This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/8z2MsUIxn5nw1nALL7LRWOPfhD8.roa File: 8z2MsUIxn5nw1nALL7LRWOPfhD8.roa (raw, json) Hash identifier: 9llBO7otknupIcgUJiQCvbsRcVO2MsJYLXN6HgTAZ1I= Subject key identifier: F3:3D:8C:B1:42:31:9F:99:F0:D6:70:0B:2F:B2:D1:58:E3:DF:84:3F Certificate issuer: /CN=fff442affba1cfaef3102c981d7569502ce6515c Certificate serial: 019B791076D6DA9CAB2416621E287416DA20 Authority key identifier: FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/8z2MsUIxn5nw1nALL7LRWOPfhD8.roa Signing time: Thu 01 Jan 2026 10:18:00 +0000 ROA not before: Thu 01 Jan 2026 10:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204861 IP address blocks: 185.237.172.0/22 maxlen: 24 2a0c:1a80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:76:d6:da:9c:ab:24:16:62:1e:28:74:16:da:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fff442affba1cfaef3102c981d7569502ce6515c Validity Not Before: Jan 1 10:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f33d8cb142319f99f0d6700b2fb2d158e3df843f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:09:82:16:49:fd:2d:7e:6a:d3:d8:8a:53:9f: 3f:ff:25:ff:b8:46:e6:b1:37:58:22:2a:0c:69:fa: 2e:98:eb:a3:e1:8a:3f:ca:56:dc:bb:78:68:c2:94: 4d:0b:85:1a:30:57:ec:21:18:80:a9:70:27:38:70: b7:3f:83:dc:f5:28:03:da:fe:70:d4:29:d4:4b:a1: 95:d0:53:e5:36:00:31:8c:f2:36:ac:72:af:90:06: 04:71:14:f7:25:57:70:84:6d:a9:bf:1a:a3:30:85: 14:93:f0:27:09:6d:a9:d3:f6:6b:f9:a6:3c:88:a9: 72:56:dc:53:72:52:b4:b0:4c:0f:3a:a9:99:75:6f: 03:e1:79:af:bd:ee:98:d1:93:0d:9d:93:03:49:20: 26:33:90:f1:c8:4b:fc:72:79:26:63:20:5f:10:e1: 2f:d5:dc:69:bd:b3:b1:02:7e:d5:18:43:a2:9d:2b: 3a:47:9c:49:fd:c1:87:23:30:25:cb:32:b7:27:4a: 13:78:77:d0:98:ad:dc:3e:da:ea:c5:2c:82:44:22: 6b:c2:96:78:4b:30:6b:43:98:c1:bd:d1:bd:92:df: 0a:58:7e:6b:03:b6:16:97:02:28:7c:e7:41:6c:63: 17:fc:aa:c2:3d:c2:57:85:a2:ab:3a:c9:2c:32:b4: ed:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3D:8C:B1:42:31:9F:99:F0:D6:70:0B:2F:B2:D1:58:E3:DF:84:3F X509v3 Authority Key Identifier: keyid:FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/8z2MsUIxn5nw1nALL7LRWOPfhD8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.237.172.0/22 IPv6: 2a0c:1a80::/29 Signature Algorithm: sha256WithRSAEncryption 62:ac:77:f4:66:1f:ad:0c:2a:c9:ba:a1:cf:76:63:bf:d7:87: a4:e9:5a:0e:37:24:45:15:c2:e2:4f:d4:c2:20:f2:0d:99:94: 