This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/8YZRbgY-jKvD5Qx_V3PZvEk7vWs.roa File: 8YZRbgY-jKvD5Qx_V3PZvEk7vWs.roa (raw, json) Hash identifier: VWf+UTOiYBb3BuAyoYwwM3l/EA1c3gcBsPIpoLbePt4= Subject key identifier: F1:86:51:6E:06:3E:8C:AB:C3:E5:0C:7F:57:73:D9:BC:49:3B:BD:6B Certificate issuer: /CN=10771dd7dea22e35fdaf19b51b839f43721270ba Certificate serial: 019B7AC7DF937EC19ACE117D6599A7BB0604 Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/8YZRbgY-jKvD5Qx_V3PZvEk7vWs.roa Signing time: Thu 01 Jan 2026 18:17:57 +0000 ROA not before: Thu 01 Jan 2026 18:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15656 IP address blocks: 212.146.128.0/24 maxlen: 24 212.146.129.0/24 maxlen: 24 212.146.130.0/24 maxlen: 24 212.146.131.0/24 maxlen: 24 212.146.132.0/24 maxlen: 24 212.146.133.0/24 maxlen: 24 212.146.134.0/24 maxlen: 24 212.146.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:df:93:7e:c1:9a:ce:11:7d:65:99:a7:bb:06:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba Validity Not Before: Jan 1 18:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f186516e063e8cabc3e50c7f5773d9bc493bbd6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ac:7f:c8:19:c2:b7:54:68:2c:46:80:76:2a: a0:fe:5e:15:4c:7d:ca:84:3e:a9:cd:85:79:d3:46: 16:44:0d:31:2b:ed:2b:34:f5:01:e8:eb:06:38:e1: 33:8b:b7:bc:86:5a:a1:f4:e8:ab:ec:12:a2:df:09: 4f:3b:f8:03:78:e7:80:da:e7:89:4b:a8:20:e9:03: f5:6c:cc:2a:c1:57:1d:5f:86:bc:5e:77:40:25:ce: 5d:8e:51:97:91:0d:76:00:4b:f9:94:93:1e:e1:c3: 37:9b:e3:f4:3b:4e:df:73:24:f5:7d:72:7c:21:9b: 31:15:09:a3:7c:1d:a8:5b:9c:83:67:16:12:7d:32: 35:66:ea:80:ce:4f:d8:22:97:f2:69:89:1d:8b:20: 4e:cd:6f:63:48:16:9e:4d:5f:09:2c:e0:ca:fb:71: 8c:58:3c:8c:db:44:ab:f2:8a:a5:1d:da:b1:69:49: 1e:e8:a4:9a:cc:69:95:47:d3:b2:0e:69:63:68:87: d3:29:28:e5:10:63:8c:c2:3f:38:fd:a8:9e:a6:4f: d7:54:6e:49:e8:81:82:13:79:c7:a4:af:c1:cc:2e: 3e:fd:69:cb:45:da:ad:8e:64:8a:3d:1f:46:e6:2a: df:0f:89:3c:89:ad:05:70:d9:63:60:69:01:af:7b: f3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:86:51:6E:06:3E:8C:AB:C3:E5:0C:7F:57:73:D9:BC:49:3B:BD:6B X509v3 Authority Key Identifier: keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/8YZRbgY-jKvD5Qx_V3PZvEk7vWs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.146.128.0/21 Signature Algorithm: sha256WithRSAEncryption aa:b2:37:fa:42:cd:70:bf:94:65:7a:53:f0:88:77:17:63:47: f2:4a:c2:2e:69:3a:bd:47:bb:7e:2c:9c:d0:00:2a:26:43:a3: