This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/T8N7nCQnGIjhbsR3LmsuRAA0G8M.roa File: T8N7nCQnGIjhbsR3LmsuRAA0G8M.roa (raw, json) Hash identifier: PEOG98xvhnROQhfBX1D6hwED9IIyduE7r0HR6hXEDLk= Subject key identifier: 4F:C3:7B:9C:24:27:18:88:E1:6E:C4:77:2E:6B:2E:44:00:34:1B:C3 Certificate issuer: /CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3 Certificate serial: 019B7BA4D169F542462AEC191611E9695F9F Authority key identifier: 99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/T8N7nCQnGIjhbsR3LmsuRAA0G8M.roa Signing time: Thu 01 Jan 2026 22:19:17 +0000 ROA not before: Thu 01 Jan 2026 22:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49729 IP address blocks: 185.137.76.0/22 maxlen: 22 185.137.76.0/23 maxlen: 23 185.137.76.0/24 maxlen: 24 185.137.77.0/24 maxlen: 24 185.137.78.0/23 maxlen: 23 185.137.78.0/24 maxlen: 24 185.137.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:d1:69:f5:42:46:2a:ec:19:16:11:e9:69:5f:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3 Validity Not Before: Jan 1 22:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fc37b9c24271888e16ec4772e6b2e4400341bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b3:56:b4:04:47:55:86:5f:16:2e:3f:9b:96: 76:ba:30:a5:d8:32:07:a2:bf:79:38:ae:fc:0a:1a: 28:be:1a:0f:1b:73:60:d3:3c:d7:e6:12:21:9d:1b: a8:00:93:13:33:c2:94:7f:41:f0:62:c4:ef:1d:9c: 59:9c:0b:ff:c5:00:eb:8f:55:63:e5:a5:75:82:42: 9f:10:1e:fc:83:21:fe:7f:2e:a0:9e:58:aa:47:2d: 29:5b:61:3a:b6:8f:11:ca:72:3c:04:50:5f:b0:d7: b5:fb:c1:72:4a:c6:95:99:e8:03:a3:f7:00:0b:bb: b9:1c:c5:13:9d:2b:41:25:11:59:3d:ad:ea:ef:f9: 7b:be:06:70:b5:bb:35:07:bf:1b:f8:21:2d:85:66: ce:5e:1b:25:b9:19:3d:9c:09:8d:9d:d0:d0:11:74: ff:cb:e5:5b:46:ca:44:05:eb:ac:90:de:22:26:31: 39:6b:b3:b1:27:25:fb:4b:c1:99:6a:b5:03:84:52: d5:40:4b:27:36:0d:9b:8c:52:b3:73:b6:5a:21:76: bb:b7:f8:53:2e:d7:c4:f0:2a:0a:b0:e0:d2:84:09: 0e:c3:83:5e:f1:1e:f2:17:7e:b5:a3:02:5e:b4:88: 1c:63:14:9d:9e:b3:66:63:df:72:d6:6a:e6:a3:e9: 47:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C3:7B:9C:24:27:18:88:E1:6E:C4:77:2E:6B:2E:44:00:34:1B:C3 X509v3 Authority Key Identifier: keyid:99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/T8N7nCQnGIjhbsR3LmsuRAA0G8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.137.76.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:ec:be:18:2c:0c:7f:73:1b:76:52:ce:2b:2a:92:2f:c9:cf: d1:4f:7e:19:46:6f:38:e6:ad:c6:8d:93:14:7a:f4:e0:f7:20: 0a:1f:74:40:69:ac:2a:c7:8d:e1:24:aa:04:a7:a9:60:95:53: 20:b0:ac:1b:29:b4:57:46:5e:98:6f:3a:5b:19:5f:25:40:ec: f3:61:bf:7b:46:16:c5:01:20:11:1e:43:0d:71:c6:07:1d:46: 62:8a:9b:09:94:a5:43:a9:00:d8:bc:fa:b8:22:d9:a8:b2:1d: b9:47:2f:7b:c0:bf:69:be:f5:3b:9b:68:f2:e2:8d:8c:dc:62: 75:18:cf:84:e6:6c:ae:29:a3:d4:94:92:21:65:aa:c5:b5:87: b1:5b:4a:a9:37:6c:f8:70:5c:98:52:4f:4c:5f:1a:8d:a5:30: 11:4b:a9:13:77:7b:03:7b:15:6d:0a:93:8e:f6:bc:ee:6d:37: 67:2b:b3:98:90:64:a1:72:49:4f:70:80:e4:cc:a2:01:51:44: dd:88:79:a4:ca:fb:8a:19:1d:bb:23:0d:bd:e2:5e:0d:36:f6: a6:8e:b4:45:23:ed:2c:50:77:00:09:03:77:23:16:0e:50:97: b4:73:1f:2c:e4:2b:05:a3:40:92:bf:cd:a2:5f:8d:33:10:7f: d8:b0:41:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pNFp9UJGKuwZFhHpaV+fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5YmY3ZDVjNzBjNjMyNTRkMGNkZTM0YzJiYTQ5ZDk0MDdm YzI0ZjMwHhcNMjYwMTAxMjIxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmMzN2I5YzI0MjcxODg4ZTE2ZWM0NzcyZTZiMmU0NDAwMzQxYmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bNWtARHVYZfFi4/m5Z2ujCl2DIH or95OK78ChoovhoPG3Ng0zzX5hIhnRuoAJMTM8KUf0HwYsTvHZxZnAv/xQDrj1Vj 5aV1gkKfEB78gyH+fy6gnliqRy0pW2E6to8RynI8BFBfsNe1+8FySsaVmegDo/cA C7u5HMUTnStBJRFZPa3q7/l7vgZwtbs1B78b+CEthWbOXhsluRk9nAmNndDQEXT/ y+VbRspEBeuskN4iJjE5a7OxJyX7S8GZarUDhFLVQEsnNg2bjFKzc7ZaIXa7t/hT LtfE8CoKsODShAkOw4Ne8R7yF361owJetIgcYxSdnrNmY99y1mrmo+lHrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE/De5wkJxiI4W7Edy5rLkQANBvDMB8GA1UdIwQY MBaAFJm/fVxwxjJU0M3jTCuknZQH/CTzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWI5OVhIREdNbFRRemVOTUs2U2RsQWY4SlBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lNDgyNTYtYzZmYy00NjMxLThmNWYt NThiY2RhMzU2ZTYyLzEvVDhON25DUW5HSWpoYnNSM0xtc3VSQUEwRzhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9lNDgyNTYtYzZmYy00NjMxLThmNWYtNThiY2RhMzU2ZTYy LzEvbWI5OVhIREdNbFRRemVOTUs2U2RsQWY4SlBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYlMMA0G CSqGSIb3DQEBCwUAA4IBAQB67L4YLAx/cxt2Us4rKpIvyc/RT34ZRm845q3GjZMU evTg9yAKH3RAaawqx43hJKoEp6lglVMgsKwbKbRXRl6YbzpbGV8lQOzzYb97RhbF ASARHkMNccYHHUZiipsJlKVDqQDYvPq4Itmosh25Ry97wL9pvvU7m2jy4o2M3GJ1 GM+E5myuKaPUlJIhZarFtYexW0qpN2z4cFyYUk9MXxqNpTARS6kTd3sDexVtCpOO 9rzubTdnK7OYkGShcklPcIDkzKIBUUTdiHmkyvuKGR27Iw294l4NNvamjrRFI+0s UHcACQN3IxYOUJe0cx8s5CsFo0CSv82iX40zEH/YsEH7 -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:43 2026 by rpki-client