This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/h8MAjW2nwR1TuDpY3gaR4GIp5Is.roa File: h8MAjW2nwR1TuDpY3gaR4GIp5Is.roa (raw, json) Hash identifier: YMOvJ9hakU4xTrKD5f+aHfr6VChVy5zYjPbZPORV+p4= Subject key identifier: 87:C3:00:8D:6D:A7:C1:1D:53:B8:3A:58:DE:06:91:E0:62:29:E4:8B Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af Certificate serial: 019B783517B5295B5AFEC10EEA7D2579A45F Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/h8MAjW2nwR1TuDpY3gaR4GIp5Is.roa Signing time: Thu 01 Jan 2026 06:18:23 +0000 ROA not before: Thu 01 Jan 2026 06:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209014 IP address blocks: 185.245.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:17:b5:29:5b:5a:fe:c1:0e:ea:7d:25:79:a4:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af Validity Not Before: Jan 1 06:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87c3008d6da7c11d53b83a58de0691e06229e48b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:54:13:3d:7d:a3:0b:69:43:a5:c3:86:a2:23: 94:61:57:5c:a0:a3:3d:4f:ed:ab:01:18:e5:ec:29: 52:ba:d3:f1:48:ab:b5:94:0b:de:a7:4c:60:47:fc: 15:5d:8c:ec:3e:dc:06:9c:d7:2b:d1:c7:87:48:49: 5b:51:8c:de:40:aa:a3:ab:4d:83:86:4b:14:33:b2: 57:d4:95:9c:e5:73:31:29:9e:62:df:17:2b:1a:1f: 97:b2:1c:f4:57:da:69:fd:62:3b:b4:82:e2:b5:02: 1f:7a:6d:8f:23:cf:cd:b1:64:05:71:8c:b0:b4:7e: dc:b2:c1:e9:48:c6:7c:00:ef:1c:90:ef:18:23:ce: 73:ff:04:10:39:d7:29:a8:44:57:42:88:52:e2:fa: 39:b2:ef:3f:21:0f:48:80:78:9f:84:7d:3b:85:d6: e5:20:e0:a1:80:60:c3:d6:bf:ab:2a:70:e7:a5:58: 47:ed:5a:f4:fd:90:15:11:16:7b:49:a4:96:6c:b5: bb:2f:32:b8:95:a3:a3:36:d8:6f:0b:bd:e9:23:70: 53:0c:36:bf:53:fd:5e:fd:1f:20:32:6a:2c:d7:f4: e8:fc:93:47:c9:5c:6c:c3:b8:47:0a:e6:c7:7a:fb: c7:86:21:19:e0:eb:5b:ac:93:1d:12:8b:c0:3d:5e: b0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C3:00:8D:6D:A7:C1:1D:53:B8:3A:58:DE:06:91:E0:62:29:E4:8B X509v3 Authority Key Identifier: keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/h8MAjW2nwR1TuDpY3gaR4GIp5Is.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.245.58.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:43:ef:67:33:35:b9:96:3c:e0:6b:ad:a4:13:eb:a8:7e:bc: c7:23:05:73:27:9b:52:49:c8:cb:f8:75:e6:a6:87:7b:f9:70: 81:4f:ec:48:e9:f4:d3:91:de:ab:41:bb:e9:1d:3c:55:0e:93: bd:d7:63:70:6d:0a:38:b9:e3:ed:7d:cd:f9:61:c8:c7:f5:dd: 50:8c:d3:c7:d1:80:d5:b4:35:5e:6a:09:d0:8b:df:bb:c4:82: 5c:6d:c8:66:c5:e6:38:de:e6:36:14:86:19:ce:de:84:76:29: 16:4f:88:02:2b:da:12:56:29:db:6b:09:8e:26:40:84:7c:98: d7:41:4e:43:a1:4b:32:81:0f:24:8d:9d:35:47:20:f7:e7:ba: dc:ba:52:de:31:a5:b8:21:a0:dd:9f:e4:aa:79:dc:90:5a:43: a6:6f:6c:6f:6d:a2:5c:72:79:1d:30:18:1d:94:74:2c:37:71: da:4e:b4:03:59:68:c3:78:64:c2:c6:6d:7d:f0:79:5e:7e:c2: 98:9e:5a:3d:ff:94:73:10:74:37:4c:fd:28:a6:5c:5c:ae:7e: b8:51:cd:47:8a:f5:06:4e:19:00:dc:51:6c:97:6f:6d:fa:c4: e6:de:dc:ba:5e:b0:b5:62:c9:bb:8f:22:f9:9b:fc:25:e5:e8: 90:28:53:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NRe1KVta/sEO6n0leaRfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMzllNmJlNDBkODAxMjg4OTZjY2QxMzFmNjVhNTVhZDk4 YTQwYWYwHhcNMjYwMTAxMDYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2MzMDA4ZDZkYTdjMTFkNTNiODNhNThkZTA2OTFlMDYyMjllNDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlQTPX2jC2lDpcOGoiOUYVdcoKM9 T+2rARjl7ClSutPxSKu1lAvep0xgR/wVXYzsPtwGnNcr0ceHSElbUYzeQKqjq02D hksUM7JX1JWc5XMxKZ5i3xcrGh+Xshz0V9pp/WI7tILitQIfem2PI8/NsWQFcYyw tH7cssHpSMZ8AO8ckO8YI85z/wQQOdcpqERXQohS4vo5su8/IQ9IgHifhH07hdbl IOChgGDD1r+rKnDnpVhH7Vr0/ZAVERZ7SaSWbLW7LzK4laOjNthvC73pI3BTDDa/ U/1e/R8gMmos1/To/JNHyVxsw7hHCubHevvHhiEZ4OtbrJMdEovAPV6wSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIfDAI1tp8EdU7g6WN4GkeBiKeSLMB8GA1UdIwQY MBaAFMw55r5A2AEoiWzNEx9lpVrZikCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekRubXZrRFlBU2lKYk0wVEgyV2xXdG1LUUs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iMmZmOTEtZDRjZS00MDViLWJlYmYt NjA5ZDhmNTY1ZmZjLzEvaDhNQWpXMm53UjFUdURwWTNnYVI0R0lwNUlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9iMmZmOTEtZDRjZS00MDViLWJlYmYtNjA5ZDhmNTY1ZmZj LzEvekRubXZrRFlBU2lKYk0wVEgyV2xXdG1LUUs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufU6MA0G CSqGSIb3DQEBCwUAA4IBAQCaQ+9nMzW5ljzga62kE+uofrzHIwVzJ5tSScjL+HXm pod7+XCBT+xI6fTTkd6rQbvpHTxVDpO912NwbQo4uePtfc35YcjH9d1QjNPH0YDV tDVeagnQi9+7xIJcbchmxeY43uY2FIYZzt6EdikWT4gCK9oSVinbawmOJkCEfJjX QU5DoUsygQ8kjZ01RyD357rculLeMaW4IaDdn+SqedyQWkOmb2xvbaJccnkdMBgd lHQsN3HaTrQDWWjDeGTCxm198HlefsKYnlo9/5RzEHQ3TP0oplxcrn64Uc1HivUG ThkA3FFsl29t+sTm3ty6XrC1Ysm7jyL5m/wl5eiQKFOT -----END CERTIFICATE-----Generated at Fri Jan 2 11:34:18 2026 by rpki-client