This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/8W2rp6MbUUSEIfd4qhjOg6b1mIs.roa File: 8W2rp6MbUUSEIfd4qhjOg6b1mIs.roa (raw, json) Hash identifier: xEqkqZVz8xhnWUviGVgU7z2eQqxR6458CfCvihlyPsw= Subject key identifier: F1:6D:AB:A7:A3:1B:51:44:84:21:F7:78:AA:18:CE:83:A6:F5:98:8B Certificate issuer: /CN=2ace126fa5830911083e45f583cadb08a63ec6f9 Certificate serial: 019AF48B20E906FC0E0CF8D83E92AF8855CB Authority key identifier: 2A:CE:12:6F:A5:83:09:11:08:3E:45:F5:83:CA:DB:08:A6:3E:C6:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/8W2rp6MbUUSEIfd4qhjOg6b1mIs.roa Signing time: Sat 06 Dec 2025 16:42:29 +0000 ROA not before: Sat 06 Dec 2025 16:42:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206984 IP address blocks: 185.169.244.0/22 maxlen: 22 2a0a:7700::/30 maxlen: 30 2a0a:7704::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:8b:20:e9:06:fc:0e:0c:f8:d8:3e:92:af:88:55:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ace126fa5830911083e45f583cadb08a63ec6f9 Validity Not Before: Dec 6 16:42:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f16daba7a31b51448421f778aa18ce83a6f5988b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:63:f1:c1:93:65:7d:eb:47:4a:a1:b0:1f:01: f2:84:48:a1:4f:de:38:70:c3:cc:33:ac:40:93:78: 68:e3:48:b6:c4:ab:c5:07:6c:b0:73:ff:e6:3e:9d: 50:bb:29:14:0e:9b:7b:18:f8:dc:1a:8d:f6:e0:4f: 14:5e:51:d3:60:0c:57:41:2a:0a:31:15:73:93:e7: c1:dd:15:09:91:bc:a3:1c:29:69:da:d5:9e:8a:dd: 11:e7:b9:f0:ae:80:07:a5:36:42:1c:d8:66:2f:98: 6d:e5:15:22:61:4f:0f:40:24:ed:10:c2:8b:60:fc: c2:be:bb:08:bc:5c:7c:54:44:10:95:8e:dd:4b:c7: 09:62:e5:bc:e5:ee:79:21:59:5f:03:3e:3a:b8:5f: b9:6a:0f:8f:8d:ac:85:00:2f:69:a9:6d:2c:75:bf: 68:64:e9:97:71:11:e4:c0:ee:2b:d1:d4:94:b5:c4: 0f:75:be:0a:8b:23:7e:80:46:de:48:22:e7:0f:d1: a3:4e:53:47:c3:c8:3d:2a:a1:f7:6b:48:a8:fc:39: 18:1e:2b:78:b3:bf:45:90:a4:c0:4b:f0:d1:c3:89: 6d:f2:9b:6c:da:f2:a0:61:3a:26:56:cd:0a:1f:0c: a1:8f:77:c3:92:7e:76:ab:ea:5a:f2:46:9e:3f:72: 25:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:6D:AB:A7:A3:1B:51:44:84:21:F7:78:AA:18:CE:83:A6:F5:98:8B X509v3 Authority Key Identifier: keyid:2A:CE:12:6F:A5:83:09:11:08:3E:45:F5:83:CA:DB:08:A6:3E:C6:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/8W2rp6MbUUSEIfd4qhjOg6b1mIs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.244.0/22 IPv6: 2a0a:7700::/29 Signature Algorithm: sha256WithRSAEncryption 93:c3:c0:bb:6a:f7:c2:35:08:a6:8a:32:34:49:9b:0a:14:02: 