This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/8tBydKhivtaaA2YrjstORqOwPZ8.roa File: 8tBydKhivtaaA2YrjstORqOwPZ8.roa (raw, json) Hash identifier: 8g5rTWXRC9HIHz7K2ellDpMM70dVqGZuBdKss0wihGU= Subject key identifier: F2:D0:72:74:A8:62:BE:D6:9A:03:66:2B:8E:CB:4E:46:A3:B0:3D:9F Certificate issuer: /CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6 Certificate serial: 019B7EA5039EE8343E248F7DFFA12B62C6B8 Authority key identifier: E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/8tBydKhivtaaA2YrjstORqOwPZ8.roa Signing time: Fri 02 Jan 2026 12:18:22 +0000 ROA not before: Fri 02 Jan 2026 12:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43530 IP address blocks: 5.35.128.0/19 maxlen: 19 37.75.192.0/21 maxlen: 21 46.245.128.0/21 maxlen: 21 78.110.144.0/20 maxlen: 20 176.62.240.0/20 maxlen: 20 185.222.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:03:9e:e8:34:3e:24:8f:7d:ff:a1:2b:62:c6:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6 Validity Not Before: Jan 2 12:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2d07274a862bed69a03662b8ecb4e46a3b03d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2c:47:be:9d:ea:45:95:e0:1f:93:fa:ca:c5: 5e:14:57:08:be:5d:45:18:dd:78:dc:e4:1f:4b:52: 4b:fd:07:83:9c:2d:5c:74:13:86:48:b4:cc:02:ff: d3:38:33:71:14:05:69:c3:92:10:e3:be:9a:9f:3b: 95:31:20:08:66:24:44:89:1d:e3:d9:d6:0b:55:a8: b7:3b:c2:17:d6:1e:03:a3:38:05:7e:57:42:c7:ca: 55:86:2b:a8:f5:b0:fb:ef:c0:30:f8:4b:8c:f7:6b: 3a:fd:9c:a9:dc:73:b3:a9:b6:4c:07:d4:c6:d4:57: d1:a1:76:ed:c9:30:d5:db:08:e0:8f:69:88:c6:67: c7:0c:72:21:ba:aa:a0:d9:a8:7f:b1:9e:45:a7:6e: a6:de:65:c0:6c:17:18:88:9b:4d:55:65:4d:0c:e7: d3:e4:fe:c5:05:bc:0b:ef:f8:e0:95:ba:29:b2:2a: 92:86:e7:c3:e2:70:eb:1a:fb:0a:4b:71:f3:df:f0: 16:b6:ff:25:43:1b:62:44:de:e1:f8:e7:59:0c:02: 20:96:64:6c:4a:0c:36:4f:41:6d:ab:a2:c3:96:95: f3:32:5c:ba:8c:91:dd:4f:c0:95:08:e8:f3:e2:c6: 04:f8:3a:11:0b:95:85:67:0b:4d:b2:28:97:9d:a9: c1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D0:72:74:A8:62:BE:D6:9A:03:66:2B:8E:CB:4E:46:A3:B0:3D:9F X509v3 Authority Key Identifier: keyid:E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/8tBydKhivtaaA2YrjstORqOwPZ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.35.128.0/19 37.75.192.0/21 46.245.128.0/21 78.110.144.0/20 176.62.240.0/20 185.222.236.0/22 Signature Algorithm: sha256WithRSAEncryption 38:a8:b7:79:70:8d:ec:06:af:c0:d4:21:27:17:fd:0e:ce:40: a8:ed:ec:ff:6d:1e:00:28:a5:8d:c4:34:0b:40:85:79:59:9f: 