This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/PP8v4ZF9LqDHcTW_KE_ttdsGemE.roa File: PP8v4ZF9LqDHcTW_KE_ttdsGemE.roa (raw, json) Hash identifier: WpVmL0psb7bfXQaqzyLO36WcvKirINpjSx0F9NsCq+M= Subject key identifier: 3C:FF:2F:E1:91:7D:2E:A0:C7:71:35:BF:28:4F:ED:B5:DB:06:7A:61 Certificate issuer: /CN=b06f4040491a656ff7526d2f17611b0d68acbd0c Certificate serial: 019B7B36990B232777DCED326BCEE418D790 Authority key identifier: B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/PP8v4ZF9LqDHcTW_KE_ttdsGemE.roa Signing time: Thu 01 Jan 2026 20:18:54 +0000 ROA not before: Thu 01 Jan 2026 20:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204996 IP address blocks: 45.67.8.0/22 maxlen: 22 45.67.8.0/24 maxlen: 24 45.67.9.0/24 maxlen: 24 185.170.248.0/22 maxlen: 24 185.170.248.0/23 maxlen: 23 185.170.248.0/24 maxlen: 24 185.170.249.0/24 maxlen: 24 185.170.250.0/23 maxlen: 23 185.170.250.0/24 maxlen: 24 185.170.251.0/24 maxlen: 24 193.30.134.0/24 maxlen: 24 193.30.162.0/24 maxlen: 24 193.30.165.0/24 maxlen: 24 193.30.166.0/24 maxlen: 24 2a0a:ed00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.crl rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:99:0b:23:27:77:dc:ed:32:6b:ce:e4:18:d7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b06f4040491a656ff7526d2f17611b0d68acbd0c Validity Not Before: Jan 1 20:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cff2fe1917d2ea0c77135bf284fedb5db067a61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:58:cb:18:0c:a2:fa:52:ef:d5:8f:f8:a7:ee: f6:63:4d:89:da:29:c5:30:c0:a6:11:d0:1c:86:57: b8:61:e4:8b:e7:1d:c6:d9:09:f6:5c:ca:29:73:cd: dc:c8:d5:d5:ec:22:81:83:41:bc:d3:ce:bf:60:10: 11:08:12:45:f4:22:47:ef:5a:60:6e:78:07:43:65: ec:76:89:26:e8:cc:12:4a:46:d1:da:9f:4e:b0:78: 9c:37:af:10:97:a3:55:a6:03:13:9f:f6:cc:d8:44: 3b:7e:a0:78:82:9f:c2:5a:e3:27:d2:40:04:df:7f: be:01:05:f4:28:09:db:c6:f0:20:97:35:d4:e0:19: 34:7c:20:bb:bb:52:b7:75:1b:60:52:61:73:fb:eb: 4d:8a:c9:bd:19:7a:23:cc:d3:a5:e3:92:de:23:0a: 55:a0:45:40:14:16:1d:99:0d:3a:1a:16:11:d2:f0: a4:3f:16:be:8e:1e:03:df:20:aa:0b:1d:e0:3a:d6: a1:31:7d:9e:40:ed:54:a5:bd:90:10:a5:48:d2:10: 05:67:7d:35:b0:a3:c9:87:e8:92:56:8f:9d:e4:7f: c9:f5:8a:a2:33:ec:c1:8e:ad:15:fc:6c:e8:0a:4a: 5b:b4:0a:c0:81:f4:1c:74:63:ed:da:33:c5:52:ca: c4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:FF:2F:E1:91:7D:2E:A0:C7:71:35:BF:28:4F:ED:B5:DB:06:7A:61 X509v3 Authority Key Identifier: keyid:B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/PP8v4ZF9LqDHcTW_KE_ttdsGemE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.8.0/22 185.170.248.0/22 193.30.134.0/24 193.30.162.0/24 193.30.165.0-193.30.166.255 