This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/8Q_WyzdZiQckSphgAZIR0v5tHg0.roa File: 8Q_WyzdZiQckSphgAZIR0v5tHg0.roa (raw, json) Hash identifier: 4fsTe8wbJQmrMv3rGh5NswgG+t+NcVBW7ToId469YgA= Subject key identifier: F1:0F:D6:CB:37:59:89:07:24:4A:98:60:01:92:11:D2:FE:6D:1E:0D Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Certificate serial: 019B7F842BA49F6170589BBC361EE052D2B0 Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/8Q_WyzdZiQckSphgAZIR0v5tHg0.roa Signing time: Fri 02 Jan 2026 16:22:06 +0000 ROA not before: Fri 02 Jan 2026 16:22:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34535 IP address blocks: 178.250.184.0/23 maxlen: 24 178.250.188.0/24 maxlen: 24 178.250.190.0/23 maxlen: 24 193.0.227.0/24 maxlen: 24 193.0.230.0/24 maxlen: 24 2a0f:cdc0::/32 maxlen: 32 2a0f:cdc1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:2b:a4:9f:61:70:58:9b:bc:36:1e:e0:52:d2:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Validity Not Before: Jan 2 16:22:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f10fd6cb37598907244a9860019211d2fe6d1e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:04:f4:f5:42:30:3b:84:c1:72:84:d8:be:dd: 45:81:2f:16:1d:a8:29:68:7a:90:73:ce:70:75:83: 4f:2e:a8:92:f7:79:4b:69:06:3f:b4:4b:aa:cf:53: a1:a7:1a:43:ed:2b:d6:f0:41:85:6b:0f:78:df:d8: 5e:78:c2:d0:1d:4b:c7:99:f7:14:f0:07:71:13:6f: 16:15:f4:ee:ea:43:66:12:b8:f7:81:06:b0:1e:e5: 7a:27:dc:c0:e9:0b:7d:69:23:db:37:1c:f3:60:85: 1f:c4:2c:5f:53:6b:9c:13:71:ff:4a:a7:1e:48:26: c3:fb:de:c8:96:3a:e5:f6:af:fb:57:53:ec:41:6a: 6e:24:ab:43:fb:8f:22:02:20:36:63:e3:72:77:d1: 77:88:31:d8:8d:34:ff:c6:78:e0:da:8e:1b:55:4a: e9:b6:4f:9c:92:d4:87:ef:49:47:07:96:3e:c3:90: 34:99:eb:5c:81:1c:9d:7e:f2:9e:2e:66:66:8f:b7: 0e:06:04:33:d3:8d:5d:ab:27:78:9c:9b:59:17:8e: 97:9a:8d:d5:5c:67:4b:cf:c4:ee:1f:44:63:f4:d6: 92:7d:9e:2a:8a:ef:38:2e:55:5c:e9:09:5d:4c:04: 9d:28:e5:c2:21:af:79:b3:24:83:eb:71:33:cb:29: 59:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0F:D6:CB:37:59:89:07:24:4A:98:60:01:92:11:D2:FE:6D:1E:0D X509v3 Authority Key Identifier: keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/8Q_WyzdZiQckSphgAZIR0v5tHg0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.250.184.0/23 178.250.188.0/24 178.250.190.0/23 193.0.227.0/24 193.0.230.0/24 IPv6: 2a0f:cdc0::/31 Signature Algorithm: sha256WithRSAEncryption 