This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/tA7ayHD2OC_mDpYSeAYmRt9vl60.roa File: tA7ayHD2OC_mDpYSeAYmRt9vl60.roa (raw, json) Hash identifier: nXzUQidKZKiPu+wTyev4ClnGSOGOvsTtGMsfWsjmfCU= Subject key identifier: B4:0E:DA:C8:70:F6:38:2F:E6:0E:96:12:78:06:26:46:DF:6F:97:AD Certificate issuer: /CN=f215517b0b20309e916405b9e1ed21a0469a6895 Certificate serial: 019B79ED338B8274C4DB97FBF315914C6E80 Authority key identifier: F2:15:51:7B:0B:20:30:9E:91:64:05:B9:E1:ED:21:A0:46:9A:68:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/tA7ayHD2OC_mDpYSeAYmRt9vl60.roa Signing time: Thu 01 Jan 2026 14:19:06 +0000 ROA not before: Thu 01 Jan 2026 14:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201966 IP address blocks: 185.92.216.0/22 maxlen: 24 185.92.216.0/24 maxlen: 24 185.92.217.0/24 maxlen: 24 185.92.218.0/24 maxlen: 24 185.92.219.0/24 maxlen: 24 2a14:8900::/29 maxlen: 64 2a14:8900::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:33:8b:82:74:c4:db:97:fb:f3:15:91:4c:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f215517b0b20309e916405b9e1ed21a0469a6895 Validity Not Before: Jan 1 14:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b40edac870f6382fe60e961278062646df6f97ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1b:72:0e:60:c0:8f:0f:11:de:9b:f1:57:7a: f1:a2:79:b4:c0:b2:99:dc:24:d6:68:2f:fb:c1:55: d7:49:d1:64:27:0f:de:51:32:6f:a1:6e:3a:ac:19: d8:c2:6c:82:14:8f:3c:7c:19:f4:26:cf:d9:ea:2c: d3:d0:5f:93:75:d5:66:62:09:91:c9:1d:88:89:25: 40:3d:b1:ab:5e:96:48:af:d1:79:d7:03:88:fc:5e: eb:89:30:ef:f2:a6:c0:f6:34:49:03:78:cf:f0:ab: e7:9d:f8:2a:3a:77:99:cb:50:fe:0c:20:01:1d:f5: 19:1a:18:da:b7:b2:32:b5:f7:e9:dd:10:16:48:c0: 87:4f:86:bd:cc:d4:bf:e3:37:04:21:fa:09:30:9a: 1d:69:32:79:05:27:a2:7c:32:e9:6d:a9:da:af:9e: 21:a5:ab:20:55:19:e8:63:8d:8c:f2:3f:4d:9f:d2: fa:c1:f3:75:6e:c3:be:4c:47:a1:f0:8b:9c:78:9f: ca:d4:68:72:84:cf:11:3f:7c:44:29:ec:24:60:39: 7f:40:f1:63:a7:3f:cf:9d:ee:98:4f:6e:28:0a:0a: 73:0a:31:55:ab:31:50:47:67:c6:76:40:88:43:17: 78:b5:5e:e0:f5:1b:6a:b8:58:85:3f:ed:a4:68:66: 9e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0E:DA:C8:70:F6:38:2F:E6:0E:96:12:78:06:26:46:DF:6F:97:AD X509v3 Authority Key Identifier: keyid:F2:15:51:7B:0B:20:30:9E:91:64:05:B9:E1:ED:21:A0:46:9A:68:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/tA7ayHD2OC_mDpYSeAYmRt9vl60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.92.216.0/22 IPv6: 2a14:8900::/29 Signature Algorithm: sha256WithRSAEncryption 