This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8UFGpbA8MDgJIJo8GfPEXs7dPEw.roa File: 8UFGpbA8MDgJIJo8GfPEXs7dPEw.roa (raw, json) Hash identifier: saYZDeX4Ot6QjGMv9hDM9mIHKuSoX0l+GffuAagEH4k= Subject key identifier: F1:41:46:A5:B0:3C:30:38:09:20:9A:3C:19:F3:C4:5E:CE:DD:3C:4C Certificate issuer: /CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971 Certificate serial: 019B79ED5D22EA2C74440BAEA5B05F737794 Authority key identifier: F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8UFGpbA8MDgJIJo8GfPEXs7dPEw.roa Signing time: Thu 01 Jan 2026 14:19:17 +0000 ROA not before: Thu 01 Jan 2026 14:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205718 IP address blocks: 185.208.220.0/22 maxlen: 22 2a09:8ac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:5d:22:ea:2c:74:44:0b:ae:a5:b0:5f:73:77:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971 Validity Not Before: Jan 1 14:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f14146a5b03c303809209a3c19f3c45ecedd3c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:80:d4:52:9d:9f:69:45:f8:d7:3e:7b:0a:73: 79:ee:98:ad:65:f3:f1:79:7d:7e:66:fd:5c:45:2e: 7e:13:2b:a8:eb:aa:0a:8c:9a:fb:50:4a:94:61:c2: 9a:35:3e:f9:dd:e6:26:34:85:d5:2e:a2:27:29:df: 07:b4:f8:db:0a:ba:fe:b5:5c:db:a6:9f:93:24:13: 5e:c4:b9:b8:1b:65:35:02:98:58:9d:b1:a1:56:f5: 51:b8:a3:87:93:aa:2b:49:2b:df:03:6e:7e:63:07: d6:75:57:fc:75:3f:b3:7e:08:ac:9c:5b:60:36:79: 77:b9:de:44:20:84:ce:dd:8c:73:bc:53:9f:9e:ca: a5:2b:a8:aa:69:91:78:58:bc:b4:c9:be:59:bb:0e: 85:48:31:6a:77:dd:6f:78:45:68:3c:71:fc:ac:56: 60:a7:63:40:c5:74:fe:e4:9d:83:32:7e:98:30:67: b4:c6:6f:2e:ef:7c:3b:be:29:39:da:a6:f4:b4:b9: 81:87:ff:92:59:aa:10:8c:b1:fd:7a:93:b3:e7:2a: af:07:2f:13:0d:4c:68:0e:48:96:70:91:97:78:82: f1:fd:fc:0d:33:74:2b:c1:f5:90:d4:8f:1e:49:77: 08:d3:36:5e:8e:39:d4:c1:0b:f8:49:ba:aa:00:84: 57:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:41:46:A5:B0:3C:30:38:09:20:9A:3C:19:F3:C4:5E:CE:DD:3C:4C X509v3 Authority Key Identifier: keyid:F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8UFGpbA8MDgJIJo8GfPEXs7dPEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.208.220.0/22 IPv6: 2a09:8ac0::/32 Signature Algorithm: sha256WithRSAEncryption 77:95:54:39:78:88:f0:61:fa:c9:e9:90:1c:c5:12:27:26:73: 1f:70:f6:c1:21:92:76:ab:fd:da:23:d3:4b:fa:a2:65:43:bb: 30:44:11:a3:9a:b9:4b:8a:95:8f:fe:f6:2d:70:9b:2d:62:49: 59:3b:2c:ee:b4:5f:e7:fa:c9:b9:4c:b7:26:9a:6c:0e:04:18: de:17:fb:f7:81:b8:aa:4c:03:a7:6f:ed:70:2b:88:cf:c6:bf: a9:7a:91:7d:a2:4b:4e:e1:48:d9:d5:15:d0:90:7e:c8:29:af: 28:f0:02:a3:bb:7a:d4:49:6a:68:13:9b:6e:4b:f5:99:89:95: 82:50:5d:7d:59:28:2e:8c:a9:a6:32:d1:9a:17:57:a7:56:bf: 93:48:42:d4:80:ab:94:ee:3f:39:1c:a6:f0:5c:e0:fd:14:94: 52:08:4d:f4:40:54:d5:22:c2:e8:85:af:11:21:1b:65:36:c5: 90:e1:b7:48:60:d0:f8:81:8b:e5:b9:09:bc:2d:e1:5e:e7:25: a3:20:2b:76:2a:7f:50:4f:6c:f6:ba:12:1f:50:67:9c:30:23: d6:41:b9:71:ba:b0:78:eb:59:b4:68:39:07:43:6e:13:37:af: 5d:99:8e:25:31:73:d5:53:d9:dd:41:f4:b8:62:3a:2c:36:24: c6:a1:fd:80 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57V0i6ix0RAuupbBfc3eUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMjQ2MzQ2ZGRiM2U2YmE2ZTg5MDAwNWI4ODE0OGQyZDZj ZTk5NzEwHhcNMjYwMTAxMTQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTQxNDZhNWIwM2MzMDM4MDkyMDlhM2MxOWYzYzQ1ZWNlZGQzYzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoDUUp2faUX41z57CnN57pitZfPx eX1+Zv1cRS5+Eyuo66oKjJr7UEqUYcKaNT753eYmNIXVLqInKd8HtPjbCrr+tVzb pp+TJBNexLm4G2U1AphYnbGhVvVRuKOHk6orSSvfA25+YwfWdVf8dT+zfgisnFtg Nnl3ud5EIITO3YxzvFOfnsqlK6iqaZF4WLy0yb5Zuw6FSDFqd91veEVoPHH8rFZg p2NAxXT+5J2DMn6YMGe0xm8u73w7vik52qb0tLmBh/+SWaoQjLH9epOz5yqvBy8T DUxoDkiWcJGXeILx/fwNM3QrwfWQ1I8eSXcI0zZejjnUwQv4SbqqAIRXxwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPFBRqWwPDA4CSCaPBnzxF7O3TxMMB8GA1UdIwQY MBaAFPIkY0bds+a6bokABbiBSNLWzplxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGlSalJ0Mno1cnB1aVFBRnVJRkkwdGJPbVhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lZWE5ZDEtMjM5Yi00MzQ5LThiNDUt YjViYWNkZDA3NzlkLzEvOFVGR3BiQThNRGdKSUpvOEdmUEVYczdkUEV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9lZWE5ZDEtMjM5Yi00MzQ5LThiNDUtYjViYWNkZDA3Nzlk LzEvOGlSalJ0Mno1cnB1aVFBRnVJRkkwdGJPbVhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudDcMA0E AgACMAcDBQAqCYrAMA0GCSqGSIb3DQEBCwUAA4IBAQB3lVQ5eIjwYfrJ6ZAcxRIn JnMfcPbBIZJ2q/3aI9NL+qJlQ7swRBGjmrlLipWP/vYtcJstYklZOyzutF/n+sm5 TLcmmmwOBBjeF/v3gbiqTAOnb+1wK4jPxr+pepF9oktO4UjZ1RXQkH7IKa8o8AKj u3rUSWpoE5tuS/WZiZWCUF19WSgujKmmMtGaF1enVr+TSELUgKuU7j85HKbwXOD9 FJRSCE30QFTVIsLoha8RIRtlNsWQ4bdIYND4gYvluQm8LeFe5yWjICt2Kn9QT2z2 uhIfUGecMCPWQblxurB461m0aDkHQ24TN69dmY4lMXPVU9ndQfS4YjosNiTGof2A -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:17 2026 by rpki-client