This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/z8VOUiSLPVMno5KoGBbOODeDDys.roa File: z8VOUiSLPVMno5KoGBbOODeDDys.roa (raw, json) Hash identifier: ReCSqOhvRxYoHh6okc3nEFEolgVxGfoS2RfPgFeXDJ8= Subject key identifier: CF:C5:4E:52:24:8B:3D:53:27:A3:92:A8:18:16:CE:38:37:83:0F:2B Certificate issuer: /CN=4a8095927ee57ccee256aa439f163686b58c570c Certificate serial: 019B7EA74AB74635DDD7953E54A59672AAFA Authority key identifier: 4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/z8VOUiSLPVMno5KoGBbOODeDDys.roa Signing time: Fri 02 Jan 2026 12:20:51 +0000 ROA not before: Fri 02 Jan 2026 12:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201160 IP address blocks: 185.29.192.0/24 maxlen: 24 185.29.193.0/24 maxlen: 24 185.29.194.0/24 maxlen: 24 185.29.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:4a:b7:46:35:dd:d7:95:3e:54:a5:96:72:aa:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a8095927ee57ccee256aa439f163686b58c570c Validity Not Before: Jan 2 12:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfc54e52248b3d5327a392a81816ce3837830f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fb:46:3a:5e:2f:35:f9:02:28:da:1b:af:d3: 97:b5:9b:c4:f7:3d:c0:ef:01:99:93:4d:cc:d7:5f: be:6b:8a:d6:a2:6c:13:1c:13:e0:23:ea:d8:55:b4: 18:6e:cd:10:68:c1:3c:35:f4:53:fe:1e:61:e7:a3: 31:03:91:60:38:5e:3b:ca:c1:62:57:9b:f2:8f:99: f1:27:4f:85:27:a4:00:b9:fb:9c:c1:28:f1:44:60: c7:14:2b:76:80:03:63:84:2b:42:61:67:36:27:77: 26:be:f3:07:bf:ec:68:de:d4:2e:5e:1f:05:3b:ce: 4f:d2:f4:7b:aa:25:cf:7f:a3:6c:90:95:a4:bd:5a: ee:df:5b:51:6b:87:42:fb:1f:c0:8b:3a:2f:b4:4d: 79:e8:0c:02:1e:4a:9f:07:ae:c4:35:69:2a:ab:fd: 48:c2:61:c5:c9:5e:2a:59:e8:d4:1e:4b:0f:78:30: 91:a9:88:42:81:e3:7d:95:c7:92:fd:99:15:48:89: 35:b5:c0:22:37:18:70:0c:86:1a:e0:a0:6f:19:69: da:1c:7c:6b:91:07:e8:96:92:20:66:f0:03:19:74: da:6d:57:3e:a0:94:5b:26:3c:8e:0f:05:13:4f:42: f1:52:38:ee:d0:e6:6c:9a:ff:14:80:73:17:02:f0: b1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C5:4E:52:24:8B:3D:53:27:A3:92:A8:18:16:CE:38:37:83:0F:2B X509v3 Authority Key Identifier: keyid:4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/z8VOUiSLPVMno5KoGBbOODeDDys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.29.192.0/22 Signature Algorithm: sha256WithRSAEncryption 55:3e:16:a5:9b:b2:08:19:f2:85:34:39:8b:54:bb:3d:e3:34: 8e:05:bf:c7:f9:4e:bb:5d:90:d7:b3:fe:d2:37:35:c6:1c:ed: 