This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/8aF6o5FBuAw0gaN2PO-VbBiMjr0.roa File: 8aF6o5FBuAw0gaN2PO-VbBiMjr0.roa (raw, json) Hash identifier: wFO4VIkw385KlrdB+37sEvQQUjXgH+seQepKLY22IFU= Subject key identifier: F1:A1:7A:A3:91:41:B8:0C:34:81:A3:76:3C:EF:95:6C:18:8C:8E:BD Certificate issuer: /CN=eb0d53c87071484971aedfd90ca6ecc656a96e4c Certificate serial: 019B7E375C33C8E91B525CD509581F4C457D Authority key identifier: EB:0D:53:C8:70:71:48:49:71:AE:DF:D9:0C:A6:EC:C6:56:A9:6E:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6w1TyHBxSElxrt_ZDKbsxlapbkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/8aF6o5FBuAw0gaN2PO-VbBiMjr0.roa Signing time: Fri 02 Jan 2026 10:18:35 +0000 ROA not before: Fri 02 Jan 2026 10:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203215 IP address blocks: 192.166.8.0/22 maxlen: 22 192.166.8.0/24 maxlen: 24 192.166.9.0/24 maxlen: 24 192.166.10.0/24 maxlen: 24 192.166.11.0/24 maxlen: 24 2a0c:7ac0::/29 maxlen: 29 2a0c:7ac0::/48 maxlen: 48 2a0c:7ac0:9000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.crl rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.mft rsync://rpki.ripe.net/repository/DEFAULT/6w1TyHBxSElxrt_ZDKbsxlapbkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:5c:33:c8:e9:1b:52:5c:d5:09:58:1f:4c:45:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb0d53c87071484971aedfd90ca6ecc656a96e4c Validity Not Before: Jan 2 10:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1a17aa39141b80c3481a3763cef956c188c8ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6b:97:20:34:63:f8:4f:99:d8:5e:b9:48:02: da:c8:28:61:9b:df:6b:07:d1:b9:3d:1a:1b:06:07: 82:80:79:94:64:77:af:bd:2f:7a:84:9e:3e:54:cc: 93:51:25:31:59:3d:83:08:a8:89:a9:47:e8:16:bb: 27:21:0a:88:64:6d:26:e8:85:bc:cc:ed:5b:44:e2: 83:7f:d7:ff:93:7a:95:65:ec:0f:2d:ea:cf:32:7e: 52:d0:4b:30:63:22:b6:4c:77:9a:88:63:09:09:70: 90:ac:ed:7f:c2:76:31:87:53:34:6e:3c:bb:40:ba: bc:06:36:0b:02:18:03:c4:42:c3:07:03:88:00:79: 24:f1:aa:2f:16:91:a7:da:33:20:51:47:1c:14:8d: 20:c5:40:d3:14:0d:3a:3d:42:11:72:bf:2b:e2:d4: 59:06:92:18:12:80:6f:12:b3:8b:95:09:6e:0a:ff: 29:34:93:ed:fb:a3:11:aa:fd:70:7a:9f:2d:62:30: 61:bb:05:9f:e0:7f:5e:93:01:28:11:b8:f7:e8:54: 90:25:5d:f9:e0:a6:33:67:d7:e2:3a:a3:63:14:40: 34:2f:32:8c:42:88:68:fc:13:2e:7b:08:e3:d4:7d: 73:26:fc:c9:2e:e0:0e:55:7e:7f:c1:17:3d:6a:71: 97:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A1:7A:A3:91:41:B8:0C:34:81:A3:76:3C:EF:95:6C:18:8C:8E:BD X509v3 Authority Key Identifier: keyid:EB:0D:53:C8:70:71:48:49:71:AE:DF:D9:0C:A6:EC:C6:56:A9:6E:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6w1TyHBxSElxrt_ZDKbsxlapbkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/8aF6o5FBuAw0gaN2PO-VbBiMjr0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.166.8.0/22 