This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/b8Oq_Ep9sqtIpwsplH5dCJ8wBZQ.roa File: b8Oq_Ep9sqtIpwsplH5dCJ8wBZQ.roa (raw, json) Hash identifier: yip/O7IDuP+Zo5hNsAUSiWY1IjYOk73/VabwL0sOW0w= Subject key identifier: 6F:C3:AA:FC:4A:7D:B2:AB:48:A7:0B:29:94:7E:5D:08:9F:30:05:94 Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b Certificate serial: 019B7C11FD2816C637BFA8ECA44A67F2B83C Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/b8Oq_Ep9sqtIpwsplH5dCJ8wBZQ.roa Signing time: Fri 02 Jan 2026 00:18:32 +0000 ROA not before: Fri 02 Jan 2026 00:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15744 IP address blocks: 83.230.0.0/18 maxlen: 18 83.230.80.0/20 maxlen: 20 195.82.160.0/19 maxlen: 19 212.106.128.0/19 maxlen: 19 212.106.160.0/20 maxlen: 20 213.227.64.0/20 maxlen: 20 2a01:1df::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:fd:28:16:c6:37:bf:a8:ec:a4:4a:67:f2:b8:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b Validity Not Before: Jan 2 00:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fc3aafc4a7db2ab48a70b29947e5d089f300594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:54:43:1e:07:32:62:c6:02:3d:61:9c:6e:ac: 6a:e6:d7:2e:93:be:36:90:cd:ad:10:42:b2:f6:80: 25:42:be:35:a2:de:2f:63:a7:ad:8b:89:40:4f:77: a6:8e:57:59:b4:4e:2e:ad:4e:49:d1:f7:cc:f4:1f: 7f:52:2f:91:e1:da:9b:f7:db:fc:75:ad:08:7b:8d: 87:73:1a:a4:7c:2c:2b:7d:89:97:00:7e:af:76:a7: 1d:44:f4:d6:6e:8a:29:1f:e1:bd:77:bf:72:26:8f: 32:81:5d:89:03:90:48:6d:72:a3:89:ba:de:36:02: 2f:79:bc:8f:7c:1d:d3:92:c6:c0:8f:09:71:e7:93: 79:80:32:fb:c2:44:76:6a:ee:95:71:a7:aa:d3:79: c8:8a:04:6a:a7:b6:db:cc:6f:0b:79:f2:84:ac:26: af:60:1b:4d:e6:35:99:03:80:98:4d:b9:e1:c6:56: d7:2e:56:ee:25:d2:0b:cd:20:a9:09:23:68:b8:29: fa:19:71:9b:a1:72:f8:e7:bd:f0:aa:12:39:7f:2f: 9a:9b:80:15:d6:6a:44:d2:ac:7e:f6:78:5e:1a:e6: e4:df:1e:73:33:85:5c:41:17:ff:86:e3:c2:71:d7: 41:68:9d:e0:de:d3:a4:07:de:b1:00:99:c1:db:cf: 8f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C3:AA:FC:4A:7D:B2:AB:48:A7:0B:29:94:7E:5D:08:9F:30:05:94 X509v3 Authority Key Identifier: keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/b8Oq_Ep9sqtIpwsplH5dCJ8wBZQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.230.0.0/18 83.230.80.0/20 195.82.160.0/19 212.106.128.0-212.106.175.255 213.227.64.0/20 IPv6: 2a01:1df::/32 Signature Algorithm: sha256WithRSAEncryption 24:ea:ba:ae:bd:27:b3:25:1f:43:e0:e0:33:8e:62:21:5d:29: ae:58:0a:12:87:b7:fe:23:ef:82:d4:48:1b:5c:05:7c:3b:9d: 70:49:5f:17:7c:29:b2:ff:38:82:f0:c7:da:ec:ff:22:35:05: 13:30:ea:f1:6b:16:2c:1e:96:12:d3:9b:42:b4:8a:10:67:27: 8f:40:4c:58:97:72:f7:d2:b9:15:1e:77:9a:53:b3:3d:d8:33: d3:65:f8:78:26:08:75:73:61:13:80:2e:38:18:ae:8d:14:82: 52:14:77:92:e1:22:dd:1d:22:35:05:65:9c:ad:18:f6:b0:56: b0:fd:2c:ae:dc:0f:13:2d:93:26:e8:ca:f8:97:72:ef:89:8f: 70:d7:97:f2:62:77:da:42:cc:be:7f:5f:86:78:eb:8d:09:5a: fc:2b:03:8c:9f:fd:e4:07:67:b7:97:a4:79:10:dd:9b:5c:51: dd:e5:2c:50:b3:3c:c8:c7:9e:d4:3e:73:74:6a:91:e9:fa:12: 93:bc:13:05:22:24:51:af:27:28:fd:aa:2d:0d:92:fe:5f:f2: b0:ab:14:cb:11:9c:8f:2f:f7:b7:b6:53:a0:c2:5a:1b:a8:0d: 18:9d:1c:1c:84:eb:73:cc:b2:1b:f8:fc:c1:00:62:b5:14:46: cf:b5:76:1a -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt8Ef0oFsY3v6jspEpn8rg8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNDA1Y2FhYjM0YmJmZGU2YjhlZTY2YzYwMDg2MGM2Y2U5 NmYzMmIwHhcNMjYwMTAyMDAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmMzYWFmYzRhN2RiMmFiNDhhNzBiMjk5NDdlNWQwODlmMzAwNTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FRDHgcyYsYCPWGcbqxq5tcuk742 kM2tEEKy9oAlQr41ot4vY6eti4lAT3emjldZtE4urU5J0ffM9B9/Ui+R4dqb99v8 da0Ie42HcxqkfCwrfYmXAH6vdqcdRPTWboopH+G9d79yJo8ygV2JA5BIbXKjibre NgIvebyPfB3TksbAjwlx55N5gDL7wkR2au6Vcaeq03nIigRqp7bbzG8LefKErCav YBtN5jWZA4CYTbnhxlbXLlbuJdILzSCpCSNouCn6GXGboXL4573wqhI5fy+am4AV 1mpE0qx+9nheGubk3x5zM4VcQRf/huPCcddBaJ3g3tOkB96xAJnB28+PhwIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFG/DqvxKfbKrSKcLKZR+XQifMAWUMB8GA1UdIwQY MBaAFEtAXKqzS7/ea47mbGAIYMbOlvMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYt ZDg3YWZmYjhiYzYxLzEvYjhPcV9FcDlzcXRJcHdzcGxINWRDSjh3QlpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYtZDg3YWZmYjhiYzYx LzEvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQGU+YAAwQE U+ZQAwQFw1KgMAwDBAfUaoADBATUaqADBATV40AwDQQCAAIwBwMFACoBAd8wDQYJ KoZIhvcNAQELBQADggEBACTquq69J7MlH0Pg4DOOYiFdKa5YChKHt/4j74LUSBtc BXw7nXBJXxd8KbL/OILwx9rs/yI1BRMw6vFrFiwelhLTm0K0ihBnJ49ATFiXcvfS uRUed5pTsz3YM9Nl+HgmCHVzYROALjgYro0UglIUd5LhIt0dIjUFZZytGPawVrD9 LK7cDxMtkyboyviXcu+Jj3DXl/Jid9pCzL5/X4Z4640JWvwrA4yf/eQHZ7eXpHkQ 3ZtcUd3lLFCzPMjHntQ+c3Rqken6EpO8EwUiJFGvJyj9qi0Nkv5f8rCrFMsRnI8v 97e2U6DCWhuoDRidHByE63PMshv4/MEAYrUURs+1dho= -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:09 2026 by rpki-client