This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/8jW3c1tdyMykRFAb8cKVIvXYm1o.roa File: 8jW3c1tdyMykRFAb8cKVIvXYm1o.roa (raw, json) Hash identifier: Q0T2eH3RlaxZhFvfRSxmpGRJmTvjnKlI3xGp5fpQfVU= Subject key identifier: F2:35:B7:73:5B:5D:C8:CC:A4:44:50:1B:F1:C2:95:22:F5:D8:9B:5A Certificate issuer: /CN=1d1e354362cb9224c016dac944e3d9d49909b17f Certificate serial: 019C0BA4B7B39615A2B4979033AF396CDE7A Authority key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/8jW3c1tdyMykRFAb8cKVIvXYm1o.roa Signing time: Thu 29 Jan 2026 21:24:30 +0000 ROA not before: Thu 29 Jan 2026 21:24:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197328 IP address blocks: 185.125.32.0/24 maxlen: 24 185.125.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0b:a4:b7:b3:96:15:a2:b4:97:90:33:af:39:6c:de:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d1e354362cb9224c016dac944e3d9d49909b17f Validity Not Before: Jan 29 21:24:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f235b7735b5dc8cca444501bf1c29522f5d89b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e1:d4:66:46:f2:c1:89:1c:ff:f0:51:6e:5e: d1:cf:8b:b6:8d:40:d8:0c:8c:3e:cb:73:62:8c:11: 17:94:83:cd:8b:25:e2:53:9f:42:19:da:c9:e2:a1: 7d:e1:98:9d:bc:f5:ab:32:6a:68:ba:de:3e:71:99: 18:e7:b5:92:63:c6:10:7b:54:03:de:c5:8d:a9:24: cc:62:b6:8e:75:c5:12:77:0c:3e:1a:17:0f:eb:73: f5:44:e4:5b:40:8d:b0:5a:12:59:18:32:9a:7e:c8: 1c:ec:f7:ad:c8:8c:a2:a4:1c:14:1c:fd:5f:4c:85: c9:94:84:3e:19:95:03:c9:0d:13:68:9f:1c:bd:78: a2:4a:2b:14:52:ff:26:79:75:23:c4:cc:d5:42:43: 43:9d:cb:62:cc:bf:52:94:1d:07:9e:f7:d0:e0:4a: 88:47:16:b5:da:c3:29:df:b9:7b:e7:85:6f:dd:ea: 5f:93:93:db:47:4e:b5:4d:2e:33:60:48:f6:c3:91: cd:e3:8d:c8:43:1c:0a:49:4a:7d:c8:58:34:de:42: 19:56:0b:fd:7c:7a:ef:95:4f:e6:34:69:9c:01:0e: 0b:99:13:0f:84:54:d9:c6:34:00:1d:05:0f:4f:79: 1b:dd:d1:39:58:f6:3f:3e:5e:6a:99:b1:62:82:2f: c3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:35:B7:73:5B:5D:C8:CC:A4:44:50:1B:F1:C2:95:22:F5:D8:9B:5A X509v3 Authority Key Identifier: keyid:1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/8jW3c1tdyMykRFAb8cKVIvXYm1o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.125.32.0/23 Signature Algorithm: sha256WithRSAEncryption 77:9c:31:55:18:bd:7e:fc:2a:53:2d:33:f9:53:6f:76:45:04: 72:5f:9f:93:2c:65:e1:25:aa:83:ec:20:83:8b:87:21:8f:3b: e6:04:82:32:30:c1:1b:02:dd:36:0a:dc:f3:a0:5c:5d:eb:d1: a3:8a:f5:35:14:f7:85:4e:31:6b:63:a1:50:83:51:d1:7f:58: b0:99:de:05:a1:91:b2:7d:b2:b1:c6:9d:28:11:ac:40:19:b1: e5:c8:e1:f5:9a:d8:fc:f0:3c:79:6e:0d:26:4d:d2:fc:6e:ca: a3:40:7e:46:49:82:0d:47:cc:f6:f7:89:90:5d:f7:d2:13:3f: 7a:0d:4d:0d:27:21:73:02:39:21:86:ff:35:f2:04:3b:73:ab: 4f:f5:58:f1:ab:17:53:c0:26:b1:b3:21:8d:c0:53:f0:a5:8f: 69:6c:26:5f:10:41:94:14:e2:04:61:50:01:53:d5:24:5d:d5: 9c:3b:e2:b0:cc:ae:a8:d9:97:34:8e:e1:8b:a8:a5:70:83:5b: 2e:6e:a6:b6:a5:65:5d:8a:53:7f:9b:7a:e3:77:26:83:cc:a8: 1c:ef:1d:39:c8:3d:27:43:d0:e2:f0:59:e2:85:14:fc:fa:14: 2a:94:f2:06:57:aa:c7:fd:ca:59:8e:ea:d3:07:77:57:6f:0c: 85:7e:7b:be -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwLpLezlhWitJeQM685bN56MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMWUzNTQzNjJjYjkyMjRjMDE2ZGFjOTQ0ZTNkOWQ0OTkw OWIxN2YwHhcNMjYwMTI5MjEyNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjM1Yjc3MzViNWRjOGNjYTQ0NDUwMWJmMWMyOTUyMmY1ZDg5YjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+HUZkbywYkc//BRbl7Rz4u2jUDY DIw+y3NijBEXlIPNiyXiU59CGdrJ4qF94ZidvPWrMmpout4+cZkY57WSY8YQe1QD 3sWNqSTMYraOdcUSdww+GhcP63P1RORbQI2wWhJZGDKafsgc7PetyIyipBwUHP1f TIXJlIQ+GZUDyQ0TaJ8cvXiiSisUUv8meXUjxMzVQkNDnctizL9SlB0HnvfQ4EqI Rxa12sMp37l754Vv3epfk5PbR061TS4zYEj2w5HN443IQxwKSUp9yFg03kIZVgv9 fHrvlU/mNGmcAQ4LmRMPhFTZxjQAHQUPT3kb3dE5WPY/Pl5qmbFigi/DEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPI1t3NbXcjMpERQG/HClSL12JtaMB8GA1UdIwQY MBaAFB0eNUNiy5IkwBbayUTj2dSZCbF/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFI0MVEyTExraVRBRnRySlJPUFoxSmtKc1g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8yODJiMTktNjhiOS00ZWYzLWFkMzkt NmVjOGM4MWZkYzNmLzEvOGpXM2MxdGR5TXlrUkZBYjhjS1ZJdlhZbTFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8yODJiMTktNjhiOS00ZWYzLWFkMzktNmVjOGM4MWZkYzNm LzEvSFI0MVEyTExraVRBRnRySlJPUFoxSmtKc1g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuX0gMA0G CSqGSIb3DQEBCwUAA4IBAQB3nDFVGL1+/CpTLTP5U292RQRyX5+TLGXhJaqD7CCD i4chjzvmBIIyMMEbAt02CtzzoFxd69GjivU1FPeFTjFrY6FQg1HRf1iwmd4FoZGy fbKxxp0oEaxAGbHlyOH1mtj88Dx5bg0mTdL8bsqjQH5GSYINR8z294mQXffSEz96 DU0NJyFzAjkhhv818gQ7c6tP9VjxqxdTwCaxsyGNwFPwpY9pbCZfEEGUFOIEYVAB U9UkXdWcO+KwzK6o2Zc0juGLqKVwg1subqa2pWVdilN/m3rjdyaDzKgc7x05yD0n Q9Di8FnihRT8+hQqlPIGV6rH/cpZjurTB3dXbwyFfnu+ -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:17 2026 by rpki-client