This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa File: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (raw, json) Hash identifier: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs= Subject key identifier: 8B:4A:DB:D8:A3:CB:D8:31:F5:5B:76:68:4D:30:38:F4:63:C4:A0:D8 Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019B7A5B0C6FD8450E5DC079AAB01CD2EC37 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa Signing time: Thu 01 Jan 2026 16:19:05 +0000 ROA not before: Thu 01 Jan 2026 16:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204650 IP address blocks: 185.82.136.0/22 maxlen: 22 185.201.48.0/24 maxlen: 24 185.201.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:0c:6f:d8:45:0e:5d:c0:79:aa:b0:1c:d2:ec:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Jan 1 16:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b4adbd8a3cbd831f55b76684d3038f463c4a0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7a:bb:70:3d:e8:9e:ca:92:ab:05:81:cb:66: 5e:4f:c7:4b:ef:47:7e:22:70:8e:e9:b5:2a:33:58: 5d:c6:30:e2:e0:c8:b0:be:c8:71:f6:c9:8e:36:b6: fe:fc:0a:79:f6:01:ea:71:88:40:a9:e5:fd:af:f5: e5:34:b2:34:e3:2f:d3:7a:ca:a3:71:97:a2:5f:64: 8c:9e:08:fc:59:cb:df:42:67:e8:84:70:31:ae:0c: d6:82:f5:10:ec:29:ca:af:4e:a7:2d:06:de:b1:a7: cc:a7:9f:bc:5f:c9:66:69:5d:55:8e:4f:97:3c:4e: 42:d9:33:94:94:7e:3b:75:73:af:ab:b7:ce:ba:84: 86:64:ec:95:a1:32:94:1c:c3:49:47:c0:9d:4b:f7: a9:05:2b:1e:a7:bf:73:5e:b5:02:ef:1a:3f:03:af: b5:3d:bb:4f:34:13:3d:2c:45:6a:50:92:a1:1f:0a: 92:25:ef:1d:ef:23:0f:18:67:a3:8b:95:92:54:3e: c3:e5:44:4a:4d:e9:1d:f0:c1:69:39:42:64:1b:70: 38:2f:7b:8e:4e:11:14:c2:02:b3:81:af:35:4d:ef: a8:db:06:d5:5b:4c:f3:bd:79:70:c5:e5:40:3e:98: 06:6d:ac:7b:83:a9:b7:0e:af:a8:f6:85:fd:b9:cf: de:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:4A:DB:D8:A3:CB:D8:31:F5:5B:76:68:4D:30:38:F4:63:C4:A0:D8 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.82.136.0/22 185.201.48.0/24 185.201.51.0/24 Signature Algorithm: sha256WithRSAEncryption 00:5f:46:52:71:17:38:82:c5:79:a3:59:e5:be:d1:e9:1e:f7: 10:19:23:10:41:71:5b:a0:ca:04:ef:6f:0f:d4:bd:d6:48:b0: 82:73:fb:03:d5:ba:fa:5d:99:9a:5b:0c:78:be:eb:28:ef:15: 1a:fa:77:5d:8a:7b:83:d5:a9:4a:57:55:d5:72:d0:53:9e:c2: 53:bb:b8:fc:c2:a4:b8:1f:60:4b:6c:f5:ff:7d:18:94:6a:a3: eb:8b:0b:c7:59:85:fa:de:f5:5c:0b:6a:b4:d0:af:92:dc:3c: 1c:2b:6e:5f:dd:2e:d1:71:cb:66:75:4f:6b:ac:87:0d:b2:82: fe:19:25:70:5a:5e:88:fe:6e:e0:5e:4b:9c:77:fe:2b:db:8f: 34:b9:32:ec:55:8c:65:c9:9b:d1:4e:d7:bd:1f:bd:f7:5c:5f: 00:30:9f:8a:f0:a3:b2:54:ff:45:e3:11:3d:1e:88:69:de:64: 22:e8:27:31:d8:15:f1:79:1f:a5:28:66:d6:71:de:5b:72:0a: 7b:7c:15:df:6d:a0:6a:ab:57:f8:46:42:be:9c:97:f6:b3:02: e2:48:ae:cb:e9:77:c7:7d:14:48:78:b7:6a:8a:1f:ca:ee:df: cc:cc:b9:68:9c:5c:5d:1c:d4:44:03:04:2e:be:21:42:20:13: 6f:ea:65:81 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6Wwxv2EUOXcB5qrAc0uw3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMTAxMTYxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjRhZGJkOGEzY2JkODMxZjU1Yjc2Njg0ZDMwMzhmNDYzYzRhMGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHq7cD3onsqSqwWBy2ZeT8dL70d+ InCO6bUqM1hdxjDi4Miwvshx9smONrb+/Ap59gHqcYhAqeX9r/XlNLI04y/Tesqj cZeiX2SMngj8WcvfQmfohHAxrgzWgvUQ7CnKr06nLQbesafMp5+8X8lmaV1Vjk+X PE5C2TOUlH47dXOvq7fOuoSGZOyVoTKUHMNJR8CdS/epBSsep79zXrUC7xo/A6+1 PbtPNBM9LEVqUJKhHwqSJe8d7yMPGGeji5WSVD7D5URKTekd8MFpOUJkG3A4L3uO ThEUwgKzga81Te+o2wbVW0zzvXlwxeVAPpgGbax7g6m3Dq+o9oX9uc/eDQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFItK29ijy9gx9Vt2aE0wOPRjxKDYMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvaTByYjJLUEwyREgxVzNab1RUQTQ5R1BFb05nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuVKIAwQA uckwAwQAuckzMA0GCSqGSIb3DQEBCwUAA4IBAQAAX0ZScRc4gsV5o1nlvtHpHvcQ GSMQQXFboMoE728P1L3WSLCCc/sD1br6XZmaWwx4vuso7xUa+nddinuD1alKV1XV ctBTnsJTu7j8wqS4H2BLbPX/fRiUaqPriwvHWYX63vVcC2q00K+S3DwcK25f3S7R cctmdU9rrIcNsoL+GSVwWl6I/m7gXkucd/4r2480uTLsVYxlyZvRTte9H733XF8A MJ+K8KOyVP9F4xE9Hohp3mQi6Ccx2BXxeR+lKGbWcd5bcgp7fBXfbaBqq1f4RkK+ nJf2swLiSK7L6XfHfRRIeLdqih/K7t/MzLlonFxdHNREAwQuviFCIBNv6mWB -----END CERTIFICATE-----Generated at Mon Jan 5 13:05:20 2026 by rpki-client