This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/8uIunmSufptpB5lmSVg6A9jx6Nk.roa File: 8uIunmSufptpB5lmSVg6A9jx6Nk.roa (raw, json) Hash identifier: ve9WmCeaTlTVE+tbJ9aHlzcgLCklf/8U5Uf/masbFx8= Subject key identifier: F2:E2:2E:9E:64:AE:7E:9B:69:07:99:66:49:58:3A:03:D8:F1:E8:D9 Certificate issuer: /CN=2cc25ff32918f0b49306259d483afb9e381a3915 Certificate serial: 019B7834F735BCB012A2C634168919EC7C92 Authority key identifier: 2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/8uIunmSufptpB5lmSVg6A9jx6Nk.roa Signing time: Thu 01 Jan 2026 06:18:15 +0000 ROA not before: Thu 01 Jan 2026 06:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48147 IP address blocks: 185.158.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 18:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f7:35:bc:b0:12:a2:c6:34:16:89:19:ec:7c:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cc25ff32918f0b49306259d483afb9e381a3915 Validity Not Before: Jan 1 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2e22e9e64ae7e9b6907996649583a03d8f1e8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c5:29:3a:18:7c:6a:5e:44:66:0a:cb:f3:0d: 4f:45:44:f5:49:9d:99:a2:2b:48:b3:af:09:70:1c: 81:e7:7f:52:c3:17:c9:33:77:d1:1e:cf:04:df:a1: 52:8d:e6:62:7a:70:2d:eb:7c:97:f1:b5:8e:9a:4b: f3:32:fb:d7:a1:95:7b:f9:5c:e6:ba:ad:c4:0b:4f: 96:ef:08:4e:06:47:6a:7d:b4:b0:14:f0:64:e1:38: 7b:68:fb:db:1f:04:98:a3:55:bc:b9:89:1c:56:4d: d2:4a:48:19:f8:7e:54:dd:94:ea:e9:1e:ad:75:f6: 1b:80:2c:99:fc:33:c4:05:7a:b6:ef:44:79:61:b1: fd:06:16:f3:4c:c8:ff:0d:1d:95:33:18:76:fe:1f: 91:f3:86:c4:ea:b5:41:e3:48:37:98:58:65:c6:6a: 65:70:27:ac:c9:5d:3d:b6:f3:c2:1d:c8:27:af:a3: 58:59:30:6c:b3:31:05:e7:d4:f4:55:23:e2:15:d6: 5d:b1:9f:5f:73:76:ec:b4:1a:2f:74:04:c1:3f:6f: a4:19:0f:9f:a8:e2:88:34:ac:08:fd:22:5e:59:b2: c3:a3:84:41:54:67:97:03:f6:4f:a5:e3:0f:df:53: 25:3c:e5:8e:3b:6b:a8:4b:d9:12:3d:d4:a4:dc:29: 47:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E2:2E:9E:64:AE:7E:9B:69:07:99:66:49:58:3A:03:D8:F1:E8:D9 X509v3 Authority Key Identifier: keyid:2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/8uIunmSufptpB5lmSVg6A9jx6Nk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.158.175.0/24 Signature Algorithm: sha256WithRSAEncryption 37:4b:f4:c3:16:88:f8:f6:a9:25:d2:dd:a6:3f:e8:75:61:77: c3:8e:da:0a:8b:8d:01:b3:1a:0e:a8:5b:2b:24:97:59:e8:17: 59:20:2d:09:8d:e3:19:18:c0:55:b6:70:e4:22:67:e7:11:d7: 94:d7:24:65:f1:b0:77:d0:bc:bc:d1:d6:eb:b0:50:21:62:a2: 7e:52:8f:18:9b:62:eb:21:29:1d:83:56:7f:44:a8:0d:db:74: f0:8f:7d:fd:b2:c8:81:06:49:e8:19:20:7a:c2:e6:54:08:11: 04:61:2b:5c:7f:9f:5a:60:f0:a5:ad:b5:49:5e:45:d8:58:eb: e8:a7:1a:44:db:87:10:9d:13:8b:ef:16:0c:74:11:98:0a:ef: 39:0b:dd:e7:16:77:04:36:3f:1a:d2:b3:75:48:e1:1b:1b:65: ff:31:59:b8:23:f9:67:55:3e:92:38:e1:e9:87:d6:f9:03:70: 59:4d:7b:f4:5a:22:26:aa:ef:41:1b:8d:00:3e:ee:57:27:78: db:3f:1f:5e:62:11:47:72:c7:ac:40:e7:bf:4b:f5:54:e8:94: 0f:cd:0c:06:a0:65:23:c5:56:3a:e9:db:35:97:f9:fc:cb:a3: bf:9c:dc:a9:12:24:43:eb:c3:d5:6f:b9:af:ec:4d:d2:f1:f2: b3:c2:0a:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NPc1vLASosY0FokZ7HySMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYzI1ZmYzMjkxOGYwYjQ5MzA2MjU5ZDQ4M2FmYjllMzgx YTM5MTUwHhcNMjYwMTAxMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmUyMmU5ZTY0YWU3ZTliNjkwNzk5NjY0OTU4M2EwM2Q4ZjFlOGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8UpOhh8al5EZgrL8w1PRUT1SZ2Z oitIs68JcByB539SwxfJM3fRHs8E36FSjeZienAt63yX8bWOmkvzMvvXoZV7+Vzm uq3EC0+W7whOBkdqfbSwFPBk4Th7aPvbHwSYo1W8uYkcVk3SSkgZ+H5U3ZTq6R6t dfYbgCyZ/DPEBXq270R5YbH9BhbzTMj/DR2VMxh2/h+R84bE6rVB40g3mFhlxmpl cCesyV09tvPCHcgnr6NYWTBsszEF59T0VSPiFdZdsZ9fc3bstBovdATBP2+kGQ+f qOKINKwI/SJeWbLDo4RBVGeXA/ZPpeMP31MlPOWOO2uoS9kSPdSk3ClHkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPLiLp5krn6baQeZZklYOgPY8ejZMB8GA1UdIwQY MBaAFCzCX/MpGPC0kwYlnUg6+544GjkVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE1KZjh5a1k4TFNUQmlXZFNEcjduamdhT1JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xMjc3ZWMtMTU2YS00NmM0LTlmMDMt ZTI1NzUxYjNmZmQ1LzEvOHVJdW5tU3VmcHRwQjVsbVNWZzZBOWp4Nk5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8xMjc3ZWMtMTU2YS00NmM0LTlmMDMtZTI1NzUxYjNmZmQ1 LzEvTE1KZjh5a1k4TFNUQmlXZFNEcjduamdhT1JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZ6vMA0G CSqGSIb3DQEBCwUAA4IBAQA3S/TDFoj49qkl0t2mP+h1YXfDjtoKi40BsxoOqFsr JJdZ6BdZIC0JjeMZGMBVtnDkImfnEdeU1yRl8bB30Ly80dbrsFAhYqJ+Uo8Ym2Lr ISkdg1Z/RKgN23Twj339ssiBBknoGSB6wuZUCBEEYStcf59aYPClrbVJXkXYWOvo pxpE24cQnROL7xYMdBGYCu85C93nFncENj8a0rN1SOEbG2X/MVm4I/lnVT6SOOHp h9b5A3BZTXv0WiImqu9BG40APu5XJ3jbPx9eYhFHcsesQOe/S/VU6JQPzQwGoGUj xVY66ds1l/n8y6O/nNypEiRD68PVb7mv7E3S8fKzwgqf -----END CERTIFICATE-----Generated at Tue Jan 27 04:23:36 2026 by rpki-client