This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/t-oE4oy_z3AHnCC0k6oEiP8UMXs.roa File: t-oE4oy_z3AHnCC0k6oEiP8UMXs.roa (raw, json) Hash identifier: 3g70luAd5CMmu8cTIqcXY5Mx4qPSObAMdcIqmAZokIg= Subject key identifier: B7:EA:04:E2:8C:BF:CF:70:07:9C:20:B4:93:AA:04:88:FF:14:31:7B Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520 Certificate serial: 019B78A2A445FD9A0BDBBEC03D0991C0970D Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/t-oE4oy_z3AHnCC0k6oEiP8UMXs.roa Signing time: Thu 01 Jan 2026 08:18:03 +0000 ROA not before: Thu 01 Jan 2026 08:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401650 IP address blocks: 185.161.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:a4:45:fd:9a:0b:db:be:c0:3d:09:91:c0:97:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520 Validity Not Before: Jan 1 08:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7ea04e28cbfcf70079c20b493aa0488ff14317b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:02:61:bf:88:18:8a:8d:59:ba:17:2e:a7:3d: 07:f9:10:e8:e0:9a:6a:50:cf:1e:4f:0e:bf:b8:e4: aa:5c:98:2a:df:24:39:33:17:2c:09:f4:14:88:72: aa:32:63:4a:46:ca:b9:8c:5f:6c:11:2e:4c:5d:38: a4:44:db:f1:e3:0b:a6:6b:ad:d2:7b:10:19:98:99: 46:5f:02:c2:75:95:6f:6a:90:28:f7:d1:3f:97:f8: f4:4e:d2:23:e1:e6:d7:bf:00:3b:4d:ec:79:bf:47: 02:5a:48:97:b9:c0:6b:ad:e3:7d:1c:95:06:fc:46: c7:c3:54:c4:dc:ba:47:19:ee:dd:dc:98:19:a5:9c: 91:ef:5d:b7:5b:e6:40:77:69:b2:7e:fb:ab:71:fc: 53:19:a5:46:aa:77:17:a9:4b:f3:fe:c5:4f:48:50: 81:dd:80:f2:f1:eb:4a:7d:cc:a3:65:cf:db:f6:c5: 64:f8:d5:56:f0:a1:8a:a0:14:98:45:f6:19:f6:80: 4f:b6:ba:fa:0c:2f:b4:3a:8e:06:ca:68:5e:69:d2: 5e:be:bc:3c:4c:ef:d9:6f:ab:12:f6:4b:00:bc:c0: fc:d0:c7:b2:8d:0d:e8:28:26:d2:b1:fa:79:c9:55: 9a:e8:b9:d1:16:81:ba:76:c7:40:45:4c:9b:4f:af: f9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:EA:04:E2:8C:BF:CF:70:07:9C:20:B4:93:AA:04:88:FF:14:31:7B X509v3 Authority Key Identifier: keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/t-oE4oy_z3AHnCC0k6oEiP8UMXs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.252.0/22 Signature Algorithm: sha256WithRSAEncryption a7:5d:ec:47:95:7e:de:9d:1f:dd:1f:c2:c8:e9:42:0a:98:24: 01:d2:60:7c:0a:97:e2:bf:c5:49:ec:0f:d9:4a:60:51:c6:6f: 32:c5:6f:3f:25:6e:05:6f:56:99:50:3b:7e:1d:ec:c6:66:be: 6f:6d:e6:46:cc:7a:63:d5:98:a7:6a:46:49:d4:7d:a5:75:53: ce:93:4c:d4:f3:04:b5:cb:1e:96:8a:e3:eb:53:ac:38:9e:7d: a0:df:43:87:a9:66:b2:2b:ad:d8:75:97:c3:db:85:f8:02:c9: d7:5d:ef:1f:86:39:fc:36:fe:16:95:6a:42:d3:01:58:71:85: 1f:8e:d1:16:ba:1b:8f:a0:eb:75:61:63:11:b9:10:eb:41:82: 25:c6:2c:49:3f:4c:63:af:76:d7:70:aa:48:80:db:f6:7b:eb: e4:91:a6:df:c7:66:b5:c1:46:0d:31:98:b5:3b:af:3a:14:90: 79:01:be:4e:9c:dd:11:7c:a0:e1:36:9b:52:4f:ef:0b:a9:b7: 39:88:2e:ce:0b:8e:1e:61:1d:25:5a:2e:60:53:2e:17:06:a0: 4c:e5:f5:96:ac:5c:6c:65:70:be:87:8e:b9:1f:a3:47:14:45: 49:de:fc:23:ce:35:9c:26:ee:66:21:0a:2a:91:fe:a1:02:92: ee:72:68:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oqRF/ZoL277APQmRwJcNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNmM2NjBiMzBmNTY5MmIyYjE2ZTI4OWIyNDkwMWM1MThm ZGE1MjAwHhcNMjYwMTAxMDgxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2VhMDRlMjhjYmZjZjcwMDc5YzIwYjQ5M2FhMDQ4OGZmMTQzMTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAJhv4gYio1Zuhcupz0H+RDo4Jpq UM8eTw6/uOSqXJgq3yQ5MxcsCfQUiHKqMmNKRsq5jF9sES5MXTikRNvx4wuma63S exAZmJlGXwLCdZVvapAo99E/l/j0TtIj4ebXvwA7Tex5v0cCWkiXucBrreN9HJUG /EbHw1TE3LpHGe7d3JgZpZyR7123W+ZAd2myfvurcfxTGaVGqncXqUvz/sVPSFCB 3YDy8etKfcyjZc/b9sVk+NVW8KGKoBSYRfYZ9oBPtrr6DC+0Oo4GymheadJevrw8 TO/Zb6sS9ksAvMD80MeyjQ3oKCbSsfp5yVWa6LnRFoG6dsdARUybT6/5uQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLfqBOKMv89wB5wgtJOqBIj/FDF7MB8GA1UdIwQY MBaAFBJsZgsw9WkrKxbiibJJAcUY/aUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjIt NDM4YWNiNzJmYzViLzEvdC1vRTRveV96M0FIbkNDMGs2b0VpUDhVTVhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjItNDM4YWNiNzJmYzVi LzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaH8MA0G CSqGSIb3DQEBCwUAA4IBAQCnXexHlX7enR/dH8LI6UIKmCQB0mB8Cpfiv8VJ7A/Z SmBRxm8yxW8/JW4Fb1aZUDt+HezGZr5vbeZGzHpj1ZinakZJ1H2ldVPOk0zU8wS1 yx6WiuPrU6w4nn2g30OHqWayK63YdZfD24X4AsnXXe8fhjn8Nv4WlWpC0wFYcYUf jtEWuhuPoOt1YWMRuRDrQYIlxixJP0xjr3bXcKpIgNv2e+vkkabfx2a1wUYNMZi1 O686FJB5Ab5OnN0RfKDhNptST+8Lqbc5iC7OC44eYR0lWi5gUy4XBqBM5fWWrFxs ZXC+h465H6NHFEVJ3vwjzjWcJu5mIQoqkf6hApLucmhk -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:04 2026 by rpki-client