This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/8wb-NwIWx_2gv_9rr5Dl3p3Xqdc.roa File: 8wb-NwIWx_2gv_9rr5Dl3p3Xqdc.roa (raw, json) Hash identifier: 32Fi6nwUZX9CqosBIo6WurIihzlTBMG77RVVRRD5m4A= Subject key identifier: F3:06:FE:37:02:16:C7:FD:A0:BF:FF:6B:AF:90:E5:DE:9D:D7:A9:D7 Certificate issuer: /CN=26d38293f669db48b6d0bd1036adfdef6bd3d375 Certificate serial: 019B78A2684EC89562A6A6151FEB9F705349 Authority key identifier: 26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/8wb-NwIWx_2gv_9rr5Dl3p3Xqdc.roa Signing time: Thu 01 Jan 2026 08:17:47 +0000 ROA not before: Thu 01 Jan 2026 08:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49956 IP address blocks: 185.52.120.0/22 maxlen: 22 185.114.168.0/22 maxlen: 22 185.114.220.0/22 maxlen: 22 185.163.8.0/22 maxlen: 22 185.166.10.0/24 maxlen: 24 194.54.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:68:4e:c8:95:62:a6:a6:15:1f:eb:9f:70:53:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26d38293f669db48b6d0bd1036adfdef6bd3d375 Validity Not Before: Jan 1 08:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f306fe370216c7fda0bfff6baf90e5de9dd7a9d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e3:67:ed:99:13:e8:70:71:2c:41:2c:5d:28: f9:04:ae:49:ff:b3:40:49:e0:36:ea:cb:4d:83:ec: 69:49:20:e1:05:63:36:92:2d:21:49:89:ad:1e:c2: 9e:6d:71:70:79:45:4c:4a:ad:7a:5e:34:50:b9:fe: c9:12:a0:4d:d1:0a:ad:15:2c:80:e3:00:56:06:2b: 31:9a:dd:16:3a:2d:ed:40:e3:eb:7d:a7:c2:5a:1f: 62:52:cf:88:e0:b7:69:69:be:2b:61:27:eb:ff:db: a9:9d:7c:74:4d:c8:54:c8:da:cd:5e:51:d2:c0:24: 31:2d:cc:17:59:ee:8a:7c:41:9d:89:ca:b3:15:ed: f8:f0:e6:7b:fb:d6:a6:39:86:44:65:91:98:52:b8: b5:f6:32:40:21:66:66:18:62:75:f1:80:1d:f6:2f: af:39:de:48:ef:78:70:6d:37:c4:6c:22:ab:50:8c: 56:8a:a7:28:54:65:d1:ac:26:b0:59:2c:f9:8e:6b: be:f5:dc:07:eb:bb:b0:94:7f:7d:a9:a5:b7:2d:af: e9:b1:f4:2b:41:df:ca:61:c3:2c:21:04:af:fb:e8: 6d:37:df:7a:6c:60:7b:7b:44:a7:d3:c9:4f:5e:76: 8e:7f:3e:c7:c8:3c:e8:10:ff:e4:6e:2c:f7:b4:d9: 6b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:06:FE:37:02:16:C7:FD:A0:BF:FF:6B:AF:90:E5:DE:9D:D7:A9:D7 X509v3 Authority Key Identifier: keyid:26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/8wb-NwIWx_2gv_9rr5Dl3p3Xqdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.52.120.0/22 185.114.168.0/22 185.114.220.0/22 185.163.8.0/22 185.166.10.0/24 194.54.76.0/22 Signature Algorithm: sha256WithRSAEncryption b0:4e:1e:2a:e5:1e:ed:a2:49:6a:d1:48:a8:74:79:0a:ab:2b: