This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/p8t0PIwIf-OZP0tJQpmINvt3qpQ.roa File: p8t0PIwIf-OZP0tJQpmINvt3qpQ.roa (raw, json) Hash identifier: r27HfBWDMYwyRF//qyu0OtsF9qIPudC+kjCHFI00zPo= Subject key identifier: A7:CB:74:3C:8C:08:7F:E3:99:3F:4B:49:42:99:88:36:FB:77:AA:94 Certificate issuer: /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1 Certificate serial: 019B7C805B5EC7CF8BF799F25F45576A7BC1 Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/p8t0PIwIf-OZP0tJQpmINvt3qpQ.roa Signing time: Fri 02 Jan 2026 02:19:05 +0000 ROA not before: Fri 02 Jan 2026 02:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395793 IP address blocks: 194.179.152.0/22 maxlen: 24 194.179.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 20:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:5b:5e:c7:cf:8b:f7:99:f2:5f:45:57:6a:7b:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1 Validity Not Before: Jan 2 02:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7cb743c8c087fe3993f4b4942998836fb77aa94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a0:b5:c9:b5:94:33:93:0e:01:9c:f0:12:21: d1:90:7d:13:dd:5e:5a:be:a3:30:0d:f0:04:05:10: 15:56:b2:81:13:72:b8:14:3e:22:1b:43:a5:f3:9a: 25:11:7b:64:04:47:39:f3:fc:06:ca:fe:5a:1e:78: f0:2e:02:28:22:30:20:1b:93:ef:c1:45:8c:ff:84: e5:a3:84:04:aa:5e:47:49:4a:ab:2d:a3:15:b3:95: 1f:b7:a5:7f:e4:c5:34:32:d8:de:55:e4:24:c7:1d: bb:d8:9a:18:3e:86:c9:25:9f:87:78:a3:33:fd:80: 75:c1:a3:4b:53:e0:e5:54:34:41:16:1e:c7:cd:2b: f7:b7:c8:64:ac:c8:f5:19:1a:a4:94:62:70:fb:57: cb:e7:92:08:2c:27:e3:67:a1:f5:bf:7b:d1:1c:d1: be:56:14:13:6b:02:6f:11:87:bb:13:40:c2:80:ca: 6e:a7:89:e8:d9:17:06:80:0d:c2:bc:86:6d:87:07: 72:5d:37:26:f4:4a:f2:4c:21:e2:b6:86:31:31:d8: 32:32:f8:89:8d:bd:bc:c3:2e:7a:05:56:a7:bc:c8: 65:f7:00:cd:5a:ec:36:80:1a:e4:30:4a:ec:fd:ff: a2:73:29:d4:01:d7:a5:ad:12:e9:43:8d:77:b5:5f: 8f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:CB:74:3C:8C:08:7F:E3:99:3F:4B:49:42:99:88:36:FB:77:AA:94 X509v3 Authority Key Identifier: keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/p8t0PIwIf-OZP0tJQpmINvt3qpQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.179.152.0/21 Signature Algorithm: sha256WithRSAEncryption 6d:0d:b7:42:ad:c8:5c:03:6f:7f:7c:7c:a9:a7:6d:45:5b:1d: ff:ac:31:c1:58:e5:e2:38:9c:4b:b1:4e:54:19:48:fc:7b:43: 65:c3:97:5b:4e:61:af:c8:2b:e7:d5:c0:26:38:27:95:2a:b1: 03:43:c8:a6:f1:b8:6b:17:c7:cc:f5:b8:14:af:84:e4:cd:03: 9d:b6:d4:a1:a9:8d:9f:1d:c0:72:db:29:78:25:85:91:a0:2c: da:a7:60:a0:51:de:41:1a:e1:52:c5:0e:11:f5:99:bb:a8:d7: 25:e6:09:a8:ce:57:78:77:67:9a:98:1e:e3:61:5d:4b:d9:42: 87:8c:34:47:65:fd:27:7f:b7:6b:67:00:83:a3:af:92:b8:11: 5a:18:47:84:20:ea:61:40:3a:41:3a:58:14:c5:55:a0:1d:48: f6:9d:39:be:8a:d9:6c:39:fe:d0:de:3a:1e:a4:21:58:ae:4b: 0f:99:2a:1a:e5:be:53:5e:de:7e:36:4e:7a:15:9d:b1:4a:a4: 79:74:e5:58:fb:ec:98:cf:6a:a8:bb:8b:ba:b6:a4:07:c9:61: da:bf:3c:44:c3:bd:d0:ee:05:11:4f:0b:75:c9:38:95:7f:54: 85:81:0d:f6:48:4a:d2:c5:08:9f:71:78:52:d4:42:c1:e4:54: 5c:26:fd:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gFtex8+L95nyX0VXanvBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NmIwMTgyMTA1YmIyN2IwYzhiY2YyODQyYmQzYzFhODUx NjRiZDEwHhcNMjYwMTAyMDIxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2NiNzQzYzhjMDg3ZmUzOTkzZjRiNDk0Mjk5ODgzNmZiNzdhYTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKC1ybWUM5MOAZzwEiHRkH0T3V5a vqMwDfAEBRAVVrKBE3K4FD4iG0Ol85olEXtkBEc58/wGyv5aHnjwLgIoIjAgG5Pv wUWM/4Tlo4QEql5HSUqrLaMVs5Uft6V/5MU0MtjeVeQkxx272JoYPobJJZ+HeKMz /YB1waNLU+DlVDRBFh7HzSv3t8hkrMj1GRqklGJw+1fL55IILCfjZ6H1v3vRHNG+ VhQTawJvEYe7E0DCgMpup4no2RcGgA3CvIZthwdyXTcm9EryTCHitoYxMdgyMviJ jb28wy56BVanvMhl9wDNWuw2gBrkMErs/f+icynUAdelrRLpQ413tV+PtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKfLdDyMCH/jmT9LSUKZiDb7d6qUMB8GA1UdIwQY MBaAFFhrAYIQW7J7DIvPKEK9PBqFFkvRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0dzQmdoQmJzbnNNaTg4b1FyMDhHb1VXUzlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81MmI0ODEtZjMwMy00YTk2LTk3ZGQt NzM3MGZkODBkZjZjLzEvcDh0MFBJd0lmLU9aUDB0SlFwbUlOdnQzcXBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS81MmI0ODEtZjMwMy00YTk2LTk3ZGQtNzM3MGZkODBkZjZj LzEvV0dzQmdoQmJzbnNNaTg4b1FyMDhHb1VXUzlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwrOYMA0G CSqGSIb3DQEBCwUAA4IBAQBtDbdCrchcA29/fHypp21FWx3/rDHBWOXiOJxLsU5U GUj8e0Nlw5dbTmGvyCvn1cAmOCeVKrEDQ8im8bhrF8fM9bgUr4TkzQOdttShqY2f HcBy2yl4JYWRoCzap2CgUd5BGuFSxQ4R9Zm7qNcl5gmozld4d2eamB7jYV1L2UKH jDRHZf0nf7drZwCDo6+SuBFaGEeEIOphQDpBOlgUxVWgHUj2nTm+itlsOf7Q3joe pCFYrksPmSoa5b5TXt5+Nk56FZ2xSqR5dOVY++yYz2qou4u6tqQHyWHavzxEw73Q 7gURTwt1yTiVf1SFgQ32SErSxQifcXhS1ELB5FRcJv2G -----END CERTIFICATE-----Generated at Sun Jan 18 04:10:01 2026 by rpki-client