This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/8xjA0vijBm1diaizodp3mG75LDI.roa File: 8xjA0vijBm1diaizodp3mG75LDI.roa (raw, json) Hash identifier: 4AjzFUfgs+M+NN2IgWhMj7sovV6HcoEwZY/R0BtNoC0= Subject key identifier: F3:18:C0:D2:F8:A3:06:6D:5D:89:A8:B3:A1:DA:77:98:6E:F9:2C:32 Certificate issuer: /CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d Certificate serial: 019B7DCA6FA4319AE19BC53639162D0727B5 Authority key identifier: 52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/8xjA0vijBm1diaizodp3mG75LDI.roa Signing time: Fri 02 Jan 2026 08:19:37 +0000 ROA not before: Fri 02 Jan 2026 08:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211808 IP address blocks: 185.237.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:6f:a4:31:9a:e1:9b:c5:36:39:16:2d:07:27:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d Validity Not Before: Jan 2 08:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f318c0d2f8a3066d5d89a8b3a1da77986ef92c32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:84:19:3c:17:8d:c5:7c:65:d2:41:8d:9a:d4: c4:3e:ff:94:cf:9b:3c:da:f8:37:4a:98:0e:ff:f2: fe:fa:54:56:92:df:3b:a4:fb:62:8b:ba:ee:f4:1c: f5:5b:42:01:96:6d:35:45:b3:02:f9:dc:e9:a7:25: 6b:53:78:7d:b4:5b:52:07:68:e3:7a:c5:97:a5:bc: c8:4c:46:76:b5:6a:73:d0:88:84:41:5a:6b:80:16: 37:cd:04:32:10:4f:66:a2:23:fb:1e:5e:bf:61:48: a8:4d:12:35:fe:9b:c9:9e:80:0c:2f:a2:a6:f0:05: 7d:94:48:8a:c5:a2:8c:72:00:03:41:55:68:0a:85: 59:72:a6:e8:48:1e:0e:a5:46:f6:bd:be:52:77:87: ce:78:a8:74:d8:4e:ad:74:cc:a1:d4:55:c1:d5:51: d1:69:08:6d:2f:60:0f:8a:0b:b7:75:9f:ee:9b:88: d1:2a:bd:9e:ea:c4:67:8d:b6:e6:1b:85:05:b2:d7: 0d:52:b2:90:74:06:6d:7b:47:59:97:8e:d3:52:59: 84:d1:6e:c4:a7:ed:b1:9e:5e:d4:66:33:ac:84:c8: 54:90:5b:ae:c9:91:e5:5e:94:2b:ac:9e:9d:a2:81: 0a:98:d6:76:a2:a9:ad:65:7c:2a:8d:d2:68:3b:ee: 64:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:18:C0:D2:F8:A3:06:6D:5D:89:A8:B3:A1:DA:77:98:6E:F9:2C:32 X509v3 Authority Key Identifier: keyid:52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/8xjA0vijBm1diaizodp3mG75LDI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.237.187.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:e1:93:71:75:ad:01:01:5a:88:4d:14:91:f9:9e:91:3a:61: a3:5b:b2:c6:ee:9b:bb:b3:d2:6c:7a:e3:ea:bf:18:89:42:56: 5a:ea:21:35:ec:6b:8c:09:fa:f4:14:89:53:c0:e0:0c:62:2c: c6:9d:1d:d0:de:23:12:33:cf:0b:e8:03:38:1e:e0:05:6e:00: 21:a6:8b:76:1e:87:77:47:2b:43:0e:90:d4:7e:bc:26:ed:83: 58:f8:d0:ef:2d:62:22:43:75:ca:d4:99:f1:77:c9:68:07:21: 53:ae:c8:ac:50:e4:60:76:c6:86:41:89:ab:11:75:94:15:2a: f1:ac:04:5e:7a:37:5a:35:bd:55:5d:ad:fb:2d:20:6a:9c:01: 42:95:91:0b:22:5b:40:36:32:e2:fd:8e:ee:ec:1e:37:ba:60: 7b:ed:22:1c:bc:94:52:99:81:f0:a3:55:58:9b:d5:23:ee:83: a6:e7:f2:fc:e9:34:66:40:d1:7c:b4:37:7c:e9:e7:64:7a:3e: 4b:ad:5f:5b:5c:e9:61:cb:4a:bc:87:30:80:f8:bf:3e:ce:39: ed:5f:e3:ea:c8:f2:69:97:86:60:e7:c7:58:6c:12:25:77:99: 11:2a:05:f4:db:7a:ef:6d:66:9c:e1:bd:f4:08:ba:ec:f6:7c: 04:5b:0e:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ym+kMZrhm8U2ORYtBye1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYzZkZDE3MTllMjg0ZmY1YzcwN2Y4MTIyZThlZDBkODc5 NWFmM2QwHhcNMjYwMTAyMDgxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzE4YzBkMmY4YTMwNjZkNWQ4OWE4YjNhMWRhNzc5ODZlZjkyYzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04QZPBeNxXxl0kGNmtTEPv+Uz5s8 2vg3SpgO//L++lRWkt87pPtii7ru9Bz1W0IBlm01RbMC+dzppyVrU3h9tFtSB2jj esWXpbzITEZ2tWpz0IiEQVprgBY3zQQyEE9moiP7Hl6/YUioTRI1/pvJnoAML6Km 8AV9lEiKxaKMcgADQVVoCoVZcqboSB4OpUb2vb5Sd4fOeKh02E6tdMyh1FXB1VHR aQhtL2APigu3dZ/um4jRKr2e6sRnjbbmG4UFstcNUrKQdAZte0dZl47TUlmE0W7E p+2xnl7UZjOshMhUkFuuyZHlXpQrrJ6dooEKmNZ2oqmtZXwqjdJoO+5kowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPMYwNL4owZtXYmos6Had5hu+SwyMB8GA1UdIwQY MBaAFFLG3RcZ4oT/XHB/gSLo7Q2Hla89MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXNiZEZ4bmloUDljY0gtQkl1anREWWVWcnowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8xMGIyOGUtZjkyOC00YTMwLTk0ZjMt NjlkNDA2ZTE4NjUzLzEvOHhqQTB2aWpCbTFkaWFpem9kcDNtRzc1TERJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8xMGIyOGUtZjkyOC00YTMwLTk0ZjMtNjlkNDA2ZTE4NjUz LzEvVXNiZEZ4bmloUDljY0gtQkl1anREWWVWcnowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue27MA0G CSqGSIb3DQEBCwUAA4IBAQAb4ZNxda0BAVqITRSR+Z6ROmGjW7LG7pu7s9JseuPq vxiJQlZa6iE17GuMCfr0FIlTwOAMYizGnR3Q3iMSM88L6AM4HuAFbgAhpot2Hod3 RytDDpDUfrwm7YNY+NDvLWIiQ3XK1Jnxd8loByFTrsisUORgdsaGQYmrEXWUFSrx rAReejdaNb1VXa37LSBqnAFClZELIltANjLi/Y7u7B43umB77SIcvJRSmYHwo1VY m9Uj7oOm5/L86TRmQNF8tDd86edkej5LrV9bXOlhy0q8hzCA+L8+zjntX+PqyPJp l4Zg58dYbBIld5kRKgX023rvbWac4b30CLrs9nwEWw4n -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:10 2026 by rpki-client