This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/8hanK0NKvwJIC7T1uB5r98HS9K0.roa File: 8hanK0NKvwJIC7T1uB5r98HS9K0.roa (raw, json) Hash identifier: G1jXPH1oQWMdDFe+Y0BOw7e4oO+XPYfDTutzseD0qq4= Subject key identifier: F2:16:A7:2B:43:4A:BF:02:48:0B:B4:F5:B8:1E:6B:F7:C1:D2:F4:AD Certificate issuer: /CN=206f6808e0604697270faa3c3db159f7fe98ecdd Certificate serial: 019B7F831558FDD3EF66FF7DB838E9539345 Authority key identifier: 20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/8hanK0NKvwJIC7T1uB5r98HS9K0.roa Signing time: Fri 02 Jan 2026 16:20:55 +0000 ROA not before: Fri 02 Jan 2026 16:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24867 IP address blocks: 185.180.216.0/22 maxlen: 22 2a0a:af80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:15:58:fd:d3:ef:66:ff:7d:b8:38:e9:53:93:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f6808e0604697270faa3c3db159f7fe98ecdd Validity Not Before: Jan 2 16:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f216a72b434abf02480bb4f5b81e6bf7c1d2f4ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:69:f0:cb:1e:8c:54:f0:6f:56:92:54:71:cc: 42:93:19:95:c9:69:fc:f6:b9:64:47:8a:f0:1c:74: 57:2c:dd:1b:33:2a:d4:21:58:26:88:98:97:f2:fe: 6b:7f:e1:13:f9:d4:24:d7:29:71:ad:00:4e:fc:74: e4:84:31:ae:28:3c:a4:d6:25:f1:23:03:a1:ce:77: 53:dd:64:3f:84:a3:15:07:c6:66:e6:ac:12:d1:aa: 6f:85:1d:46:ad:5b:41:5e:31:35:32:e7:1e:63:09: 9b:5c:dd:19:07:db:bb:fb:ce:bc:35:55:c8:1a:b9: 88:6f:ad:d7:26:90:7b:68:b9:2e:96:e5:14:bd:f9: 65:22:96:92:d5:47:4b:39:39:ba:d5:69:46:8f:7a: bb:12:d9:bb:1c:2d:79:83:2b:82:7d:1b:47:cd:d2: be:1a:7c:58:92:22:f3:53:a8:5a:6d:e5:c8:41:6d: 08:88:c6:6b:2c:a1:41:d8:f2:64:ae:ad:6e:2d:2c: 58:c1:16:8d:c4:fb:57:a4:31:08:47:21:68:b3:c3: 23:8e:79:9d:ed:32:09:f6:bf:7c:92:e6:22:14:6b: 38:13:b2:74:d5:d3:74:8b:2d:66:97:6c:f9:f7:4a: 47:96:30:c3:e7:ad:c5:67:7d:52:e0:0a:4a:b2:01: 17:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:16:A7:2B:43:4A:BF:02:48:0B:B4:F5:B8:1E:6B:F7:C1:D2:F4:AD X509v3 Authority Key Identifier: keyid:20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/8hanK0NKvwJIC7T1uB5r98HS9K0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.180.216.0/22 IPv6: 2a0a:af80::/29 Signature Algorithm: sha256WithRSAEncryption 6a:82:bb:bd:33:07:7b:7d:36:6f:e1:1f:66:07:b6:15:ee:76: 3c:7b:08:73:c2:c7:aa:51:ac:37:2f:c8:b3:cc:11:b2:c3:cd: d6:23:94:eb:c5:87:50:41:2f:a4:33:2b:df:c2:39:33:7d:c0: 