This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/8n9eZIW7ANGT-kZFn82_ark7Uv4.roa File: 8n9eZIW7ANGT-kZFn82_ark7Uv4.roa (raw, json) Hash identifier: iSzxnZr5liuYDapFFff4VPiBs6DGqwu/5GYq/65KGeY= Subject key identifier: F2:7F:5E:64:85:BB:00:D1:93:FA:46:45:9F:CD:BF:6A:B9:3B:52:FE Certificate issuer: /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49 Certificate serial: 019B7A5B42189D252CFB2AC241898821353B Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/8n9eZIW7ANGT-kZFn82_ark7Uv4.roa Signing time: Thu 01 Jan 2026 16:19:19 +0000 ROA not before: Thu 01 Jan 2026 16:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59613 IP address blocks: 185.158.208.0/22 maxlen: 24 185.158.208.0/24 maxlen: 24 185.158.209.0/24 maxlen: 24 185.158.210.0/24 maxlen: 24 185.158.211.0/24 maxlen: 24 195.234.112.0/24 maxlen: 24 195.234.113.0/24 maxlen: 24 195.234.114.0/24 maxlen: 24 195.234.115.0/24 maxlen: 24 2a02:2278:ff00::/40 maxlen: 56 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:42:18:9d:25:2c:fb:2a:c2:41:89:88:21:35:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49 Validity Not Before: Jan 1 16:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f27f5e6485bb00d193fa46459fcdbf6ab93b52fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e6:c1:cc:07:38:4e:5a:ac:33:8e:8a:46:f3: c9:6d:9c:8d:1b:8d:bf:a2:5e:f4:f7:47:e7:50:a1: 74:95:2e:57:1d:36:58:35:11:83:61:c3:d3:f4:64: 9f:ce:8e:00:ce:02:bd:1e:f2:58:4d:e4:01:88:6e: 0e:2b:f2:40:00:11:d1:c6:ba:f1:9a:43:7c:d3:36: 5d:d1:ad:eb:a7:df:38:40:86:f1:00:a5:51:1f:fe: c1:60:8d:fb:67:c1:48:26:34:fa:30:9f:c9:f0:ab: d5:e1:71:3d:62:18:0f:8e:85:df:6c:ad:4f:dd:4a: f1:7c:11:71:31:05:b0:a8:b9:d2:a1:fa:20:13:5c: 00:c5:65:4d:86:75:ac:2d:28:0f:0d:32:fc:08:62: eb:af:11:54:8e:70:15:af:0d:ea:1e:25:d9:6c:1f: 71:94:cc:c9:f0:3e:71:ee:82:a4:df:b6:a0:a0:32: 20:1b:d0:59:21:05:db:46:a9:0b:1e:00:da:11:84: c2:ad:c4:7c:b5:bb:80:ec:7e:5f:f9:f5:e7:df:c9: 1f:96:a2:32:3e:d8:90:f0:61:a3:d3:bc:73:69:9b: 14:54:38:e8:4d:9b:5c:5e:dc:35:57:72:c4:3a:ec: 9f:22:ba:b4:c1:95:74:78:df:ca:c3:d9:17:d3:bb: 83:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:7F:5E:64:85:BB:00:D1:93:FA:46:45:9F:CD:BF:6A:B9:3B:52:FE X509v3 Authority Key Identifier: keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/8n9eZIW7ANGT-kZFn82_ark7Uv4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.158.208.0/22 195.234.112.0/22 IPv6: 2a02:2278:ff00::/40 