This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/8Qo74UQPSqvugCWFfb9DBf7wKqE.roa File: 8Qo74UQPSqvugCWFfb9DBf7wKqE.roa (raw, json) Hash identifier: M/pOvg/hdX2EdZ83UmfDv3mPILFnj+u5MLVly1CyGXs= Subject key identifier: F1:0A:3B:E1:44:0F:4A:AB:EE:80:25:85:7D:BF:43:05:FE:F0:2A:A1 Certificate issuer: /CN=772f7035c2893b28cd04fd1a9b3cacd2428c8dfd Certificate serial: 019B78A34BC0ED1B240420169FE8C48FFA0E Authority key identifier: 77:2F:70:35:C2:89:3B:28:CD:04:FD:1A:9B:3C:AC:D2:42:8C:8D:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy9wNcKJOyjNBP0amzys0kKMjf0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/8Qo74UQPSqvugCWFfb9DBf7wKqE.roa Signing time: Thu 01 Jan 2026 08:18:46 +0000 ROA not before: Thu 01 Jan 2026 08:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60277 IP address blocks: 185.32.252.0/22 maxlen: 22 185.111.112.0/22 maxlen: 22 185.190.204.0/22 maxlen: 22 193.57.206.0/23 maxlen: 23 193.57.216.0/23 maxlen: 23 2a00:ca20::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.crl rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.mft rsync://rpki.ripe.net/repository/DEFAULT/dy9wNcKJOyjNBP0amzys0kKMjf0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:4b:c0:ed:1b:24:04:20:16:9f:e8:c4:8f:fa:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=772f7035c2893b28cd04fd1a9b3cacd2428c8dfd Validity Not Before: Jan 1 08:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f10a3be1440f4aabee8025857dbf4305fef02aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d0:4e:2c:ac:24:95:c2:53:95:41:b4:cb:ef: 57:2f:05:a5:4e:f1:be:8b:95:a8:51:cc:d7:42:d9: 35:5a:ec:07:c3:ab:7e:8e:a9:a6:e7:1f:c0:40:05: f4:1f:e9:77:21:05:eb:f7:0b:01:48:6d:b2:e2:b1: 20:19:f3:ca:06:a0:36:cd:57:32:f5:d4:88:92:86: 14:99:45:92:8d:0e:bc:34:80:2e:72:db:cf:22:a5: 68:94:91:d9:f1:07:c0:ee:73:25:f3:55:ae:dd:56: a2:5d:c2:29:15:5f:52:da:98:6c:f8:76:58:39:7f: 3f:c7:58:9a:95:31:e5:e1:99:3d:4f:08:62:bc:04: 70:9c:18:1b:6a:91:4f:be:a5:45:30:c9:1c:fc:ef: 26:3a:d8:3e:64:59:43:bb:85:2b:d6:7c:aa:62:9a: ac:bb:33:27:21:46:66:a8:73:4f:19:15:76:fb:c6: d0:7a:4e:60:f9:30:97:35:c0:1e:96:71:0a:8f:e0: 5c:d3:e9:ee:0c:8b:b2:72:02:98:87:83:4a:d3:02: 06:37:b5:9b:d7:ae:d1:25:f4:ea:eb:6b:3f:cb:2e: f7:5d:af:a1:4a:bc:e8:cd:40:ff:1e:a9:6b:df:06: ac:e2:32:37:d6:54:54:2f:bb:a5:79:e2:28:5b:ea: 12:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0A:3B:E1:44:0F:4A:AB:EE:80:25:85:7D:BF:43:05:FE:F0:2A:A1 X509v3 Authority Key Identifier: keyid:77:2F:70:35:C2:89:3B:28:CD:04:FD:1A:9B:3C:AC:D2:42:8C:8D:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy9wNcKJOyjNBP0amzys0kKMjf0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/8Qo74UQPSqvugCWFfb9DBf7wKqE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.32.252.0/22 