9a:0c:f8:d7:3e:7b:af:69:96:53:cd:be:6a:ba:79:88:d9:2b: 3e:9e:f6:0f:e7:d8:6a:f8:77:8e:3d:18:fe:5f:78:68:f9:22: 11:94:e7:4f:53:9f:df:04:28:cb:bc:de:d8:c0:f5:d7:e7:37: a6:e6:b3:98:4f:db:e7:8b:27:57:db:b0:22:ef:c1:78:96:4c: 8d:f5:cd:c8:56:bd:82:28:5a:60:c7:b4:ac:da:a8:44:0f:5f: f8:06:3d:56:6f:2d:1d:84:7e:d5:a4:60:fd:1c:39:61:e9:94: 50:85:a8:ea:7f:48:b9:9d:06:fa:8f:70:40:cf:5b:ee:09:16: b3:da:de:9f:d7:f9:dd:d6:a6:0c:9d:82:4a:4b:fa:78:9c:7a: 88:f5:9e:34:76:27:e7:7f:9a:b8:4f:0f:9e:b4:03:ae:ca:5f: 26:0c:8c:8a:5a:b4:91:fd:0f:3e:a2:47:1f:a1:ca:54:57:26: d4:11:8c:75:1c:ba:63:9a:a1:46:82:5f:ca:5d:e9:f2:70:6a: 74:27:70:c3:4d:41:ad:d1:60:34:6b:e2:26:4b:a5:79:54:7f: 06:e9:3f:79:a7:03:7f:13:05:d4:ac:b6:92:dd:68:1a:8d:0f: 1e:61:76:17 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZr0iyDpBvwODPjYPpKviFXLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhY2UxMjZmYTU4MzA5MTEwODNlNDVmNTgzY2FkYjA4YTYz ZWM2ZjkwHhcNMjUxMjA2MTY0MjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTZkYWJhN2EzMWI1MTQ0ODQyMWY3NzhhYTE4Y2U4M2E2ZjU5ODhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGPxwZNlfetHSqGwHwHyhEihT944 cMPMM6xAk3ho40i2xKvFB2ywc//mPp1QuykUDpt7GPjcGo324E8UXlHTYAxXQSoK MRVzk+fB3RUJkbyjHClp2tWeit0R57nwroAHpTZCHNhmL5ht5RUiYU8PQCTtEMKL YPzCvrsIvFx8VEQQlY7dS8cJYuW85e55IVlfAz46uF+5ag+PjayFAC9pqW0sdb9o ZOmXcRHkwO4r0dSUtcQPdb4KiyN+gEbeSCLnD9GjTlNHw8g9KqH3a0io/DkYHit4 s79FkKTAS/DRw4lt8pts2vKgYTomVs0KHwyhj3fDkn52q+pa8kaeP3IlnQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPFtq6ejG1FEhCH3eKoYzoOm9ZiLMB8GA1UdIwQY MBaAFCrOEm+lgwkRCD5F9YPK2wimPsb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3M0U2I2V0RDUkVJUGtYMWc4cmJDS1kteHZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iNzNiZDItYWI5NC00YWMzLTkzYzQt NmNiY2I3ZTNkOGQyLzEvOFcycnA2TWJVVVNFSWZkNHFoak9nNmIxbUlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9iNzNiZDItYWI5NC00YWMzLTkzYzQtNmNiY2I3ZTNkOGQy LzEvS3M0U2I2V0RDUkVJUGtYMWc4cmJDS1kteHZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuan0MA0E AgACMAcDBQMqCncAMA0GCSqGSIb3DQEBCwUAA4IBAQCTw8C7avfCNQimijI0SZsK FAKaDPjXPnuvaZZTzb5qunmI2Ss+nvYP59hq+HeOPRj+X3ho+SIRlOdPU5/fBCjL vN7YwPXX5zem5rOYT9vniydX27Ai78F4lkyN9c3IVr2CKFpgx7Ss2qhED1/4Bj1W by0dhH7VpGD9HDlh6ZRQhajqf0i5nQb6j3BAz1vuCRaz2t6f1/nd1qYMnYJKS/p4 nHqI9Z40difnf5q4Tw+etAOuyl8mDIyKWrSR/Q8+okcfocpUVybUEYx1HLpjmqFG gl/KXenycGp0J3DDTUGt0WA0a+ImS6V5VH8G6T95pwN/EwXUrLaS3WgajQ8eYXYX -----END CERTIFICATE-----Generated at Sat Dec 20 21:44:03 2025 by rpki-client