0b:dc:a7:93:de:5e:27:f0:52:9b:18:d9:cf:2f:1c:3d:71:81: d0:e2:48:0f:32:c5:de:c0:80:07:40:92:ac:eb:86:2b:7c:d4: d7:34:90:15:cb:e4:2c:10:ab:a3:53:ed:dd:f2:d7:88:d0:05: ce:ba:ae:45:e5:0b:50:29:44:8f:13:3a:d4:a0:96:d2:64:bd: bd:02:7a:99:e9:c8:e6:05:b3:12:4c:86:a7:25:74:2d:66:4b: 67:0d:5c:89:7f:81:3d:0b:62:36:b5:7d:c3:cb:87:0a:5e:45: 37:06:2d:8c:f3:c0:36:60:98:f2:89:2d:cc:50:6a:0b:ea:a5: 3c:6a:2f:68:79:07:6f:36:43:bf:51:1f:7c:96:99:28:5a:65: 70:45:1d:bd:28:08:47:40:d4:77:7f:50:f9:57:25:94:d6:f1: e4:df:b7:1d:91:34:41:d9:8c:4f:96:57:3f:33:ea:d7:32:11: 03:36:a5:4d:be:fa:a7:8e:35:fd:42:1d:f0:12:0a:19:b6:2a: c9:05:ca:68 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/gxVY/dPvZv99uDjpU5NFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmY2ODA4ZTA2MDQ2OTcyNzBmYWEzYzNkYjE1OWY3ZmU5 OGVjZGQwHhcNMjYwMTAyMTYyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjE2YTcyYjQzNGFiZjAyNDgwYmI0ZjViODFlNmJmN2MxZDJmNGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmnwyx6MVPBvVpJUccxCkxmVyWn8 9rlkR4rwHHRXLN0bMyrUIVgmiJiX8v5rf+ET+dQk1ylxrQBO/HTkhDGuKDyk1iXx IwOhzndT3WQ/hKMVB8Zm5qwS0apvhR1GrVtBXjE1MuceYwmbXN0ZB9u7+868NVXI GrmIb63XJpB7aLkuluUUvfllIpaS1UdLOTm61WlGj3q7Etm7HC15gyuCfRtHzdK+ GnxYkiLzU6habeXIQW0IiMZrLKFB2PJkrq1uLSxYwRaNxPtXpDEIRyFos8Mjjnmd 7TIJ9r98kuYiFGs4E7J01dN0iy1ml2z590pHljDD563FZ31S4ApKsgEXEQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPIWpytDSr8CSAu09bgea/fB0vStMB8GA1UdIwQY MBaAFCBvaAjgYEaXJw+qPD2xWff+mOzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc5b0NPQmdScGNuRDZvOFBiRlo5XzZZN04wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yNjVkM2EtYWVkNi00YmUyLWI0MmUt ZWI2MmU4YzRkZmE5LzEvOGhhbkswTkt2d0pJQzdUMXVCNXI5OEhTOUswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8yNjVkM2EtYWVkNi00YmUyLWI0MmUtZWI2MmU4YzRkZmE5 LzEvSUc5b0NPQmdScGNuRDZvOFBiRlo5XzZZN04wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubTYMA0E AgACMAcDBQMqCq+AMA0GCSqGSIb3DQEBCwUAA4IBAQBqgru9Mwd7fTZv4R9mB7YV 7nY8ewhzwseqUaw3L8izzBGyw83WI5TrxYdQQS+kMyvfwjkzfcAL3KeT3l4n8FKb GNnPLxw9cYHQ4kgPMsXewIAHQJKs64YrfNTXNJAVy+QsEKujU+3d8teI0AXOuq5F 5QtQKUSPEzrUoJbSZL29AnqZ6cjmBbMSTIanJXQtZktnDVyJf4E9C2I2tX3Dy4cK XkU3Bi2M88A2YJjyiS3MUGoL6qU8ai9oeQdvNkO/UR98lpkoWmVwRR29KAhHQNR3 f1D5VyWU1vHk37cdkTRB2YxPllc/M+rXMhEDNqVNvvqnjjX9Qh3wEgoZtirJBcpo -----END CERTIFICATE-----Generated at Tue Jan 27 07:43:46 2026 by rpki-client