This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8X-vY96aKKHfj_txGbHwT7KRdWc.roa File: 8X-vY96aKKHfj_txGbHwT7KRdWc.roa (raw, json) Hash identifier: 0WIWIIW0b9953A6VR0CU69w8OMoDd9V6tcRbkVExZv4= Subject key identifier: F1:7F:AF:63:DE:9A:28:A1:DF:8F:FB:71:19:B1:F0:4F:B2:91:75:67 Certificate issuer: /CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84 Certificate serial: 019B79ECBC2923652752EED924266ABF991D Authority key identifier: F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8X-vY96aKKHfj_txGbHwT7KRdWc.roa Signing time: Thu 01 Jan 2026 14:18:36 +0000 ROA not before: Thu 01 Jan 2026 14:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197395 IP address blocks: 45.10.132.0/22 maxlen: 22 46.243.96.0/21 maxlen: 23 185.119.188.0/22 maxlen: 22 2a04:e580::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:bc:29:23:65:27:52:ee:d9:24:26:6a:bf:99:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84 Validity Not Before: Jan 1 14:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f17faf63de9a28a1df8ffb7119b1f04fb2917567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:99:a5:4a:cf:ca:16:59:35:05:64:4f:5a:c9: 81:b8:d6:f6:ec:22:4b:37:f4:df:16:d4:b7:67:20: 3e:10:45:31:18:92:12:c6:05:53:86:b1:4e:db:8b: f5:07:61:e6:15:1a:34:d4:47:c7:b7:1b:74:83:63: a9:e2:5c:74:cd:44:93:29:b9:7c:d5:1b:20:8b:d9: d7:15:53:5e:a3:dc:94:0f:1a:43:26:22:7a:78:a2: 96:21:da:99:37:93:c2:e6:64:2a:37:10:81:df:a4: 17:2c:0b:5d:50:d9:18:4a:4d:55:d2:f8:84:0c:3d: 69:41:fd:10:1f:99:aa:20:39:0a:d5:00:a3:3b:ea: 95:6a:b0:71:9f:96:27:b9:4c:6e:f2:a5:af:ec:96: e8:f7:3c:e7:af:bb:5e:1c:8d:8c:1f:5c:f6:23:7d: 15:4e:e6:1b:35:bc:e7:54:11:98:26:96:a6:68:98: ea:81:e2:73:04:d8:6a:98:e4:5b:a4:7c:c5:3b:a4: d7:1a:15:05:38:92:cd:28:b7:10:49:c5:d5:67:5b: 22:8b:eb:c8:25:68:f1:13:d6:fb:bd:bd:32:e9:fa: 89:24:15:a2:6d:7a:cb:ea:ae:21:2d:95:5f:93:28: 53:63:11:e7:6b:e8:21:73:e0:ca:1d:9e:9f:4b:e4: ee:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7F:AF:63:DE:9A:28:A1:DF:8F:FB:71:19:B1:F0:4F:B2:91:75:67 X509v3 Authority Key Identifier: keyid:F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8X-vY96aKKHfj_txGbHwT7KRdWc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.132.0/22 46.243.96.0/21 185.119.188.0/22 IPv6: 2a04:e580::/29 Signature Algorithm: sha256WithRSAEncryption 6c:ff:53:56:30:ac:cf:f6:4c:ff:97:69:a9:72:a4:8b:37:56: 8c:f5:56:dd:f6:6d:3f:57:08:a2:cf:fe:9b:d2:ba:95:98:40: 