This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/8IKnbz3OJkPQGL7BO-me-gJmGKs.roa File: 8IKnbz3OJkPQGL7BO-me-gJmGKs.roa (raw, json) Hash identifier: Q+cWn3XILL9QJ/YCPpa3NqTQOMtscjaShmjqUuHfLwo= Subject key identifier: F0:82:A7:6F:3D:CE:26:43:D0:18:BE:C1:3B:E9:9E:FA:02:66:18:AB Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8 Certificate serial: 019B7F8175B4D968B97B1995D4C1DB1A7361 Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/8IKnbz3OJkPQGL7BO-me-gJmGKs.roa Signing time: Fri 02 Jan 2026 16:19:09 +0000 ROA not before: Fri 02 Jan 2026 16:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 168.199.244.0/24 maxlen: 24 168.199.246.0/24 maxlen: 24 185.101.252.0/24 maxlen: 24 185.171.252.0/24 maxlen: 24 185.171.254.0/24 maxlen: 24 185.226.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:75:b4:d9:68:b9:7b:19:95:d4:c1:db:1a:73:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8 Validity Not Before: Jan 2 16:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f082a76f3dce2643d018bec13be99efa026618ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:98:e1:ce:13:86:fb:3b:fb:ba:18:59:48:3c: 5e:86:be:5c:f1:ad:fa:75:8b:22:16:50:8d:52:30: d2:38:5e:6b:8b:c6:e8:47:c0:c7:27:8d:b4:dc:5f: 3a:33:36:40:32:e8:a5:ad:77:51:79:3a:a6:69:ca: 05:ab:07:63:e8:f8:51:ef:c0:5f:0f:98:c7:87:43: a8:c6:28:e5:d3:51:f4:c2:bd:12:7c:4f:f2:d4:42: 2c:d6:bc:23:17:cd:29:eb:55:c1:9a:27:f0:20:a7: 06:29:58:27:59:44:6e:b5:60:3f:6d:c2:90:8f:8e: e3:01:8f:bd:1c:2b:c5:ce:52:63:72:da:8f:cf:35: 22:51:2e:29:d6:86:d8:6e:55:fc:9e:9f:93:80:8e: 21:a9:aa:42:0c:b8:81:29:0d:69:83:f9:92:b7:ff: f9:10:da:24:92:3a:90:04:d6:47:b2:d8:9f:d1:6b: 4d:ac:0d:0d:37:25:41:f9:97:d5:a1:3e:0c:99:3e: 2e:81:7a:f0:8e:b8:0c:88:d0:a3:16:90:b2:dd:bf: ad:32:45:f8:ec:d6:74:44:db:d7:47:eb:99:43:21: 67:91:2e:61:f5:4b:c6:07:a1:ca:3e:29:35:a5:44: 35:07:24:3b:64:14:30:dd:35:c3:cf:8a:25:65:a5: 3a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:82:A7:6F:3D:CE:26:43:D0:18:BE:C1:3B:E9:9E:FA:02:66:18:AB X509v3 Authority Key Identifier: keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/8IKnbz3OJkPQGL7BO-me-gJmGKs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.199.244.0/24 168.199.246.0/24 185.101.252.0/24 185.171.252.0/24 185.171.254.0/24 185.226.205.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:37:93:f4:86:5e:1b:bf:51:b0:c3:64:79:af:22:64:15:33: ed:55:aa:e2:e1:89:7d:17:0b:a0:06:11:df:8f:b9:cf:7a:a2: 84:42:39:b4:3d:a0:4e:cc:fe:df:0a:93:b2:df:fa:24:5e:1c: be:34:7f:9b:2f:81:12:00:4d:87:9f:f8:8b:26:6e:7c:fc:93: db:49:d6:a3:80:a0:43:db:95:5a:22:3e:69:22:29:f6:8a:e0: b3:4a:bc:bb:95:b5:0d:e9:ac:86:2e:6c:eb:ea:9a:c1:d2:cd: d6:ea:66:9d:a2:56:ed:81:b1:eb:cc:40:f8:e8:ce:1b:1b:60: 19:e2:ef:21:dd:db:8c:65:2d:3d:31:5b:0f:c7:80:d6:0e:c9: 39:3d:ff:4e:35:16:0b:19:c7:79:50:0f:db:b2:ba:e6:81:c0: d7:90:cb:b7:e1:1b:88:9b:5c:f5:3a:a3:27:78:47:b3:d3:cf: 3a:c8:26:7b:73:72:85:b5:14:ed:87:dc:aa:79:55:36:44:33: 2a:0e:96:58:25:69:5e:38:72:de:13:da:b2:f4:b8:5d:30:dd: be:33:36:89:22:49:0a:a6:f5:e0:a7:55:04:fa:42:83:0a:4a: e3:1a:9f:e9:46:a5:f4:2f:e5:cf:2e:43:0b:16:18:8d:a0:39: 5e:e2:40:b9 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt/gXW02Wi5exmV1MHbGnNhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4 ODE3ZDgwHhcNMjYwMTAyMTYxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDgyYTc2ZjNkY2UyNjQzZDAxOGJlYzEzYmU5OWVmYTAyNjYxOGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJjhzhOG+zv7uhhZSDxehr5c8a36 dYsiFlCNUjDSOF5ri8boR8DHJ4203F86MzZAMuilrXdReTqmacoFqwdj6PhR78Bf D5jHh0Ooxijl01H0wr0SfE/y1EIs1rwjF80p61XBmifwIKcGKVgnWURutWA/bcKQ j47jAY+9HCvFzlJjctqPzzUiUS4p1obYblX8np+TgI4hqapCDLiBKQ1pg/mSt//5 ENokkjqQBNZHstif0WtNrA0NNyVB+ZfVoT4MmT4ugXrwjrgMiNCjFpCy3b+tMkX4 7NZ0RNvXR+uZQyFnkS5h9UvGB6HKPik1pUQ1ByQ7ZBQw3TXDz4olZaU6MQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFPCCp289ziZD0Bi+wTvpnvoCZhirMB8GA1UdIwQY MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt MmQxOTE4YmExYzBlLzEvOElLbmJ6M09Ka1BRR0w3Qk8tbWUtZ0ptR0tzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAqMf0AwQA qMf2AwQAuWX8AwQAuav8AwQAuav+AwQAueLNMA0GCSqGSIb3DQEBCwUAA4IBAQA6 N5P0hl4bv1Gww2R5ryJkFTPtVari4Yl9FwugBhHfj7nPeqKEQjm0PaBOzP7fCpOy 3/okXhy+NH+bL4ESAE2Hn/iLJm58/JPbSdajgKBD25VaIj5pIin2iuCzSry7lbUN 6ayGLmzr6prB0s3W6madolbtgbHrzED46M4bG2AZ4u8h3duMZS09MVsPx4DWDsk5 Pf9ONRYLGcd5UA/bsrrmgcDXkMu34RuIm1z1OqMneEez0886yCZ7c3KFtRTth9yq eVU2RDMqDpZYJWleOHLeE9qy9LhdMN2+MzaJIkkKpvXgp1UE+kKDCkrjGp/pRqX0 L+XPLkMLFhiNoDle4kC5 -----END CERTIFICATE-----Generated at Fri Jan 9 16:49:37 2026 by rpki-client