This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/B-FM8iiMdf_W9iFsj3WoMzoIEmw.roa File: B-FM8iiMdf_W9iFsj3WoMzoIEmw.roa (raw, json) Hash identifier: IsI9YCn1EFbOUlMghQO6Nnu6k5OuvkaZPwWNPHZmrsY= Subject key identifier: 07:E1:4C:F2:28:8C:75:FF:D6:F6:21:6C:8F:75:A8:33:3A:08:12:6C Certificate issuer: /CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1 Certificate serial: 019B7BA3D56C88D3A2C2314830AE1841EB5A Authority key identifier: 8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/B-FM8iiMdf_W9iFsj3WoMzoIEmw.roa Signing time: Thu 01 Jan 2026 22:18:13 +0000 ROA not before: Thu 01 Jan 2026 22:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201860 IP address blocks: 185.60.237.0/24 maxlen: 24 185.60.238.0/24 maxlen: 24 185.60.239.0/24 maxlen: 24 185.98.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d5:6c:88:d3:a2:c2:31:48:30:ae:18:41:eb:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1 Validity Not Before: Jan 1 22:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07e14cf2288c75ffd6f6216c8f75a8333a08126c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:56:ec:df:55:d0:ef:89:d9:3b:9c:24:e2:7e: 45:52:79:7f:ff:f5:0a:5c:26:b0:d4:bf:5a:d7:7f: 24:3c:78:15:42:fc:b5:8e:4f:02:f6:c3:23:81:12: 2e:a6:01:4c:1e:ba:be:20:cc:03:64:f4:91:1a:04: 0b:3f:73:26:be:03:95:ca:4c:4e:7a:6e:3c:0e:e9: 85:37:38:05:4d:9d:aa:32:a5:37:bc:3f:a6:16:fc: 41:f7:a8:6e:af:50:b6:b1:eb:08:2f:2e:c4:ca:6c: 90:9e:8e:19:85:2f:31:56:fe:b4:23:52:a5:fb:bb: 02:fa:62:ed:e4:df:c7:af:7b:9a:ec:9a:d0:91:77: d6:7f:cc:ba:14:82:8e:ea:a5:98:87:85:9c:01:c2: 9a:42:ac:8b:72:91:b9:ed:aa:f2:93:83:4b:ed:1e: 45:e3:77:d0:61:94:bf:8b:15:49:17:6a:40:f2:ae: 08:54:6d:f9:43:4c:d7:86:47:cf:d7:6a:ec:f8:c1: d1:47:dd:4c:5e:f8:a6:d3:65:aa:a4:7c:f5:c0:ee: 35:d9:61:1b:72:a5:4f:ec:04:41:ab:fe:a5:a9:89: fb:49:22:fd:62:01:cd:15:35:9d:27:d9:b3:ff:23: ce:5c:3f:62:f1:bb:20:f3:88:ea:99:7b:78:81:35: bf:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E1:4C:F2:28:8C:75:FF:D6:F6:21:6C:8F:75:A8:33:3A:08:12:6C X509v3 Authority Key Identifier: keyid:8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/B-FM8iiMdf_W9iFsj3WoMzoIEmw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.237.0-185.60.239.255 185.98.107.0/24 Signature Algorithm: sha256WithRSAEncryption 73:76:5f:c6:54:78:19:19:ee:b8:ca:86:d1:a5:bb:4f:82:f2: ea:ee:8d:91:85:9b:03:1c:da:3e:9d:94:75:c4:f4:7e:c3:21: