This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/XX8jiia2qRn5F4Rw20y4V8PROEM.roa File: XX8jiia2qRn5F4Rw20y4V8PROEM.roa (raw, json) Hash identifier: G3XYPGF85yuWzw2tQ0J9bMX6CKOgd/xIy5aT63FIwv8= Subject key identifier: 5D:7F:23:8A:26:B6:A9:19:F9:17:84:70:DB:4C:B8:57:C3:D1:38:43 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C13A7E7109C0377DA79EA5AD4139A2F Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/XX8jiia2qRn5F4Rw20y4V8PROEM.roa Signing time: Fri 02 Jan 2026 00:20:21 +0000 ROA not before: Fri 02 Jan 2026 00:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398452 IP address blocks: 185.108.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:a7:e7:10:9c:03:77:da:79:ea:5a:d4:13:9a:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d7f238a26b6a919f9178470db4cb857c3d13843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f5:97:4c:1b:4d:e0:33:58:bb:84:8f:b5:3c: ca:4b:0c:11:b3:b9:06:96:c8:0f:04:53:e9:7c:9e: d5:e4:87:0e:de:96:06:f4:81:a8:54:39:b2:58:a5: 4f:98:10:f1:80:0d:55:44:ee:4e:53:72:fc:7f:82: 8d:11:b4:3d:31:06:a2:38:e6:3e:f6:97:87:3c:62: 4e:63:bb:d3:f5:fa:c4:11:07:86:60:b2:1c:48:b0: 39:c6:54:a8:5e:23:bb:f4:97:7d:25:60:71:95:c7: 5c:10:7b:43:88:5f:36:5b:ee:60:e3:ef:0a:88:1d: 0f:ad:87:43:cd:32:97:57:5c:07:0b:bf:3c:c2:05: 07:65:9c:cf:2e:76:73:a9:55:a9:63:e5:90:be:28: a4:f0:1d:31:ab:1a:44:9a:c8:bc:5b:21:bc:5c:d3: 4e:29:5d:70:20:a1:66:ef:a1:ff:68:58:ce:ef:14: 6d:2f:b7:f5:73:9c:3c:03:1d:68:bf:09:f8:f3:76: 6a:76:8b:4f:ae:51:50:d7:20:87:f0:98:21:12:aa: 4b:c3:7e:5b:3e:05:e9:9a:40:d4:94:d5:4a:22:84: 71:f8:49:1b:3a:cb:fc:03:93:a9:73:a2:b0:15:47: 93:95:f6:68:77:46:f6:74:c5:c1:a9:03:ad:07:44: 69:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7F:23:8A:26:B6:A9:19:F9:17:84:70:DB:4C:B8:57:C3:D1:38:43 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/XX8jiia2qRn5F4Rw20y4V8PROEM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.108.205.0/24 Signature Algorithm: sha256WithRSAEncryption 91:b8:4f:c1:88:10:fa:02:f0:00:db:3c:05:d4:a7:9d:18:21: b9:39:fb:78:88:f3:67:96:ef:e9:a9:5f:f0:10:4b:ea:8b:d4: ac:5b:8f:70:0f:1e:5e:79:37:b3:31:c1:88:36:02:f3:3c:1a: 75:24:b7:d1:bb:26:0e:f0:90:e5:35:62:48:11:f4:fe:9b:4c: 70:47:89:49:e9:8f:06:59:37:09:59:e8:24:76:61:0d:d5:ce: 07:3c:88:aa:5e:ff:29:57:9e:16:11:0a:5b:49:f0:e0:12:b9: 5f:98:8e:6d:5d:bc:cb:5d:46:ad:b8:5e:3c:c1:f3:87:13:55: ae:ab:9a:c7:ce:4c:69:e4:4d:02:9d:95:fc:f6:b0:03:75:ad: 9f:89:2f:1e:51:b9:65:f6:9a:3f:03:b6:87:f6:68:99:ec:1a: 59:96:ab:a0:48:f0:1b:00:ba:12:30:e8:74:5f:2c:62:1e:5d: 8b:9e:df:a0:81:1a:86:80:15:4d:d7:fc:c6:06:05:1c:ef:d3: fc:9f:c6:8f:78:20:ba:67:f6:55:86:75:1c:81:c2:6b:a9:19: 3b:f9:6b:75:60:e1:2b:b4:47:9e:51:b6:2c:26:2e:d2:c6:a8: 12:8c:81:23:69:1e:83:97:dc:a8:5c:d9:b3:5f:04:6f:b6:df: 08:2c:fb:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E6fnEJwDd9p56lrUE5ovMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDdmMjM4YTI2YjZhOTE5ZjkxNzg0NzBkYjRjYjg1N2MzZDEzODQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/WXTBtN4DNYu4SPtTzKSwwRs7kG lsgPBFPpfJ7V5IcO3pYG9IGoVDmyWKVPmBDxgA1VRO5OU3L8f4KNEbQ9MQaiOOY+ 9peHPGJOY7vT9frEEQeGYLIcSLA5xlSoXiO79Jd9JWBxlcdcEHtDiF82W+5g4+8K iB0PrYdDzTKXV1wHC788wgUHZZzPLnZzqVWpY+WQviik8B0xqxpEmsi8WyG8XNNO KV1wIKFm76H/aFjO7xRtL7f1c5w8Ax1ovwn483ZqdotPrlFQ1yCH8JghEqpLw35b PgXpmkDUlNVKIoRx+EkbOsv8A5Opc6KwFUeTlfZod0b2dMXBqQOtB0RpeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF1/I4omtqkZ+ReEcNtMuFfD0ThDMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvWFg4amlpYTJxUm41RjRSdzIweTRWOFBST0VNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWzNMA0G CSqGSIb3DQEBCwUAA4IBAQCRuE/BiBD6AvAA2zwF1KedGCG5Oft4iPNnlu/pqV/w EEvqi9SsW49wDx5eeTezMcGINgLzPBp1JLfRuyYO8JDlNWJIEfT+m0xwR4lJ6Y8G WTcJWegkdmEN1c4HPIiqXv8pV54WEQpbSfDgErlfmI5tXbzLXUatuF48wfOHE1Wu q5rHzkxp5E0CnZX89rADda2fiS8eUbll9po/A7aH9miZ7BpZlqugSPAbALoSMOh0 XyxiHl2Lnt+ggRqGgBVN1/zGBgUc79P8n8aPeCC6Z/ZVhnUcgcJrqRk7+Wt1YOEr tEeeUbYsJi7SxqgSjIEjaR6Dl9yoXNmzXwRvtt8ILPt2 -----END CERTIFICATE-----Generated at Fri Jan 2 23:53:23 2026 by rpki-client