This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/D8ZMOkRBI7yKtDasHVmH8BD5bKE.roa File: D8ZMOkRBI7yKtDasHVmH8BD5bKE.roa (raw, json) Hash identifier: q4bpSatke9AL/ldyfciNfNvFKnns7xzkmSGUNtbTaU4= Subject key identifier: 0F:C6:4C:3A:44:41:23:BC:8A:B4:36:AC:1D:59:87:F0:10:F9:6C:A1 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA535C862535E1FF8B0DB1EE04A5BEA Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/D8ZMOkRBI7yKtDasHVmH8BD5bKE.roa Signing time: Thu 01 Jan 2026 22:19:43 +0000 ROA not before: Thu 01 Jan 2026 22:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43205 IP address blocks: 37.143.192.0/18 maxlen: 18 46.40.64.0/18 maxlen: 18 46.40.75.0/24 maxlen: 24 46.40.124.0/22 maxlen: 32 46.47.64.0/18 maxlen: 18 46.47.80.0/21 maxlen: 32 46.237.64.0/18 maxlen: 18 91.139.128.0/17 maxlen: 17 93.155.128.0/17 maxlen: 17 109.121.192.0/18 maxlen: 18 158.58.192.0/18 maxlen: 18 178.169.128.0/17 maxlen: 17 185.4.80.0/22 maxlen: 22 188.254.128.0/17 maxlen: 17 212.43.32.0/19 maxlen: 19 212.75.0.0/19 maxlen: 19 213.214.64.0/19 maxlen: 19 2a02:6800::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:35:c8:62:53:5e:1f:f8:b0:db:1e:e0:4a:5b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0fc64c3a444123bc8ab436ac1d5987f010f96ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:46:47:54:18:35:cc:c6:a1:09:c2:c7:fe:c1: 57:f7:58:c4:29:23:e1:d1:a9:5d:d6:f6:b9:2e:a1: aa:89:89:43:0e:a2:87:c4:ef:ab:26:d8:8a:61:0b: 6d:8b:e1:69:18:41:5e:43:3c:a6:e0:09:e5:b4:16: 46:59:a7:4d:a0:ab:43:42:b1:50:a4:88:0d:8a:19: 9c:13:0c:a8:54:c0:10:df:eb:42:a9:72:6c:ca:28: 43:95:65:c6:be:59:99:47:bd:b9:b2:34:7e:b3:27: 57:1f:3e:c8:3b:c2:c9:22:ae:c3:cc:81:de:0b:d4: 06:11:05:71:ed:93:01:54:7e:4e:d5:39:bc:d7:46: 8c:52:e5:c9:ef:fd:29:c3:b9:4f:e7:10:ae:45:1f: 56:51:f7:e8:68:0c:81:b1:14:c9:76:51:a5:c5:22: 62:1a:47:71:5d:bc:86:be:6b:5f:eb:de:b6:e6:8c: 4d:4d:55:fc:8c:0e:eb:c1:84:07:39:6a:03:e8:f5: 26:2f:1a:e3:1f:c0:e8:af:e6:60:92:46:24:c9:70: af:8c:fc:ca:93:8d:86:ce:f7:89:66:81:e0:dc:89: 6a:75:1b:d6:d1:4e:2c:11:14:d3:9a:39:d4:3e:69: 38:e9:d5:0f:9d:a0:28:ba:21:19:59:4d:9c:02:55: 56:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C6:4C:3A:44:41:23:BC:8A:B4:36:AC:1D:59:87:F0:10:F9:6C:A1 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/D8ZMOkRBI7yKtDasHVmH8BD5bKE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.143.192.0/18 46.40.64.0/18 46.47.64.0/18 46.237.64.0/18 