7c:70:b5:30:ab:04:c1:2f:4b:7d:24:2e:3d:1e:cf:8c:ea:96: ef:c6:29:62:c2:ab:4a:fb:08:47:3b:a7:6a:29:24:79:f3:4a: d8:1a:e6:24:49:5d:cd:85:c4:42:89:7c:99:d6:e1:d7:f9:92: c1:47:d4:26:7a:1b:81:95:af:b2:b6:64:e5:ce:44:03:bb:24: 6d:3d:71:b1:df:1a:62:73:43:4a:02:6c:d2:df:24:44:2a:65: 2f:f7:a7:6b:c2:71:2c:f2:09:00:b7:6e:fc:3f:5f:54:71:96: 92:c5:2c:6b:90:36:64:c6:ec:8b:56:73:ad:1e:80:14:d1:69: bb:85:24:67:4d:1c:76:17:c1:b2:1d:26:d1:e6:ab:50:94:4d: 8a:ec:cc:3a:3d:28:93:35:99:29:6a:dc:b5:29:bc:52:6e:ee: 79:86:ce:fc:65:bb:db:e2:91:e5:ef:ad:5d:0a:00:a4:75:7d: 5a:f0:eb:e4:6e:85:d3:bf:52:3b:26:fe:ad:f1:b1:3b:38:4c: 14:49:1a:9f:3c:5a:64:bd:06:49:7b:08:18:90:50:4f:0c:f8: 7b:ec:31:f1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EHbW2pyrJBZiHih0FtogMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZjQ0MmFmZmJhMWNmYWVmMzEwMmM5ODFkNzU2OTUwMmNl NjUxNWMwHhcNMjYwMTAxMTAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzNkOGNiMTQyMzE5Zjk5ZjBkNjcwMGIyZmIyZDE1OGUzZGY4NDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAmCFkn9LX5q09iKU58//yX/uEbm sTdYIioMafoumOuj4Yo/ylbcu3howpRNC4UaMFfsIRiAqXAnOHC3P4Pc9SgD2v5w 1CnUS6GV0FPlNgAxjPI2rHKvkAYEcRT3JVdwhG2pvxqjMIUUk/AnCW2p0/Zr+aY8 iKlyVtxTclK0sEwPOqmZdW8D4Xmvve6Y0ZMNnZMDSSAmM5DxyEv8cnkmYyBfEOEv 1dxpvbOxAn7VGEOinSs6R5xJ/cGHIzAlyzK3J0oTeHfQmK3cPtrqxSyCRCJrwpZ4 SzBrQ5jBvdG9kt8KWH5rA7YWlwIofOdBbGMX/KrCPcJXhaKrOsksMrTtjwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPM9jLFCMZ+Z8NZwCy+y0Vjj34Q/MB8GA1UdIwQY MBaAFP/0Qq/7oc+u8xAsmB11aVAs5lFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX19SQ3JfdWh6Njd6RUN5WUhYVnBVQ3ptVVZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC85ZmVkZDAtNGVkNy00NDE5LThlNzMt YjVjYTBhZGYyZjA4LzEvOHoyTXNVSXhuNW53MW5BTEw3TFJXT1BmaEQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC85ZmVkZDAtNGVkNy00NDE5LThlNzMtYjVjYTBhZGYyZjA4 LzEvX19SQ3JfdWh6Njd6RUN5WUhYVnBVQ3ptVVZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCue2sMA0E AgACMAcDBQMqDBqAMA0GCSqGSIb3DQEBCwUAA4IBAQBirHf0Zh+tDCrJuqHPdmO/ 14ek6VoONyRFFcLiT9TCIPINmZR8cLUwqwTBL0t9JC49Hs+M6pbvxiliwqtK+whH O6dqKSR580rYGuYkSV3NhcRCiXyZ1uHX+ZLBR9QmehuBla+ytmTlzkQDuyRtPXGx 3xpic0NKAmzS3yREKmUv96drwnEs8gkAt278P19UcZaSxSxrkDZkxuyLVnOtHoAU 0Wm7hSRnTRx2F8GyHSbR5qtQlE2K7Mw6PSiTNZkpaty1KbxSbu55hs78Zbvb4pHl 761dCgCkdX1a8OvkboXTv1I7Jv6t8bE7OEwUSRqfPFpkvQZJewgYkFBPDPh77DHx -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:38 2026 by rpki-client