This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/axRaMfkBmO7VzbCGyjkhx1P2A-8.roa File: axRaMfkBmO7VzbCGyjkhx1P2A-8.roa (raw, json) Hash identifier: sc0Yj3PBpLZ4CbPFA/VIugOR8JNz2sSyXRFn+nL0m+g= Subject key identifier: 6B:14:5A:31:F9:01:98:EE:D5:CD:B0:86:CA:39:21:C7:53:F6:03:EF Certificate issuer: /CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29 Certificate serial: 019B7F154982BAE03F6C10A3CBAA8132A780 Authority key identifier: C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/axRaMfkBmO7VzbCGyjkhx1P2A-8.roa Signing time: Fri 02 Jan 2026 14:21:00 +0000 ROA not before: Fri 02 Jan 2026 14:21:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203724 IP address blocks: 185.125.224.0/24 maxlen: 24 185.125.225.0/24 maxlen: 24 185.125.226.0/24 maxlen: 24 185.125.227.0/24 maxlen: 24 185.212.105.0/24 maxlen: 24 185.212.106.0/24 maxlen: 24 185.212.107.0/24 maxlen: 24 185.221.68.0/24 maxlen: 24 185.221.69.0/24 maxlen: 24 185.221.70.0/24 maxlen: 24 185.221.71.0/24 maxlen: 24 2a06:bcc0:1::/48 maxlen: 48 2a06:bcc0:2::/48 maxlen: 48 2a06:bcc0:3::/48 maxlen: 48 2a06:bcc0:4::/48 maxlen: 48 2a06:bcc0:5::/48 maxlen: 48 2a06:bcc0:9::/48 maxlen: 48 2a06:bcc0:11::/48 maxlen: 48 2a06:bcc7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 05:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:49:82:ba:e0:3f:6c:10:a3:cb:aa:81:32:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29 Validity Not Before: Jan 2 14:21:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b145a31f90198eed5cdb086ca3921c753f603ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:72:e1:72:ec:e5:68:26:3e:41:8c:82:8c:20: 57:15:fa:d4:1d:6e:1d:60:e2:46:02:ed:7a:ff:a5: 37:43:93:db:71:6f:c1:a0:e1:48:1d:80:42:6e:c6: 09:ba:5e:b5:80:e3:e3:62:48:bb:78:88:7e:11:16: 68:5a:1a:fe:d1:70:95:20:af:77:82:c6:ee:e1:e4: f0:14:bc:24:aa:2c:68:08:58:20:fc:0a:68:db:85: ba:6c:1e:6d:07:ac:f8:31:17:df:2a:9d:11:f6:4c: 6a:ad:3f:33:e2:98:02:00:42:45:f6:a5:5b:26:f4: da:d9:61:24:f6:41:37:9d:7a:60:70:c4:3f:ed:9b: 97:2d:af:5a:35:6e:6e:c3:01:10:e5:ce:73:6c:06: b5:76:34:1d:79:2d:ba:b2:46:0b:66:a6:01:21:fc: 35:a4:50:3b:d9:1a:0f:df:e2:22:9f:de:f2:0d:29: 31:62:78:b9:b6:31:1a:bb:f1:f8:bc:84:1d:8d:1f: 34:b9:bb:2b:9e:ee:2e:26:3c:d3:c4:5c:47:c5:e3: c4:b9:34:d2:73:91:74:34:1b:7e:0c:98:f7:77:8e: 18:a7:49:bb:42:99:10:da:81:aa:b7:96:74:b6:9b: 93:08:9c:6d:86:19:74:6f:c9:c4:79:49:50:ad:0c: d4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:14:5A:31:F9:01:98:EE:D5:CD:B0:86:CA:39:21:C7:53:F6:03:EF X509v3 Authority Key Identifier: keyid:C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/axRaMfkBmO7VzbCGyjkhx1P2A-8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.125.224.0/22 185.212.105.0-185.212.107.255 185.221.68.0/22 IPv6: 