b9:8a:05:54:0a:8c:db:27:c8:3b:35:63:aa:3b:84:28:57:5c: 08:5a:00:fa:99:9c:c0:ec:8f:9a:4e:6d:27:77:70:6e:77:66: d4:46:5c:fa:89:41:47:3a:d5:fc:c4:68:3e:30:70:57:ff:90: 7f:ae:e9:70:e6:11:56:d2:73:ca:ca:37:4b:90:5e:ad:2b:7a: 47:0c:ec:8c:b0:a8:0a:fd:68:83:a6:fc:55:cb:4c:d3:f1:80: ce:f0:7a:5a:05:22:ea:b4:0a:58:26:8b:55:54:0c:46:66:b8: e3:55:fd:ff:2f:dc:d8:07:a6:23:8a:a1:8e:b6:be:1e:4c:af: 55:c4:cd:8a:ae:ed:79:ce:aa:01:f0:e0:41:aa:fb:8f:1f:8f: ad:ba:d6:72:c8:f7:0f:7b:e7:da:5f:49:c9:dc:59:66:c1:7f: 97:0d:56:80:56:ff:e4:b7:d0:46:5f:bb:5b:e5:64:49:23:9e: c7:67:91:b0:35:dd:1b:ed:15:d6:4f:fe:18:c4:4a:56:4d:35: 44:bf:f1:83:d9:c0:20:86:92:db:69:9a:e5:a8:d5:fb:3e:23: 09:a0:b8:7b -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt7o9VsiNOiwjFIMK4YQetaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYWNjN2YzYjIxOGM0OTJkODhkYmViYzljZGNiOWEyZDJk MzBlZDEwHhcNMjYwMTAxMjIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2UxNGNmMjI4OGM3NWZmZDZmNjIxNmM4Zjc1YTgzMzNhMDgxMjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lbs31XQ74nZO5wk4n5FUnl///UK XCaw1L9a138kPHgVQvy1jk8C9sMjgRIupgFMHrq+IMwDZPSRGgQLP3MmvgOVykxO em48DumFNzgFTZ2qMqU3vD+mFvxB96hur1C2sesILy7EymyQno4ZhS8xVv60I1Kl +7sC+mLt5N/Hr3ua7JrQkXfWf8y6FIKO6qWYh4WcAcKaQqyLcpG57aryk4NL7R5F 43fQYZS/ixVJF2pA8q4IVG35Q0zXhkfP12rs+MHRR91MXvim02WqpHz1wO412WEb cqVP7ARBq/6lqYn7SSL9YgHNFTWdJ9mz/yPOXD9i8bsg84jqmXt4gTW/aQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFAfhTPIojHX/1vYhbI91qDM6CBJsMB8GA1UdIwQY MBaAFI6sx/OyGMSS2I2+vJzcuaLS0w7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanF6SDg3SVl4SkxZamI2OG5OeTVvdExURHRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iZDQyZWEtZWJiNi00NDQ1LWJkMjAt Nzc1ZGE2YWEzMTIzLzEvQi1GTThpaU1kZl9XOWlGc2ozV29Nem9JRW13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9iZDQyZWEtZWJiNi00NDQ1LWJkMjAtNzc1ZGE2YWEzMTIz LzEvanF6SDg3SVl4SkxZamI2OG5OeTVvdExURHRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAC5PO0D BAS5POADBAC5YmswDQYJKoZIhvcNAQELBQADggEBAHN2X8ZUeBkZ7rjKhtGlu0+C 8urujZGFmwMc2j6dlHXE9H7DIbmKBVQKjNsnyDs1Y6o7hChXXAhaAPqZnMDsj5pO bSd3cG53ZtRGXPqJQUc61fzEaD4wcFf/kH+u6XDmEVbSc8rKN0uQXq0rekcM7Iyw qAr9aIOm/FXLTNPxgM7weloFIuq0Clgmi1VUDEZmuONV/f8v3NgHpiOKoY62vh5M r1XEzYqu7XnOqgHw4EGq+48fj6261nLI9w9759pfScncWWbBf5cNVoBW/+S30EZf u1vlZEkjnsdnkbA13RvtFdZP/hjESlZNNUS/8YPZwCCGkttpmuWo1fs+IwmguHs= -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:36 2026 by rpki-client