04:81:5e:c4:b3:75:da:fa:8a:54:e6:71:d8:32:db:7a:e4:65: c9:17:2c:ab:19:bc:de:9b:f0:bd:b6:14:37:e0:e5:1e:59:79: bc:8c:86:4e:9e:24:fa:e2:36:90:63:db:94:7d:b1:f2:5c:3f: 2c:7f:a4:86:25:8c:e4:fe:0a:45:9a:5f:c8:6b:ad:41:5f:f1: 2e:11:a0:29:26:d1:ef:0e:4a:08:32:2c:09:eb:45:3a:d3:95: f0:62:02:16:83:56:8d:f2:e9:fc:d2:58:7c:b7:72:12:97:ef: 5a:93:86:c2:82:af:45:b7:5a:d1:0d:42:29:f6:46:aa:98:bf: 72:97:d8:3a:96:a8:9c:f3:fc:83:77:47:2a:a2:2d:f9:98:f4: 95:f4:f6:68:74:fd:43:05:15:1e:54:ba:5a:8f:13:fc:3a:c0: 40:6b:c4:e4:50:55:84:33:b7:8e:3e:28:5c:34:8f:4e:e3:b2: 6b:98:55:1f:e8:97:9b:af:76:0a:68:23:d1:cf:7d:38:4d:08: f7:62:32:cb:99:dc:fa:d6:c9:72:d0:bc:4a:88:e7:e7:6d:ae: 4a:fb:b1:b4:e7:62:c2:d2:21:79:e5:26:f5:2c:c5:01:6b:c4: 0e:74:6f:18:f5:3c:7c:13:66:da:7b:19:89:c7:9f:7d:90:27: 82:2f:29:88 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57TOLgnTE25f78xWRTG6AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMTU1MTdiMGIyMDMwOWU5MTY0MDViOWUxZWQyMWEwNDY5 YTY4OTUwHhcNMjYwMTAxMTQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDBlZGFjODcwZjYzODJmZTYwZTk2MTI3ODA2MjY0NmRmNmY5N2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3htyDmDAjw8R3pvxV3rxonm0wLKZ 3CTWaC/7wVXXSdFkJw/eUTJvoW46rBnYwmyCFI88fBn0Js/Z6izT0F+TddVmYgmR yR2IiSVAPbGrXpZIr9F51wOI/F7riTDv8qbA9jRJA3jP8KvnnfgqOneZy1D+DCAB HfUZGhjat7Iytffp3RAWSMCHT4a9zNS/4zcEIfoJMJodaTJ5BSeifDLpbanar54h pasgVRnoY42M8j9Nn9L6wfN1bsO+TEeh8IuceJ/K1GhyhM8RP3xEKewkYDl/QPFj pz/Pne6YT24oCgpzCjFVqzFQR2fGdkCIQxd4tV7g9RtquFiFP+2kaGaexwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLQO2shw9jgv5g6WEngGJkbfb5etMB8GA1UdIwQY MBaAFPIVUXsLIDCekWQFueHtIaBGmmiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGhWUmV3c2dNSjZSWkFXNTRlMGhvRWFhYUpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi84M2NlYmUtYzhjZS00ODlkLWEyZjAt Yjk1YTE2NDE2YjU2LzEvdEE3YXlIRDJPQ19tRHBZU2VBWW1SdDl2bDYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi84M2NlYmUtYzhjZS00ODlkLWEyZjAtYjk1YTE2NDE2YjU2 LzEvOGhWUmV3c2dNSjZSWkFXNTRlMGhvRWFhYUpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVzYMA0E AgACMAcDBQMqFIkAMA0GCSqGSIb3DQEBCwUAA4IBAQAEgV7Es3Xa+opU5nHYMtt6 5GXJFyyrGbzem/C9thQ34OUeWXm8jIZOniT64jaQY9uUfbHyXD8sf6SGJYzk/gpF ml/Ia61BX/EuEaApJtHvDkoIMiwJ60U605XwYgIWg1aN8un80lh8t3ISl+9ak4bC gq9Ft1rRDUIp9kaqmL9yl9g6lqic8/yDd0cqoi35mPSV9PZodP1DBRUeVLpajxP8 OsBAa8TkUFWEM7eOPihcNI9O47JrmFUf6Jebr3YKaCPRz304TQj3YjLLmdz61sly 0LxKiOfnba5K+7G052LC0iF55Sb1LMUBa8QOdG8Y9Tx8E2baexmJx599kCeCLymI -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:40 2026 by rpki-client