2a06:bcc0:1::-2a06:bcc0:5:ffff:ffff:ffff:ffff:ffff 2a06:bcc0:9::/48 2a06:bcc0:11::/48 2a06:bcc7::/48 Signature Algorithm: sha256WithRSAEncryption 56:00:70:be:01:a0:42:90:48:ff:78:37:b6:10:0e:d0:34:d3: 71:1e:b8:03:26:01:04:fd:0d:ab:dd:e3:cd:28:9e:63:b0:02: 65:52:b8:5f:38:82:aa:5f:39:7e:b0:18:52:79:29:33:ce:23: 61:cd:a0:24:47:a9:42:ab:2b:09:81:14:f5:93:8f:3b:22:91: d7:ac:28:7b:59:79:54:39:a6:51:02:71:64:ea:2a:20:82:8c: 6c:3c:0c:d3:70:01:af:22:ec:22:21:83:26:3b:f6:b0:a9:d2: bb:99:99:2c:c9:4e:0e:82:1f:95:b7:86:f4:d4:59:39:d1:b3: 43:f8:b9:d9:74:b0:b4:26:01:8d:ff:ba:da:e2:65:b3:40:31: d4:31:85:7c:a9:b4:b4:cd:57:a4:43:3c:d5:f9:5c:cf:9a:2f: 86:3c:17:6f:f3:28:5c:1d:3d:fa:76:c2:62:22:e0:c3:1f:2b: ae:de:27:dc:c1:83:9f:09:39:67:95:75:96:8a:e3:c2:e5:77: e9:85:48:68:0a:2e:01:e4:c9:bb:2f:39:52:e8:e1:9f:cb:e4: b7:30:a9:68:71:17:c1:c5:80:93:2b:cd:82:bc:8d:72:7a:16: e4:c6:c4:4e:6e:1e:26:cd:48:aa:4e:39:a4:76:f3:a4:18:f6: 18:0a:21:d9 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgISAZt/FUmCuuA/bBCjy6qBMqeAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZmJkNTg3NjYxM2VkYzU2ZTBmNWRlNDY4Y2NlNWViMjg4 NWZmMjkwHhcNMjYwMTAyMTQyMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjE0NWEzMWY5MDE5OGVlZDVjZGIwODZjYTM5MjFjNzUzZjYwM2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3LhcuzlaCY+QYyCjCBXFfrUHW4d YOJGAu16/6U3Q5PbcW/BoOFIHYBCbsYJul61gOPjYki7eIh+ERZoWhr+0XCVIK93 gsbu4eTwFLwkqixoCFgg/Apo24W6bB5tB6z4MRffKp0R9kxqrT8z4pgCAEJF9qVb JvTa2WEk9kE3nXpgcMQ/7ZuXLa9aNW5uwwEQ5c5zbAa1djQdeS26skYLZqYBIfw1 pFA72RoP3+Iin97yDSkxYni5tjEau/H4vIQdjR80ubsrnu4uJjzTxFxHxePEuTTS c5F0NBt+DJj3d44Yp0m7QpkQ2oGqt5Z0tpuTCJxthhl0b8nEeUlQrQzUtwIDAQAB o4ICVDCCAlAwHQYDVR0OBBYEFGsUWjH5AZju1c2whso5IcdT9gPvMB8GA1UdIwQY MBaAFMD71YdmE+3Fbg9d5GjM5esohf8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1B2VmgyWVQ3Y1Z1RDEza2FNemw2eWlGX3lrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wMWViYzItODRkMC00YWUzLWEyYzIt YTNiNmJlNGE5ZTliLzEvYXhSYU1ma0JtTzdWemJDR3lqa2h4MVAyQS04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8wMWViYzItODRkMC00YWUzLWEyYzItYTNiNmJlNGE5ZTli LzEvd1B2VmgyWVQ3Y1Z1RDEza2FNemw2eWlGX3lrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTAgBAIAATAaAwQCuX3gMAwD BAC51GkDBAK51GgDBAK53UQwNQQCAAIwLzASAwcAKga8wAABAwcBKga8wAAEAwcA Kga8wAAJAwcAKga8wAARAwcAKga8xwAAMA0GCSqGSIb3DQEBCwUAA4IBAQBWAHC+ AaBCkEj/eDe2EA7QNNNxHrgDJgEE/Q2r3ePNKJ5jsAJlUrhfOIKqXzl+sBhSeSkz ziNhzaAkR6lCqysJgRT1k487IpHXrCh7WXlUOaZRAnFk6ioggoxsPAzTcAGvIuwi IYMmO/awqdK7mZksyU4Ogh+Vt4b01Fk50bND+LnZdLC0JgGN/7ra4mWzQDHUMYV8 qbS0zVekQzzV+VzPmi+GPBdv8yhcHT36dsJiIuDDHyuu3ifcwYOfCTlnlXWWiuPC 5XfphUhoCi4B5Mm7LzlS6OGfy+S3MKlocRfBxYCTK82CvI1yehbkxsRObh4mzUiq TjmkdvOkGPYYCiHZ -----END CERTIFICATE-----Generated at Sun Jan 11 14:55:19 2026 by rpki-client