This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/_89DnbijBQeF2cskoVpDTtK_5Rg.roa File: _89DnbijBQeF2cskoVpDTtK_5Rg.roa (raw, json) Hash identifier: euBzCkVm4A9E+7P7b5QQPhEnEA1gc5PwXhqwL4l+p88= Subject key identifier: FF:CF:43:9D:B8:A3:05:07:85:D9:CB:24:A1:5A:43:4E:D2:BF:E5:18 Certificate issuer: /CN=08818cbb0f9d1e573773d791138a0122f28bec56 Certificate serial: 019B79ED14EB11E89834E3EC0AAC1DE97FE9 Authority key identifier: 08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/_89DnbijBQeF2cskoVpDTtK_5Rg.roa Signing time: Thu 01 Jan 2026 14:18:59 +0000 ROA not before: Thu 01 Jan 2026 14:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206772 IP address blocks: 185.158.124.0/22 maxlen: 22 185.158.124.0/23 maxlen: 23 185.158.124.0/24 maxlen: 24 185.158.125.0/24 maxlen: 24 185.158.127.0/24 maxlen: 24 2a07:ad40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:14:eb:11:e8:98:34:e3:ec:0a:ac:1d:e9:7f:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08818cbb0f9d1e573773d791138a0122f28bec56 Validity Not Before: Jan 1 14:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffcf439db8a3050785d9cb24a15a434ed2bfe518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:94:71:b6:df:01:d4:8a:a6:42:ab:1d:05:8a: 52:4b:dd:02:0c:3a:2b:37:94:2b:79:ba:6f:b2:aa: 7a:6d:b2:b6:bc:85:9d:5f:14:b0:45:8c:c3:75:01: 80:bd:d4:ea:d1:92:24:59:85:54:1c:2c:ab:2e:ee: 0c:35:e2:ac:5b:18:bd:39:27:e8:ef:d2:96:62:52: f0:b4:8e:89:c1:1e:c8:dc:82:11:8d:94:7d:1b:83: 63:ad:50:f8:ef:51:ae:79:f9:b5:75:26:de:52:2c: 94:dc:1e:5c:f2:30:f9:ab:c2:3d:9e:00:f9:78:db: 3c:29:2a:85:69:b8:1e:fc:5f:48:f3:d7:23:57:fd: bb:b5:2e:01:ee:15:80:54:39:28:4f:6b:00:a2:1f: 4a:43:90:fe:9e:21:df:07:04:8d:98:70:70:4a:28: a2:1e:3c:8e:76:e3:f8:c3:f7:36:60:fb:a4:a0:d3: 7c:8d:e1:40:c8:4f:6c:9f:27:dd:46:e2:a6:86:f0: 99:a4:f4:34:86:2f:f0:4d:4b:9e:c9:2d:f6:fe:d6: fb:58:e9:c4:4c:a9:d2:23:fb:ab:1f:61:fa:01:09: 93:24:b6:33:75:35:c6:2d:53:72:c0:6b:24:41:fd: f7:a0:01:ae:bb:0a:82:91:de:48:94:d9:3b:e7:51: e7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:CF:43:9D:B8:A3:05:07:85:D9:CB:24:A1:5A:43:4E:D2:BF:E5:18 X509v3 Authority Key Identifier: keyid:08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/_89DnbijBQeF2cskoVpDTtK_5Rg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.158.124.0/22 IPv6: 2a07:ad40::/29 Signature Algorithm: sha256WithRSAEncryption 1b:e4:20:0b:94:ee:a1:39:bf:72:da:71:20:bc:ac:16:ae:0f: 