This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/yO8zPdnLQTGP7FTjpB9nvhDS9uQ.roa File: yO8zPdnLQTGP7FTjpB9nvhDS9uQ.roa (raw, json) Hash identifier: WQ8kjol5PEW10sFGD7RLYN+v3wnRZb1OVJX+5S1910M= Subject key identifier: C8:EF:33:3D:D9:CB:41:31:8F:EC:54:E3:A4:1F:67:BE:10:D2:F6:E4 Certificate issuer: /CN=53937087814b435825470069db9e723dbe728f3b Certificate serial: 019B78344079A1D55304CB0DEFA76C335B9A Authority key identifier: 53:93:70:87:81:4B:43:58:25:47:00:69:DB:9E:72:3D:BE:72:8F:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/yO8zPdnLQTGP7FTjpB9nvhDS9uQ.roa Signing time: Thu 01 Jan 2026 06:17:28 +0000 ROA not before: Thu 01 Jan 2026 06:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25579 IP address blocks: 185.124.120.0/22 maxlen: 22 213.146.224.0/24 maxlen: 24 213.146.225.0/24 maxlen: 24 213.146.226.0/24 maxlen: 24 213.146.227.0/24 maxlen: 24 213.146.228.0/24 maxlen: 24 213.146.229.0/24 maxlen: 24 213.146.230.0/24 maxlen: 24 213.146.231.0/24 maxlen: 24 213.146.232.0/24 maxlen: 24 213.146.233.0/24 maxlen: 24 213.146.234.0/24 maxlen: 24 213.146.235.0/24 maxlen: 24 213.146.236.0/24 maxlen: 24 213.146.237.0/24 maxlen: 24 213.146.238.0/24 maxlen: 24 213.146.239.0/24 maxlen: 24 213.146.240.0/24 maxlen: 24 213.146.241.0/24 maxlen: 24 213.146.242.0/24 maxlen: 24 213.146.243.0/24 maxlen: 24 213.146.244.0/24 maxlen: 24 213.146.245.0/24 maxlen: 24 213.146.246.0/24 maxlen: 24 213.146.247.0/24 maxlen: 24 213.146.248.0/24 maxlen: 24 213.146.249.0/24 maxlen: 24 213.146.250.0/24 maxlen: 24 213.146.251.0/24 maxlen: 24 213.146.252.0/24 maxlen: 24 213.146.253.0/24 maxlen: 24 213.146.254.0/24 maxlen: 24 213.146.255.0/24 maxlen: 24 2a06:2800::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:40:79:a1:d5:53:04:cb:0d:ef:a7:6c:33:5b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53937087814b435825470069db9e723dbe728f3b Validity Not Before: Jan 1 06:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8ef333dd9cb41318fec54e3a41f67be10d2f6e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:43:27:53:b0:28:1c:13:e4:1b:bd:3a:57:a9: a7:f2:8e:c2:2f:45:5c:f6:a2:93:98:44:bd:87:17: 6d:92:cb:cf:e3:9d:cc:98:14:34:db:36:30:db:93: 2f:c6:92:97:76:11:05:cf:4b:de:a4:a0:b4:14:a0: 16:5d:b7:99:00:34:64:8f:9e:a7:9c:cc:e3:1c:80: fe:59:2c:0a:da:31:9a:9f:ac:4e:82:65:fe:39:c8: d5:7e:b1:74:0a:39:8a:30:a3:4f:0d:a9:cd:b8:3f: 72:a8:36:29:7a:26:12:96:8c:ad:ed:93:5f:b9:25: bc:ea:17:fb:06:52:2b:c7:e7:06:04:77:9b:1d:4c: 97:3a:a9:34:25:62:e7:73:e1:c5:38:cd:15:0b:fe: 56:99:fe:27:42:82:b4:0c:21:f8:a6:1f:23:c5:1e: e3:ba:49:aa:d2:76:7d:78:c5:67:4d:01:45:da:53: 47:fa:b0:40:80:86:1f:f8:63:b7:2c:84:00:04:28: 2f:b0:7e:3d:93:1e:54:57:10:24:14:49:b7:0d:bb: aa:b6:ab:04:8b:b4:3c:08:1a:bd:65:85:c5:f6:34: f4:29:02:e6:42:95:9e:ac:9f:d8:4a:af:a1:99:de: bb:1f:76:e1:4c:e6:26:2d:cf:f0:7a:60:22:62:17: 5c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:EF:33:3D:D9:CB:41:31:8F:EC:54:E3:A4:1F:67:BE:10:D2:F6:E4 