8b:84:56:3f:c9:1a:62:2f:28:af:27:3c:76:1a:95:e9:e7:d3: 91:13:40:0b:e9:19:b0:33:31:d4:6b:8a:ec:bb:6f:81:35:11: a1:40:8e:4b:c3:b1:95:bf:da:fd:5b:a1:95:91:a4:f5:a6:ed: 63:49:c8:4c:27:7d:d1:44:42:41:f8:20:27:c4:c7:d3:79:43: 17:11:f8:85:d6:05:ba:31:7c:5e:fe:02:e4:53:03:95:9d:1d: 99:26:c9:ed:46:5a:f0:1e:db:70:f5:c5:45:61:2c:25:63:9e: 72:18:37:a6:f8:d9:1f:0e:f9:49:ef:ba:8a:80:4b:dc:43:99: 19:75:5f:98:8d:64:59:6b:ab:7b:11:fc:3f:03:bd:d4:b9:bd: 90:23:d9:64:c7:53:86:11:b0:a5:cb:f7:5f:de:8e:85:60:b3: fb:e0:11:3b:e8:11:ed:4e:28:8d:80:1d:90:ae:d2:8f:94:62: 6a:d8:49:b9:c7:28:1a:06:c6:fe:34:1f:b8:ca:7b:5a:20:4f: 4d:c2:31:df:d6:21:f4:20:82:71:58:f7:21:4d:4f:e0:90:7f: a4:6e:dd:25:c6:8b:b8:49:fc:fb:41:a5:c7:65:23:bb:ea:4f: af:3c:67:7b:a3:fc:7b:a5:ee:00:39:ac:d4:b2:56:46:61:dc: 42:e6:c0:8b -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt/hCukn2FwWJu8Nh7gUtKwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzhhZDgxNjhlMDljZjkyZDRlMDQ5ODI1N2Y4ZTljZWFi ZjA2OTIwHhcNMjYwMTAyMTYyMjA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTBmZDZjYjM3NTk4OTA3MjQ0YTk4NjAwMTkyMTFkMmZlNmQxZTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQT09UIwO4TBcoTYvt1FgS8WHagp aHqQc85wdYNPLqiS93lLaQY/tEuqz1OhpxpD7SvW8EGFaw9439heeMLQHUvHmfcU 8AdxE28WFfTu6kNmErj3gQawHuV6J9zA6Qt9aSPbNxzzYIUfxCxfU2ucE3H/Sqce SCbD+97Iljrl9q/7V1PsQWpuJKtD+48iAiA2Y+Nyd9F3iDHYjTT/xnjg2o4bVUrp tk+cktSH70lHB5Y+w5A0metcgRydfvKeLmZmj7cOBgQz041dqyd4nJtZF46Xmo3V XGdLz8TuH0Rj9NaSfZ4qiu84LlVc6QldTASdKOXCIa95sySD63EzyylZdQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFPEP1ss3WYkHJEqYYAGSEdL+bR4NMB8GA1UdIwQY MBaAFId4rYFo4Jz5LU4EmCV/jpzqvwaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAt YWE5ZDY5MTgxMWU3LzEvOFFfV3l6ZFppUWNrU3BoZ0FaSVIwdjV0SGcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAtYWE5ZDY5MTgxMWU3 LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQBsvq4AwQA svq8AwQBsvq+AwQAwQDjAwQAwQDmMA0EAgACMAcDBQEqD83AMA0GCSqGSIb3DQEB CwUAA4IBAQCLhFY/yRpiLyivJzx2GpXp59ORE0AL6RmwMzHUa4rsu2+BNRGhQI5L w7GVv9r9W6GVkaT1pu1jSchMJ33RREJB+CAnxMfTeUMXEfiF1gW6MXxe/gLkUwOV nR2ZJsntRlrwHttw9cVFYSwlY55yGDem+NkfDvlJ77qKgEvcQ5kZdV+YjWRZa6t7 Efw/A73Uub2QI9lkx1OGEbCly/df3o6FYLP74BE76BHtTiiNgB2QrtKPlGJq2Em5 xygaBsb+NB+4yntaIE9NwjHf1iH0IIJxWPchTU/gkH+kbt0lxou4Sfz7QaXHZSO7 6k+vPGd7o/x7pe4AOazUslZGYdxC5sCL -----END CERTIFICATE-----Generated at Sun Jan 25 21:15:17 2026 by rpki-client