This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/i8rvpZNF2T57uOFXx3vGaG1PYhw.roa File: i8rvpZNF2T57uOFXx3vGaG1PYhw.roa (raw, json) Hash identifier: SYCHxb22bNW0yU4zR/mIYuJM9tSyhnXk+M428AiZHEo= Subject key identifier: 8B:CA:EF:A5:93:45:D9:3E:7B:B8:E1:57:C7:7B:C6:68:6D:4F:62:1C Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E459155767C0401D7303DDBB135A7 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/i8rvpZNF2T57uOFXx3vGaG1PYhw.roa Signing time: Thu 01 Jan 2026 12:17:56 +0000 ROA not before: Thu 01 Jan 2026 12:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397268 IP address blocks: 185.207.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:45:91:55:76:7c:04:01:d7:30:3d:db:b1:35:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bcaefa59345d93e7bb8e157c77bc6686d4f621c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:60:05:d3:5c:c8:9a:fa:53:df:88:05:ae:88: 32:e9:b3:0b:35:73:11:07:4e:db:aa:eb:9e:00:af: 6d:65:c5:38:97:76:63:f1:fd:83:09:bc:e5:76:64: 2b:8b:69:86:c8:cb:c8:99:d8:24:22:b5:f6:ff:56: ab:0f:27:9b:e9:3d:3f:af:0f:14:cc:39:8a:e9:94: df:2d:33:ea:d0:b7:ec:b7:f4:41:32:af:b8:0a:8b: 79:e6:57:0c:a1:a9:9e:8b:45:22:2a:4f:03:d2:1b: 81:31:62:ee:bd:af:26:95:72:c1:82:91:4c:65:b2: 5a:38:4e:1f:a2:98:17:09:ed:e5:0a:2b:6e:bd:20: 66:7a:da:68:04:28:61:6b:23:c4:2a:a7:9b:86:d4: f4:de:ea:b9:6f:ff:71:a0:9d:de:22:cd:6e:d8:27: 33:00:bc:2f:02:3f:87:2b:4a:b0:de:c7:e5:38:86: 94:4d:76:d0:72:fb:8e:a0:17:c2:05:3a:3d:ef:e0: 47:2c:fe:da:4f:a1:89:fb:a7:9c:9c:0a:e3:23:c5: d3:f4:ca:6a:91:53:cb:d3:a1:7f:b0:94:68:ab:4d: 8e:f9:c1:7a:79:c9:59:77:05:5d:17:cf:8a:89:13: cd:04:42:d9:29:dd:d7:f9:1c:7b:6e:8f:6f:04:af: 6a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CA:EF:A5:93:45:D9:3E:7B:B8:E1:57:C7:7B:C6:68:6D:4F:62:1C X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/i8rvpZNF2T57uOFXx3vGaG1PYhw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.207.179.0/24 Signature Algorithm: sha256WithRSAEncryption 90:a2:b2:4b:5a:dc:c0:4c:a5:8a:24:f1:bd:d1:7f:ce:d2:56: 48:bd:43:42:68:2c:98:27:d7:1d:ae:c4:51:f2:98:ec:a0:4a: 62:56:92:0b:31:40:01:fe:c0:a0:76:b1:1b:8f:0d:4f:21:60: fa:0f:20:17:f8:2b:e9:d1:80:d2:a0:62:74:d0:1f:1a:f5:31: 97:9b:0a:d2:e4:61:f0:17:09:04:84:89:5d:e8:96:40:3f:55: 5f:71:fd:08:0c:d5:3b:5d:23:cb:c2:d2:22:d4:6a:03:f2:43: ed:66:fe:38:bd:74:74:1e:25:f1:86:50:e2:43:ab:59:bc:7e: 62:04:78:38:6a:56:c4:54:35:34:89:7f:46:a2:7c:33:22:cd: c7:c3:a7:d6:31:c4:74:b4:33:49:9a:2a:6a:13:c9:f9:53:bf: 2e:c9:09:49:0a:91:c9:66:31:d4:63:e9:2f:33:9b:bf:a9:fe: 0c:8e:ff:c8:d8:44:d2:e2:98:a9:cb:3f:5e:98:61:ac:a7:09: 16:80:6e:33:d9:77:d7:e0:a8:7d:35:83:b8:ca:06:11:19:19: ce:0d:52:d7:3b:2b:20:29:8c:95:e8:54:14:63:ef:12:7e:29: 4d:e8:16:9f:b0:b1:fb:4f:7d:0a:35:fa:6b:61:7f:95:38:ee: 82:ba:b3:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fkWRVXZ8BAHXMD3bsTWnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmNhZWZhNTkzNDVkOTNlN2JiOGUxNTdjNzdiYzY2ODZkNGY2MjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumAF01zImvpT34gFrogy6bMLNXMR B07bquueAK9tZcU4l3Zj8f2DCbzldmQri2mGyMvImdgkIrX2/1arDyeb6T0/rw8U zDmK6ZTfLTPq0Lfst/RBMq+4Cot55lcMoamei0UiKk8D0huBMWLuva8mlXLBgpFM ZbJaOE4fopgXCe3lCituvSBmetpoBChhayPEKqebhtT03uq5b/9xoJ3eIs1u2Ccz ALwvAj+HK0qw3sflOIaUTXbQcvuOoBfCBTo97+BHLP7aT6GJ+6ecnArjI8XT9Mpq kVPL06F/sJRoq02O+cF6eclZdwVdF8+KiRPNBELZKd3X+Rx7bo9vBK9qOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIvK76WTRdk+e7jhV8d7xmhtT2IcMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvaThydnBaTkYyVDU3dU9GWHgzdkdhRzFQWWh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc+zMA0G CSqGSIb3DQEBCwUAA4IBAQCQorJLWtzATKWKJPG90X/O0lZIvUNCaCyYJ9cdrsRR 8pjsoEpiVpILMUAB/sCgdrEbjw1PIWD6DyAX+Cvp0YDSoGJ00B8a9TGXmwrS5GHw FwkEhIld6JZAP1Vfcf0IDNU7XSPLwtIi1GoD8kPtZv44vXR0HiXxhlDiQ6tZvH5i BHg4albEVDU0iX9GonwzIs3Hw6fWMcR0tDNJmipqE8n5U78uyQlJCpHJZjHUY+kv M5u/qf4Mjv/I2ETS4pipyz9emGGspwkWgG4z2XfX4Kh9NYO4ygYRGRnODVLXOysg KYyV6FQUY+8SfilN6BafsLH7T30KNfprYX+VOO6CurMJ -----END CERTIFICATE-----Generated at Mon Jan 19 20:26:44 2026 by rpki-client