This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/r8PbpDzHXgfJiNwt0p1njiTGzqA.roa File: r8PbpDzHXgfJiNwt0p1njiTGzqA.roa (raw, json) Hash identifier: +SJYxb1bGepByhIB3drzHoM1u1Z/gMv0EMWpc82/7BA= Subject key identifier: AF:C3:DB:A4:3C:C7:5E:07:C9:88:DC:2D:D2:9D:67:8E:24:C6:CE:A0 Certificate issuer: /CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56 Certificate serial: 019B7910B26B724EB9BFEDEB83BC5DE1EFA6 Authority key identifier: FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/r8PbpDzHXgfJiNwt0p1njiTGzqA.roa Signing time: Thu 01 Jan 2026 10:18:15 +0000 ROA not before: Thu 01 Jan 2026 10:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57494 IP address blocks: 91.199.149.0/24 maxlen: 24 185.133.43.0/24 maxlen: 24 185.135.80.0/22 maxlen: 22 185.175.157.0/24 maxlen: 24 185.177.216.0/24 maxlen: 24 185.177.217.0/24 maxlen: 24 185.177.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b2:6b:72:4e:b9:bf:ed:eb:83:bc:5d:e1:ef:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56 Validity Not Before: Jan 1 10:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afc3dba43cc75e07c988dc2dd29d678e24c6cea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:55:5a:c6:e6:c3:8b:1f:b7:f8:cc:11:43:4d: f9:ae:07:78:bd:7f:3f:09:08:dc:bc:e4:bc:51:a1: b3:94:a4:0e:16:ee:0f:87:0e:a1:32:13:a3:fd:76: f6:ac:a7:2b:3e:89:0f:38:8e:b2:de:7e:6f:6f:02: c5:84:e9:78:f7:6e:98:e2:a2:b8:61:a6:14:19:ff: 3a:c0:02:83:a4:e0:90:31:47:77:1a:af:f5:d1:ab: b7:3e:6f:c8:0c:23:28:63:57:20:d5:b0:34:77:50: 0e:ac:31:31:a6:0f:aa:16:81:5f:9a:07:00:80:76: 1c:ac:4b:33:ce:eb:ef:95:d4:b5:cf:72:33:81:7c: 06:09:7b:fc:b4:91:4d:75:b2:dc:9b:1a:fa:17:5f: 63:85:f3:25:89:37:64:04:20:54:7b:0e:39:84:c1: 6f:2d:a2:0f:79:72:c3:49:be:84:69:3a:52:e0:3c: 94:d5:fe:67:3d:d3:a6:5b:39:4f:a8:7a:7a:ff:a5: 22:a0:b5:0d:b1:93:1a:f2:be:1c:4d:d8:62:f0:eb: d2:4c:75:ad:90:f7:7d:00:d7:19:30:a2:29:48:0a: 48:d4:69:d5:6f:a7:1d:55:62:26:cb:f6:2f:80:24: 32:bc:d4:6d:45:e2:33:ca:4a:68:e1:fe:76:1b:c9: 37:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C3:DB:A4:3C:C7:5E:07:C9:88:DC:2D:D2:9D:67:8E:24:C6:CE:A0 X509v3 Authority Key Identifier: keyid:FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/r8PbpDzHXgfJiNwt0p1njiTGzqA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.149.0/24 185.133.43.0/24 185.135.80.0/22 185.175.157.0/24 185.177.216.0/22 Signature Algorithm: sha256WithRSAEncryption 57:4d:34:0d:0d:fb:07:59:97:99:06:6c:36:78:0f:6c:fa:19: 