This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/8D_ccDz42u65hn5tAyiWo2rvV-A.roa File: 8D_ccDz42u65hn5tAyiWo2rvV-A.roa (raw, json) Hash identifier: gCz0hnm5CuNzouguXR5BztNrJ9eKVm7fQbCynx2RDCw= Subject key identifier: F0:3F:DC:70:3C:F8:DA:EE:B9:86:7E:6D:03:28:96:A3:6A:EF:57:E0 Certificate issuer: /CN=3fac69adaf000dd77a4b001877c258a21d1ff6a0 Certificate serial: 019B7D5CEE541A521026607DC4CD60074B1C Authority key identifier: 3F:AC:69:AD:AF:00:0D:D7:7A:4B:00:18:77:C2:58:A2:1D:1F:F6:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xpra8ADdd6SwAYd8JYoh0f9qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/8D_ccDz42u65hn5tAyiWo2rvV-A.roa Signing time: Fri 02 Jan 2026 06:20:00 +0000 ROA not before: Fri 02 Jan 2026 06:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205556 IP address blocks: 185.213.180.0/22 maxlen: 22 185.213.180.0/24 maxlen: 24 185.213.181.0/24 maxlen: 24 185.213.182.0/24 maxlen: 24 185.213.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.crl rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft rsync://rpki.ripe.net/repository/DEFAULT/P6xpra8ADdd6SwAYd8JYoh0f9qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ee:54:1a:52:10:26:60:7d:c4:cd:60:07:4b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fac69adaf000dd77a4b001877c258a21d1ff6a0 Validity Not Before: Jan 2 06:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f03fdc703cf8daeeb9867e6d032896a36aef57e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2e:a4:d1:7d:a7:6a:c4:ff:6c:63:15:07:65: 93:77:6d:8d:6a:00:20:e2:dc:ff:ce:fb:c5:ef:77: 64:f8:8d:12:8d:e3:22:82:67:d9:11:48:03:e1:de: 13:1e:05:f0:83:70:b2:b1:57:82:c3:c3:7f:2a:cc: de:c0:69:fe:78:e1:4c:49:52:f0:35:ab:15:e8:e5: 24:b7:04:5d:ca:55:12:5d:ee:1b:88:83:c8:26:13: b1:02:8c:11:b4:1b:b3:f6:00:35:64:e2:b1:10:df: 4e:ce:78:66:ae:98:49:da:eb:65:1e:b7:1d:47:84: 21:1b:12:7c:0c:40:ca:d9:16:93:0f:fc:e9:b9:36: 58:21:d4:7b:4f:5b:a7:6f:e4:8e:4d:c6:60:c0:03: 7a:70:b5:2b:ec:53:63:97:60:c4:92:85:b2:9d:27: d8:8c:0b:da:00:2f:ca:0b:7b:f9:25:81:1c:43:e2: 4e:0b:49:04:c6:1a:48:97:d7:4e:63:97:bd:b2:d4: b0:b5:1b:31:a2:a8:57:2c:aa:3c:c9:9c:6a:89:f9: 42:5b:7d:95:85:61:b8:35:ee:55:5b:a0:39:dc:f5: 8b:4b:53:66:88:94:20:dd:9a:e4:fc:90:4b:9f:5e: ff:b2:62:2a:ab:3d:b2:63:8a:fd:91:97:d0:c6:f4: 35:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3F:DC:70:3C:F8:DA:EE:B9:86:7E:6D:03:28:96:A3:6A:EF:57:E0 X509v3 Authority Key Identifier: keyid:3F:AC:69:AD:AF:00:0D:D7:7A:4B:00:18:77:C2:58:A2:1D:1F:F6:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xpra8ADdd6SwAYd8JYoh0f9qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/8D_ccDz42u65hn5tAyiWo2rvV-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.213.180.