This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/l8nJcuD4rGZxCdIYInml3vohntk.roa File: l8nJcuD4rGZxCdIYInml3vohntk.roa (raw, json) Hash identifier: eU3RnT3IPn87hTAFydZwwQYkYydG1vHyM8wmqGF1vjs= Subject key identifier: 97:C9:C9:72:E0:F8:AC:66:71:09:D2:18:22:79:A5:DE:FA:21:9E:D9 Certificate issuer: /CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48 Certificate serial: 019B7B35EE9358E9D80FB9AE1C563668D4D8 Authority key identifier: 3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/l8nJcuD4rGZxCdIYInml3vohntk.roa Signing time: Thu 01 Jan 2026 20:18:10 +0000 ROA not before: Thu 01 Jan 2026 20:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 185.117.60.0/24 maxlen: 24 185.117.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:ee:93:58:e9:d8:0f:b9:ae:1c:56:36:68:d4:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48 Validity Not Before: Jan 1 20:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97c9c972e0f8ac667109d2182279a5defa219ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bd:e8:98:d6:51:6a:54:5b:1f:69:75:14:d9: e7:ec:00:f4:0f:ef:5c:4f:92:ec:f8:5f:26:7a:cf: a4:45:a9:cf:26:71:dd:56:b5:19:c5:bc:a8:2d:ac: 7b:57:3d:26:49:57:a5:0e:34:83:88:4f:e0:4b:19: 2a:69:73:18:6b:d4:64:57:42:43:d7:c1:a9:83:0e: 10:3a:d0:32:c4:85:55:8e:25:58:f6:04:da:0f:45: d0:bf:49:a0:a1:7b:fc:26:7f:2e:bd:a2:88:21:a9: 0b:a6:15:dd:4a:79:2b:6b:fa:4b:35:ca:29:d6:e0: 81:3a:18:2f:8e:bc:b9:54:62:68:fe:71:48:cf:30: 50:18:cc:a4:ca:34:d4:25:79:0d:3a:2c:af:3e:c7: f3:1c:99:f8:1e:a1:3a:cc:f3:4b:14:64:cb:fd:eb: 1d:39:26:b4:f2:bc:2e:14:d1:28:b7:69:75:7c:72: d7:c4:4c:4a:b9:5e:f3:6d:ce:8d:9f:51:3f:ba:83: a8:9d:25:0a:54:3c:a5:3c:26:e5:07:4c:4c:25:5c: e0:6b:af:be:52:88:bb:b7:a6:75:39:4c:cd:f6:85: d5:74:b8:59:5b:25:75:43:ed:fe:30:0b:76:5b:46: 56:43:4c:58:c7:d9:f4:c2:78:6d:79:9c:c3:e1:dd: 7f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C9:C9:72:E0:F8:AC:66:71:09:D2:18:22:79:A5:DE:FA:21:9E:D9 X509v3 Authority Key Identifier: keyid:3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/l8nJcuD4rGZxCdIYInml3vohntk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.60.0/24 185.117.62.0/24 Signature Algorithm: sha256WithRSAEncryption b4:49:d3:4c:53:3b:04:96:71:56:3f:68:f1:9f:5c:1a:34:6a: 49:67:12:a3:50:a3:10:30:21:8b:ec:eb:ce:21:8e:6c:65:94: 91:2a:84:73:8e:ec:67:ac:18:ad:b3:65:b6:e7:32:03:0d:9d: aa:38:3e:02:37:e1:56:21:3e:56:b9:ad:85:6f:2c:96:55:d4: bd:08:50:e7:07:26:76:24:f8:9f:af:52:3e:35:39:dc:6e:d7: 58:dd:4c:95:cb:ff:7b:67:96:c3:24:8e:38:bd:ad:b8:8f:ba: 1b:91:24:15:3f:04:19:99:51:0e:7d:69:a5:90:0a:eb:81:da: 21:16:7e:a4:a7:3f:bb:9f:98:02:96:ba:21:1e:d5:97:ec:24: 63:6f:37:6c:64:cd:9f:cb:a1:5d:4a:0d:3d:e1:d6:a3:13:c7: b1:c2:d1:89:ef:e9:5d:54:0d:32:56:1e:f1:8c:01:fd:d2:ab: 79:10:21:47:d3:bd:3b:e0:03:70:21:d3:7a:3e:38:f9:ee:a7: d3:83:25:0b:fc:22:ff:fe:42:97:6d:ca:e7:df:d3:4c:dc:1c: 1f:12:16:56:ea:7c:f4:e6:db:b7:97:6e:62:f5:2d:8d:2c:a8: 87:38:6f:26:3b:29:d7:5b:b7:99:06:cc:4f:8f:e4:53:b7:77: a6:98:93:5a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Ne6TWOnYD7muHFY2aNTYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiOGZlMjQ2NTg0MzAzMWI3NzhiYjhkOGI3YmQzNWEwOTRm Y2NmNDgwHhcNMjYwMTAxMjAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2M5Yzk3MmUwZjhhYzY2NzEwOWQyMTgyMjc5YTVkZWZhMjE5ZWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb3omNZRalRbH2l1FNnn7AD0D+9c T5Ls+F8mes+kRanPJnHdVrUZxbyoLax7Vz0mSVelDjSDiE/gSxkqaXMYa9RkV0JD 18Gpgw4QOtAyxIVVjiVY9gTaD0XQv0mgoXv8Jn8uvaKIIakLphXdSnkra/pLNcop 1uCBOhgvjry5VGJo/nFIzzBQGMykyjTUJXkNOiyvPsfzHJn4HqE6zPNLFGTL/esd OSa08rwuFNEot2l1fHLXxExKuV7zbc6Nn1E/uoOonSUKVDylPCblB0xMJVzga6++ Uoi7t6Z1OUzN9oXVdLhZWyV1Q+3+MAt2W0ZWQ0xYx9n0wnhteZzD4d1/BwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJfJyXLg+KxmcQnSGCJ5pd76IZ7ZMB8GA1UdIwQY MBaAFDuP4kZYQwMbd4u42Le9NaCU/M9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzRfaVJsaERBeHQzaTdqWXQ3MDFvSlQ4ejBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lZjIwY2YtNGMzOS00NzA3LTg1N2Mt N2MzNTAwNmUwN2ExLzEvbDhuSmN1RDRyR1p4Q2RJWUlubWwzdm9obnRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9lZjIwY2YtNGMzOS00NzA3LTg1N2MtN2MzNTAwNmUwN2Ex LzEvTzRfaVJsaERBeHQzaTdqWXQ3MDFvSlQ4ejBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuXU8AwQA uXU+MA0GCSqGSIb3DQEBCwUAA4IBAQC0SdNMUzsElnFWP2jxn1waNGpJZxKjUKMQ MCGL7OvOIY5sZZSRKoRzjuxnrBits2W25zIDDZ2qOD4CN+FWIT5Wua2FbyyWVdS9 CFDnByZ2JPifr1I+NTncbtdY3UyVy/97Z5bDJI44va24j7obkSQVPwQZmVEOfWml kArrgdohFn6kpz+7n5gClrohHtWX7CRjbzdsZM2fy6FdSg094dajE8exwtGJ7+ld VA0yVh7xjAH90qt5ECFH07074ANwIdN6Pjj57qfTgyUL/CL//kKXbcrn39NM3Bwf EhZW6nz05tu3l25i9S2NLKiHOG8mOynXW7eZBsxPj+RTt3emmJNa -----END CERTIFICATE-----Generated at Fri Jan 9 06:21:13 2026 by rpki-client