IPv6: 2a0c:7ac0::/29 Signature Algorithm: sha256WithRSAEncryption 30:db:88:ab:ca:ba:ce:04:ba:51:69:ff:33:8f:fd:f9:48:3d: f6:6f:b9:a6:63:b2:fc:7f:bf:81:56:36:f6:27:b2:89:2c:b1: c5:bc:3e:f8:2a:0c:4f:cd:88:21:ef:cb:12:87:8c:97:c1:16: 0c:19:99:29:68:e3:3e:85:a2:ef:60:25:7c:63:f0:98:ef:02: 71:58:3b:e8:65:99:7a:27:5a:15:2d:a8:95:1e:b1:1d:58:eb: 0e:e0:cb:4d:60:fe:79:82:a0:98:76:ba:26:fa:12:ef:4b:b6: d2:16:c7:43:3f:77:0b:a7:60:98:08:be:6b:16:95:86:24:85: 27:58:f0:04:79:72:ee:37:1f:e5:91:f4:b2:4a:37:cb:9f:3b: 1a:7a:66:e9:19:a2:c4:c2:06:65:b0:3c:52:de:00:0c:7f:02: 4f:71:b3:5c:b6:51:ca:ad:91:ba:a6:d5:25:51:87:99:85:a4: f6:10:de:e7:28:00:36:fc:9d:09:7c:79:e6:9f:32:e3:25:77: f4:0a:40:0f:fd:92:4e:19:ab:7b:52:66:8a:cc:82:97:b4:70: d7:94:d1:b1:94:f8:ef:c2:3d:29:0c:b3:d0:75:07:e0:f5:db: 9c:c1:3f:aa:97:9e:06:18:ec:8b:1b:6f:72:bc:bf:76:06:d3: ad:5b:84:93 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+N1wzyOkbUlzVCVgfTEV9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMGQ1M2M4NzA3MTQ4NDk3MWFlZGZkOTBjYTZlY2M2NTZh OTZlNGMwHhcNMjYwMTAyMTAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWExN2FhMzkxNDFiODBjMzQ4MWEzNzYzY2VmOTU2YzE4OGM4ZWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmuXIDRj+E+Z2F65SALayChhm99r B9G5PRobBgeCgHmUZHevvS96hJ4+VMyTUSUxWT2DCKiJqUfoFrsnIQqIZG0m6IW8 zO1bROKDf9f/k3qVZewPLerPMn5S0EswYyK2THeaiGMJCXCQrO1/wnYxh1M0bjy7 QLq8BjYLAhgDxELDBwOIAHkk8aovFpGn2jMgUUccFI0gxUDTFA06PUIRcr8r4tRZ BpIYEoBvErOLlQluCv8pNJPt+6MRqv1wep8tYjBhuwWf4H9ekwEoEbj36FSQJV35 4KYzZ9fiOqNjFEA0LzKMQoho/BMuewjj1H1zJvzJLuAOVX5/wRc9anGXDQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPGheqORQbgMNIGjdjzvlWwYjI69MB8GA1UdIwQY MBaAFOsNU8hwcUhJca7f2Qym7MZWqW5MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNncxVHlIQnhTRWx4cnRfWkRLYnN4bGFwYmt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy81MDM0NTgtMWRjNC00MTAyLTk0Mjct ZDYzOTgxODM1MjVkLzEvOGFGNm81RkJ1QXcwZ2FOMlBPLVZiQmlNanIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy81MDM0NTgtMWRjNC00MTAyLTk0MjctZDYzOTgxODM1MjVk LzEvNncxVHlIQnhTRWx4cnRfWkRLYnN4bGFwYmt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwKYIMA0E AgACMAcDBQMqDHrAMA0GCSqGSIb3DQEBCwUAA4IBAQAw24iryrrOBLpRaf8zj/35 SD32b7mmY7L8f7+BVjb2J7KJLLHFvD74KgxPzYgh78sSh4yXwRYMGZkpaOM+haLv YCV8Y/CY7wJxWDvoZZl6J1oVLaiVHrEdWOsO4MtNYP55gqCYdrom+hLvS7bSFsdD P3cLp2CYCL5rFpWGJIUnWPAEeXLuNx/lkfSySjfLnzsaembpGaLEwgZlsDxS3gAM fwJPcbNctlHKrZG6ptUlUYeZhaT2EN7nKAA2/J0JfHnmnzLjJXf0CkAP/ZJOGat7 UmaKzIKXtHDXlNGxlPjvwj0pDLPQdQfg9ducwT+ql54GGOyLG29yvL92BtOtW4ST -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:18 2026 by rpki-client