X509v3 Authority Key Identifier: keyid:53:93:70:87:81:4B:43:58:25:47:00:69:DB:9E:72:3D:BE:72:8F:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/yO8zPdnLQTGP7FTjpB9nvhDS9uQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.124.120.0/22 213.146.224.0/19 IPv6: 2a06:2800::/29 Signature Algorithm: sha256WithRSAEncryption c8:89:16:79:e9:41:4e:cb:99:65:d5:19:71:a4:b3:7c:a3:e2: ff:bc:f3:24:a8:e0:2e:28:c3:a2:d3:d5:7e:69:d5:c0:11:4e: f7:54:2f:65:e9:0e:2d:61:a2:20:6a:da:34:5c:7a:4e:3a:c3: 8a:e7:25:77:c5:5d:ce:27:ec:c8:5d:1d:be:59:4a:79:00:82: 2b:c8:0b:4e:56:c4:cf:95:b9:c5:7a:61:0c:83:77:f7:9d:dd: 6f:0e:31:b5:26:d2:85:e2:5a:67:70:ce:26:b1:6f:df:6c:38: d2:8b:84:95:3e:db:61:e1:bd:66:32:43:79:56:08:95:80:2b: e8:55:13:bc:64:2c:2a:1c:b5:97:4f:26:27:37:69:2e:0d:58: f0:49:01:4f:3b:ae:32:f1:b0:fe:6c:e5:5a:3f:2c:4e:4b:ea: 86:22:e0:3b:5b:ce:6a:1d:8d:50:29:dc:1b:a6:6e:41:ed:6c: dd:39:4d:2b:6f:c3:08:3a:92:cf:dd:90:41:3c:77:56:fa:b3: e9:1c:84:a5:19:98:1d:bb:06:b9:92:92:64:38:8a:6a:d5:5f: c5:69:12:75:19:b5:c9:f7:ab:93:b5:74:ea:96:c7:06:54:35: fc:8a:c7:70:3e:f5:55:0e:c2:21:33:e9:ce:fd:ba:0e:ed:bb: 23:25:c8:a8 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4NEB5odVTBMsN76dsM1uaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzOTM3MDg3ODE0YjQzNTgyNTQ3MDA2OWRiOWU3MjNkYmU3 MjhmM2IwHhcNMjYwMTAxMDYxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGVmMzMzZGQ5Y2I0MTMxOGZlYzU0ZTNhNDFmNjdiZTEwZDJmNmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kMnU7AoHBPkG706V6mn8o7CL0Vc 9qKTmES9hxdtksvP453MmBQ02zYw25MvxpKXdhEFz0vepKC0FKAWXbeZADRkj56n nMzjHID+WSwK2jGan6xOgmX+OcjVfrF0CjmKMKNPDanNuD9yqDYpeiYSloyt7ZNf uSW86hf7BlIrx+cGBHebHUyXOqk0JWLnc+HFOM0VC/5Wmf4nQoK0DCH4ph8jxR7j ukmq0nZ9eMVnTQFF2lNH+rBAgIYf+GO3LIQABCgvsH49kx5UVxAkFEm3DbuqtqsE i7Q8CBq9ZYXF9jT0KQLmQpWerJ/YSq+hmd67H3bhTOYmLc/wemAiYhdcqQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMjvMz3Zy0Exj+xU46QfZ74Q0vbkMB8GA1UdIwQY MBaAFFOTcIeBS0NYJUcAaduecj2+co87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTVOd2g0RkxRMWdsUndCcDI1NXlQYjV5anpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS85ZTJmOGEtOTYwZC00NDc5LWEwNTgt NGUzY2UzMzAxOTc5LzEveU84elBkbkxRVEdQN0ZUanBCOW52aERTOXVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS85ZTJmOGEtOTYwZC00NDc5LWEwNTgtNGUzY2UzMzAxOTc5 LzEvVTVOd2g0RkxRMWdsUndCcDI1NXlQYjV5anpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuXx4AwQF 1ZLgMA0EAgACMAcDBQMqBigAMA0GCSqGSIb3DQEBCwUAA4IBAQDIiRZ56UFOy5ll 1RlxpLN8o+L/vPMkqOAuKMOi09V+adXAEU73VC9l6Q4tYaIgato0XHpOOsOK5yV3 xV3OJ+zIXR2+WUp5AIIryAtOVsTPlbnFemEMg3f3nd1vDjG1JtKF4lpncM4msW/f bDjSi4SVPtth4b1mMkN5VgiVgCvoVRO8ZCwqHLWXTyYnN2kuDVjwSQFPO64y8bD+ bOVaPyxOS+qGIuA7W85qHY1QKdwbpm5B7WzdOU0rb8MIOpLP3ZBBPHdW+rPpHISl GZgduwa5kpJkOIpq1V/FaRJ1GbXJ96uTtXTqlscGVDX8isdwPvVVDsIhM+nO/boO 7bsjJcio -----END CERTIFICATE-----Generated at Tue Feb 10 06:06:26 2026 by rpki-client