e1:0e:d3:8a:8d:e6:ce:7b:17:5c:92:1d:69:c2:b0:d3:f1:32: 5b:a3:0b:8d:8e:a1:f0:b0:56:3d:58:f6:f9:17:f9:c1:bf:2c: 62:78:ca:23:6b:01:ce:f9:1f:89:15:11:19:b0:f9:40:49:f7: 94:6e:5a:ef:46:fe:ff:81:14:0b:d2:15:65:32:4a:b8:53:b8: df:06:e5:1c:c1:ce:46:3d:53:62:ab:a4:e5:b7:49:37:7d:f6: 49:85:a0:a9:2e:03:7b:04:bf:68:4e:e4:60:52:7b:c3:12:6b: 6d:d5:10:41:38:24:7b:08:a0:48:c0:90:cf:d2:90:d3:c2:c7: f0:23:d7:b1:86:38:a6:ff:1a:59:33:43:8d:d4:3d:95:ca:9c: 61:3e:82:9a:a1:4f:46:13:42:f9:fd:9a:80:30:1c:7b:e6:80: f6:4d:c3:f9:86:a0:6c:94:19:ec:5c:10:71:37:f5:a1:22:ca: 64:cf:ac:f8:db:71:e5:60:0d:c5:d6:8a:8b:96:ef:20:ba:94: 83:df:08:30:14:95:ee:fd:9a:f0:f3:40:4e:ba:2e:9e:56:2b: 84:2b:18:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x9+TfsGazhF9ZZmnuwYEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNzcxZGQ3ZGVhMjJlMzVmZGFmMTliNTFiODM5ZjQzNzIx MjcwYmEwHhcNMjYwMTAxMTgxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTg2NTE2ZTA2M2U4Y2FiYzNlNTBjN2Y1NzczZDliYzQ5M2JiZDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKx/yBnCt1RoLEaAdiqg/l4VTH3K hD6pzYV500YWRA0xK+0rNPUB6OsGOOEzi7e8hlqh9Oir7BKi3wlPO/gDeOeA2ueJ S6gg6QP1bMwqwVcdX4a8XndAJc5djlGXkQ12AEv5lJMe4cM3m+P0O07fcyT1fXJ8 IZsxFQmjfB2oW5yDZxYSfTI1ZuqAzk/YIpfyaYkdiyBOzW9jSBaeTV8JLODK+3GM WDyM20Sr8oqlHdqxaUke6KSazGmVR9OyDmljaIfTKSjlEGOMwj84/aiepk/XVG5J 6IGCE3nHpK/BzC4+/WnLRdqtjmSKPR9G5irfD4k8ia0FcNljYGkBr3vz5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPGGUW4GPoyrw+UMf1dz2bxJO71rMB8GA1UdIwQY MBaAFBB3Hdfeoi41/a8ZtRuDn0NyEnC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUhjZDE5NmlMalg5cnhtMUc0T2ZRM0lTY0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy83NTE0OGEtZTQwZS00MDlmLThhMGIt ZGE4NTFhNzE1ZmE0LzEvOFlaUmJnWS1qS3ZENVF4X1YzUFp2RWs3dldzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy83NTE0OGEtZTQwZS00MDlmLThhMGItZGE4NTFhNzE1ZmE0 LzEvRUhjZDE5NmlMalg5cnhtMUc0T2ZRM0lTY0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD1JKAMA0G CSqGSIb3DQEBCwUAA4IBAQCqsjf6Qs1wv5RlelPwiHcXY0fySsIuaTq9R7t+LJzQ AComQ6PhDtOKjebOexdckh1pwrDT8TJbowuNjqHwsFY9WPb5F/nBvyxieMojawHO +R+JFREZsPlASfeUblrvRv7/gRQL0hVlMkq4U7jfBuUcwc5GPVNiq6Tlt0k3ffZJ haCpLgN7BL9oTuRgUnvDEmtt1RBBOCR7CKBIwJDP0pDTwsfwI9exhjim/xpZM0ON 1D2VypxhPoKaoU9GE0L5/ZqAMBx75oD2TcP5hqBslBnsXBBxN/WhIspkz6z423Hl YA3F1oqLlu8gupSD3wgwFJXu/Zrw80BOui6eViuEKxjW -----END CERTIFICATE-----Generated at Mon Jan 26 14:07:58 2026 by rpki-client