This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/p8Q1T6owao0UtFaI0uzL9fVOIDk.roa File: p8Q1T6owao0UtFaI0uzL9fVOIDk.roa (raw, json) Hash identifier: ETVPkMleWg5Tmk9ZZqBQNGmyAM72infgVzIH2DgSiBI= Subject key identifier: A7:C4:35:4F:AA:30:6A:8D:14:B4:56:88:D2:EC:CB:F5:F5:4E:20:39 Certificate issuer: /CN=ae7f187c12782fc4d844762235993329c4563a0d Certificate serial: 019B7F83305AE9B8CD34319B65932E9D0B3A Authority key identifier: AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/p8Q1T6owao0UtFaI0uzL9fVOIDk.roa Signing time: Fri 02 Jan 2026 16:21:02 +0000 ROA not before: Fri 02 Jan 2026 16:21:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202877 IP address blocks: 185.151.252.0/22 maxlen: 22 185.151.252.0/24 maxlen: 24 185.151.253.0/24 maxlen: 24 185.151.254.0/24 maxlen: 24 185.151.255.0/24 maxlen: 24 185.251.14.0/24 maxlen: 24 2a07:7300::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:30:5a:e9:b8:cd:34:31:9b:65:93:2e:9d:0b:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae7f187c12782fc4d844762235993329c4563a0d Validity Not Before: Jan 2 16:21:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7c4354faa306a8d14b45688d2eccbf5f54e2039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f2:63:86:9a:40:ae:42:73:73:9a:8c:99:22: 8d:7b:88:06:e0:81:2c:00:ef:73:93:b6:71:fa:b1: 5f:0b:d8:81:0f:d5:63:43:07:28:c2:5c:70:01:b9: 65:e0:96:03:8f:7f:f6:26:f3:bd:d0:27:f8:4c:db: 95:fb:01:83:be:a2:35:70:89:32:ca:eb:08:cd:34: e3:80:94:de:f4:10:26:b8:83:f0:6c:c2:c1:f6:4b: 87:2b:57:34:29:6f:d2:4b:06:46:a6:34:69:76:44: 4f:bd:86:b9:fb:5d:55:10:27:17:44:0b:04:8a:20: 37:29:e2:8e:8e:6c:ce:2c:cf:2a:23:06:16:90:22: 66:c1:84:03:42:ba:fe:b8:bb:a8:11:61:2d:19:4c: 23:d3:e8:ca:39:88:73:c6:8a:ec:28:34:d2:a1:11: 16:76:3e:1f:83:77:f4:15:94:bd:16:14:ca:b6:b1: 53:9d:53:bc:ca:d7:a3:5e:cf:84:3e:05:56:60:1b: 20:83:13:a8:8b:e5:7d:51:93:b0:d3:fa:51:b7:59: 1b:1d:19:78:64:ad:fb:ee:12:23:4a:e3:5f:c8:11: 06:30:92:4e:a0:1e:94:15:ea:c3:76:76:7e:50:ec: fe:92:3e:8f:03:e6:83:b3:5c:75:1b:fe:40:ba:2a: f8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C4:35:4F:AA:30:6A:8D:14:B4:56:88:D2:EC:CB:F5:F5:4E:20:39 X509v3 Authority Key Identifier: keyid:AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/p8Q1T6owao0UtFaI0uzL9fVOIDk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.151.252.0/22 185.251.14.0/24 IPv6: 2a07:7300::/29 Signature Algorithm: sha256WithRSAEncryption 62:33:0b:d5:48:17:31:a1:eb:19:b5:70:40:c5:d6:e5:01:7a: