This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/u7nEbY5NwbL5HXW0l-V-8pl_64s.roa File: u7nEbY5NwbL5HXW0l-V-8pl_64s.roa (raw, json) Hash identifier: LrWkvx/a3seM8ivTnZCNGMGBOaWSwFKUegrXwjkMzAQ= Subject key identifier: BB:B9:C4:6D:8E:4D:C1:B2:F9:1D:75:B4:97:E5:7E:F2:99:7F:EB:8B Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d Certificate serial: 019B7AC8317DD772949F552262A319CB94EE Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/u7nEbY5NwbL5HXW0l-V-8pl_64s.roa Signing time: Thu 01 Jan 2026 18:18:18 +0000 ROA not before: Thu 01 Jan 2026 18:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210906 IP address blocks: 82.140.129.0/24 maxlen: 24 84.46.204.0/24 maxlen: 24 84.46.207.0/24 maxlen: 24 86.38.26.0/24 maxlen: 24 86.38.36.0/24 maxlen: 24 86.38.154.0/24 maxlen: 24 86.38.222.0/24 maxlen: 24 86.38.234.0/24 maxlen: 24 86.38.236.0/24 maxlen: 24 89.116.14.0/24 maxlen: 24 89.116.71.0/24 maxlen: 24 89.116.77.0/24 maxlen: 24 89.116.78.0/24 maxlen: 24 89.116.90.0/24 maxlen: 24 89.116.93.0/24 maxlen: 24 89.116.97.0/24 maxlen: 24 89.117.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:31:7d:d7:72:94:9f:55:22:62:a3:19:cb:94:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d Validity Not Before: Jan 1 18:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbb9c46d8e4dc1b2f91d75b497e57ef2997feb8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e3:a4:58:55:4d:66:5a:fa:53:48:f6:2a:5c: 87:5f:84:e7:ab:89:6c:ba:27:d9:c4:61:bb:41:d3: 4a:b4:3f:ef:6e:ef:94:c5:70:c7:0c:f8:18:cd:93: e9:25:06:f6:ce:94:ce:69:2b:88:f5:98:93:18:7a: 4f:61:ab:70:7b:99:47:f7:12:5e:93:16:60:50:9a: 3f:0c:e8:d0:7e:27:58:da:4f:a6:af:af:07:a5:e3: 3b:27:5f:df:63:f0:60:46:90:72:48:f5:43:a4:c0: 70:f5:7f:78:45:ae:0d:dd:9c:e8:f0:02:dd:5e:a7: 92:52:57:04:af:07:76:ba:04:27:9b:c9:86:1c:81: 73:ff:a6:19:d9:4c:82:a5:b5:79:06:7d:4f:70:7d: 70:6b:6f:3d:65:00:9d:a4:59:c6:90:3b:2d:79:3a: 15:ee:d7:ef:5b:22:d0:8e:ea:a9:7f:87:ca:f2:6c: 4c:2c:d7:65:e6:ad:c2:ad:db:cb:61:c7:d9:7a:51: d0:65:2c:f4:4b:b8:57:c4:9a:bd:a3:b3:0c:95:73: 36:d8:d2:83:4d:96:1a:11:96:83:f3:bd:a2:55:d8: d9:3c:37:f0:4d:27:36:96:a1:d4:6a:6a:7e:44:81: 18:6d:4c:58:5d:6e:54:ce:88:3a:3e:89:29:8c:67: 64:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B9:C4:6D:8E:4D:C1:B2:F9:1D:75:B4:97:E5:7E:F2:99:7F:EB:8B X509v3 Authority Key Identifier: keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/u7nEbY5NwbL5HXW0l-V-8pl_64s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.140.129.0/24 84.46.204.0/24 84.46.207.0/24 86.38.26.0/24 86.38.36.0/24 