This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/y8g_KNg4CQpGLUtViNE4UcIwqGE.roa File: y8g_KNg4CQpGLUtViNE4UcIwqGE.roa (raw, json) Hash identifier: 3BP+uFbBHzZ2F6fJMPn4trgJdQyNQ1NxWfOoEPvI+IQ= Subject key identifier: CB:C8:3F:28:D8:38:09:0A:46:2D:4B:55:88:D1:38:51:C2:30:A8:61 Certificate issuer: /CN=b94427d8b796645f764b4e66bf19ad38e4abee1c Certificate serial: 019B7DCA14659BC72660181B62D43013EE82 Authority key identifier: B9:44:27:D8:B7:96:64:5F:76:4B:4E:66:BF:19:AD:38:E4:AB:EE:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/y8g_KNg4CQpGLUtViNE4UcIwqGE.roa Signing time: Fri 02 Jan 2026 08:19:14 +0000 ROA not before: Fri 02 Jan 2026 08:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41557 IP address blocks: 89.205.0.0/17 maxlen: 17 89.205.0.0/21 maxlen: 21 89.205.8.0/21 maxlen: 21 89.205.16.0/21 maxlen: 21 89.205.24.0/21 maxlen: 21 185.47.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:14:65:9b:c7:26:60:18:1b:62:d4:30:13:ee:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b94427d8b796645f764b4e66bf19ad38e4abee1c Validity Not Before: Jan 2 08:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbc83f28d838090a462d4b5588d13851c230a861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d8:95:37:91:66:61:8f:68:49:55:49:a8:b6: b7:64:5e:7e:69:16:6b:ce:8f:e7:c7:c6:4d:ab:2f: 40:b8:55:02:75:3b:14:a1:c0:9e:6a:d4:ab:fd:85: 52:41:f7:d0:9d:ae:2b:ad:63:b2:18:cd:e2:06:71: 12:f4:72:82:f2:ee:32:27:e2:dc:1b:d6:ef:fe:06: 88:af:eb:63:fe:86:59:af:2e:6f:5e:ed:83:0f:a8: dd:34:be:19:b5:26:3b:e8:34:09:64:95:84:77:e4: f7:d1:0c:bb:5e:a2:30:cd:80:8c:34:cb:c2:c1:98: 2a:ba:aa:74:8f:4f:8f:89:1a:c2:13:b0:7f:45:57: 6e:f1:bd:45:9c:03:a9:6c:9d:5a:d7:bb:d9:e1:c3: cd:fb:f2:62:fd:d6:1f:93:9b:42:da:62:76:52:af: 5a:18:b8:9b:41:8c:7d:03:0c:57:0c:b9:c7:fa:f8: bf:13:55:90:c3:7f:5b:99:d3:4b:ae:e1:18:cc:a8: d7:52:c9:3f:f1:47:93:97:7e:50:88:7e:69:99:bb: 05:d6:64:a8:63:61:da:d2:f4:8b:50:77:2a:b1:d6: 65:e9:08:30:63:30:a0:49:84:cf:10:74:6f:d9:d5: 6a:88:3d:46:4d:ad:7a:80:1f:d0:9c:5f:57:10:44: bb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C8:3F:28:D8:38:09:0A:46:2D:4B:55:88:D1:38:51:C2:30:A8:61 X509v3 Authority Key Identifier: keyid:B9:44:27:D8:B7:96:64:5F:76:4B:4E:66:BF:19:AD:38:E4:AB:EE:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/y8g_KNg4CQpGLUtViNE4UcIwqGE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.205.0.0/17 185.47.56.0/22 Signature Algorithm: sha256WithRSAEncryption 37:e0:f3:a2:ee:fd:40:3d:48:16:6f:af:11:5d:91:34:f5:40: 