This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/8a76FAqMjieN7aLSC8xEAc3hgOU.roa File: 8a76FAqMjieN7aLSC8xEAc3hgOU.roa (raw, json) Hash identifier: pAPcnCH+A+mHZKWJuKSuBMT8TzG5YvvwYe+EaHI/zYI= Subject key identifier: F1:AE:FA:14:0A:8C:8E:27:8D:ED:A2:D2:0B:CC:44:01:CD:E1:80:E5 Certificate issuer: /CN=cdee5d90061fa2a724c36742586c629d471e7a4d Certificate serial: 019B7BA346B6F9B80C942807869222125536 Authority key identifier: CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/8a76FAqMjieN7aLSC8xEAc3hgOU.roa Signing time: Thu 01 Jan 2026 22:17:36 +0000 ROA not before: Thu 01 Jan 2026 22:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205620 IP address blocks: 185.211.64.0/24 maxlen: 24 185.211.65.0/24 maxlen: 24 185.211.66.0/24 maxlen: 24 185.211.67.0/24 maxlen: 24 193.27.24.0/24 maxlen: 24 193.27.25.0/24 maxlen: 24 193.27.26.0/24 maxlen: 24 193.27.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:46:b6:f9:b8:0c:94:28:07:86:92:22:12:55:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdee5d90061fa2a724c36742586c629d471e7a4d Validity Not Before: Jan 1 22:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1aefa140a8c8e278deda2d20bcc4401cde180e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0a:de:dd:98:a1:7d:ab:6c:df:98:6e:ee:1b: 29:1b:03:b8:12:52:3e:1b:98:3c:0e:f8:31:ff:33: b3:f5:c1:2e:49:4d:cb:e1:d5:82:bb:64:9a:72:e1: 74:bb:5b:0f:1b:b0:0f:8d:fb:37:96:7e:07:bc:cc: 8d:39:e3:0e:f6:14:44:a6:9f:93:82:6f:ae:60:e0: 86:22:50:8d:1e:74:c0:80:75:55:28:22:a6:40:09: 69:98:81:f6:26:d6:7d:02:ec:90:e2:5d:9e:73:96: 16:18:06:96:8f:18:8c:54:cc:8e:12:71:26:30:4c: 1d:bd:fc:c5:a0:9f:3f:bb:53:1a:de:e2:e5:a3:65: 2f:cf:96:ad:4d:fa:df:f6:db:b9:bd:d6:8d:40:ce: c6:a4:07:f2:50:5e:50:88:c8:86:85:bf:b7:63:15: 45:b9:e4:f1:5b:a3:9d:32:af:ce:b0:0d:5f:ee:9a: 47:59:44:28:69:d5:24:43:ae:50:0b:41:74:86:8b: e2:31:8a:18:66:28:c1:c5:bf:c2:16:5e:e3:2d:90: 84:b8:a6:5f:2a:0b:8a:81:cc:fc:6a:43:2d:3f:3b: 7e:57:8f:25:c6:98:63:9b:ca:18:c3:c7:70:a9:1f: 82:89:37:77:f2:97:2a:28:5a:51:ba:77:51:f5:53: 01:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AE:FA:14:0A:8C:8E:27:8D:ED:A2:D2:0B:CC:44:01:CD:E1:80:E5 X509v3 Authority Key Identifier: keyid:CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/8a76FAqMjieN7aLSC8xEAc3hgOU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.64.0/22 193.27.24.0/22 Signature Algorithm: sha256WithRSAEncryption 06:25:bf:d6:f8:55:ef:b5:18:8f:e4:fe:c4:2b:a1:a9:5e:8e: 