77:18:e6:11:46:4f:2f:de:ff:9a:a8:58:a5:36:de:ef:14:d0: 6a:f4:92:b2:c6:2a:42:90:86:ed:f3:ad:73:41:ea:ea:84:1b: 94:3c:9a:e9:6c:1a:1f:2b:3b:7c:5e:d3:05:8a:bf:cf:d9:7f: fe:2d:5f:cf:c8:16:d5:c3:15:eb:40:8b:43:84:6a:37:7b:9b: 65:a8:d4:f3:f7:75:9b:23:b7:ab:2d:c9:fa:1e:40:2d:51:3c: e0:66:6b:1d:43:44:7e:c9:df:64:df:51:15:9c:d1:7c:51:e6: 97:39:22:26:00:ad:1c:a1:90:05:6e:23:ad:90:b6:6a:56:fa: 91:49:6c:6b:67:0c:74:7c:20:89:06:3a:3e:6a:96:8f:92:17: 61:52:fe:85:00:5f:0a:07:09:04:5e:f0:75:8d:46:7d:c0:8c: 92:cb:c2:a4:09:52:0a:92:b9:2d:86:3e:fb:b2:55:ef:42:9a: 85:00:5b:ab:21:bd:40:bc:1b:75:82:33:94:c0:ff:1e:70:1a: 9f:ad:7f:1c:96:12:c0:28:65:04:13:10:3b:c1:f5:05:27:31: 11:ac:2f:5a:2c:dd:17:cb:c3:99:10:c2:18:bd:b4:f0:cb:e8: 03:e5:ba:d0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57RTrEeiYNOPsCqwd6X/pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODE4Y2JiMGY5ZDFlNTczNzczZDc5MTEzOGEwMTIyZjI4 YmVjNTYwHhcNMjYwMTAxMTQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmNmNDM5ZGI4YTMwNTA3ODVkOWNiMjRhMTVhNDM0ZWQyYmZlNTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZRxtt8B1IqmQqsdBYpSS90CDDor N5Qrebpvsqp6bbK2vIWdXxSwRYzDdQGAvdTq0ZIkWYVUHCyrLu4MNeKsWxi9OSfo 79KWYlLwtI6JwR7I3IIRjZR9G4NjrVD471Guefm1dSbeUiyU3B5c8jD5q8I9ngD5 eNs8KSqFabge/F9I89cjV/27tS4B7hWAVDkoT2sAoh9KQ5D+niHfBwSNmHBwSiii HjyOduP4w/c2YPukoNN8jeFAyE9snyfdRuKmhvCZpPQ0hi/wTUueyS32/tb7WOnE TKnSI/urH2H6AQmTJLYzdTXGLVNywGskQf33oAGuuwqCkd5IlNk751Hn4QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFP/PQ524owUHhdnLJKFaQ07Sv+UYMB8GA1UdIwQY MBaAFAiBjLsPnR5XN3PXkROKASLyi+xWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lHTXV3LWRIbGMzYzllUkU0b0JJdktMN0ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8yZTA1MzYtNGNhMi00YWZlLTgzZDYt MzM2ZTg3NGYzZDg3LzEvXzg5RG5iaWpCUWVGMmNza29WcERUdEtfNVJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8yZTA1MzYtNGNhMi00YWZlLTgzZDYtMzM2ZTg3NGYzZDg3 LzEvQ0lHTXV3LWRIbGMzYzllUkU0b0JJdktMN0ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZ58MA0E AgACMAcDBQMqB61AMA0GCSqGSIb3DQEBCwUAA4IBAQAb5CALlO6hOb9y2nEgvKwW rg93GOYRRk8v3v+aqFilNt7vFNBq9JKyxipCkIbt861zQerqhBuUPJrpbBofKzt8 XtMFir/P2X/+LV/PyBbVwxXrQItDhGo3e5tlqNTz93WbI7erLcn6HkAtUTzgZmsd Q0R+yd9k31EVnNF8UeaXOSImAK0coZAFbiOtkLZqVvqRSWxrZwx0fCCJBjo+apaP khdhUv6FAF8KBwkEXvB1jUZ9wIySy8KkCVIKkrkthj77slXvQpqFAFurIb1AvBt1 gjOUwP8ecBqfrX8clhLAKGUEExA7wfUFJzERrC9aLN0Xy8OZEMIYvbTwy+gD5brQ -----END CERTIFICATE-----Generated at Mon Feb 9 22:59:38 2026 by rpki-client