This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8jofyi9AQCUlF2X7xCqIO2Fh6fI.roa File: 8jofyi9AQCUlF2X7xCqIO2Fh6fI.roa (raw, json) Hash identifier: cJxHpRgBDhVMJjUa8lp/FaLDW51uMfw0Lh0fPrJht9s= Subject key identifier: F2:3A:1F:CA:2F:40:40:25:25:17:65:FB:C4:2A:88:3B:61:61:E9:F2 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C137CFB475CCB4261B96529E4891BD2 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8jofyi9AQCUlF2X7xCqIO2Fh6fI.roa Signing time: Fri 02 Jan 2026 00:20:10 +0000 ROA not before: Fri 02 Jan 2026 00:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 140641 IP address blocks: 185.209.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:7c:fb:47:5c:cb:42:61:b9:65:29:e4:89:1b:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f23a1fca2f404025251765fbc42a883b6161e9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:81:0f:ee:9c:2b:cc:88:bb:09:60:4c:98:39: 43:ec:b5:bf:49:ee:20:5e:1a:6c:80:42:6a:d3:c3: 9a:4f:7d:f8:a0:86:ea:a3:30:96:3f:49:81:19:88: a5:e9:11:fb:ef:a8:25:4c:49:f2:0d:e4:5d:13:20: 01:7f:61:a3:a3:2c:4c:c4:7c:00:74:0e:70:91:9c: 9a:58:00:c0:84:71:e6:76:05:6e:60:b3:cb:6e:86: 6d:de:b6:9d:e6:1a:ee:03:81:bf:e7:31:67:ac:12: 32:50:e8:a3:86:1b:7f:5b:10:3f:74:50:55:2d:88: 03:46:5d:e3:e8:e5:5a:07:42:9a:ac:09:e6:ec:6d: 61:b4:10:2d:a1:ac:14:85:15:df:a8:29:87:58:fc: 06:f2:b7:b2:94:d8:7a:87:04:11:13:20:56:9d:bb: f1:8d:f6:18:47:2f:ef:ea:f3:42:50:59:22:b9:dc: 40:77:b2:d9:78:75:7e:34:a0:80:68:8b:20:2e:db: 30:af:00:f2:e4:50:55:54:20:19:8c:1f:74:66:89: 17:77:b8:fa:86:fd:23:95:38:86:45:3e:51:be:1e: ac:6e:07:2f:1d:7f:e5:6a:37:d8:0a:cc:d7:a3:d0: a8:2b:df:50:a4:ff:35:59:6a:f1:68:79:7f:5e:c5: a6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3A:1F:CA:2F:40:40:25:25:17:65:FB:C4:2A:88:3B:61:61:E9:F2 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8jofyi9AQCUlF2X7xCqIO2Fh6fI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.209.75.0/24 Signature Algorithm: sha256WithRSAEncryption 12:66:78:db:67:da:24:db:29:03:45:77:89:15:cb:87:37:87: df:5a:f9:0a:e8:ac:71:9a:c2:02:2e:b4:82:43:e4:56:05:ac: 5e:68:40:57:2e:22:e2:d6:73:7f:4c:9d:eb:0e:a4:81:45:e6: 0f:b7:94:5d:9b:51:c5:57:b5:00:4e:1e:a9:ad:e4:21:e4:11: 37:62:f4:36:d6:76:0b:65:12:f9:0f:b2:e6:3f:af:6c:02:ff: 84:9f:ed:0c:1d:fb:f8:dc:87:cf:09:19:b6:a1:18:66:72:60: 9d:68:ec:5f:43:f7:95:ec:5a:09:c8:21:cb:e4:8a:66:ff:a3: df:da:d2:b9:90:0a:f0:0b:c5:38:be:8f:2c:c9:a8:f7:55:22: 04:f7:ad:c6:37:b6:8b:43:fa:d6:fb:54:28:3f:8b:39:4c:07: dd:a9:49:a4:b8:7f:b2:a6:72:d2:0a:eb:7d:c8:b3:6b:04:6d: c8:9d:af:18:20:43:9b:08:c1:3d:10:4d:e2:a0:38:e5:61:12: 89:b5:d7:14:ab:05:2f:69:2d:ee:a3:a2:86:94:4f:99:4a:cf: a9:d9:ca:1f:de:eb:20:ca:ca:9d:eb:f4:a9:33:3d:d7:71:4d: 5e:36:bf:fd:70:84:ba:f4:7a:d9:c8:96:9c:4c:d1:f4:16:6b: 92:9d:53:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E3z7R1zLQmG5ZSnkiRvSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjNhMWZjYTJmNDA0MDI1MjUxNzY1ZmJjNDJhODgzYjYxNjFlOWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4EP7pwrzIi7CWBMmDlD7LW/Se4g XhpsgEJq08OaT334oIbqozCWP0mBGYil6RH776glTEnyDeRdEyABf2GjoyxMxHwA dA5wkZyaWADAhHHmdgVuYLPLboZt3rad5hruA4G/5zFnrBIyUOijhht/WxA/dFBV LYgDRl3j6OVaB0KarAnm7G1htBAtoawUhRXfqCmHWPwG8reylNh6hwQREyBWnbvx jfYYRy/v6vNCUFkiudxAd7LZeHV+NKCAaIsgLtswrwDy5FBVVCAZjB90ZokXd7j6 hv0jlTiGRT5Rvh6sbgcvHX/lajfYCszXo9CoK99QpP81WWrxaHl/XsWmoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPI6H8ovQEAlJRdl+8QqiDthYenyMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvOGpvZnlpOUFRQ1VsRjJYN3hDcUlPMkZoNmZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudFLMA0G CSqGSIb3DQEBCwUAA4IBAQASZnjbZ9ok2ykDRXeJFcuHN4ffWvkK6KxxmsICLrSC Q+RWBaxeaEBXLiLi1nN/TJ3rDqSBReYPt5Rdm1HFV7UATh6preQh5BE3YvQ21nYL ZRL5D7LmP69sAv+En+0MHfv43IfPCRm2oRhmcmCdaOxfQ/eV7FoJyCHL5Ipm/6Pf 2tK5kArwC8U4vo8syaj3VSIE963GN7aLQ/rW+1QoP4s5TAfdqUmkuH+ypnLSCut9 yLNrBG3Ina8YIEObCME9EE3ioDjlYRKJtdcUqwUvaS3uo6KGlE+ZSs+p2cof3usg ysqd6/SpMz3XcU1eNr/9cIS69HrZyJacTNH0FmuSnVNW -----END CERTIFICATE-----Generated at Fri Jan 2 23:47:30 2026 by rpki-client