IPv6: 2a0a:ed00::/29 Signature Algorithm: sha256WithRSAEncryption 47:81:fd:49:d2:96:4c:42:e6:56:31:2c:9e:5d:c1:79:c4:59: 69:fb:93:93:4b:76:c7:6b:ca:25:70:83:e6:03:22:50:95:99: f9:0e:54:1b:bb:3b:79:6d:71:58:f9:33:6a:b7:d3:0b:83:97: be:a2:0d:65:92:73:da:7a:a1:42:4e:22:30:9d:06:77:52:ab: f6:fa:19:27:e5:88:40:4a:91:66:6a:98:20:a4:88:18:73:dd: ca:86:a0:bf:ac:c1:5a:e3:aa:e3:74:e2:49:72:35:c2:a4:ca: e9:c5:79:54:42:90:68:a9:80:c6:34:03:c4:de:fe:8b:3c:46: 82:24:33:52:62:97:2d:e9:6a:ab:44:9d:cc:58:33:15:04:c0: 33:0e:07:24:c5:8a:19:2b:59:15:cf:93:f7:45:54:c9:13:12: 5e:74:5e:2f:0a:f4:11:58:78:55:26:38:14:26:15:11:38:47: 17:3f:86:02:18:c9:1f:7a:96:64:0a:92:9c:20:a7:96:24:94: e4:68:95:f1:b1:3c:0d:57:18:fd:a0:96:0e:62:21:e3:b2:8d: 24:a3:ea:e0:e0:c4:20:ee:fc:70:87:8e:65:53:ac:52:c6:b9: d8:f4:41:ac:f4:37:45:ec:4d:62:92:b8:02:d3:a9:9a:90:00: 22:43:0f:ea -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt7NpkLIyd33O0ya87kGNeQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNmY0MDQwNDkxYTY1NmZmNzUyNmQyZjE3NjExYjBkNjhh Y2JkMGMwHhcNMjYwMTAxMjAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2ZmMmZlMTkxN2QyZWEwYzc3MTM1YmYyODRmZWRiNWRiMDY3YTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FjLGAyi+lLv1Y/4p+72Y02J2inF MMCmEdAchle4YeSL5x3G2Qn2XMopc83cyNXV7CKBg0G8086/YBARCBJF9CJH71pg bngHQ2Xsdokm6MwSSkbR2p9OsHicN68Ql6NVpgMTn/bM2EQ7fqB4gp/CWuMn0kAE 33++AQX0KAnbxvAglzXU4Bk0fCC7u1K3dRtgUmFz++tNism9GXojzNOl45LeIwpV oEVAFBYdmQ06GhYR0vCkPxa+jh4D3yCqCx3gOtahMX2eQO1Upb2QEKVI0hAFZ301 sKPJh+iSVo+d5H/J9YqiM+zBjq0V/GzoCkpbtArAgfQcdGPt2jPFUsrESwIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFDz/L+GRfS6gx3E1vyhP7bXbBnphMB8GA1UdIwQY MBaAFLBvQEBJGmVv91JtLxdhGw1orL0MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0c5QVFFa2FaV18zVW0wdkYyRWJEV2lzdlF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9jZTBiMjEtZDY1Yy00MmU2LTg3NGIt ZjRjYjg2N2Y5MGQ4LzEvUFA4djRaRjlMcURIY1RXX0tFX3R0ZHNHZW1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9jZTBiMjEtZDY1Yy00MmU2LTg3NGItZjRjYjg2N2Y5MGQ4 LzEvc0c5QVFFa2FaV18zVW0wdkYyRWJEV2lzdlF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQCLUMIAwQC uar4AwQAwR6GAwQAwR6iMAwDBADBHqUDBADBHqYwDQQCAAIwBwMFAyoK7QAwDQYJ KoZIhvcNAQELBQADggEBAEeB/UnSlkxC5lYxLJ5dwXnEWWn7k5NLdsdryiVwg+YD IlCVmfkOVBu7O3ltcVj5M2q30wuDl76iDWWSc9p6oUJOIjCdBndSq/b6GSfliEBK kWZqmCCkiBhz3cqGoL+swVrjquN04klyNcKkyunFeVRCkGipgMY0A8Te/os8RoIk M1Jily3paqtEncxYMxUEwDMOByTFihkrWRXPk/dFVMkTEl50Xi8K9BFYeFUmOBQm FRE4Rxc/hgIYyR96lmQKkpwgp5YklORolfGxPA1XGP2glg5iIeOyjSSj6uDgxCDu /HCHjmVTrFLGudj0Qaz0N0XsTWKSuALTqZqQACJDD+o= -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:37 2026 by rpki-client