30:f0:97:e0:92:ae:3d:02:d7:af:92:3b:b0:0a:9a:43:ba:c9: 07:03:fe:df:b5:ef:e3:bc:e4:35:df:e1:e9:41:9b:21:9a:1d: 5b:12:5a:8c:2a:cd:98:1e:ff:30:b2:6d:ae:8b:83:ef:58:06: 2e:66:17:21:97:a9:d3:68:32:22:11:52:20:91:f1:c5:d0:24: af:f9:69:22:7f:b7:8d:fa:4a:7c:00:29:2e:e8:e3:ea:3b:a6: 85:cb:33:dc:ea:19:07:af:5d:20:8d:2b:c8:ab:42:23:00:51: 5a:5e:e6:b6:5a:d1:23:2a:3a:c8:ac:89:8f:d7:46:03:8e:72: 85:71:5a:ef:b1:ba:2b:8e:cc:dc:5e:fb:e1:00:33:5e:84:1f: b0:71:c3:4c:b5:63:9e:1b:e3:ca:1c:55:c8:21:6d:69:4e:bd: ba:5d:27:d4:8f:1a:4c:59:d5:8f:db:a9:12:16:40:55:63:21: f1:8d:89:47:87:3a:7f:4a:33:72:12:b4:26:c2:ed:6a:21:3a: fd:3d:27:d0:01:3e:8e:22:e2:48:55:d6:3b:87:db:f5:b5:28: e9:34:0e:0b -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt57LwpI2UnUu7ZJCZqv5kdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZTNhYjZiMzExOGUwYmRlMGU2NDg4ZTZiZWQ2Yzk2OTQx ZTBlODQwHhcNMjYwMTAxMTQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTdmYWY2M2RlOWEyOGExZGY4ZmZiNzExOWIxZjA0ZmIyOTE3NTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85mlSs/KFlk1BWRPWsmBuNb27CJL N/TfFtS3ZyA+EEUxGJISxgVThrFO24v1B2HmFRo01EfHtxt0g2Op4lx0zUSTKbl8 1Rsgi9nXFVNeo9yUDxpDJiJ6eKKWIdqZN5PC5mQqNxCB36QXLAtdUNkYSk1V0viE DD1pQf0QH5mqIDkK1QCjO+qVarBxn5YnuUxu8qWv7Jbo9zznr7teHI2MH1z2I30V TuYbNbznVBGYJpamaJjqgeJzBNhqmORbpHzFO6TXGhUFOJLNKLcQScXVZ1sii+vI JWjxE9b7vb0y6fqJJBWibXrL6q4hLZVfkyhTYxHna+ghc+DKHZ6fS+TuGwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFPF/r2Pemiih34/7cRmx8E+ykXVnMB8GA1UdIwQY MBaAFPLjq2sxGOC94OZIjmvtbJaUHg6EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHVPcmF6RVk0TDNnNWtpT2EtMXNscFFlRG9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zNmM0YTMtNmUxZC00NjE0LThmOTAt ODNiMDM4NzAwOTRkLzEvOFgtdlk5NmFLS0hmal90eEdiSHdUN0tSZFdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8zNmM0YTMtNmUxZC00NjE0LThmOTAtODNiMDM4NzAwOTRk LzEvOHVPcmF6RVk0TDNnNWtpT2EtMXNscFFlRG9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLQqEAwQD LvNgAwQCuXe8MA0EAgACMAcDBQMqBOWAMA0GCSqGSIb3DQEBCwUAA4IBAQBs/1NW MKzP9kz/l2mpcqSLN1aM9Vbd9m0/Vwiiz/6b0rqVmEAw8Jfgkq49AtevkjuwCppD uskHA/7fte/jvOQ13+HpQZshmh1bElqMKs2YHv8wsm2ui4PvWAYuZhchl6nTaDIi EVIgkfHF0CSv+Wkif7eN+kp8ACku6OPqO6aFyzPc6hkHr10gjSvIq0IjAFFaXua2 WtEjKjrIrImP10YDjnKFcVrvsborjszcXvvhADNehB+wccNMtWOeG+PKHFXIIW1p Tr26XSfUjxpMWdWP26kSFkBVYyHxjYlHhzp/SjNyErQmwu1qITr9PSfQAT6OIuJI VdY7h9v1tSjpNA4L -----END CERTIFICATE-----Generated at Mon Feb 9 22:28:00 2026 by rpki-client