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:fc:52:3c:14:54:b6:e7:7a:64:f4:c3:43:d5:51:49:cd:79: ee:30:ac:12:55:87:f9:a2:43:04:45:85:a3:f0:0d:dd:10:38: 8c:20:db:fb:dd:87:52:f8:1f:42:c4:fa:6c:a4:22:b5:cd:27: ef:1a:b4:3d:20:cf:70:3f:51:ad:0b:ef:3e:95:5c:06:88:42: 73:7d:9d:bd:36:4f:60:d8:f9:fe:b0:21:37:db:97:c6:c0:af: 5a:08:2a:53:7b:ff:1a:44:45:64:d3:5f:f4:cc:20:98:d6:8d: f4:f2:72:63:fd:22:33:07:a4:74:d3:99:09:48:cf:02:f6:68: 46:12:98:91:fc:20:e9:b8:e5:07:10:42:35:58:b9:2d:27:39: 05:9e:04:50:7c:a3:d9:8b:a1:e1:c4:9c:a1:4d:33:cd:cc:f8: b5:25:26:51:9e:0c:55:43:7c:ec:9d:47:66:35:44:1a:72:24: 6b:fc:9e:38:7f:7c:19:c2:64:b8:14:28:7f:7f:eb:19:84:08: 9b:6f:d0:11:43:c3:51:e2:75:61:70:ca:99:77:e0:3c:87:fc: db:e3:64:ee:05:48:f4:54:78:af:5b:ff:c8:31:b7:25:61:a6: 8a:1b:6e:f6:e3:d6:79:da:67:87:5e:d0:f1:16:c9:f4:98:b8: 8b:07:a2:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XO5UGlIQJmB9xM1gB0scMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmYWM2OWFkYWYwMDBkZDc3YTRiMDAxODc3YzI1OGEyMWQx ZmY2YTAwHhcNMjYwMTAyMDYyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDNmZGM3MDNjZjhkYWVlYjk4NjdlNmQwMzI4OTZhMzZhZWY1N2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS6k0X2nasT/bGMVB2WTd22NagAg 4tz/zvvF73dk+I0SjeMigmfZEUgD4d4THgXwg3CysVeCw8N/KszewGn+eOFMSVLw NasV6OUktwRdylUSXe4biIPIJhOxAowRtBuz9gA1ZOKxEN9OznhmrphJ2utlHrcd R4QhGxJ8DEDK2RaTD/zpuTZYIdR7T1unb+SOTcZgwAN6cLUr7FNjl2DEkoWynSfY jAvaAC/KC3v5JYEcQ+JOC0kExhpIl9dOY5e9stSwtRsxoqhXLKo8yZxqiflCW32V hWG4Ne5VW6A53PWLS1NmiJQg3Zrk/JBLn17/smIqqz2yY4r9kZfQxvQ1ewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPA/3HA8+NruuYZ+bQMolqNq71fgMB8GA1UdIwQY MBaAFD+saa2vAA3XeksAGHfCWKIdH/agMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDZ4cHJhOEFEZGQ2U3dBWWQ4SllvaDBmOXFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kNTAzZmQtOWQ0Yi00NTYzLTljZGYt YjZlMGYzZTk1Y2FkLzEvOERfY2NEejQydTY1aG41dEF5aVdvMnJ2Vi1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9kNTAzZmQtOWQ0Yi00NTYzLTljZGYtYjZlMGYzZTk1Y2Fk LzEvUDZ4cHJhOEFEZGQ2U3dBWWQ4SllvaDBmOXFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudW0MA0G CSqGSIb3DQEBCwUAA4IBAQBL/FI8FFS253pk9MND1VFJzXnuMKwSVYf5okMERYWj 8A3dEDiMINv73YdS+B9CxPpspCK1zSfvGrQ9IM9wP1GtC+8+lVwGiEJzfZ29Nk9g 2Pn+sCE325fGwK9aCCpTe/8aREVk01/0zCCY1o308nJj/SIzB6R005kJSM8C9mhG EpiR/CDpuOUHEEI1WLktJzkFngRQfKPZi6HhxJyhTTPNzPi1JSZRngxVQ3zsnUdm NUQaciRr/J44f3wZwmS4FCh/f+sZhAibb9ARQ8NR4nVhcMqZd+A8h/zb42TuBUj0 VHivW//IMbclYaaKG27249Z52meHXtDxFsn0mLiLB6Ko -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:12 2026 by rpki-client