This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/8pAxGBtMIYfsfvto8lp_BYfRQDY.roa File: 8pAxGBtMIYfsfvto8lp_BYfRQDY.roa (raw, json) Hash identifier: +JsvqV3b78G3djyCkktC2twpOWnCewuiBinhCejbzrY= Subject key identifier: F2:90:31:18:1B:4C:21:87:EC:7E:FB:68:F2:5A:7F:05:87:D1:40:36 Certificate issuer: /CN=f811fa5eff370bc36d0e3929625e3414081a2392 Certificate serial: 019B7BA4ABF586C96C1778F5A9119D6A95EA Authority key identifier: F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/8pAxGBtMIYfsfvto8lp_BYfRQDY.roa Signing time: Thu 01 Jan 2026 22:19:08 +0000 ROA not before: Thu 01 Jan 2026 22:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42187 IP address blocks: 78.41.88.0/22 maxlen: 22 78.41.92.0/22 maxlen: 24 91.190.232.0/22 maxlen: 24 94.127.92.0/24 maxlen: 24 94.127.94.0/24 maxlen: 24 94.127.95.0/24 maxlen: 24 185.33.120.0/22 maxlen: 22 2a01:9f00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ab:f5:86:c9:6c:17:78:f5:a9:11:9d:6a:95:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f811fa5eff370bc36d0e3929625e3414081a2392 Validity Not Before: Jan 1 22:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f29031181b4c2187ec7efb68f25a7f0587d14036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:37:e2:a3:a5:ee:16:1d:65:65:a0:2e:b6:96: 69:87:57:2d:15:12:e4:e0:2b:b7:55:ba:8d:f4:b5: d0:0c:d2:cd:b7:a9:f8:5f:88:3b:90:37:1c:60:b2: 7a:63:fd:63:95:35:51:d4:6a:b0:e4:01:1c:e1:ba: 48:0a:48:8b:28:f7:e6:65:0e:a9:7b:69:c5:ca:80: ba:06:c8:12:4c:83:a1:e1:2f:9a:a1:fd:26:4f:8a: 0b:4d:a0:9c:c8:37:2b:97:3a:0d:18:b9:8a:3e:f3: 17:67:0f:4a:b0:53:44:8a:1e:0f:10:6a:25:1d:84: b2:f6:a3:22:c1:b1:e1:7d:2f:e9:fa:86:53:25:24: 9f:ae:3a:b1:9c:47:98:62:3c:cc:49:f6:7a:c2:4c: 1c:89:12:f3:6e:57:24:fd:98:61:64:8e:69:eb:e3: 2d:71:eb:29:66:4e:e4:56:35:c1:d1:24:87:e6:07: e2:6c:d4:cd:1a:e1:38:a6:9d:46:3d:59:f8:27:21: 89:52:ab:9f:52:e3:0d:d7:cb:78:ee:c3:ee:a7:48: d7:11:bd:da:22:ff:03:ef:d7:ba:fc:7b:dc:1d:6b: 84:d9:88:19:ae:30:ae:9d:77:7b:04:a7:b2:6c:13: 9a:b0:7d:27:b8:7f:ec:ec:93:53:08:9d:12:f1:55: e9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:90:31:18:1B:4C:21:87:EC:7E:FB:68:F2:5A:7F:05:87:D1:40:36 X509v3 Authority Key Identifier: keyid:F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/8pAxGBtMIYfsfvto8lp_BYfRQDY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.41.88.0/21 91.190.232.0/22 94.127.92.0/24 94.127.94.0/23 185.33.120.0/22 IPv6: 2a01:9f00::/32 Signature Algorithm: sha256WithRSAEncryption 2b:32:53:39:80:ce:b4:d5:94:8a:49:ab:73:01:02:89:d5:fc: da:2c:1e:96:a1:7d:8d:d4:1b:19:27:d5:6d:e7:9c:ea:59:d2: cb:11:be:5f:92:76:69:68:9c:fb:1a:40:56:7e:1a:b5:70:66: 72:e4:37:76:5c:bc:f6:bf:51:35:28:d4:92:76:2d:67:90:37: 8f:8b:e0:30:2c:7e:9f:45:dd:1f:2c:80:fd:61:f8:5b:ed:8b: 72:d1:f2:5e:de:1e:aa:f7:b5:81:25:15:35:2d:42:d2:9c:1c: 1e:88:40:15:ce:78:9e:16:61:8a:bc:90:f6:31:57:2f:f4:b9: 4e:ae:33:99:a4:1a:3b:42:d2:bb:63:54:aa:e8:56:29:ba:5c: 54:c5:42:bd:1f:ea:63:83:12:88:1b:da:0b:21:57:56:90:27: cc:a1:fa:b4:4c:1d:fb:1b:31:12:cb:81:57:d5:10:7d:b4:44: 8e:af:af:14:f3:85:ae:3d:08:af:65:e5:39:e8:da:0c:81:bd: 7d:f9:dc:68:51:73:f9:6a:38:ce:b4:37:3b:29:2f:de:34:48: a7:7f:23:25:d4:ae:5e:c7:25:e6:02:18:95:69:cb:be:f4:62: 2f:78:17:82:a4:71:31:7d:53:f2:1f:8d:0a:9c:90:30:99:b7: be:cd:c1:35 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt7pKv1hslsF3j1qRGdapXqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MTFmYTVlZmYzNzBiYzM2ZDBlMzkyOTYyNWUzNDE0MDgx YTIzOTIwHhcNMjYwMTAxMjIxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjkwMzExODFiNGMyMTg3ZWM3ZWZiNjhmMjVhN2YwNTg3ZDE0MDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTfio6XuFh1lZaAutpZph1ctFRLk 4Cu3VbqN9LXQDNLNt6n4X4g7kDccYLJ6Y/1jlTVR1Gqw5AEc4bpICkiLKPfmZQ6p e2nFyoC6BsgSTIOh4S+aof0mT4oLTaCcyDcrlzoNGLmKPvMXZw9KsFNEih4PEGol HYSy9qMiwbHhfS/p+oZTJSSfrjqxnEeYYjzMSfZ6wkwciRLzblck/ZhhZI5p6+Mt cespZk7kVjXB0SSH5gfibNTNGuE4pp1GPVn4JyGJUqufUuMN18t47sPup0jXEb3a Iv8D79e6/HvcHWuE2YgZrjCunXd7BKeybBOasH0nuH/s7JNTCJ0S8VXpowIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFPKQMRgbTCGH7H77aPJafwWH0UA2MB8GA1UdIwQY MBaAFPgR+l7/NwvDbQ45KWJeNBQIGiOSMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1CSDZYdjgzQzhOdERqa3BZbDQwRkFnYUk1SS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvNGEyOTNkLTJhZDMtNDExNC1hMmIx LTFjYzUwNTUwMWEwZi8xLzhwQXhHQnRNSVlmc2Z2dG84bHBfQllmUlFEWS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNmEvNGEyOTNkLTJhZDMtNDExNC1hMmIxLTFjYzUwNTUwMWEw Zi8xLzEtQkg2WHY4M0M4TnREamtwWWw0MEZBZ2FJNUkuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwRgYIKwYBBQUHAQcBAf8ENzA1MCQEAgABMB4DBANOKVgD BAJbvugDBABef1wDBAFef14DBAK5IXgwDQQCAAIwBwMFACoBnwAwDQYJKoZIhvcN AQELBQADggEBACsyUzmAzrTVlIpJq3MBAonV/NosHpahfY3UGxkn1W3nnOpZ0ssR vl+SdmlonPsaQFZ+GrVwZnLkN3ZcvPa/UTUo1JJ2LWeQN4+L4DAsfp9F3R8sgP1h +Fvti3LR8l7eHqr3tYElFTUtQtKcHB6IQBXOeJ4WYYq8kPYxVy/0uU6uM5mkGjtC 0rtjVKroVim6XFTFQr0f6mODEogb2gshV1aQJ8yh+rRMHfsbMRLLgVfVEH20RI6v rxTzha49CK9l5Tno2gyBvX353GhRc/lqOM60NzspL940SKd/IyXUrl7HJeYCGJVp y770Yi94F4KkcTF9U/IfjQqckDCZt77NwTU= -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:45 2026 by rpki-client