41:ac:ab:70:60:d5:d5:e6:88:df:c7:dc:db:72:d0:2c:00:97: f3:92:c9:67:9c:37:c8:24:cf:6b:fa:9f:07:c8:35:a0:83:c7: 43:a9:cc:44:af:ae:81:9b:93:e8:c2:5a:2e:1d:00:54:0a:6a: 8d:2f:f1:c7:4b:b7:97:8d:ff:55:2b:85:46:f7:f5:eb:70:52: 22:80:a6:82:c4:ac:8d:3e:43:a6:b5:34:18:34:fb:3d:64:a8: ea:09:67:77:87:69:59:e5:f9:99:e2:39:8b:a7:82:75:24:5c: 82:83:c2:31:eb:e0:df:32:f0:06:32:f8:29:2e:ec:56:e4:8f: 5d:f7:2d:91:5a:ac:ad:e7:df:24:29:a1:0d:48:a7:d6:91:84: 93:85:10:1d:a7:3b:3f:38:51:cf:6a:19:9f:37:ed:f2:e6:c1: 9d:ea:6a:e6:e7:af:6d:2a:c1:bf:22:96:cd:76:94:5d:d5:87: 1e:3a:54:d8:59:af:94:11:c8:e2:70:6e:30:f8:30:cc:b1:12: 06:38:e7:8b:f2:e6:4e:bf:b6:6f:2f:35:9e:d0:0f:a6:8d:85: 2b:bc:2b:10:85:90:e5:64:1d:5e:57:f6:93:53:d3:ec:44:5d: 34:0a:c2:10 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7o0a2+bgMlCgHhpIiElU2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZWU1ZDkwMDYxZmEyYTcyNGMzNjc0MjU4NmM2MjlkNDcx ZTdhNGQwHhcNMjYwMTAxMjIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWFlZmExNDBhOGM4ZTI3OGRlZGEyZDIwYmNjNDQwMWNkZTE4MGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQre3Zihfats35hu7hspGwO4ElI+ G5g8Dvgx/zOz9cEuSU3L4dWCu2SacuF0u1sPG7APjfs3ln4HvMyNOeMO9hREpp+T gm+uYOCGIlCNHnTAgHVVKCKmQAlpmIH2JtZ9AuyQ4l2ec5YWGAaWjxiMVMyOEnEm MEwdvfzFoJ8/u1Ma3uLlo2Uvz5atTfrf9tu5vdaNQM7GpAfyUF5QiMiGhb+3YxVF ueTxW6OdMq/OsA1f7ppHWUQoadUkQ65QC0F0hoviMYoYZijBxb/CFl7jLZCEuKZf KguKgcz8akMtPzt+V48lxphjm8oYw8dwqR+CiTd38pcqKFpRundR9VMBNQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPGu+hQKjI4nje2i0gvMRAHN4YDlMB8GA1UdIwQY MBaAFM3uXZAGH6KnJMNnQlhsYp1HHnpNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemU1ZGtBWWZvcWNrdzJkQ1dHeGluVWNlZWswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS82YjFlYTUtM2Y3OS00OWNhLWI5ODUt NTdhNWYzMjg5OTkyLzEvOGE3NkZBcU1qaWVON2FMU0M4eEVBYzNoZ09VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS82YjFlYTUtM2Y3OS00OWNhLWI5ODUtNTdhNWYzMjg5OTky LzEvemU1ZGtBWWZvcWNrdzJkQ1dHeGluVWNlZWswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCudNAAwQC wRsYMA0GCSqGSIb3DQEBCwUAA4IBAQAGJb/W+FXvtRiP5P7EK6GpXo5BrKtwYNXV 5ojfx9zbctAsAJfzkslnnDfIJM9r+p8HyDWgg8dDqcxEr66Bm5PowlouHQBUCmqN L/HHS7eXjf9VK4VG9/XrcFIigKaCxKyNPkOmtTQYNPs9ZKjqCWd3h2lZ5fmZ4jmL p4J1JFyCg8Ix6+DfMvAGMvgpLuxW5I9d9y2RWqyt598kKaENSKfWkYSThRAdpzs/ OFHPahmfN+3y5sGd6mrm569tKsG/IpbNdpRd1YceOlTYWa+UEcjicG4w+DDMsRIG OOeL8uZOv7ZvLzWe0A+mjYUrvCsQhZDlZB1eV/aTU9PsRF00CsIQ -----END CERTIFICATE-----Generated at Tue Feb 10 01:07:26 2026 by rpki-client