cf:f7:7c:ba:e1:3a:51:66:1c:31:dd:f2:f5:93:32:c6:67:c0: 31:17:5f:59:94:45:c4:2c:a0:50:da:c7:ca:45:41:c2:39:6b: ea:f5:57:fe:63:b6:38:6d:0c:81:c8:56:48:f0:dc:7b:09:1e: 6a:ef:43:67:7a:bb:be:24:fb:5b:bc:11:50:24:03:46:46:2c: a1:dd:1d:e0:fd:8f:fa:a4:6a:64:7a:3b:c8:46:59:73:99:cc: 85:e0:53:ea:3b:73:da:c4:e8:cb:8c:56:1f:ea:a6:37:bd:e8: 14:a6:bb:50:75:e9:ab:58:69:cc:29:0b:c3:18:89:f1:da:84: 7f:57:21:06:fd:f5:d7:be:79:f1:9b:8e:af:34:66:ea:00:24: f6:b0:ce:cb:bf:fb:86:66:19:18:62:92:00:9e:81:32:8b:8a: f7:7d:7b:7b:b2:4c:59:f3:cf:b3:64:ee:61:3e:d6:f4:7c:23: 1b:8b:6e:bf:88:a4:bc:09:db:7b:31:5c:c2:8c:c4:01:d0:07: 64:79:a3:ff:76:21:db:17:53:81:8a:d9:db:4c:ff:54:53:90: a3:b3:e3:08:5a:a4:00:54:68:ba:2b:3b:77:07:f2:35:65:e8: 97:a7:b5:cc -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt4omhOyJVipqYVH+ufcFNJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2ZDM4MjkzZjY2OWRiNDhiNmQwYmQxMDM2YWRmZGVmNmJk M2QzNzUwHhcNMjYwMTAxMDgxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzA2ZmUzNzAyMTZjN2ZkYTBiZmZmNmJhZjkwZTVkZTlkZDdhOWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uNn7ZkT6HBxLEEsXSj5BK5J/7NA SeA26stNg+xpSSDhBWM2ki0hSYmtHsKebXFweUVMSq16XjRQuf7JEqBN0QqtFSyA 4wBWBisxmt0WOi3tQOPrfafCWh9iUs+I4Ldpab4rYSfr/9upnXx0TchUyNrNXlHS wCQxLcwXWe6KfEGdicqzFe348OZ7+9amOYZEZZGYUri19jJAIWZmGGJ18YAd9i+v Od5I73hwbTfEbCKrUIxWiqcoVGXRrCawWSz5jmu+9dwH67uwlH99qaW3La/psfQr Qd/KYcMsIQSv++htN996bGB7e0Sn08lPXnaOfz7HyDzoEP/kbiz3tNlrMQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFPMG/jcCFsf9oL//a6+Q5d6d16nXMB8GA1UdIwQY MBaAFCbTgpP2adtIttC9EDat/e9r09N1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnRPQ2tfWnAyMGkyMEwwUU5xMzk3MnZUMDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8wN2NjMjUtODU5Ny00MzBiLWJjNTIt NDQ4YjliOTViMDllLzEvOHdiLU53SVd4XzJndl85cnI1RGwzcDNYcWRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8wN2NjMjUtODU5Ny00MzBiLWJjNTItNDQ4YjliOTViMDll LzEvSnRPQ2tfWnAyMGkyMEwwUU5xMzk3MnZUMDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCuTR4AwQC uXKoAwQCuXLcAwQCuaMIAwQAuaYKAwQCwjZMMA0GCSqGSIb3DQEBCwUAA4IBAQCw Th4q5R7toklq0UiodHkKqyvP93y64TpRZhwx3fL1kzLGZ8AxF19ZlEXELKBQ2sfK RUHCOWvq9Vf+Y7Y4bQyByFZI8Nx7CR5q70Nneru+JPtbvBFQJANGRiyh3R3g/Y/6 pGpkejvIRllzmcyF4FPqO3PaxOjLjFYf6qY3vegUprtQdemrWGnMKQvDGInx2oR/ VyEG/fXXvnnxm46vNGbqACT2sM7Lv/uGZhkYYpIAnoEyi4r3fXt7skxZ88+zZO5h Ptb0fCMbi26/iKS8Cdt7MVzCjMQB0AdkeaP/diHbF1OBitnbTP9UU5Cjs+MIWqQA VGi6Kzt3B/I1ZeiXp7XM -----END CERTIFICATE-----Generated at Tue Feb 10 00:08:24 2026 by rpki-client