This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/8JzTv1sEWJzgKBh6hP5zrOespe0.roa File: 8JzTv1sEWJzgKBh6hP5zrOespe0.roa (raw, json) Hash identifier: nGLxJDi43LNGHyCGN8ILdukMd6pDlSBvmxCeyBz73IY= Subject key identifier: F0:9C:D3:BF:5B:04:58:9C:E0:28:18:7A:84:FE:73:AC:E7:AC:A5:ED Certificate issuer: /CN=dac4cb51150802a4018cc256ad29f54720675ed5 Certificate serial: 019B7DC8A1728D3E169F4C7A61C9C73F7472 Authority key identifier: DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/8JzTv1sEWJzgKBh6hP5zrOespe0.roa Signing time: Fri 02 Jan 2026 08:17:39 +0000 ROA not before: Fri 02 Jan 2026 08:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211457 IP address blocks: 185.218.105.0/24 maxlen: 24 2a10:d3c0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:a1:72:8d:3e:16:9f:4c:7a:61:c9:c7:3f:74:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac4cb51150802a4018cc256ad29f54720675ed5 Validity Not Before: Jan 2 08:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f09cd3bf5b04589ce028187a84fe73ace7aca5ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:25:2a:20:39:f1:7a:33:7e:d8:5f:8e:6c:80: 4b:d7:1a:1e:fe:b8:94:c7:c8:d5:4c:8f:af:02:c4: 42:3a:51:78:66:d8:ed:53:bb:2a:54:e4:a3:e2:8f: 35:e8:e7:80:7d:c0:a7:f7:59:43:46:89:c6:b2:1c: 5b:67:ec:91:30:7a:89:27:ed:3b:ee:13:f1:b5:19: b1:db:8d:a1:bf:c1:94:85:a9:e9:f6:e4:65:1c:dd: a8:ac:1c:c0:f9:0a:37:aa:58:14:d5:e4:d4:b4:b3: d1:8e:db:8d:23:e8:0c:47:16:73:a5:d0:34:02:4a: d9:e6:54:81:64:ac:d9:04:0c:f1:83:94:cd:c2:61: eb:f4:30:71:22:ce:c2:f7:e8:55:40:33:5d:20:9a: a5:f2:55:59:43:66:7b:78:ab:92:c9:a7:88:2d:7f: 9e:4d:60:f9:5d:42:f4:72:37:78:9a:f1:a9:73:2e: 95:14:ec:86:07:70:c8:4b:60:5d:93:74:eb:af:2a: 34:4f:b9:07:5a:e8:62:a4:42:56:62:fd:92:e3:c8: b6:e3:0f:cf:e9:c2:6b:83:ba:65:b3:76:33:97:ab: 0b:f5:5f:c8:12:61:84:f5:79:c3:fd:75:44:e6:20: af:ad:25:83:48:35:04:50:c9:c0:b7:2f:aa:81:34: 19:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:9C:D3:BF:5B:04:58:9C:E0:28:18:7A:84:FE:73:AC:E7:AC:A5:ED X509v3 Authority Key Identifier: keyid:DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/8JzTv1sEWJzgKBh6hP5zrOespe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.218.105.0/24 IPv6: 2a10:d3c0::/29 Signature Algorithm: sha256WithRSAEncryption 86:6d:b3:de:61:e1:de:88:6d:ee:0d:ae:98:c5:98:f7:ab:4e: 10:62:57:82:2e:24:05:f4:9a:cc:21:3e:66:e6:f4:24:a3:4a: e9:16:26:05:aa:18:42:c1:22:53:6e:fd:cc:01:87:2f:93:01: 16:d2:53:54:96:70:39:5d:05:71:04:ca:e9:be:3d:91:1c:5c: 6a:df:4e:92:a6:11:a5:23:cc:b5:81:49:7e:c6:33:fd:1e:34: e8:b8:02:a1:25:fd:90:c2:43:5e:7b:93:3d:35:69:12:fb:11: c6:60:07:9b:ac:fc:c4:a8:dd:50:49:c9:4e:3c:83:cd:2a:98: 4b:ab:e8:81:e6:50:95:ce:3e:5f:b4:b4:7e:5d:e1:67:5a:2b: 6c:47:f1:75:a4:ae:c0:91:53:25:38:ca:d4:a5:55:44:19:ab: a9:10:e0:9f:14:6a:c4:b8:85:d0:81:09:69:01:f0:50:7b:36: 92:1c:cc:da:d3:99:bc:c0:9e:58:82:10:1f:25:63:12:6d:39: c6:d9:4a:43:2f:0a:e1:4f:fa:d7:38:56:6b:68:c3:6a:88:80: 64:79:63:4f:ce:16:c5:41:3e:56:8e:47:32:38:57:43:48:03: 8c:b7:d3:03:c9:7c:36:2f:62:ef:36:ac:a4:50:1c:17:b8:7f: cc:32:04:d4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9yKFyjT4Wn0x6YcnHP3RyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYzRjYjUxMTUwODAyYTQwMThjYzI1NmFkMjlmNTQ3MjA2 NzVlZDUwHhcNMjYwMTAyMDgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDljZDNiZjViMDQ1ODljZTAyODE4N2E4NGZlNzNhY2U3YWNhNWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCUqIDnxejN+2F+ObIBL1xoe/riU x8jVTI+vAsRCOlF4ZtjtU7sqVOSj4o816OeAfcCn91lDRonGshxbZ+yRMHqJJ+07 7hPxtRmx242hv8GUhanp9uRlHN2orBzA+Qo3qlgU1eTUtLPRjtuNI+gMRxZzpdA0 AkrZ5lSBZKzZBAzxg5TNwmHr9DBxIs7C9+hVQDNdIJql8lVZQ2Z7eKuSyaeILX+e TWD5XUL0cjd4mvGpcy6VFOyGB3DIS2Bdk3Trryo0T7kHWuhipEJWYv2S48i24w/P 6cJrg7pls3Yzl6sL9V/IEmGE9XnD/XVE5iCvrSWDSDUEUMnAty+qgTQZIQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPCc079bBFic4CgYeoT+c6znrKXtMB8GA1UdIwQY MBaAFNrEy1EVCAKkAYzCVq0p9UcgZ17VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnNUTFVSVUlBcVFCak1KV3JTbjFSeUJuWHRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zNmU4MzgtMWJiZi00Y2MwLWI1ZGEt NDE4MGY5ZTMwOTQ1LzEvOEp6VHYxc0VXSnpnS0JoNmhQNXpyT2VzcGUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8zNmU4MzgtMWJiZi00Y2MwLWI1ZGEtNDE4MGY5ZTMwOTQ1 LzEvMnNUTFVSVUlBcVFCak1KV3JTbjFSeUJuWHRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAudppMA0E AgACMAcDBQMqENPAMA0GCSqGSIb3DQEBCwUAA4IBAQCGbbPeYeHeiG3uDa6YxZj3 q04QYleCLiQF9JrMIT5m5vQko0rpFiYFqhhCwSJTbv3MAYcvkwEW0lNUlnA5XQVx BMrpvj2RHFxq306SphGlI8y1gUl+xjP9HjTouAKhJf2QwkNee5M9NWkS+xHGYAeb rPzEqN1QSclOPIPNKphLq+iB5lCVzj5ftLR+XeFnWitsR/F1pK7AkVMlOMrUpVVE GaupEOCfFGrEuIXQgQlpAfBQezaSHMza05m8wJ5YghAfJWMSbTnG2UpDLwrhT/rX OFZraMNqiIBkeWNPzhbFQT5WjkcyOFdDSAOMt9MDyXw2L2LvNqykUBwXuH/MMgTU -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:00 2026 by rpki-client