This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/_x8j518GtOzZKIwSFjgw77WJ0cg.roa File: _x8j518GtOzZKIwSFjgw77WJ0cg.roa (raw, json) Hash identifier: qLLB1jWYWXmu3/lWGQcppyz40ROIJakXXeLah7poVjw= Subject key identifier: FF:1F:23:E7:5F:06:B4:EC:D9:28:8C:12:16:38:30:EF:B5:89:D1:C8 Certificate issuer: /CN=6fdbbe7e978029c6ceaa557b4a76da68074311b1 Certificate serial: 019B7910EBAD02D6CC5ACE87B276961637E1 Authority key identifier: 6F:DB:BE:7E:97:80:29:C6:CE:AA:55:7B:4A:76:DA:68:07:43:11:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/_x8j518GtOzZKIwSFjgw77WJ0cg.roa Signing time: Thu 01 Jan 2026 10:18:30 +0000 ROA not before: Thu 01 Jan 2026 10:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206251 IP address blocks: 185.191.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:eb:ad:02:d6:cc:5a:ce:87:b2:76:96:16:37:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fdbbe7e978029c6ceaa557b4a76da68074311b1 Validity Not Before: Jan 1 10:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff1f23e75f06b4ecd9288c12163830efb589d1c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6d:79:8f:9d:bf:08:dd:da:32:c4:95:47:de: a7:e8:e1:ab:57:a0:8b:02:45:05:2a:4d:6f:e0:a9: 7e:b5:11:6e:dc:d6:a6:e3:7a:8d:db:89:74:3e:cd: c6:a4:a6:d8:52:f0:9c:03:87:11:ce:0a:ac:83:27: 35:12:93:61:cf:48:9b:3e:9c:6e:93:82:0e:d6:55: db:78:c5:ce:c7:35:0e:21:0b:42:01:53:9e:40:65: b8:66:4b:55:82:76:d5:d0:2e:e5:e1:7e:ea:10:61: ea:54:dc:d9:0f:44:70:cc:89:ad:c3:96:c2:ad:37: 7b:ec:7d:fb:7d:66:6d:fb:fe:b2:8e:90:66:6e:15: a7:8e:a5:cc:1d:02:c0:a0:bc:c9:fa:bf:a9:97:f5: 90:39:b4:c8:77:ab:e4:3e:22:c2:4c:95:f3:17:b7: 8b:9c:1e:89:41:fb:56:d9:83:f8:15:e5:d5:c4:60: dc:1c:c1:b8:a7:ee:11:f3:88:56:2c:67:23:b6:f1: 2e:6d:c9:bf:77:95:00:af:41:c4:94:2e:98:13:eb: a2:66:9b:d2:f7:c7:76:ea:4a:40:27:de:99:a4:11: d9:24:db:1a:c6:04:4c:45:34:8d:5a:94:41:0b:2a: 65:3e:1a:7a:c2:3e:e2:86:c8:8f:af:f3:bc:87:e9: ae:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:1F:23:E7:5F:06:B4:EC:D9:28:8C:12:16:38:30:EF:B5:89:D1:C8 X509v3 Authority Key Identifier: keyid:6F:DB:BE:7E:97:80:29:C6:CE:AA:55:7B:4A:76:DA:68:07:43:11:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/_x8j518GtOzZKIwSFjgw77WJ0cg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.191.244.0/23 Signature Algorithm: sha256WithRSAEncryption 23:83:91:fb:3a:1d:75:99:e7:7d:b2:65:74:ed:2e:6d:ec:ef: 3a:91:9c:cc:59:c7:5b:c0:01:98:70:83:b2:2f:23:6b:98:ba: 