56:5c:e0:d7:ec:95:e1:e8:51:d4:65:b5:ca:97:56:4a:6e:3d: 81:9e:b0:e3:83:aa:e4:5f:78:87:de:4c:ad:d2:f5:b9:c7:75: ff:b7:43:77:a8:b6:16:5e:ab:03:40:90:e8:e5:0c:41:2a:c6: b7:62:38:2f:31:9f:06:df:99:6d:2b:d9:d5:95:a1:88:b5:84: 2b:2e:03:42:1f:8c:15:1e:d7:1c:60:82:5c:a3:5a:63:3d:5f: 0f:05:ec:84:68:54:a4:99:5b:24:26:6d:63:5a:ce:08:8a:d2: 3c:10:7b:92:30:73:fe:8a:46:90:fa:5c:ad:d3:03:87:d5:34: 2f:49:4b:06:ee:8e:c1:b9:3d:24:05:bd:38:a1:40:12:95:01: 54:3d:d4:e0:75:24:78:06:2e:a3:5e:07:64:8b:f5:df:ef:21: 9a:91:a0:1f:15:88:48:39:26:50:c3:8d:b4:2a:9d:7e:65:42: 8c:c7:ff:22:43:e8:44:b7:c4:3e:48:e8:e9:07:c0:26:17:db: c9:0b:2f:78:b8:db:39:b1:57:a2:22:63:35:81:fc:7a:80:70: 1a:0f:76:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p0q3RjXd15U+VKWWcqr6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhODA5NTkyN2VlNTdjY2VlMjU2YWE0MzlmMTYzNjg2YjU4 YzU3MGMwHhcNMjYwMTAyMTIyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmM1NGU1MjI0OGIzZDUzMjdhMzkyYTgxODE2Y2UzODM3ODMwZjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPtGOl4vNfkCKNobr9OXtZvE9z3A 7wGZk03M11++a4rWomwTHBPgI+rYVbQYbs0QaME8NfRT/h5h56MxA5FgOF47ysFi V5vyj5nxJ0+FJ6QAufucwSjxRGDHFCt2gANjhCtCYWc2J3cmvvMHv+xo3tQuXh8F O85P0vR7qiXPf6NskJWkvVru31tRa4dC+x/AizovtE156AwCHkqfB67ENWkqq/1I wmHFyV4qWejUHksPeDCRqYhCgeN9lceS/ZkVSIk1tcAiNxhwDIYa4KBvGWnaHHxr kQfolpIgZvADGXTabVc+oJRbJjyODwUTT0LxUjju0OZsmv8UgHMXAvCxYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM/FTlIkiz1TJ6OSqBgWzjg3gw8rMB8GA1UdIwQY MBaAFEqAlZJ+5XzO4laqQ58WNoa1jFcMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU29DVmtuN2xmTTdpVnFwRG54WTJocldNVnd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jMWUzYjQtMmQ2MS00NGNjLTkwODEt MGY5ZDQzZDg2NGJiLzEvejhWT1VpU0xQVk1ubzVLb0dCYk9PRGVERHlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9jMWUzYjQtMmQ2MS00NGNjLTkwODEtMGY5ZDQzZDg2NGJi LzEvU29DVmtuN2xmTTdpVnFwRG54WTJocldNVnd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuR3AMA0G CSqGSIb3DQEBCwUAA4IBAQBVPhalm7IIGfKFNDmLVLs94zSOBb/H+U67XZDXs/7S NzXGHO1WXODX7JXh6FHUZbXKl1ZKbj2BnrDjg6rkX3iH3kyt0vW5x3X/t0N3qLYW XqsDQJDo5QxBKsa3YjgvMZ8G35ltK9nVlaGItYQrLgNCH4wVHtccYIJco1pjPV8P BeyEaFSkmVskJm1jWs4IitI8EHuSMHP+ikaQ+lyt0wOH1TQvSUsG7o7BuT0kBb04 oUASlQFUPdTgdSR4Bi6jXgdki/Xf7yGakaAfFYhIOSZQw420Kp1+ZUKMx/8iQ+hE t8Q+SOjpB8AmF9vJCy94uNs5sVeiImM1gfx6gHAaD3Z6 -----END CERTIFICATE-----Generated at Wed Jan 21 17:15:39 2026 by rpki-client