86.38.154.0/24 86.38.222.0/24 86.38.234.0/24 86.38.236.0/24 89.116.14.0/24 89.116.71.0/24 89.116.77.0-89.116.78.255 89.116.90.0/24 89.116.93.0/24 89.116.97.0/24 89.117.243.0/24 Signature Algorithm: sha256WithRSAEncryption 27:af:a3:2b:b6:74:64:2c:51:fe:26:87:dc:fc:44:37:d7:fc: 40:09:83:39:58:38:39:69:2e:85:ce:12:99:ac:fe:07:7b:8d: 6c:40:4d:72:60:a0:0d:f1:d1:7d:a9:45:96:0c:e1:6c:80:7b: b1:f1:d7:92:c3:33:cf:ea:de:f3:60:da:0c:48:1a:11:2e:50: e8:60:5b:49:02:c0:4d:46:ed:2c:76:af:fe:f3:e5:4b:22:7a: e3:17:6b:ad:6a:44:7c:ba:30:f4:15:3f:aa:7f:d9:c5:51:25: f6:64:52:9b:10:81:f3:66:b9:60:ed:d4:c3:11:f0:f0:65:b4: 1f:74:76:bb:49:59:91:4a:33:29:c9:2c:f0:80:be:5e:50:65: 80:55:eb:38:6f:1f:30:f8:26:05:8c:df:3a:8b:4a:a1:1f:64: 9c:a9:b7:a4:05:24:27:41:22:ca:9b:9c:0a:21:62:53:7c:bc: 10:61:c8:2e:7a:b7:ac:5c:0e:af:e6:9c:43:37:5a:37:18:8e: e2:ed:a6:c7:3f:cd:1b:eb:47:e5:f0:b4:5c:60:43:43:30:40: 77:3c:50:ee:bb:ba:68:06:30:3f:f9:c1:5a:6c:0f:cf:dc:b2: a9:fe:3f:57:25:11:38:36:0a:21:bd:c0:16:17:cb:f0:91:3f: 4c:46:c4:15 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgISAZt6yDF913KUn1UiYqMZy5TuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3 MTE4MGQwHhcNMjYwMTAxMTgxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmI5YzQ2ZDhlNGRjMWIyZjkxZDc1YjQ5N2U1N2VmMjk5N2ZlYjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOOkWFVNZlr6U0j2KlyHX4Tnq4ls uifZxGG7QdNKtD/vbu+UxXDHDPgYzZPpJQb2zpTOaSuI9ZiTGHpPYatwe5lH9xJe kxZgUJo/DOjQfidY2k+mr68HpeM7J1/fY/BgRpBySPVDpMBw9X94Ra4N3Zzo8ALd XqeSUlcErwd2ugQnm8mGHIFz/6YZ2UyCpbV5Bn1PcH1wa289ZQCdpFnGkDsteToV 7tfvWyLQjuqpf4fK8mxMLNdl5q3CrdvLYcfZelHQZSz0S7hXxJq9o7MMlXM22NKD TZYaEZaD872iVdjZPDfwTSc2lqHUamp+RIEYbUxYXW5Uzog6PokpjGdkEQIDAQAB o4ICbDCCAmgwHQYDVR0OBBYEFLu5xG2OTcGy+R11tJflfvKZf+uLMB8GA1UdIwQY MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt MDQ2ODA0MjQ4NmRjLzEvdTduRWJZNU53Ykw1SFhXMGwtVi04cGxfNjRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwbgQCAAEwaAMEAFKMgQME AFQuzAMEAFQuzwMEAFYmGgMEAFYmJAMEAFYmmgMEAFYm3gMEAFYm6gMEAFYm7AME AFl0DgMEAFl0RzAMAwQAWXRNAwQAWXROAwQAWXRaAwQAWXRdAwQAWXRhAwQAWXXz MA0GCSqGSIb3DQEBCwUAA4IBAQAnr6MrtnRkLFH+Jofc/EQ31/xACYM5WDg5aS6F zhKZrP4He41sQE1yYKAN8dF9qUWWDOFsgHux8deSwzPP6t7zYNoMSBoRLlDoYFtJ AsBNRu0sdq/+8+VLInrjF2utakR8ujD0FT+qf9nFUSX2ZFKbEIHzZrlg7dTDEfDw ZbQfdHa7SVmRSjMpySzwgL5eUGWAVes4bx8w+CYFjN86i0qhH2ScqbekBSQnQSLK m5wKIWJTfLwQYcgueresXA6v5pxDN1o3GI7i7abHP80b60fl8LRcYENDMEB3PFDu u7poBjA/+cFabA/P3LKp/j9XJRE4NgohvcAWF8vwkT9MRsQV -----END CERTIFICATE-----Generated at Wed Jan 21 13:24:54 2026 by rpki-client