01:fa:cc:49:96:2f:6b:b8:3c:73:8b:c9:bf:3b:1a:62:33:1a: ff:26:de:a9:d5:d9:0b:42:f8:20:de:2f:00:3b:51:39:3f:0f: 50:7f:24:70:7c:5a:b0:8b:70:c1:10:81:f4:24:15:05:df:97: ec:57:20:e9:86:5e:3f:61:42:ef:ba:74:23:35:81:e5:4b:a0: ec:f8:12:c6:69:b5:77:7a:ad:40:40:d5:b0:38:0a:2b:d9:d3: 91:7a:16:fc:c9:db:c4:b5:c7:b9:97:db:7a:36:da:2a:42:50: 94:eb:29:fc:fd:1e:d5:fd:06:e3:ab:64:dd:cc:c4:55:d1:d2: e6:68:5f:59:52:7c:71:10:75:57:6b:57:36:22:18:a5:1f:b0: 19:63:47:cc:29:91:ac:a0:fd:27:ba:7d:4e:20:73:49:e0:fa: 00:86:81:1d:37:80:67:73:53:6e:c1:d8:a8:b9:9e:75:23:5c: f5:2d:73:fa:1c:c0:49:6c:b5:9e:75:ea:5e:f5:7d:89:4d:6b: 9e:2c:4f:97:fa:79:cc:87:02:42:a3:e3:43:b4:e6:a5:83:6b: 15:42:0a:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EOutAtbMWs6HsnaWFjfhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZGJiZTdlOTc4MDI5YzZjZWFhNTU3YjRhNzZkYTY4MDc0 MzExYjEwHhcNMjYwMTAxMTAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjFmMjNlNzVmMDZiNGVjZDkyODhjMTIxNjM4MzBlZmI1ODlkMWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG15j52/CN3aMsSVR96n6OGrV6CL AkUFKk1v4Kl+tRFu3Nam43qN24l0Ps3GpKbYUvCcA4cRzgqsgyc1EpNhz0ibPpxu k4IO1lXbeMXOxzUOIQtCAVOeQGW4ZktVgnbV0C7l4X7qEGHqVNzZD0RwzImtw5bC rTd77H37fWZt+/6yjpBmbhWnjqXMHQLAoLzJ+r+pl/WQObTId6vkPiLCTJXzF7eL nB6JQftW2YP4FeXVxGDcHMG4p+4R84hWLGcjtvEubcm/d5UAr0HElC6YE+uiZpvS 98d26kpAJ96ZpBHZJNsaxgRMRTSNWpRBCyplPhp6wj7ihsiPr/O8h+muNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP8fI+dfBrTs2SiMEhY4MO+1idHIMB8GA1UdIwQY MBaAFG/bvn6XgCnGzqpVe0p22mgHQxGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjl1LWZwZUFLY2JPcWxWN1NuYmFhQWRERWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83MmE0ZTMtZjc5My00ZjlhLWJhNGUt MDU5MDM5NGEyZWZhLzEvX3g4ajUxOEd0T3paS0l3U0ZqZ3c3N1dKMGNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS83MmE0ZTMtZjc5My00ZjlhLWJhNGUtMDU5MDM5NGEyZWZh LzEvYjl1LWZwZUFLY2JPcWxWN1NuYmFhQWRERWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBub/0MA0G CSqGSIb3DQEBCwUAA4IBAQAjg5H7Oh11med9smV07S5t7O86kZzMWcdbwAGYcIOy LyNrmLoB+sxJli9ruDxzi8m/OxpiMxr/Jt6p1dkLQvgg3i8AO1E5Pw9QfyRwfFqw i3DBEIH0JBUF35fsVyDphl4/YULvunQjNYHlS6Ds+BLGabV3eq1AQNWwOAor2dOR ehb8ydvEtce5l9t6NtoqQlCU6yn8/R7V/Qbjq2TdzMRV0dLmaF9ZUnxxEHVXa1c2 IhilH7AZY0fMKZGsoP0nun1OIHNJ4PoAhoEdN4Bnc1NuwdiouZ51I1z1LXP6HMBJ bLWedepe9X2JTWueLE+X+nnMhwJCo+NDtOalg2sVQgrI -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:10 2026 by rpki-client