e0:38:0f:92:b4:17:61:4f:68:2c:00:5d:61:5d:c6:6f:73:08: df:a5:93:b1:26:6a:c7:75:9b:9a:bd:41:54:bf:fc:79:3b:8f: 48:31:f5:b5:ab:86:de:17:96:43:90:b6:bb:16:1e:c4:d2:df: 31:c2:9d:c9:b1:6a:26:ec:56:df:ac:92:d5:0c:fb:b3:de:86: 9c:50:c2:cb:a1:ae:97:dd:ef:36:45:32:ae:12:65:f1:f0:6e: 73:be:62:91:92:db:12:dd:fd:f0:c3:2a:f1:cb:24:ca:d0:76: 72:79:cd:f4:e9:cc:92:55:72:54:ab:78:20:e0:15:1a:d7:f1: a1:20:8e:d8:ae:98:f7:b7:31:ab:19:4f:7d:ae:95:ff:06:aa: 7d:92:73:fb:5e:e0:19:64:96:8b:a7:32:13:0d:4c:fa:c6:96: 66:6e:07:53:d5:03:7f:ef:a3:13:7e:65:2c:17:f2:04:ae:41: 62:f9:a3:4f:c5:de:f1:89:7d:1c:6f:e2:7e:b1:9e:46:bf:c5: 12:04:03:0d:a7:79:68:fb:a1:56:39:3c:ee:a4:42:d7:99:eb: 4d:da:a1:5f:2a:b6:9d:08:a8:e2:ba:3e:7b:c7:20:88:ac:61: da:da:d1:f5 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/gzBa6bjNNDGbZZMunQs6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlN2YxODdjMTI3ODJmYzRkODQ0NzYyMjM1OTkzMzI5YzQ1 NjNhMGQwHhcNMjYwMTAyMTYyMTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2M0MzU0ZmFhMzA2YThkMTRiNDU2ODhkMmVjY2JmNWY1NGUyMDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfJjhppArkJzc5qMmSKNe4gG4IEs AO9zk7Zx+rFfC9iBD9VjQwcowlxwAbll4JYDj3/2JvO90Cf4TNuV+wGDvqI1cIky yusIzTTjgJTe9BAmuIPwbMLB9kuHK1c0KW/SSwZGpjRpdkRPvYa5+11VECcXRAsE iiA3KeKOjmzOLM8qIwYWkCJmwYQDQrr+uLuoEWEtGUwj0+jKOYhzxorsKDTSoREW dj4fg3f0FZS9FhTKtrFTnVO8ytejXs+EPgVWYBsggxOoi+V9UZOw0/pRt1kbHRl4 ZK377hIjSuNfyBEGMJJOoB6UFerDdnZ+UOz+kj6PA+aDs1x1G/5Auir4/wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKfENU+qMGqNFLRWiNLsy/X1TiA5MB8GA1UdIwQY MBaAFK5/GHwSeC/E2ER2IjWZMynEVjoNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm44WWZCSjRMOFRZUkhZaU5aa3pLY1JXT2cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jOGY2NDctZWQ3OS00MmQ5LThkZjYt MDU4Nzc2MDRhMDFkLzEvcDhRMVQ2b3dhbzBVdEZhSTB1ekw5ZlZPSURrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9jOGY2NDctZWQ3OS00MmQ5LThkZjYtMDU4Nzc2MDRhMDFk LzEvcm44WWZCSjRMOFRZUkhZaU5aa3pLY1JXT2cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuZf8AwQA ufsOMA0EAgACMAcDBQMqB3MAMA0GCSqGSIb3DQEBCwUAA4IBAQBiMwvVSBcxoesZ tXBAxdblAXrgOA+StBdhT2gsAF1hXcZvcwjfpZOxJmrHdZuavUFUv/x5O49IMfW1 q4beF5ZDkLa7Fh7E0t8xwp3JsWom7FbfrJLVDPuz3oacUMLLoa6X3e82RTKuEmXx 8G5zvmKRktsS3f3wwyrxyyTK0HZyec306cySVXJUq3gg4BUa1/GhII7Yrpj3tzGr GU99rpX/Bqp9knP7XuAZZJaLpzITDUz6xpZmbgdT1QN/76MTfmUsF/IErkFi+aNP xd7xiX0cb+J+sZ5Gv8USBAMNp3lo+6FWOTzupELXmetN2qFfKradCKjiuj57xyCI rGHa2tH1 -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:44 2026 by rpki-client