This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/IkbW3p7UPv8rk58pgNjSuxqf1sA.roa File: IkbW3p7UPv8rk58pgNjSuxqf1sA.roa (raw, json) Hash identifier: 6macv08vdsEcfjTUw6WLKYaZ1q5waPGq5JAJEmg9ESw= Subject key identifier: 22:46:D6:DE:9E:D4:3E:FF:2B:93:9F:29:80:D8:D2:BB:1A:9F:D6:C0 Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d Certificate serial: 019B7AC825AF5FC51C5EDE2A320C3430C2DC Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/IkbW3p7UPv8rk58pgNjSuxqf1sA.roa Signing time: Thu 01 Jan 2026 18:18:15 +0000 ROA not before: Thu 01 Jan 2026 18:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2856 IP address blocks: 82.140.134.0/24 maxlen: 24 82.140.138.0/24 maxlen: 24 82.140.143.0/24 maxlen: 24 82.140.170.0/24 maxlen: 24 84.46.177.0/24 maxlen: 24 84.46.181.0/24 maxlen: 24 84.46.183.0/24 maxlen: 24 84.46.188.0/24 maxlen: 24 84.46.190.0/24 maxlen: 24 84.46.191.0/24 maxlen: 24 84.46.194.0/24 maxlen: 24 86.38.56.0/24 maxlen: 24 86.38.63.0/24 maxlen: 24 86.38.65.0/24 maxlen: 24 86.38.67.0/24 maxlen: 24 86.38.68.0/24 maxlen: 24 86.38.86.0/24 maxlen: 24 86.38.93.0/24 maxlen: 24 86.38.118.0/24 maxlen: 24 86.38.123.0/24 maxlen: 24 86.38.148.0/24 maxlen: 24 86.38.193.0/24 maxlen: 24 86.38.233.0/24 maxlen: 24 86.38.244.0/24 maxlen: 24 89.117.183.0/24 maxlen: 24 89.117.198.0/24 maxlen: 24 89.117.203.0/24 maxlen: 24 89.117.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:25:af:5f:c5:1c:5e:de:2a:32:0c:34:30:c2:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d Validity Not Before: Jan 1 18:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2246d6de9ed43eff2b939f2980d8d2bb1a9fd6c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cf:98:16:d9:de:17:04:1b:01:17:3b:f5:b9: a2:5d:52:4a:2c:53:45:dd:d6:cb:b5:81:80:e6:29: 23:fe:99:84:8d:76:d8:10:4f:47:03:e6:71:d4:56: 54:3c:12:c8:99:d9:be:65:eb:ae:90:e7:06:07:ec: 3f:74:a6:cc:0e:60:ac:08:bf:ad:90:8d:37:cb:ab: 2f:31:14:49:d4:3c:6c:4d:5c:0f:14:7f:39:85:eb: 32:69:0a:66:f9:ab:fa:cf:a2:4c:ef:07:5d:da:c1: 72:d1:5a:c2:d0:4e:eb:06:1b:07:d0:4f:be:2b:a7: 6f:45:ed:63:7f:a7:80:27:40:62:0a:b0:ab:d9:9d: 53:99:82:7c:83:0d:1d:96:ff:08:e9:ce:e1:b1:88: fa:33:76:22:d7:58:4e:ed:09:41:85:9c:99:ca:64: ed:6e:95:20:d3:20:8d:81:cf:e5:d8:3c:51:3b:f7: f9:ef:c1:1b:91:cc:7d:93:d6:75:66:2b:a3:d1:17: 5b:ab:4d:73:6c:26:3d:68:4e:d0:4a:a6:98:ea:06: c3:d5:f7:7a:04:c3:fb:78:6d:3a:53:03:0e:42:a0: 5a:d6:4f:0a:51:1f:c0:0f:95:40:62:22:22:5d:02: bf:71:20:0b:a2:c8:78:06:79:33:c6:a1:90:8e:bd: 49:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:46:D6:DE:9E:D4:3E:FF:2B:93:9F:29:80:D8:D2:BB:1A:9F:D6:C0 X509v3 Authority Key Identifier: keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/IkbW3p7UPv8rk58pgNjSuxqf1sA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.140.134.0/24 82.140.138.0/24 82.140.143.0/24 82.140.170.0/24 84.46.177.0/24 84.46.181.0/24 84.46.183.0/24 84.46.188.0/24 84.46.190.0/23 84.46.194.0/24 86.38.56.0/24 86.38.63.0/24 86.38.65.0/24 86.38.67.0-86.38.68.255 86.38.86.0/24 86.38.93.0/24 86.38.118.0/24 86.38.123.0/24 86.38.148.0/24 86.38.193.0/24 86.38.233.0/24 86.38.244.0/24 89.117.183.0/24 89.117.198.0/24 89.117.203.0/24 89.117.235.