Signature Algorithm: sha256WithRSAEncryption 47:01:5f:84:a9:36:7a:b4:69:b1:81:8a:97:c4:0a:50:64:67: c8:6d:31:d6:0f:3c:1c:75:e9:9f:13:ad:bc:ae:8f:e9:ef:75: ad:9a:db:20:90:32:08:c5:a5:1d:65:ac:a6:9f:e7:03:f5:31: 89:9f:18:be:1b:e1:88:f7:43:7a:fa:46:c6:4c:ea:d5:3c:84: 39:6c:18:c1:8d:0c:a8:d4:d7:fa:ee:f5:da:0c:a1:f3:e3:f0: e1:74:6b:be:31:3d:33:88:7c:7b:fa:38:b1:96:11:6f:30:b2: 8a:b3:fd:17:9a:30:ec:2e:b8:39:fd:ce:9e:e9:c4:09:92:da: 65:7f:1e:5c:b0:af:93:bf:2d:b4:bb:50:74:62:23:05:16:ff: c3:eb:f6:78:1e:30:13:47:8a:7f:5b:d7:f6:f7:4e:83:62:96: b4:ae:1f:9f:a1:77:ee:37:8b:97:64:9a:8a:a4:38:98:ef:b1: 1f:06:77:dc:69:91:18:b8:f3:94:ed:3e:3a:03:10:d7:9f:c0: 73:06:5f:ee:c6:d3:73:f3:3a:2a:f7:5e:c4:ed:7c:d3:c5:8d: 6f:f6:bb:b5:e3:46:dd:a1:98:59:2d:c1:ec:f7:2d:ab:a4:71: 7f:54:8e:54:db:85:d0:bb:84:9e:2a:c0:6d:b9:db:98:4b:4b: 39:8d:45:dc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt6W0IYnSUs+yrCQYmIITU7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMWRhZWNkMzBhZWI3NDY1MmJiZGRhNWRhZDk2NzZjZTQ4 OGFhNDkwHhcNMjYwMTAxMTYxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjdmNWU2NDg1YmIwMGQxOTNmYTQ2NDU5ZmNkYmY2YWI5M2I1MmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ebBzAc4TlqsM46KRvPJbZyNG42/ ol7090fnUKF0lS5XHTZYNRGDYcPT9GSfzo4AzgK9HvJYTeQBiG4OK/JAABHRxrrx mkN80zZd0a3rp984QIbxAKVRH/7BYI37Z8FIJjT6MJ/J8KvV4XE9YhgPjoXfbK1P 3UrxfBFxMQWwqLnSofogE1wAxWVNhnWsLSgPDTL8CGLrrxFUjnAVrw3qHiXZbB9x lMzJ8D5x7oKk37agoDIgG9BZIQXbRqkLHgDaEYTCrcR8tbuA7H5f+fXn38kflqIy PtiQ8GGj07xzaZsUVDjoTZtcXtw1V3LEOuyfIrq0wZV0eN/Kw9kX07uDewIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFPJ/XmSFuwDRk/pGRZ/Nv2q5O1L+MB8GA1UdIwQY MBaAFN0drs0wrrdGUrvdpdrZZ2zkiKpJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTct MDYwYWMwODkwOTY2LzEvOG45ZVpJVzdBTkdULWtaRm44Ml9hcms3VXY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTctMDYwYWMwODkwOTY2 LzEvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQCuZ7QAwQC w+pwMA4EAgACMAgDBgAqAiJ4/zANBgkqhkiG9w0BAQsFAAOCAQEARwFfhKk2erRp sYGKl8QKUGRnyG0x1g88HHXpnxOtvK6P6e91rZrbIJAyCMWlHWWspp/nA/UxiZ8Y vhvhiPdDevpGxkzq1TyEOWwYwY0MqNTX+u712gyh8+Pw4XRrvjE9M4h8e/o4sZYR bzCyirP9F5ow7C64Of3OnunECZLaZX8eXLCvk78ttLtQdGIjBRb/w+v2eB4wE0eK f1vX9vdOg2KWtK4fn6F37jeLl2SaiqQ4mO+xHwZ33GmRGLjzlO0+OgMQ15/AcwZf 7sbTc/M6KvdexO1808WNb/a7teNG3aGYWS3B7Pctq6Rxf1SOVNuF0LuEnirAbbnb mEtLOY1F3A== -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:53 2026 by rpki-client