4a:18:c6:fe:75:5e:32:80:5c:24:14:3f:87:c1:c2:2d:ea:e6: 56:e3:c1:b8:bc:b8:0f:aa:dc:d0:75:dc:67:da:19:51:d5:81: 6e:57:2e:3a:f3:b8:40:ae:e0:2c:93:a4:c9:b0:d6:5c:52:40: b4:e3:58:af:16:86:94:05:3d:9c:72:90:ac:0f:26:85:4f:cb: c0:e7:4d:73:b7:52:ee:c0:f1:4a:84:3f:4e:e7:0a:10:5c:6d: e7:5e:53:29:cb:9a:05:18:79:7a:79:e8:ac:9c:e4:f5:3e:28: a3:62:85:68:5e:99:93:36:7b:7d:e5:cf:9b:22:e5:17:a0:03: 91:bf:7c:b2:10:b9:86:c9:9b:73:63:1c:f9:f2:ad:d2:0e:62: 02:43:b0:d9:4c:ab:5b:03:e2:c7:66:ab:31:94:6e:c2:51:1e: 0c:52:3b:37:e9:b5:6a:7e:00:45:09:e5:cc:7b:26:89:73:ee: a8:dc:16:69:b7:c3:dc:2f:41:cf:50:ff:f3:00:31:56:25:bc: cb:be:8b:95:fa:88:e5:c9:c0:70:63:d7:0e:d5:51:53:6c:f5: 53:a4:be:75:f6:06:9a:d0:b0:94:e0:98:a1:b1:09:6c:de:df: c4:98:04:b9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yhRlm8cmYBgbYtQwE+6CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NDQyN2Q4Yjc5NjY0NWY3NjRiNGU2NmJmMTlhZDM4ZTRh YmVlMWMwHhcNMjYwMTAyMDgxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmM4M2YyOGQ4MzgwOTBhNDYyZDRiNTU4OGQxMzg1MWMyMzBhODYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NiVN5FmYY9oSVVJqLa3ZF5+aRZr zo/nx8ZNqy9AuFUCdTsUocCeatSr/YVSQffQna4rrWOyGM3iBnES9HKC8u4yJ+Lc G9bv/gaIr+tj/oZZry5vXu2DD6jdNL4ZtSY76DQJZJWEd+T30Qy7XqIwzYCMNMvC wZgquqp0j0+PiRrCE7B/RVdu8b1FnAOpbJ1a17vZ4cPN+/Ji/dYfk5tC2mJ2Uq9a GLibQYx9AwxXDLnH+vi/E1WQw39bmdNLruEYzKjXUsk/8UeTl35QiH5pmbsF1mSo Y2Ha0vSLUHcqsdZl6QgwYzCgSYTPEHRv2dVqiD1GTa16gB/QnF9XEES7ZwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMvIPyjYOAkKRi1LVYjROFHCMKhhMB8GA1UdIwQY MBaAFLlEJ9i3lmRfdktOZr8ZrTjkq+4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVVRbjJMZVdaRjkyUzA1bXZ4bXRPT1NyN2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kOWNmN2UtYWE3ZS00ODIzLTk5Zjkt NDdmNWMxYzUyY2UyLzEveThnX0tOZzRDUXBHTFV0VmlORTRVY0l3cUdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9kOWNmN2UtYWE3ZS00ODIzLTk5ZjktNDdmNWMxYzUyY2Uy LzEvdVVRbjJMZVdaRjkyUzA1bXZ4bXRPT1NyN2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHWc0AAwQC uS84MA0GCSqGSIb3DQEBCwUAA4IBAQA34POi7v1APUgWb68RXZE09UBKGMb+dV4y gFwkFD+HwcIt6uZW48G4vLgPqtzQddxn2hlR1YFuVy4687hAruAsk6TJsNZcUkC0 41ivFoaUBT2ccpCsDyaFT8vA501zt1LuwPFKhD9O5woQXG3nXlMpy5oFGHl6eeis nOT1PiijYoVoXpmTNnt95c+bIuUXoAORv3yyELmGyZtzYxz58q3SDmICQ7DZTKtb A+LHZqsxlG7CUR4MUjs36bVqfgBFCeXMeyaJc+6o3BZpt8PcL0HPUP/zADFWJbzL vouV+ojlycBwY9cO1VFTbPVTpL519gaa0LCU4JihsQls3t/EmAS5 -----END CERTIFICATE-----Generated at Tue Feb 10 01:14:08 2026 by rpki-client