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:f8:7e:c6:0c:f2:4a:09:49:01:11:ad:27:18:75:4b:7e:28: 87:e8:58:27:c5:17:93:79:ee:79:f3:fe:8a:1f:cd:af:c3:93: 66:06:b5:87:f3:5a:41:2c:fe:1b:9d:87:60:a4:3e:07:fc:e1: bc:ff:dd:56:a6:3d:25:c3:f9:9f:ee:35:44:23:e0:4d:ea:c2: f9:c0:03:7c:ae:ad:5e:34:07:4f:80:4f:dd:0a:1e:4e:b5:ae: aa:94:55:df:5a:0a:56:f7:48:a8:70:9b:cd:31:4b:db:6d:ef: fa:48:2c:fa:e3:e5:e7:bd:3a:ff:fc:90:0e:9f:54:31:c3:c1: bf:e8:5d:4a:d8:ce:1b:20:83:83:14:88:ba:21:f8:4c:62:30: b1:b1:e1:33:58:d0:32:26:4c:5e:4f:7e:bc:58:3c:45:84:fc: b3:f1:9e:b6:3b:67:b3:9e:b2:65:e2:69:68:6e:59:5e:ed:ea: a0:14:a6:30:59:ec:57:ba:06:05:cc:c0:5c:16:43:a7:1a:77: bf:bd:7d:c6:27:a6:eb:f6:67:00:c0:fc:71:1b:7a:e8:94:06: 10:1e:22:e1:8a:af:08:e8:c8:df:4c:67:e2:f0:72:b0:b5:a3: 5e:09:e7:1e:2f:2b:eb:dd:0f:16:bc:c4:d8:67:24:ce:a6:7e: 0f:3a:2d:0a -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt6yCWvX8UcXt4qMgw0MMLcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3 MTE4MGQwHhcNMjYwMTAxMTgxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjQ2ZDZkZTllZDQzZWZmMmI5MzlmMjk4MGQ4ZDJiYjFhOWZkNmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8+YFtneFwQbARc79bmiXVJKLFNF 3dbLtYGA5ikj/pmEjXbYEE9HA+Zx1FZUPBLImdm+ZeuukOcGB+w/dKbMDmCsCL+t kI03y6svMRRJ1DxsTVwPFH85hesyaQpm+av6z6JM7wdd2sFy0VrC0E7rBhsH0E++ K6dvRe1jf6eAJ0BiCrCr2Z1TmYJ8gw0dlv8I6c7hsYj6M3Yi11hO7QlBhZyZymTt bpUg0yCNgc/l2DxRO/f578Ebkcx9k9Z1Ziuj0Rdbq01zbCY9aE7QSqaY6gbD1fd6 BMP7eG06UwMOQqBa1k8KUR/AD5VAYiIiXQK/cSALosh4BnkzxqGQjr1JNQIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFCJG1t6e1D7/K5OfKYDY0rsan9bAMB8GA1UdIwQY MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt MDQ2ODA0MjQ4NmRjLzEvSWtiVzNwN1VQdjhyazU4cGdOalN1eHFmMXNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHBBggrBgEFBQcBBwEB/wSBsTCBrjCBqwQCAAEwgaQDBABS jIYDBABSjIoDBABSjI8DBABSjKoDBABULrEDBABULrUDBABULrcDBABULrwDBAFU Lr4DBABULsIDBABWJjgDBABWJj8DBABWJkEwDAMEAFYmQwMEAFYmRAMEAFYmVgME AFYmXQMEAFYmdgMEAFYmewMEAFYmlAMEAFYmwQMEAFYm6QMEAFYm9AMEAFl1twME AFl1xgMEAFl1ywMEAFl16zANBgkqhkiG9w0BAQsFAAOCAQEAjvh+xgzySglJARGt Jxh1S34oh+hYJ8UXk3nuefP+ih/Nr8OTZga1h/NaQSz+G52HYKQ+B/zhvP/dVqY9 JcP5n+41RCPgTerC+cADfK6tXjQHT4BP3QoeTrWuqpRV31oKVvdIqHCbzTFL223v +kgs+uPl5706//yQDp9UMcPBv+hdStjOGyCDgxSIuiH4TGIwsbHhM1jQMiZMXk9+ vFg8RYT8s/Getjtns56yZeJpaG5ZXu3qoBSmMFnsV7oGBczAXBZDpxp3v719xiem 6/ZnAMD8cRt66JQGEB4i4YqvCOjI30xn4vBysLWjXgnnHi8r690PFrzE2GckzqZ+ DzotCg== -----END CERTIFICATE-----Generated at Thu Jan 8 17:33:29 2026 by rpki-client