This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/8lfjU-BPteTsUKnjF-BU5-vFBnY.roa File: 8lfjU-BPteTsUKnjF-BU5-vFBnY.roa (raw, json) Hash identifier: erPkVQ38GfwjMSfkIReZweC9klnYFhEEbjEGABAIbfQ= Subject key identifier: F2:57:E3:53:E0:4F:B5:E4:EC:50:A9:E3:17:E0:54:E7:EB:C5:06:76 Certificate issuer: /CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378 Certificate serial: 019B7F84B78F12E7581A73C3CC4839BD8BE8 Authority key identifier: 7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/8lfjU-BPteTsUKnjF-BU5-vFBnY.roa Signing time: Fri 02 Jan 2026 16:22:42 +0000 ROA not before: Fri 02 Jan 2026 16:22:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28721 IP address blocks: 185.88.128.0/24 maxlen: 24 185.88.130.0/24 maxlen: 24 194.149.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b7:8f:12:e7:58:1a:73:c3:cc:48:39:bd:8b:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378 Validity Not Before: Jan 2 16:22:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f257e353e04fb5e4ec50a9e317e054e7ebc50676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9f:b6:3f:c5:e4:74:b3:ec:6c:73:54:ea:95: 14:4e:72:0a:68:00:e8:9e:b4:19:3f:3a:3a:30:64: 0e:2f:c8:2e:b4:72:33:79:9c:7f:07:18:c7:3a:b3: 7f:50:f1:3b:51:0b:12:c0:d1:73:33:9d:b9:60:07: 71:79:95:59:23:db:19:4f:e9:8b:35:a4:da:96:d8: a1:a4:3d:81:35:cd:b6:cf:fb:dc:b6:25:01:10:e5: 9e:4d:39:d5:4e:33:5e:e2:11:51:c9:52:11:90:85: 51:d1:95:00:d4:68:8f:e0:e6:bc:90:9f:07:44:e4: dc:d0:f1:7e:9e:bb:d9:7e:d6:4a:8f:82:5a:0f:8a: 75:cd:95:f8:26:95:1b:e9:24:5a:78:3e:be:13:54: 2d:91:e0:9a:f2:63:6d:04:1d:3d:90:db:9e:db:55: 46:74:4e:90:49:73:bb:6d:80:49:75:11:29:dd:a5: 28:57:98:f4:5b:f6:b6:b4:6e:39:97:c1:e7:27:9b: f6:1e:95:31:da:c6:c7:0d:5d:6b:30:e2:37:42:41: 7a:10:f4:e4:f5:8c:4b:55:29:eb:d0:93:b8:de:b5: 0b:2d:5c:47:70:41:4c:eb:2b:ff:36:a8:a6:34:fe: 40:1b:3a:77:f2:02:7f:68:d0:6f:41:80:22:26:95: 3e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:57:E3:53:E0:4F:B5:E4:EC:50:A9:E3:17:E0:54:E7:EB:C5:06:76 X509v3 Authority Key Identifier: keyid:7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/8lfjU-BPteTsUKnjF-BU5-vFBnY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.88.128.0/24 185.88.130.0/24 194.149.245.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:e8:ab:92:ce:d1:cd:06:03:6b:ed:9c:45:b1:84:d7:8b:b1: df:aa:3e:04:fb:97:7d:26:8b:71:b6:71:c3:e4:22:15:c5:d0: d1:0a:7a:9d:38:c0:f9:4a:7a:5f:a2:b1:77:af:7c:16:e5:66: 9a:4d:0b:fc:5e:78:0f:0f:8b:fd:3f:5e:6c:fa:8d:6c:dd:ba: 25:5e:6a:d8:d8:b4:34:03:26:64:1b:15:30:c2:d8:e9:ae:bc: 59:18:98:77:d7:ca:ee:1c:30:7c:18:d1:3e:ea:fe:43:32:eb: 4a:ee:42:42:0b:2d:7c:db:93:3c:97:9e:b4:1a:e7:d8:f8:dd: 46:7f:32:37:6c:2f:16:ea:22:18:69:20:9c:00:72:fa:3f:c9: f1:e3:fd:a1:21:c8:7a:6c:09:38:6b:30:9c:a6:bf:61:c4:4a: 3a:cd:98:9c:d2:cc:5b:89:45:6b:52:21:4b:3d:18:a8:bc:e0: d6:6b:02:94:8e:d1:79:d1:bf:e4:e1:8b:41:c1:19:f4:3e:87: c1:2a:9e:3d:04:a3:76:cf:ce:19:d1:a9:6f:6a:6a:97:f1:bf: dc:2e:9a:4a:77:5e:71:7f:cc:35:67:3e:a5:36:f5:db:ab:ee: 4c:ee:ae:a7:9c:ad:99:58:e9:8a:9b:b4:d6:b0:46:bc:36:60: ee:7f:ee:49 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hLePEudYGnPDzEg5vYvoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhZWYwNjllN2UzZWQ1YmY3MGY2ODJjZTQwYzU4MTBmZjNl NWUzNzgwHhcNMjYwMTAyMTYyMjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjU3ZTM1M2UwNGZiNWU0ZWM1MGE5ZTMxN2UwNTRlN2ViYzUwNjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ+2P8XkdLPsbHNU6pUUTnIKaADo nrQZPzo6MGQOL8gutHIzeZx/BxjHOrN/UPE7UQsSwNFzM525YAdxeZVZI9sZT+mL NaTaltihpD2BNc22z/vctiUBEOWeTTnVTjNe4hFRyVIRkIVR0ZUA1GiP4Oa8kJ8H ROTc0PF+nrvZftZKj4JaD4p1zZX4JpUb6SRaeD6+E1QtkeCa8mNtBB09kNue21VG dE6QSXO7bYBJdREp3aUoV5j0W/a2tG45l8HnJ5v2HpUx2sbHDV1rMOI3QkF6EPTk 9YxLVSnr0JO43rULLVxHcEFM6yv/NqimNP5AGzp38gJ/aNBvQYAiJpU+nQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPJX41PgT7Xk7FCp4xfgVOfrxQZ2MB8GA1UdIwQY MBaAFHrvBp5+PtW/cPaCzkDFgQ/z5eN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXU4R25uNC0xYjl3OW9MT1FNV0JEX1BsNDNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9jMGJiNTItNzBkZS00YWYwLWE5ZmIt OTAwMDM0ZjAwZDllLzEvOGxmalUtQlB0ZVRzVUtuakYtQlU1LXZGQm5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9jMGJiNTItNzBkZS00YWYwLWE5ZmItOTAwMDM0ZjAwZDll LzEvZXU4R25uNC0xYjl3OW9MT1FNV0JEX1BsNDNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuViAAwQA uViCAwQAwpX1MA0GCSqGSIb3DQEBCwUAA4IBAQCe6KuSztHNBgNr7ZxFsYTXi7Hf qj4E+5d9JotxtnHD5CIVxdDRCnqdOMD5SnpforF3r3wW5WaaTQv8XngPD4v9P15s +o1s3bolXmrY2LQ0AyZkGxUwwtjprrxZGJh318ruHDB8GNE+6v5DMutK7kJCCy18 25M8l560GufY+N1GfzI3bC8W6iIYaSCcAHL6P8nx4/2hIch6bAk4azCcpr9hxEo6 zZic0sxbiUVrUiFLPRiovODWawKUjtF50b/k4YtBwRn0PofBKp49BKN2z84Z0alv amqX8b/cLppKd15xf8w1Zz6lNvXbq+5M7q6nnK2ZWOmKm7TWsEa8NmDuf+5J -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:57 2026 by rpki-client