This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/m8_x6eGxxmnm18GfDkKHFQGwuD0.roa File: m8_x6eGxxmnm18GfDkKHFQGwuD0.roa (raw, json) Hash identifier: fWokT3tKg6M2rh7ZEVaUnntTBCY1Lio+yn/dnJhltnc= Subject key identifier: 9B:CF:F1:E9:E1:B1:C6:69:E6:D7:C1:9F:0E:42:87:15:01:B0:B8:3D Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b Certificate serial: 019B7C13415ECCA4C4751EDF1730EB1A7856 Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/m8_x6eGxxmnm18GfDkKHFQGwuD0.roa Signing time: Fri 02 Jan 2026 00:19:55 +0000 ROA not before: Fri 02 Jan 2026 00:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215826 IP address blocks: 185.100.157.0/24 maxlen: 24 185.102.115.0/24 maxlen: 24 185.177.239.0/24 maxlen: 24 193.221.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:41:5e:cc:a4:c4:75:1e:df:17:30:eb:1a:78:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b Validity Not Before: Jan 2 00:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bcff1e9e1b1c669e6d7c19f0e42871501b0b83d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3e:7b:4d:3d:9b:5b:8d:5e:10:66:61:2c:4c: 92:39:4e:ab:c4:36:91:c8:5f:bf:0b:98:57:ac:f5: 3c:a9:b5:fc:d0:84:c4:46:b9:23:4a:c0:86:ee:aa: 75:ff:9a:bb:c2:11:b4:f4:b2:df:da:1b:3d:3a:1a: 0b:57:cf:86:46:f9:ab:cd:59:7f:8b:ec:09:77:72: ff:53:5e:83:f7:50:2b:d5:63:7b:05:de:a6:3d:18: 47:02:78:78:c8:7e:93:45:08:9e:5a:44:06:e2:68: 02:17:3c:45:98:3e:b1:d1:c8:30:e4:2c:a7:ed:99: 87:42:a4:cd:32:ba:99:b5:3a:75:99:7e:da:29:78: 18:d1:26:41:7e:50:15:50:3e:cf:aa:2c:7e:34:7d: da:bf:58:cd:81:eb:94:99:d2:24:87:6b:23:54:ec: 36:fc:75:86:9e:82:16:1e:ca:dc:6e:d0:1d:a6:3e: 81:74:ca:ad:f9:0c:6f:c1:ae:86:59:5d:00:f2:37: fd:04:0f:cc:5d:18:3d:58:66:f9:ec:2d:9e:16:b9: 08:8f:f9:54:c9:ec:d9:2f:52:02:55:b1:2f:d7:dc: 52:04:3e:0d:30:47:13:38:ba:fc:fa:fc:70:52:ac: 03:6f:ff:34:9b:ae:c4:c9:e0:51:d2:8d:fd:34:e5: 80:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CF:F1:E9:E1:B1:C6:69:E6:D7:C1:9F:0E:42:87:15:01:B0:B8:3D X509v3 Authority Key Identifier: keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/m8_x6eGxxmnm18GfDkKHFQGwuD0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.100.157.0/24 185.102.115.0/24 185.177.239.0/24 193.221.200.0/23 Signature Algorithm: sha256WithRSAEncryption 08:57:25:86:ee:84:a6:b1:11:52:91:71:cb:bc:9c:fc:bf:c5: 0e:2e:1d:71:48:8c:15:d5:2b:cb:3f:05:6c:79:db:48:63:b6: 34:3e:de:e2:55:cb:59:d4:b7:b9:86:07:08:79:11:e1:ef:57: 04:fa:d3:b4:58:38:da:80:90:aa:2a:09:93:a4:2f:04:90:8b: 3b:56:24:57:3f:ac:06:ff:1e:54:45:15:ac:a8:6a:ed:7d:23: fa:cb:7f:d1:81:ac:23:bb:b6:c3:79:de:d7:71:48:68:e7:39: 23:ad:84:c7:03:44:e0:53:61:c7:aa:65:e9:94:8a:6a:01:fd: bc:18:0b:46:20:84:27:41:db:b6:bf:04:31:8f:f4:c8:f3:00: a4:06:90:60:53:2e:cc:1c:8e:c2:4e:10:f1:cb:48:ad:a0:86: b2:9f:ea:1c:fc:ae:3e:ae:cd:c5:8f:76:5c:44:19:66:a9:c5: 82:06:2a:78:5f:91:42:6b:53:94:a9:7d:ff:97:f5:30:5b:23: 54:4f:99:c0:07:23:96:ea:1f:3a:47:b0:2e:b7:08:eb:2b:65: a7:da:3f:11:8c:da:ac:68:ac:2a:d7:b2:47:6d:59:62:9f:3a: e7:b9:bf:d3:aa:f6:1f:37:1c:fc:d5:6d:f3:ba:66:09:db:5a: d9:72:53:09 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8E0FezKTEdR7fFzDrGnhWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4 OWU4NWIwHhcNMjYwMTAyMDAxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmNmZjFlOWUxYjFjNjY5ZTZkN2MxOWYwZTQyODcxNTAxYjBiODNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT57TT2bW41eEGZhLEySOU6rxDaR yF+/C5hXrPU8qbX80ITERrkjSsCG7qp1/5q7whG09LLf2hs9OhoLV8+GRvmrzVl/ i+wJd3L/U16D91Ar1WN7Bd6mPRhHAnh4yH6TRQieWkQG4mgCFzxFmD6x0cgw5Cyn 7ZmHQqTNMrqZtTp1mX7aKXgY0SZBflAVUD7Pqix+NH3av1jNgeuUmdIkh2sjVOw2 /HWGnoIWHsrcbtAdpj6BdMqt+Qxvwa6GWV0A8jf9BA/MXRg9WGb57C2eFrkIj/lU yezZL1ICVbEv19xSBD4NMEcTOLr8+vxwUqwDb/80m67EyeBR0o39NOWAuQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJvP8enhscZp5tfBnw5ChxUBsLg9MB8GA1UdIwQY MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt NmVlNTM0ZDkyZTUyLzEvbThfeDZlR3h4bW5tMThHZkRrS0hGUUd3dUQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAuWSdAwQA uWZzAwQAubHvAwQBwd3IMA0GCSqGSIb3DQEBCwUAA4IBAQAIVyWG7oSmsRFSkXHL vJz8v8UOLh1xSIwV1SvLPwVsedtIY7Y0Pt7iVctZ1Le5hgcIeRHh71cE+tO0WDja gJCqKgmTpC8EkIs7ViRXP6wG/x5URRWsqGrtfSP6y3/Rgawju7bDed7XcUho5zkj rYTHA0TgU2HHqmXplIpqAf28GAtGIIQnQdu2vwQxj/TI8wCkBpBgUy7MHI7CThDx y0itoIayn+oc/K4+rs3Fj3ZcRBlmqcWCBip4X5FCa1OUqX3/l/UwWyNUT5nAByOW 6h86R7AutwjrK2Wn2j8RjNqsaKwq17JHbVlinzrnub/TqvYfNxz81W3zumYJ21rZ clMJ -----END CERTIFICATE-----Generated at Tue Jan 20 19:51:15 2026 by rpki-client