This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/23wcH8L7dVH0Qu_LmR1lf4KTI60.roa File: 23wcH8L7dVH0Qu_LmR1lf4KTI60.roa (raw, json) Hash identifier: ZASstFoClWzggMDa2W+x7rdpIoMG853uqXTJ54y76xQ= Subject key identifier: DB:7C:1C:1F:C2:FB:75:51:F4:42:EF:CB:99:1D:65:7F:82:93:23:AD Certificate issuer: /CN=c8c2c7314593042cf74210f7f03be7106c224f89 Certificate serial: 019B7AC9560AA9C65EEA14713FCB6DA7C8A4 Authority key identifier: C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/23wcH8L7dVH0Qu_LmR1lf4KTI60.roa Signing time: Thu 01 Jan 2026 18:19:33 +0000 ROA not before: Thu 01 Jan 2026 18:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206716 IP address blocks: 185.107.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:56:0a:a9:c6:5e:ea:14:71:3f:cb:6d:a7:c8:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8c2c7314593042cf74210f7f03be7106c224f89 Validity Not Before: Jan 1 18:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db7c1c1fc2fb7551f442efcb991d657f829323ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:dd:2c:a5:d6:57:e0:ca:37:b6:dc:c6:f3:ee: ee:35:01:a4:4a:31:49:bf:09:35:ad:ab:67:59:a8: a7:c4:7d:85:a5:3b:28:33:6c:4d:37:11:65:35:1c: 79:11:bf:13:e2:8c:1e:6a:0d:c4:5a:b6:90:62:d4: 60:42:47:ea:2a:8d:dd:f1:9f:bc:68:2a:13:7d:4f: 90:a3:2b:21:4e:b6:8e:e6:aa:4f:2d:bb:49:ae:ca: 0f:c6:8c:b9:81:04:cc:97:5b:a3:99:ed:a1:47:9b: fe:4f:46:75:ff:7a:d1:15:dd:c6:dc:c4:80:87:d4: b6:0e:8d:c1:70:64:ec:0d:2b:70:e5:9f:cd:5e:4f: 90:2b:94:e9:99:b9:1a:98:b2:ae:2a:7b:31:6f:a3: f5:8a:cf:c3:38:bf:ad:e0:fe:d8:66:52:65:b4:f2: b3:b9:92:6c:fe:05:ea:89:d0:c6:97:1b:2e:83:1b: e8:37:7e:97:f8:01:08:a2:5a:77:86:d6:35:5a:b4: 19:fd:03:06:f2:9f:d1:9a:65:aa:79:32:8e:37:f4: 06:53:d6:7a:8f:a8:60:08:8f:98:9b:46:2c:77:e5: d5:19:36:da:7d:c7:85:6f:d0:bd:4b:49:b3:f5:6f: 77:5c:f5:af:25:6f:a2:bd:3c:4d:8b:49:12:4d:64: 66:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7C:1C:1F:C2:FB:75:51:F4:42:EF:CB:99:1D:65:7F:82:93:23:AD X509v3 Authority Key Identifier: keyid:C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/23wcH8L7dVH0Qu_LmR1lf4KTI60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.107.135.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:c4:17:68:a7:03:d1:2a:62:ef:ea:cc:f2:1b:06:1a:6e:27: c7:91:6a:65:47:f0:4f:2f:c3:ca:6d:45:46:b7:76:e5:9a:2f: a9:af:d6:a6:a9:2b:0d:6e:67:26:2c:bd:89:9f:b3:e7:6d:70: cd:3d:63:f8:18:2b:3c:f3:13:05:f3:12:33:ff:0f:40:0a:65: 01:48:00:47:77:bd:9a:bc:64:5f:fd:a6:d0:18:81:34:f8:4f: 6b:8e:d6:85:da:75:42:bc:e4:89:dc:e1:5d:4a:99:60:10:f8: 74:21:20:fb:f7:3f:32:02:47:05:f1:37:09:d0:5f:b9:db:e9: 6d:8d:78:ee:70:2e:8b:c2:4a:84:7c:d1:44:10:ea:16:fa:09: 41:e1:48:95:21:d1:56:d8:86:3e:89:2a:5c:2d:f7:9d:66:68: ee:a6:24:31:3d:a2:1c:50:16:3d:05:dc:f4:3f:af:00:1b:4d: 2a:65:28:11:02:9e:a9:87:75:87:aa:ec:78:8c:89:b8:f0:21: b1:a1:67:ee:2e:36:18:bc:89:db:13:db:0e:ac:36:bf:ce:af: 5e:ca:3b:9a:2b:84:48:ef:fe:64:af:e8:47:e6:0c:01:0a:68: c8:ba:e6:a9:2f:17:e8:26:91:cc:f1:b8:d0:b6:06:37:0a:71: e5:8d:be:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yVYKqcZe6hRxP8ttp8ikMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4YzJjNzMxNDU5MzA0MmNmNzQyMTBmN2YwM2JlNzEwNmMy MjRmODkwHhcNMjYwMTAxMTgxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjdjMWMxZmMyZmI3NTUxZjQ0MmVmY2I5OTFkNjU3ZjgyOTMyM2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6t0spdZX4Mo3ttzG8+7uNQGkSjFJ vwk1ratnWainxH2FpTsoM2xNNxFlNRx5Eb8T4oweag3EWraQYtRgQkfqKo3d8Z+8 aCoTfU+QoyshTraO5qpPLbtJrsoPxoy5gQTMl1ujme2hR5v+T0Z1/3rRFd3G3MSA h9S2Do3BcGTsDStw5Z/NXk+QK5TpmbkamLKuKnsxb6P1is/DOL+t4P7YZlJltPKz uZJs/gXqidDGlxsugxvoN36X+AEIolp3htY1WrQZ/QMG8p/RmmWqeTKON/QGU9Z6 j6hgCI+Ym0Ysd+XVGTbafceFb9C9S0mz9W93XPWvJW+ivTxNi0kSTWRm2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNt8HB/C+3VR9ELvy5kdZX+CkyOtMB8GA1UdIwQY MBaAFMjCxzFFkwQs90IQ9/A75xBsIk+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU1MSE1VV1RCQ3ozUWhEMzhEdm5FR3dpVDRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iMmRiZTAtMDRjNS00MWJhLWFjNjIt M2E1M2QwZWY4YjVhLzEvMjN3Y0g4TDdkVkgwUXVfTG1SMWxmNEtUSTYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9iMmRiZTAtMDRjNS00MWJhLWFjNjItM2E1M2QwZWY4YjVh LzEveU1MSE1VV1RCQ3ozUWhEMzhEdm5FR3dpVDRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWuHMA0G CSqGSIb3DQEBCwUAA4IBAQAaxBdopwPRKmLv6szyGwYabifHkWplR/BPL8PKbUVG t3blmi+pr9amqSsNbmcmLL2Jn7PnbXDNPWP4GCs88xMF8xIz/w9ACmUBSABHd72a vGRf/abQGIE0+E9rjtaF2nVCvOSJ3OFdSplgEPh0ISD79z8yAkcF8TcJ0F+52+lt jXjucC6LwkqEfNFEEOoW+glB4UiVIdFW2IY+iSpcLfedZmjupiQxPaIcUBY9Bdz0 P68AG00qZSgRAp6ph3WHqux4jIm48CGxoWfuLjYYvInbE9sOrDa/zq9eyjuaK4RI 7/5kr+hH5gwBCmjIuuapLxfoJpHM8bjQtgY3CnHljb7I -----END CERTIFICATE-----Generated at Mon Jan 26 18:19:26 2026 by rpki-client