This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/8xmLEuWVoq-luhpUPZd1WI6D0Js.roa File: 8xmLEuWVoq-luhpUPZd1WI6D0Js.roa (raw, json) Hash identifier: j13xyv2Txbt+npMeAxt4bkLbD3ednHhJEFGvJw7Inx4= Subject key identifier: F3:19:8B:12:E5:95:A2:AF:A5:BA:1A:54:3D:97:75:58:8E:83:D0:9B Certificate issuer: /CN=3e332dd2994c6ee89436158a2eac1f482922cd2a Certificate serial: 019B7B3669A93A57980582859B83A48E9618 Authority key identifier: 3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/8xmLEuWVoq-luhpUPZd1WI6D0Js.roa Signing time: Thu 01 Jan 2026 20:18:42 +0000 ROA not before: Thu 01 Jan 2026 20:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205049 IP address blocks: 185.230.40.0/22 maxlen: 22 185.230.40.0/24 maxlen: 24 185.230.41.0/24 maxlen: 24 185.230.42.0/24 maxlen: 24 185.230.43.0/24 maxlen: 24 2a13:3680::/29 maxlen: 29 2a13:3680::/32 maxlen: 32 2a13:3681::/32 maxlen: 32 2a13:3682::/32 maxlen: 32 2a13:3683::/32 maxlen: 32 2a13:3684::/32 maxlen: 32 2a13:3685::/32 maxlen: 32 2a13:3686::/32 maxlen: 32 2a13:3687::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:69:a9:3a:57:98:05:82:85:9b:83:a4:8e:96:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e332dd2994c6ee89436158a2eac1f482922cd2a Validity Not Before: Jan 1 20:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3198b12e595a2afa5ba1a543d9775588e83d09b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:37:68:0f:66:86:04:25:79:3c:b7:aa:92:7e: cf:38:38:1a:42:6a:92:cc:93:ff:ef:7a:64:9f:2a: c0:be:3f:13:79:57:c6:27:d9:57:7b:30:b9:a3:b7: 56:94:95:f0:13:4a:ad:dc:6d:88:6d:6b:cf:0e:2b: 2f:76:ac:75:b6:fc:53:2e:34:2f:5b:db:4f:89:5a: bd:68:1d:72:57:17:8f:cc:3e:e8:36:ab:b7:f2:e1: b6:c6:29:71:05:65:33:4f:02:97:c0:50:a9:5b:f9: fc:53:9f:b0:67:06:8a:67:7e:62:4a:cb:78:93:d4: e2:00:6a:40:bb:96:d3:11:52:c0:83:ed:b9:1d:b5: c9:09:ec:4e:44:46:c0:1e:e6:4f:19:83:8f:e0:e3: f9:56:6e:49:3f:00:50:3f:c7:ca:b6:3b:21:ef:8c: 01:cd:c2:bf:75:58:21:80:5c:34:73:94:52:cb:66: f9:b7:2b:38:d5:f4:98:b8:e8:a7:6d:99:ca:1b:f6: 98:a9:61:a5:e2:15:56:49:d7:68:48:23:fe:0a:3a: 5c:7f:a3:7b:b7:fb:69:98:23:ad:a6:c0:06:6e:4e: 5e:a1:71:89:17:d7:e6:88:8b:c1:e2:61:0e:5f:73: b8:d4:33:2f:77:f7:59:58:ec:e2:1c:bb:16:a4:29: 81:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:19:8B:12:E5:95:A2:AF:A5:BA:1A:54:3D:97:75:58:8E:83:D0:9B X509v3 Authority Key Identifier: keyid:3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/8xmLEuWVoq-luhpUPZd1WI6D0Js.