This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8yvb1SgYE9WFKQV04IC79X_FfTg.roa File: 8yvb1SgYE9WFKQV04IC79X_FfTg.roa (raw, json) Hash identifier: oiP10UiPYRg7wKNYdfqydEpaMBz7Yx670/j16vaGJRI= Subject key identifier: F3:2B:DB:D5:28:18:13:D5:85:29:05:74:E0:80:BB:F5:7F:C5:7D:38 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B8DADD3673DEB75D41BD3C747FCC5702E Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8yvb1SgYE9WFKQV04IC79X_FfTg.roa Signing time: Mon 05 Jan 2026 10:22:17 +0000 ROA not before: Mon 05 Jan 2026 10:22:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 87.82.52.0/23 maxlen: 24 195.172.130.0/23 maxlen: 24 195.172.132.0/22 maxlen: 24 212.134.94.0/24 maxlen: 24 212.134.172.0/23 maxlen: 24 212.135.76.0/23 maxlen: 24 212.135.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:ad:d3:67:3d:eb:75:d4:1b:d3:c7:47:fc:c5:70:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 5 10:22:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f32bdbd5281813d585290574e080bbf57fc57d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ac:2d:be:3d:50:e1:63:cd:6a:99:9e:a8:a0: f6:d6:3d:ae:4a:62:59:8a:29:6a:2a:dd:08:b3:23: 60:ed:2c:c6:a4:86:2a:55:77:1f:dc:02:ce:dc:a1: a9:16:dc:2c:92:e7:98:9c:0a:e8:3c:46:91:36:d4: 86:9f:9b:f9:00:f9:36:23:6a:eb:40:64:6f:48:40: a1:2a:c3:9a:9d:53:4b:81:c0:95:f5:67:45:59:d0: f5:5e:dc:10:6d:3c:d6:35:30:68:ce:72:70:30:62: df:f4:52:07:7a:07:f6:f1:16:e8:c7:2c:af:80:43: e3:80:81:d9:ec:fc:79:7a:0c:04:4d:60:18:93:ce: 90:dd:34:e3:65:62:ab:15:cd:5f:90:cb:cf:29:60: 09:31:1e:26:05:07:09:71:67:33:88:41:6b:8d:c9: b1:5a:7d:60:4e:5b:03:21:e2:2c:c1:4c:0e:3a:36: ff:0d:05:d2:28:f6:f6:be:74:a0:e4:c1:34:0a:b1: 0f:5b:db:a2:2c:5b:e0:a3:a2:b5:91:f8:8c:1f:ab: 20:9d:59:09:f4:24:01:6a:9e:34:e4:f0:72:ce:12: 11:03:ac:31:76:3f:04:bb:b5:3d:a3:b4:be:5e:52: ec:88:bf:77:9e:9f:3f:b1:80:63:4f:ba:2d:c6:b6: 34:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:2B:DB:D5:28:18:13:D5:85:29:05:74:E0:80:BB:F5:7F:C5:7D:38 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8yvb1SgYE9WFKQV04IC79X_FfTg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.82.52.0/23 195.172.130.0-195.172.135.255 212.134.94.0/24 212.134.172.0/23 212.135.76.0/23 212.135.175.0/24 Signature Algorithm: sha256WithRSAEncryption a2:34:b8:b2:91:f2:06:f1:30:a3:40:a9:a3:c4:28:f3:2b:7b: 83:74:14:dc:af:e2:fb:17:86:9e:7f:d0:16:25:33:eb:9d:b9: 6f:09:37:0f:1c:21:fb:0a:6e:35:a5:ac:e9:bf:03:04:ca:32: fc:8b:b7:da:0e:5e:4f:24:27:8a:26:1a:5e:8b:d6:f7:31:80: 10:24:24:74:e4:01:3f:c6:4f:74:55:3b:f4:19:f0:a5:8a:ec: 2b:d0:65:7f:38:ee:b4:a7:29:ba:f4:69:54:2b:1e:19:e2:89: 35:75:19:1b:7c:09:23:5e:5f:a3:39:29:04:8e:f7:b7:4f:ec: 2b:38:fd:82:a8:2f:94:ed:92:53:36:c6:05:05:b9:90:3e:a7: 6f:00:0a:a7:93:e2:d3:c5:54:83:63:f4:80:dd:ca:f6:b9:58: 17:fb:9b:a3:98:a5:92:7f:ec:1f:d5:78:e2:68:d3:c8:a3:2a: f8:f7:7a:23:ca:0e:3d:36:2e:b2:8a:a4:39:9e:ea:89:4e:ac: 59:96:74:77:ac:a1:61:61:76:f1:85:20:26:20:b7:e2:6d:ba: 8e:0f:a9:62:ed:ed:5f:d9:bd:38:a9:57:2f:eb:bc:1a:2c:d7: 55:9b:80:cd:5a:04:e2:aa:aa:2c:50:08:d5:3d:40:23:25:e3: 10:c7:9c:0e -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZuNrdNnPet11BvTx0f8xXAuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTA1MTAyMjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzJiZGJkNTI4MTgxM2Q1ODUyOTA1NzRlMDgwYmJmNTdmYzU3ZDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmawtvj1Q4WPNapmeqKD21j2uSmJZ iilqKt0IsyNg7SzGpIYqVXcf3ALO3KGpFtwskueYnAroPEaRNtSGn5v5APk2I2rr QGRvSEChKsOanVNLgcCV9WdFWdD1XtwQbTzWNTBoznJwMGLf9FIHegf28Rboxyyv gEPjgIHZ7Px5egwETWAYk86Q3TTjZWKrFc1fkMvPKWAJMR4mBQcJcWcziEFrjcmx Wn1gTlsDIeIswUwOOjb/DQXSKPb2vnSg5ME0CrEPW9uiLFvgo6K1kfiMH6sgnVkJ 9CQBap405PByzhIRA6wxdj8Eu7U9o7S+XlLsiL93np8/sYBjT7otxrY0+wIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFPMr29UoGBPVhSkFdOCAu/V/xX04MB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvOHl2YjFTZ1lFOVdGS1FWMDRJQzc5WF9GZlRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQBV1I0MAwD BAHDrIIDBAPDrIADBADUhl4DBAHUhqwDBAHUh0wDBADUh68wDQYJKoZIhvcNAQEL BQADggEBAKI0uLKR8gbxMKNAqaPEKPMre4N0FNyv4vsXhp5/0BYlM+uduW8JNw8c IfsKbjWlrOm/AwTKMvyLt9oOXk8kJ4omGl6L1vcxgBAkJHTkAT/GT3RVO/QZ8KWK 7CvQZX847rSnKbr0aVQrHhniiTV1GRt8CSNeX6M5KQSO97dP7Cs4/YKoL5TtklM2 xgUFuZA+p28ACqeT4tPFVINj9IDdyva5WBf7m6OYpZJ/7B/VeOJo08ijKvj3eiPK Dj02LrKKpDme6olOrFmWdHesoWFhdvGFICYgt+Jtuo4PqWLt7V/ZvTipVy/rvBos 11WbgM1aBOKqqixQCNU9QCMl4xDHnA4= -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:06 2026 by rpki-client