91.139.128.0/17 93.155.128.0/17 109.121.192.0/18 158.58.192.0/18 178.169.128.0/17 185.4.80.0/22 188.254.128.0/17 212.43.32.0/19 212.75.0.0/19 213.214.64.0/19 IPv6: 2a02:6800::/32 Signature Algorithm: sha256WithRSAEncryption 39:bc:c3:2e:8b:83:b5:a0:32:c4:95:0f:29:08:29:dd:92:ac: e6:b7:bf:66:6c:34:93:34:29:62:fc:d6:2a:01:1b:c0:b6:71: a5:ee:a8:50:27:3f:2a:90:2b:f6:8f:1a:14:cc:a3:7a:fd:73: c3:08:35:5a:3a:34:8b:04:9c:cd:81:7c:8f:a1:ad:30:3c:71: 3d:ea:10:e0:c3:39:dd:c0:f9:71:55:3a:31:7e:cb:18:02:2d: cb:aa:9d:6b:23:b3:fd:de:19:ed:ee:ee:df:2b:79:69:b9:7a: 20:5b:80:03:56:0b:ee:76:e9:ae:8e:34:86:dd:aa:6d:6d:9f: 71:4d:a0:76:ed:52:f6:d6:10:1c:46:27:2b:05:7e:95:4d:a9: 0b:53:55:a9:fd:4b:48:28:14:5e:a2:ff:95:98:d6:29:37:82: 40:de:0a:e2:7b:7d:f1:b0:cd:22:50:e2:86:65:57:b9:8e:ed: 3d:c8:09:09:28:7b:1c:5e:a1:85:89:00:28:18:a6:39:b6:d2: 65:4c:99:bf:b0:d8:e7:77:f2:1e:02:25:c5:a8:1f:3e:90:97: b0:d2:c9:16:04:8d:47:25:0c:9b:2c:0c:68:49:48:b2:d3:d2: 37:36:5b:5e:7e:e6:43:a0:72:f3:6e:ec:eb:a2:2f:55:b7:00: 8f:67:00:76 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgISAZt7pTXIYlNeH/iw2x7gSlvqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmM2NGMzYTQ0NDEyM2JjOGFiNDM2YWMxZDU5ODdmMDEwZjk2Y2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEZHVBg1zMahCcLH/sFX91jEKSPh 0ald1va5LqGqiYlDDqKHxO+rJtiKYQtti+FpGEFeQzym4AnltBZGWadNoKtDQrFQ pIgNihmcEwyoVMAQ3+tCqXJsyihDlWXGvlmZR725sjR+sydXHz7IO8LJIq7DzIHe C9QGEQVx7ZMBVH5O1Tm810aMUuXJ7/0pw7lP5xCuRR9WUffoaAyBsRTJdlGlxSJi GkdxXbyGvmtf69625oxNTVX8jA7rwYQHOWoD6PUmLxrjH8Dor+ZgkkYkyXCvjPzK k42GzveJZoHg3IlqdRvW0U4sERTTmjnUPmk46dUPnaAouiEZWU2cAlVW+QIDAQAB o4ICZjCCAmIwHQYDVR0OBBYEFA/GTDpEQSO8irQ2rB1Zh/AQ+WyhMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvRDhaTU9rUkJJN3lLdERhc0hWbUg4QkQ1YktFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEHAQH/BG0wazBaBAIAATBUAwQGJY/AAwQG LihAAwQGLi9AAwQGLu1AAwQHW4uAAwQHXZuAAwQGbXnAAwQGnjrAAwQHsqmAAwQC uQRQAwQHvP6AAwQF1CsgAwQF1EsAAwQF1dZAMA0EAgACMAcDBQAqAmgAMA0GCSqG SIb3DQEBCwUAA4IBAQA5vMMui4O1oDLElQ8pCCndkqzmt79mbDSTNCli/NYqARvA tnGl7qhQJz8qkCv2jxoUzKN6/XPDCDVaOjSLBJzNgXyPoa0wPHE96hDgwzndwPlx VToxfssYAi3Lqp1rI7P93hnt7u7fK3lpuXogW4ADVgvudumujjSG3aptbZ9xTaB2 7VL21hAcRicrBX6VTakLU1Wp/UtIKBReov+VmNYpN4JA3grie33xsM0iUOKGZVe5 ju09yAkJKHscXqGFiQAoGKY5ttJlTJm/sNjnd/IeAiXFqB8+kJew0skWBI1HJQyb LAxoSUiy09I3NltefuZDoHLzbuzroi9VtwCPZwB2 -----END CERTIFICATE-----Generated at Mon Jan 26 10:25:19 2026 by rpki-client