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.230.40.0/22 IPv6: 2a13:3680::/29 Signature Algorithm: sha256WithRSAEncryption 89:2d:34:41:92:fa:ba:a4:97:96:2f:bd:c4:96:c1:08:21:c7: af:07:2d:0e:9f:86:66:7e:49:ce:7b:e1:52:cc:61:f7:36:87: 89:2d:9d:42:84:89:5a:b5:77:d4:d2:ae:8a:ab:40:cf:09:34: 8d:94:f9:d7:a4:a2:37:02:99:fa:39:97:21:9e:53:fb:ab:33: 84:e1:ff:40:91:9c:d2:e3:7f:14:ae:72:7d:47:1b:8f:25:cb: ac:b1:65:79:a0:bc:9c:23:ae:be:69:e7:4a:2e:e5:8b:09:57: 09:c6:1b:63:d5:b8:5f:1c:56:c2:26:0c:00:a1:2e:f6:78:13: 37:75:84:9e:03:e0:52:50:e6:53:c3:b6:56:98:70:ff:a5:2c: dc:db:0f:d3:9a:84:08:7f:18:d0:73:f8:32:4d:6a:a3:57:68: 86:3a:f7:e3:10:da:91:32:71:6c:3b:9f:8f:7f:73:c4:a1:f9: 73:ed:14:20:9e:cb:e1:10:18:45:06:66:83:b9:19:67:45:46: 6e:81:d6:0d:a8:b6:bc:57:7b:33:49:4f:54:1e:19:1e:7c:f5: f2:73:37:f5:cb:c9:cc:12:db:a3:cb:3d:e4:93:a4:a4:9c:c4: 41:5f:a2:f4:ee:27:d7:9b:ba:0f:3f:52:f7:5b:43:72:6f:08: 23:ef:36:4e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NmmpOleYBYKFm4OkjpYYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMzMyZGQyOTk0YzZlZTg5NDM2MTU4YTJlYWMxZjQ4Mjky MmNkMmEwHhcNMjYwMTAxMjAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzE5OGIxMmU1OTVhMmFmYTViYTFhNTQzZDk3NzU1ODhlODNkMDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTdoD2aGBCV5PLeqkn7PODgaQmqS zJP/73pknyrAvj8TeVfGJ9lXezC5o7dWlJXwE0qt3G2IbWvPDisvdqx1tvxTLjQv W9tPiVq9aB1yVxePzD7oNqu38uG2xilxBWUzTwKXwFCpW/n8U5+wZwaKZ35iSst4 k9TiAGpAu5bTEVLAg+25HbXJCexOREbAHuZPGYOP4OP5Vm5JPwBQP8fKtjsh74wB zcK/dVghgFw0c5RSy2b5tys41fSYuOinbZnKG/aYqWGl4hVWSddoSCP+Cjpcf6N7 t/tpmCOtpsAGbk5eoXGJF9fmiIvB4mEOX3O41DMvd/dZWOziHLsWpCmBtQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPMZixLllaKvpboaVD2XdViOg9CbMB8GA1UdIwQY MBaAFD4zLdKZTG7olDYVii6sH0gpIs0qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGpNdDBwbE1idWlVTmhXS0xxd2ZTQ2tpelNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82MDhlMjEtNmE0MC00NzExLTljODMt ZDAyNGFkNGI3YmViLzEvOHhtTEV1V1ZvcS1sdWhwVVBaZDFXSTZEMEpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC82MDhlMjEtNmE0MC00NzExLTljODMtZDAyNGFkNGI3YmVi LzEvUGpNdDBwbE1idWlVTmhXS0xxd2ZTQ2tpelNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCueYoMA0E AgACMAcDBQMqEzaAMA0GCSqGSIb3DQEBCwUAA4IBAQCJLTRBkvq6pJeWL73ElsEI IcevBy0On4ZmfknOe+FSzGH3NoeJLZ1ChIlatXfU0q6Kq0DPCTSNlPnXpKI3Apn6 OZchnlP7qzOE4f9AkZzS438UrnJ9RxuPJcussWV5oLycI66+aedKLuWLCVcJxhtj 1bhfHFbCJgwAoS72eBM3dYSeA+BSUOZTw7ZWmHD/pSzc2w/TmoQIfxjQc/gyTWqj V2iGOvfjENqRMnFsO5+Pf3PEoflz7RQgnsvhEBhFBmaDuRlnRUZugdYNqLa8V3sz SU9UHhkefPXyczf1y8nMEtujyz3kk6SknMRBX6L07ifXm7oPP1L3W0Nybwgj7zZO -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:19 2026 by rpki-client