXOFIHnQBzo//Hcq/5AhPV3vL/5wWa3i V/sg/SRS0U9qvNhw1H31WY3uzrw2EMBEbHC2gJ3cteLvaaJ9MsYy8pBIWnUqgIxG EO0gY9KLkOriULn0T0A+VRzJ39EpTwvo4RyRVjwj+2a3FVMAptRRHIZsZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGosVO2kFk62FA2fxeQ0Ma93MvV4MB8GA1UdIwQY MBaAFDFE5gnjYZE+PDsKeNdIaqRbViQBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVVUbUNlTmhrVDQ4T3dwNDEwaHFwRnRXSkFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jYWEyYjYtODdlOC00ZTI0LWE0NDYt Nzc1ODg4YTg3MTk0LzEvYWl4VTdhUVdUcllVRFpfRjVEUXhyM2N5OVhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9jYWEyYjYtODdlOC00ZTI0LWE0NDYtNzc1ODg4YTg3MTk0 LzEvTVVUbUNlTmhrVDQ4T3dwNDEwaHFwRnRXSkFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuWwkMA0G CSqGSIb3DQEBCwUAA4IBAQA9BPd2FCoCKV+mShfnU8TMMmxG2UVYYY4EbU4Pj/hh fQ3Xsg57DyI2p2QjaUPvkcyg0/elXXqmBSsJ2CWQ+oqS9cIuVj6rtom/T8r5esYL ifYj6rJ5pO0HIjDNQq5yMvkbCCGzEXztIHU7VUVk3TLwIbgz/Z3xmGC9fJNZTJvP cMOX9bRheNNloN3uHEUqu4IOf1CWZR7b0/qZvusIQv7vuD+5aItw750GhSa1myAm oLmtocC9AtHoLQSGSzO+U4oZ487B7fgGAKgJ//7eaPMe7+orJYsgQIAL4KVufThh 3Z35zmCMg8KxZktQSV6TuzHsiBIYej7OLZuuf3aJ89Vx -----END CERTIFICATE-----Generated at Tue Jan 27 09:56:46 2026 by rpki-client