This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/8149JdL_bdhKPVAGngPZY1WVUZc.roa File: 8149JdL_bdhKPVAGngPZY1WVUZc.roa (raw, json) Hash identifier: Vqmxphay09Dowf+HIB9gAzSfzwRKej0t5zClWsx36sY= Subject key identifier: F3:5E:3D:25:D2:FF:6D:D8:4A:3D:50:06:9E:03:D9:63:55:95:51:97 Certificate issuer: /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581 Certificate serial: 019B7BA439236FD068C5A567D9B8622BD5C5 Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/8149JdL_bdhKPVAGngPZY1WVUZc.roa Signing time: Thu 01 Jan 2026 22:18:38 +0000 ROA not before: Thu 01 Jan 2026 22:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15659 IP address blocks: 80.202.0.0/16 maxlen: 16 84.48.0.0/18 maxlen: 18 84.49.128.0/17 maxlen: 17 89.10.0.0/16 maxlen: 16 89.11.0.0/17 maxlen: 17 213.145.160.0/19 maxlen: 19 213.187.160.0/19 maxlen: 19 213.187.190.0/24 maxlen: 24 217.13.0.0/19 maxlen: 19 2a04:980::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:39:23:6f:d0:68:c5:a5:67:d9:b8:62:2b:d5:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581 Validity Not Before: Jan 1 22:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f35e3d25d2ff6dd84a3d50069e03d96355955197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4c:63:b7:6f:d3:b7:42:93:56:ed:5c:9c:ad: 19:ea:76:69:1a:2d:c6:1e:0a:40:20:a7:a5:04:19: b4:36:5a:42:b8:7b:12:34:1f:0d:d0:25:d6:d6:6f: 7d:a5:06:ed:12:1c:0d:05:c2:06:ca:02:55:15:8b: 1f:51:73:a0:f6:c9:ef:b8:cf:ea:97:70:54:db:b4: b7:7a:19:30:fe:3a:fc:46:00:93:7c:7c:6d:5d:49: 07:36:e1:d2:41:24:a4:da:cf:68:26:00:bf:97:5b: 61:e5:46:be:48:4c:67:df:75:dd:86:91:7d:70:e6: df:9f:19:0f:52:8b:a0:bb:a8:7f:50:e8:48:22:de: c0:35:5c:bf:88:e7:60:a3:30:db:34:d0:bf:a5:3b: b2:f6:38:8e:74:46:f8:90:9e:de:62:ae:42:10:0c: a6:05:1d:5c:20:2b:4d:4b:df:ac:5a:a5:a2:36:94: c3:2c:7f:37:8b:d8:ac:49:3f:a9:58:cf:25:00:82: 13:ca:ab:fc:01:99:5c:a2:20:62:8e:fd:45:aa:42: 50:cd:27:35:61:fd:88:a1:a8:b3:df:8f:5e:b3:44: 8c:50:9c:c0:2c:58:41:43:b8:ff:0f:2f:d4:fd:e1: 62:58:42:5f:a3:3f:84:32:d3:21:57:7b:d5:56:a9: 8c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:5E:3D:25:D2:FF:6D:D8:4A:3D:50:06:9E:03:D9:63:55:95:51:97 X509v3 Authority Key Identifier: keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/8149JdL_bdhKPVAGngPZY1WVUZc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.202.0.0/16 84.48.0.0/18 84.49.128.0/17 89.10.0.0-89.11.127.255 213.145.160.0/19 213.187.160.0/19 217.13.0.0/19 IPv6: 2a04:980::/29 Signature Algorithm: sha256WithRSAEncryption d2:9d:d3:b6:74:44:5b:e2:0e:f3:26:85:3f:71:95:60:2c:8c: 17:ae:7f:54:0d:ac:21:67:fb:51:c0:bf:b3:8c:47:25:56:cf: 65:63:0f:29:73:c0:95:c5:ca:d7:20:54:6d:a8:5f:24:31:f9: c9:63:67:31:6b:d6:55:2e:f1:00:ce:35:80:b6:b5:27:82:2b: 45:3f:f1:fb:0a:34:8d:ff:4d:3a:51:f1:6b:41:f0:ec:10:25: 04:f5:60:a8:4d:30:b9:18:0f:44:73:f4:5b:31:aa:4f:e5:9d: 31:22:40:aa:ba:29:38:71:ea:ba:54:e1:09:9e:1d:30:88:50: 4f:35:3b:65:ca:c9:2f:fc:67:b6:20:8b:8d:0e:37:a7:76:c7: 35:03:76:8b:67:f8:e0:24:5c:df:d5:52:15:54:94:16:42:c8: f2:87:62:f1:dd:ff:42:5c:f5:11:46:4b:a8:87:c0:a4:44:4a: d3:63:f8:bd:00:58:1c:bf:1c:67:5e:4b:34:db:bd:7d:af:7d: cc:d3:eb:70:b2:b3:93:d7:e4:85:2f:41:cc:10:ab:0e:95:fd: e2:74:48:66:8b:ce:b9:cb:52:a6:ca:a1:df:a2:3c:0b:5a:02: 24:7e:54:92:83:9a:0e:e6:ef:f4:ff:96:91:d1:06:0c:03:46: 67:7d:d7:ea -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt7pDkjb9BoxaVn2bhiK9XFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NTgzZjU4YzcxMTBhZDRjYzYwOWY0ZmZiN2NhYjJmODBj ODM1ODEwHhcNMjYwMTAxMjIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzVlM2QyNWQyZmY2ZGQ4NGEzZDUwMDY5ZTAzZDk2MzU1OTU1MTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Exjt2/Tt0KTVu1cnK0Z6nZpGi3G HgpAIKelBBm0NlpCuHsSNB8N0CXW1m99pQbtEhwNBcIGygJVFYsfUXOg9snvuM/q l3BU27S3ehkw/jr8RgCTfHxtXUkHNuHSQSSk2s9oJgC/l1th5Ua+SExn33XdhpF9 cObfnxkPUougu6h/UOhIIt7ANVy/iOdgozDbNNC/pTuy9jiOdEb4kJ7eYq5CEAym BR1cICtNS9+sWqWiNpTDLH83i9isST+pWM8lAIITyqv8AZlcoiBijv1FqkJQzSc1 Yf2Ioaiz349es0SMUJzALFhBQ7j/Dy/U/eFiWEJfoz+EMtMhV3vVVqmMGQIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFPNePSXS/23YSj1QBp4D2WNVlVGXMB8GA1UdIwQY MBaAFMZYP1jHEQrUzGCfT/t8qy+AyDWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84ZDBjYWUtZWMxMy00NWZiLTlhZmMt M2Q1OTNlYmU1MjIwLzEvODE0OUpkTF9iZGhLUFZBR25nUFpZMVdWVVpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS84ZDBjYWUtZWMxMy00NWZiLTlhZmMtM2Q1OTNlYmU1MjIw LzEveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwMAUMoDBAZU MAADBAdUMYAwCwMDAVkKAwQHWQsAAwQF1ZGgAwQF1bugAwQF2Q0AMA0EAgACMAcD BQMqBAmAMA0GCSqGSIb3DQEBCwUAA4IBAQDSndO2dERb4g7zJoU/cZVgLIwXrn9U DawhZ/tRwL+zjEclVs9lYw8pc8CVxcrXIFRtqF8kMfnJY2cxa9ZVLvEAzjWAtrUn gitFP/H7CjSN/006UfFrQfDsECUE9WCoTTC5GA9Ec/RbMapP5Z0xIkCquik4ceq6 VOEJnh0wiFBPNTtlyskv/Ge2IIuNDjendsc1A3aLZ/jgJFzf1VIVVJQWQsjyh2Lx 3f9CXPURRkuoh8CkRErTY/i9AFgcvxxnXks02719r33M0+twsrOT1+SFL0HMEKsO lf3idEhmi865y1KmyqHfojwLWgIkflSSg5oO5u/0/5aR0QYMA0Znfdfq -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:38 2026 by rpki-client