19:62:3b:d5:27:8c:ac:44:01:07:08:e0:6d:d1:1d:ed:5d:83: dc:21:88:1e:9f:79:60:57:74:38:ba:b7:e5:5e:92:77:df:05: 8b:e4:53:d4:a1:a9:94:ae:ea:55:a9:fe:85:24:1e:c3:15:36: 4d:a7:17:b7:d2:ba:20:df:7c:69:df:a7:15:72:c7:c3:6c:a0: 35:55:37:14:cf:3c:46:64:c2:37:39:49:13:0a:64:c6:1b:0e: bd:2f:56:97:12:12:48:e5:e4:26:19:92:eb:4c:6d:57:71:b6: 12:4d:5e:d2:2e:bd:a0:24:52:f2:92:21:ff:3d:d2:b7:c0:9d: e1:ac:6f:49:c5:2b:c7:9b:ce:08:4e:77:75:c9:0e:41:ec:ca: f9:8e:5a:7e:07:d0:11:3a:e3:52:15:48:21:f4:6d:38:31:59: 60:4d:8b:f1:6d:28:63:f5:8d:85:9a:f1:6b:8f:51:ce:40:9b: 4e:9b:05:5c:15:13:90:82:4e:f2:57:9e:6a:36:a0:9d:76:0b: b0:f5:14:0d:3a:c0:8a:fb:ff:8f:ee:43:1f:9b:df:3e:e6:c0: 33:ea:46:60:f1:d2:85:10:54:be:eb:70:0c:a1:e9:a4:4b:cc: 62:3c:a2:a7 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt5ELJrck65v+3rg7xd4e+mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYmI0OWU2ODgzMzVhYjE1OTNmOWQxMGUwMDZlZjVlOWJj OGJkNTYwHhcNMjYwMTAxMTAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmMzZGJhNDNjYzc1ZTA3Yzk4OGRjMmRkMjlkNjc4ZTI0YzZjZWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1VaxubDix+3+MwRQ035rgd4vX8/ CQjcvOS8UaGzlKQOFu4Phw6hMhOj/Xb2rKcrPokPOI6y3n5vbwLFhOl4926Y4qK4 YaYUGf86wAKDpOCQMUd3Gq/10au3Pm/IDCMoY1cg1bA0d1AOrDExpg+qFoFfmgcA gHYcrEszzuvvldS1z3IzgXwGCXv8tJFNdbLcmxr6F19jhfMliTdkBCBUew45hMFv LaIPeXLDSb6EaTpS4DyU1f5nPdOmWzlPqHp6/6UioLUNsZMa8r4cTdhi8OvSTHWt kPd9ANcZMKIpSApI1GnVb6cdVWImy/YvgCQyvNRtReIzykpo4f52G8k3awIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFK/D26Q8x14HyYjcLdKdZ44kxs6gMB8GA1UdIwQY MBaAFPq7SeaIM1qxWT+dEOAG716byL1WMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ydEo1b2d6V3JGWlA1MFE0QWJ2WHB2SXZWWS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvZDdhM2JhLTA3ZTUtNDFkNi04YzM5 LTU2YTU1YzQyZGU4OC8xL3I4UGJwRHpIWGdmSmlOd3QwcDFuamlUR3pxQS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMGYvZDdhM2JhLTA3ZTUtNDFkNi04YzM5LTU2YTU1YzQyZGU4 OC8xLzEtcnRKNW9neldyRlpQNTBRNEFidlhwdkl2VlkuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBABbx5UD BAC5hSsDBAK5h1ADBAC5r50DBAK5sdgwDQYJKoZIhvcNAQELBQADggEBAFdNNA0N +wdZl5kGbDZ4D2z6GRliO9UnjKxEAQcI4G3RHe1dg9whiB6feWBXdDi6t+Veknff BYvkU9ShqZSu6lWp/oUkHsMVNk2nF7fSuiDffGnfpxVyx8NsoDVVNxTPPEZkwjc5 SRMKZMYbDr0vVpcSEkjl5CYZkutMbVdxthJNXtIuvaAkUvKSIf890rfAneGsb0nF K8ebzghOd3XJDkHsyvmOWn4H0BE641IVSCH0bTgxWWBNi/FtKGP1jYWa8WuPUc5A m06bBVwVE5CCTvJXnmo2oJ12C7D1FA06wIr7/4/uQx+b3z7mwDPqRmDx0oUQVL7r cAyh6aRLzGI8oqc= -----END CERTIFICATE-----Generated at Wed Jan 21 16:59:34 2026 by rpki-client