This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/8gD4Yehfx3KQKAgzNtRDdrpxTOE.roa File: 8gD4Yehfx3KQKAgzNtRDdrpxTOE.roa (raw, json) Hash identifier: GdLqnXXuc74TK0f1OfY8VEAVhHit7ftS+gMGAs+ZxL8= Subject key identifier: F2:00:F8:61:E8:5F:C7:72:90:28:08:33:36:D4:43:76:BA:71:4C:E1 Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e Certificate serial: 019B7FF2AD789961107B2D55BF10EB24CA23 Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/8gD4Yehfx3KQKAgzNtRDdrpxTOE.roa Signing time: Fri 02 Jan 2026 18:22:49 +0000 ROA not before: Fri 02 Jan 2026 18:22:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134176 IP address blocks: 185.92.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:ad:78:99:61:10:7b:2d:55:bf:10:eb:24:ca:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e Validity Not Before: Jan 2 18:22:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f200f861e85fc7729028083336d44376ba714ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:87:16:a4:42:02:77:ce:85:33:0c:06:88:91: b2:3a:10:37:e1:ef:4c:cc:33:f8:71:5a:8e:d3:e8: 06:96:c9:82:86:97:df:ba:dc:75:43:d7:14:2f:d4: d8:5e:b1:dc:69:8f:df:ea:4a:da:17:49:25:68:5c: 2e:40:92:86:0c:c7:fd:64:0f:0f:df:82:33:a4:b6: 52:48:0e:44:e7:1b:b2:10:f3:18:7d:99:c9:5a:72: 54:4e:8e:01:e6:eb:a5:8b:f1:06:d3:20:b7:ba:22: 33:74:12:f2:47:97:45:68:8e:1d:89:84:09:90:5a: 3a:01:77:b6:3c:d0:07:90:09:d5:91:82:1f:d0:dc: e2:1c:e5:d3:a6:54:6b:1c:50:2a:44:ce:c1:70:ec: 56:43:f8:fd:7a:3b:34:80:49:b4:c6:fc:b1:e1:da: 1b:e8:8f:5c:05:d3:b4:12:6e:30:bf:cc:80:a4:43: e3:49:48:c0:6b:0c:8e:c1:35:26:e1:65:2c:fd:a7: 9b:b9:c2:a3:57:7f:28:a2:df:3b:67:10:c2:ee:cd: af:aa:d0:93:f8:ca:51:27:30:bc:a4:d1:f8:13:27: 1c:ab:0a:ef:c9:c3:f7:84:67:a1:a3:70:80:5e:7d: 68:18:2d:4f:2e:45:8d:f5:35:62:2f:5f:66:f1:e9: 97:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:00:F8:61:E8:5F:C7:72:90:28:08:33:36:D4:43:76:BA:71:4C:E1 X509v3 Authority Key Identifier: keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/8gD4Yehfx3KQKAgzNtRDdrpxTOE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.92.209.0/24 Signature Algorithm: sha256WithRSAEncryption a5:df:10:f0:e9:85:b0:ae:92:e8:25:05:9e:70:77:03:37:bc: 8e:2a:39:90:d7:00:43:14:43:a3:c1:2c:17:cd:54:77:58:3f: d4:a7:8b:57:c3:d3:7b:3e:35:f1:37:49:cd:f5:6d:9d:4d:c3: 59:a1:ba:0f:f8:11:92:4d:f9:2e:a8:01:3e:99:df:b5:ae:ea: a2:07:55:d1:d2:6e:ba:bc:35:fc:cb:6e:4f:66:82:3c:b7:e3: 77:98:7a:94:21:7c:1d:7b:6a:5e:dd:63:86:4b:9b:4a:ca:ca: b0:38:0e:e7:12:59:24:8c:c5:1a:88:7f:69:a4:f0:b3:db:82: 3d:cb:85:95:ee:b2:83:4c:86:75:5e:dd:0b:63:75:fe:a8:42: bc:a4:48:9f:cc:67:a5:a0:3d:95:5a:ea:f6:78:71:91:3c:44: c5:eb:cc:dc:8f:d8:dd:d6:4d:ff:bc:70:f7:71:5d:f7:44:a0: 1f:f2:3a:6a:65:b9:29:b5:d7:5f:83:6f:ec:70:b3:7a:30:8e: 35:56:2c:ff:75:27:e6:82:e7:06:66:f6:03:8e:a3:bd:92:0e: 53:9f:1a:52:30:41:7e:0e:97:32:ab:28:06:18:f1:14:f4:d6: 56:1d:3e:4f:5b:fd:f5:1b:50:c9:78:c3:de:5f:f1:47:54:44: 3c:d0:e8:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8q14mWEQey1VvxDrJMojMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0 MWJlOWUwHhcNMjYwMTAyMTgyMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjAwZjg2MWU4NWZjNzcyOTAyODA4MzMzNmQ0NDM3NmJhNzE0Y2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtocWpEICd86FMwwGiJGyOhA34e9M zDP4cVqO0+gGlsmChpffutx1Q9cUL9TYXrHcaY/f6kraF0klaFwuQJKGDMf9ZA8P 34IzpLZSSA5E5xuyEPMYfZnJWnJUTo4B5uuli/EG0yC3uiIzdBLyR5dFaI4diYQJ kFo6AXe2PNAHkAnVkYIf0NziHOXTplRrHFAqRM7BcOxWQ/j9ejs0gEm0xvyx4dob 6I9cBdO0Em4wv8yApEPjSUjAawyOwTUm4WUs/aebucKjV38oot87ZxDC7s2vqtCT +MpRJzC8pNH4EyccqwrvycP3hGeho3CAXn1oGC1PLkWN9TViL19m8emXEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPIA+GHoX8dykCgIMzbUQ3a6cUzhMB8GA1UdIwQY MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct MTFiM2NmM2ZkNGUxLzEvOGdENFllaGZ4M0tRS0Fnek50UkRkcnB4VE9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVzRMA0G CSqGSIb3DQEBCwUAA4IBAQCl3xDw6YWwrpLoJQWecHcDN7yOKjmQ1wBDFEOjwSwX zVR3WD/Up4tXw9N7PjXxN0nN9W2dTcNZoboP+BGSTfkuqAE+md+1ruqiB1XR0m66 vDX8y25PZoI8t+N3mHqUIXwde2pe3WOGS5tKysqwOA7nElkkjMUaiH9ppPCz24I9 y4WV7rKDTIZ1Xt0LY3X+qEK8pEifzGeloD2VWur2eHGRPETF68zcj9jd1k3/vHD3 cV33RKAf8jpqZbkptddfg2/scLN6MI41Viz/dSfmgucGZvYDjqO9kg5TnxpSMEF+ DpcyqygGGPEU9NZWHT5PW/31G1DJeMPeX/FHVEQ80Ogx -----END CERTIFICATE-----Generated at Mon Jan 19 20:23:10 2026 by rpki-client