This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/8R5UNrAqJQPdeejAPTo1fqEGO0I.roa File: 8R5UNrAqJQPdeejAPTo1fqEGO0I.roa (raw, json) Hash identifier: nmngdkdG7ZF784QABffIgU3OGRFd2RcORgkl7KA2W8U= Subject key identifier: F1:1E:54:36:B0:2A:25:03:DD:79:E8:C0:3D:3A:35:7E:A1:06:3B:42 Certificate issuer: /CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd Certificate serial: 019B7758A7F1888E4E0AD561DEC52CEAC9E7 Authority key identifier: 6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/8R5UNrAqJQPdeejAPTo1fqEGO0I.roa Signing time: Thu 01 Jan 2026 02:17:37 +0000 ROA not before: Thu 01 Jan 2026 02:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202682 IP address blocks: 185.155.128.0/22 maxlen: 24 2a07:9440::/29 maxlen: 32 2a07:9444::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a7:f1:88:8e:4e:0a:d5:61:de:c5:2c:ea:c9:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd Validity Not Before: Jan 1 02:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f11e5436b02a2503dd79e8c03d3a357ea1063b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4e:d9:3a:a4:ad:9b:6a:7d:8d:23:4f:49:5a: c8:d2:26:5d:39:89:95:a8:22:7a:91:33:fd:e0:50: f5:e8:f2:65:49:70:bb:f3:19:8d:9d:82:ca:55:35: 16:47:fa:70:02:02:1d:63:e2:45:a4:3f:2b:2b:6b: 0b:a2:f1:51:ff:14:75:df:b8:cf:47:25:84:26:82: 20:de:97:1c:6f:1f:5d:28:fc:25:d9:9e:8d:47:f2: 4d:1d:4e:58:eb:7a:27:e1:3d:22:ff:87:1f:13:a9: 1c:b9:fc:65:b1:7d:08:16:94:76:63:1b:34:b1:a3: f6:d9:a1:7c:aa:99:87:75:94:e1:2f:5e:fc:2b:39: f9:64:3c:d1:81:33:44:cb:69:0e:d0:de:da:aa:8d: 92:8d:9b:8b:c4:36:3b:5f:4b:d3:58:01:e1:df:db: 7c:cc:7d:94:5e:79:f3:c1:74:52:50:b4:59:0f:3a: c0:bf:b3:dd:03:56:70:f1:21:d3:2b:23:fe:01:0c: b6:5e:35:ed:e4:c1:d8:f8:df:33:7e:27:f1:ed:e0: ac:48:65:48:8a:79:ad:9d:02:c3:6b:e2:18:5f:d2: 75:0a:dd:8e:f4:d0:2f:6e:b5:84:7f:80:7e:0f:34: 8a:e5:b0:3e:bc:8e:ad:02:0e:7e:57:82:37:51:68: 08:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:1E:54:36:B0:2A:25:03:DD:79:E8:C0:3D:3A:35:7E:A1:06:3B:42 X509v3 Authority Key Identifier: keyid:6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/8R5UNrAqJQPdeejAPTo1fqEGO0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.128.0/22 IPv6: 2a07:9440::/29 Signature Algorithm: sha256WithRSAEncryption 5d:06:ea:9c:4d:d0:c7:ca:36:77:e7:5f:0e:cf:33:5b:93:0c: 07:a0:43:9e:c1:fe:e0:c5:1a:e0:d8:07:0a:bd:5b:4b:fe:16: 8c:6a:5f:b8:71:4e:90:f7:84:d6:a4:de:2c:11:3d:5e:da:10: 38:ef:19:fc:dd:e6:60:1a:db:31:5d:5b:b4:17:c4:cc:22:3c: a6:51:d0:7e:b2:b1:33:66:6a:a7:0c:49:7c:e3:e6:19:53:02: 00:18:10:e8:a7:f0:d1:df:8a:25:02:f3:86:3e:2f:38:08:75: 38:03:12:77:b4:74:f9:d7:36:fd:fe:68:3d:20:a9:4c:f6:12: b7:93:79:08:e2:fe:86:f9:5a:bc:1b:72:3c:53:8a:da:ae:2e: 73:96:e6:4a:86:24:26:08:7d:51:f8:aa:54:6a:1e:49:3d:e5: 93:a8:33:03:0a:d5:c3:16:81:10:a5:4d:21:b8:b5:8f:97:98: 56:fc:6b:6e:fa:4d:05:5c:ef:74:10:24:fe:c4:22:cc:a8:b1: 2c:b1:71:54:8e:cc:97:04:5c:1e:a4:d8:80:34:a5:4c:aa:16: fe:26:7b:be:8b:fa:de:92:99:20:43:dc:c8:5f:22:a5:fd:bc: 6c:e5:bb:82:ff:63:1f:75:61:11:d8:0a:33:ed:88:41:05:ad: cd:21:4b:c4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WKfxiI5OCtVh3sUs6snnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNTc2MmNkNTNhMDNlMzIyNDIwNDZhMDFhOGUxY2NhYzk0 NmI2ZGQwHhcNMjYwMTAxMDIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTFlNTQzNmIwMmEyNTAzZGQ3OWU4YzAzZDNhMzU3ZWExMDYzYjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv07ZOqStm2p9jSNPSVrI0iZdOYmV qCJ6kTP94FD16PJlSXC78xmNnYLKVTUWR/pwAgIdY+JFpD8rK2sLovFR/xR137jP RyWEJoIg3pccbx9dKPwl2Z6NR/JNHU5Y63on4T0i/4cfE6kcufxlsX0IFpR2Yxs0 saP22aF8qpmHdZThL178Kzn5ZDzRgTNEy2kO0N7aqo2SjZuLxDY7X0vTWAHh39t8 zH2UXnnzwXRSULRZDzrAv7PdA1Zw8SHTKyP+AQy2XjXt5MHY+N8zfifx7eCsSGVI inmtnQLDa+IYX9J1Ct2O9NAvbrWEf4B+DzSK5bA+vI6tAg5+V4I3UWgI4wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPEeVDawKiUD3XnowD06NX6hBjtCMB8GA1UdIwQY MBaAFG9XYs1ToD4yJCBGoBqOHMrJRrbdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjFkaXpWT2dQaklrSUVhZ0dvNGN5c2xHdHQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mNmZkYzMtOWNmYy00N2ZkLWJiYTgt NzljYmYzOTVkNzI2LzEvOFI1VU5yQXFKUVBkZWVqQVBUbzFmcUVHTzBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mNmZkYzMtOWNmYy00N2ZkLWJiYTgtNzljYmYzOTVkNzI2 LzEvYjFkaXpWT2dQaklrSUVhZ0dvNGN5c2xHdHQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZuAMA0E AgACMAcDBQMqB5RAMA0GCSqGSIb3DQEBCwUAA4IBAQBdBuqcTdDHyjZ3518OzzNb kwwHoEOewf7gxRrg2AcKvVtL/haMal+4cU6Q94TWpN4sET1e2hA47xn83eZgGtsx XVu0F8TMIjymUdB+srEzZmqnDEl84+YZUwIAGBDop/DR34olAvOGPi84CHU4AxJ3 tHT51zb9/mg9IKlM9hK3k3kI4v6G+Vq8G3I8U4rari5zluZKhiQmCH1R+KpUah5J PeWTqDMDCtXDFoEQpU0huLWPl5hW/Gtu+k0FXO90ECT+xCLMqLEssXFUjsyXBFwe pNiANKVMqhb+Jnu+i/rekpkgQ9zIXyKl/bxs5buC/2MfdWER2Aoz7YhBBa3NIUvE -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:37 2026 by rpki-client