8a:5f:8e:0f:3f:85:29:3a:2b:23:99:1f:ca:8e:f5:bf:bc:f0: 2a:fb:37:12:c0:25:e7:4c:ec:01:b5:1d:b7:47:9f:e8:40:bb: 08:31:6e:d8:8a:6d:5f:c1:f3:41:de:50:38:4f:a4:de:d6:44: b5:e8:46:4d:55:63:39:e2:78:42:57:af:ec:2a:99:07:2c:79: 39:06:a5:10:21:5b:81:48:b4:46:22:04:0f:b3:11:98:03:d6: c4:e5:a5:5d:a4:29:ba:e0:5c:93:05:59:74:de:b1:a4:53:15: eb:6b:de:76:7a:da:98:84:7b:5c:54:1b:4d:7c:3c:dc:8f:50: 0d:d3:aa:cc:d3:b2:ce:c2:ce:96:a4:ff:f2:1a:03:b8:ab:23: 8e:c7:f9:f1:6e:7d:bd:1c:cc:a3:0a:6c:58:11:a4:5b:d2:0c: 8b:a6:4c:62:3b:17:1a:38:68:56:99:38:61:9e:d1:0f:66:db: 3b:45:4c:a3:7c:0b:54:ad:b0:c5:ec:35:76:09:dc:50:3b:5a: cb:4e:3e:ce:08:66:77:ed:4b:38:e8:e4:85:8d:01:a7:8f:c0: fe:3a:fe:99 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt+pQOe6DQ+JI99/6ErYsa4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMGZiYjliM2NkMWMyMTZhZGM2OTllNWVkYWQ1ZjUzMWQ5 YWZjYjYwHhcNMjYwMTAyMTIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmQwNzI3NGE4NjJiZWQ2OWEwMzY2MmI4ZWNiNGU0NmEzYjAzZDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuixHvp3qRZXgH5P6ysVeFFcIvl1F GN143OQfS1JL/QeDnC1cdBOGSLTMAv/TODNxFAVpw5IQ476anzuVMSAIZiREiR3j 2dYLVai3O8IX1h4DozgFfldCx8pVhiuo9bD778Aw+EuM92s6/Zyp3HOzqbZMB9TG 1FfRoXbtyTDV2wjgj2mIxmfHDHIhuqqg2ah/sZ5Fp26m3mXAbBcYiJtNVWVNDOfT 5P7FBbwL7/jglbopsiqShufD4nDrGvsKS3Hz3/AWtv8lQxtiRN7h+OdZDAIglmRs Sgw2T0Ftq6LDlpXzMly6jJHdT8CVCOjz4sYE+DoRC5WFZwtNsiiXnanB6QIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFPLQcnSoYr7WmgNmK47LTkajsD2fMB8GA1UdIwQY MBaAFOEPu5s80cIWrcaZ5e2tX1Mdmvy2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFEtN216elJ3aGF0eHBubDdhMWZVeDJhX0xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84M2ZmOGYtMTZjYS00MjQ5LWI3NzQt NjJhMjhmM2UwMDFjLzEvOHRCeWRLaGl2dGFhQTJZcmpzdE9ScU93UFo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi84M2ZmOGYtMTZjYS00MjQ5LWI3NzQtNjJhMjhmM2UwMDFj LzEvNFEtN216elJ3aGF0eHBubDdhMWZVeDJhX0xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQFBSOAAwQD JUvAAwQDLvWAAwQETm6QAwQEsD7wAwQCud7sMA0GCSqGSIb3DQEBCwUAA4IBAQA4 qLd5cI3sBq/A1CEnF/0OzkCo7ez/bR4AKKWNxDQLQIV5WZ+KX44PP4UpOisjmR/K jvW/vPAq+zcSwCXnTOwBtR23R5/oQLsIMW7Yim1fwfNB3lA4T6Te1kS16EZNVWM5 4nhCV6/sKpkHLHk5BqUQIVuBSLRGIgQPsxGYA9bE5aVdpCm64FyTBVl03rGkUxXr a952etqYhHtcVBtNfDzcj1AN06rM07LOws6WpP/yGgO4qyOOx/nxbn29HMyjCmxY EaRb0gyLpkxiOxcaOGhWmThhntEPZts7RUyjfAtUrbDF7DV2CdxQO1rLTj7OCGZ3 7Us46OSFjQGnj8D+Ov6Z -----END CERTIFICATE-----Generated at Mon Feb 9 23:54:38 2026 by rpki-client