185.111.112.0/22 185.190.204.0/22 193.57.206.0/23 193.57.216.0/23 IPv6: 2a00:ca20::/29 Signature Algorithm: sha256WithRSAEncryption 09:52:44:93:4e:27:63:db:5a:fa:f3:74:63:61:26:58:89:24: ce:70:2a:1f:ea:1e:99:83:97:9e:36:89:7c:61:29:f7:cf:b0: 84:aa:4a:a0:a1:5b:fc:f7:8b:75:9d:a4:22:0e:97:48:05:3e: e6:8c:33:da:ec:1e:db:1e:05:fe:d0:ae:bb:fa:b9:e4:56:b4: 77:ad:a1:27:14:6e:f1:94:bb:a2:83:2f:59:1f:7d:56:95:1b: 8b:01:5f:b4:37:7a:1f:ed:c6:f7:ef:0b:6b:30:c7:39:5f:dd: 78:5b:e1:72:d1:64:17:00:55:39:12:0b:7f:d3:84:14:c0:35: cb:55:d8:0b:2f:4b:04:7c:6c:75:80:8e:2c:e7:4c:5a:93:f7: e1:b0:47:9f:4d:9e:f9:58:33:4a:6c:a2:16:1f:dc:e2:af:53: 73:40:d6:38:26:64:18:ec:17:c9:c9:5a:62:21:5b:ea:de:b7: b7:c1:12:50:30:1f:de:04:ae:2d:89:dc:2f:05:5b:ed:e2:32: 46:eb:e9:84:1b:5e:09:2a:33:34:c5:1a:e9:80:ba:cc:1c:1f: f1:0e:bb:88:7d:fb:02:2a:73:e4:8c:66:da:e6:bd:a7:10:37: 82:6c:d1:09:45:e5:56:3d:7e:f8:fd:f8:06:49:d5:65:62:e5: 98:12:2b:75 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt4o0vA7RskBCAWn+jEj/oOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MmY3MDM1YzI4OTNiMjhjZDA0ZmQxYTliM2NhY2QyNDI4 YzhkZmQwHhcNMjYwMTAxMDgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTBhM2JlMTQ0MGY0YWFiZWU4MDI1ODU3ZGJmNDMwNWZlZjAyYWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndBOLKwklcJTlUG0y+9XLwWlTvG+ i5WoUczXQtk1WuwHw6t+jqmm5x/AQAX0H+l3IQXr9wsBSG2y4rEgGfPKBqA2zVcy 9dSIkoYUmUWSjQ68NIAuctvPIqVolJHZ8QfA7nMl81Wu3VaiXcIpFV9S2phs+HZY OX8/x1ialTHl4Zk9TwhivARwnBgbapFPvqVFMMkc/O8mOtg+ZFlDu4Ur1nyqYpqs uzMnIUZmqHNPGRV2+8bQek5g+TCXNcAelnEKj+Bc0+nuDIuycgKYh4NK0wIGN7Wb 167RJfTq62s/yy73Xa+hSrzozUD/Hqlr3was4jI31lRUL7uleeIoW+oSvwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFPEKO+FED0qr7oAlhX2/QwX+8CqhMB8GA1UdIwQY MBaAFHcvcDXCiTsozQT9Gps8rNJCjI39MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHk5d05jS0pPeWpOQlAwYW16eXMwa0tNamYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80MWVhZTAtNmI3Mi00NjI0LTljMjQt ODMwMzVhZmU0YTM3LzEvOFFvNzRVUVBTcXZ1Z0NXRmZiOURCZjd3S3FFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi80MWVhZTAtNmI3Mi00NjI0LTljMjQtODMwMzVhZmU0YTM3 LzEvZHk5d05jS0pPeWpOQlAwYW16eXMwa0tNamYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCuSD8AwQC uW9wAwQCub7MAwQBwTnOAwQBwTnYMA0EAgACMAcDBQMqAMogMA0GCSqGSIb3DQEB CwUAA4IBAQAJUkSTTidj21r683RjYSZYiSTOcCof6h6Zg5eeNol8YSn3z7CEqkqg oVv894t1naQiDpdIBT7mjDPa7B7bHgX+0K67+rnkVrR3raEnFG7xlLuigy9ZH31W lRuLAV+0N3of7cb37wtrMMc5X914W+Fy0WQXAFU5Egt/04QUwDXLVdgLL0sEfGx1 gI4s50xak/fhsEefTZ75WDNKbKIWH9zir1NzQNY4JmQY7BfJyVpiIVvq3re3wRJQ MB/eBK4tidwvBVvt4jJG6+mEG14JKjM0xRrpgLrMHB/xDruIffsCKnPkjGba5r2n EDeCbNEJReVWPX74/fgGSdVlYuWYEit1 -----END CERTIFICATE-----Generated at Fri Jan 9 17:24:35 2026 by rpki-client