This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/8bD-7QTegEg52E0iZppyCdDUnzk.roa File: 8bD-7QTegEg52E0iZppyCdDUnzk.roa (raw, json) Hash identifier: SIwdtnsAl+O53na0hHcKGea3jeX1u8/+0tuoQrFoHIc= Subject key identifier: F1:B0:FE:ED:04:DE:80:48:39:D8:4D:22:66:9A:72:09:D0:D4:9F:39 Certificate issuer: /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37 Certificate serial: 019B7BA5252641AD71039F8C21187807715A Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/8bD-7QTegEg52E0iZppyCdDUnzk.roa Signing time: Thu 01 Jan 2026 22:19:38 +0000 ROA not before: Thu 01 Jan 2026 22:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60171 IP address blocks: 185.10.164.0/22 maxlen: 24 185.10.165.0/24 maxlen: 24 185.10.166.0/24 maxlen: 24 185.10.167.0/24 maxlen: 24 185.35.140.0/22 maxlen: 22 2a00:dd60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Feb 2026 17:32:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:25:26:41:ad:71:03:9f:8c:21:18:78:07:71:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37 Validity Not Before: Jan 1 22:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1b0feed04de804839d84d22669a7209d0d49f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5c:91:3e:f6:52:74:50:b0:b6:71:8a:50:a9: eb:59:18:2f:0c:f9:62:71:dc:ce:99:da:26:e7:e9: 89:58:e3:23:92:10:3a:66:42:f2:cb:2f:14:4b:16: 92:75:1a:16:df:b5:8b:c4:29:47:75:4a:1a:b5:43: 94:ca:90:9b:be:e8:61:af:a6:2a:61:72:37:f0:32: b8:c9:b4:42:44:f7:31:91:8e:c9:d6:65:ba:59:ee: 77:8b:79:08:42:ff:ab:02:c8:7e:bb:96:92:9c:e6: 1e:41:e4:a7:ed:59:33:47:f2:84:7e:53:e7:a5:5a: 52:25:eb:cf:1d:bf:05:3a:cf:7a:c9:84:ca:c0:43: e1:74:8d:e3:0f:b5:42:cb:de:d7:cd:4e:3c:3e:d2: c4:17:d9:a1:25:90:89:a5:3f:b9:28:e4:e9:b8:56: aa:a5:14:93:09:ff:0e:67:d6:f7:24:68:d9:63:47: b6:34:44:d6:a5:22:a9:f9:c0:ab:ac:b6:c7:52:3f: 04:de:a7:a6:75:ed:8d:c6:a5:9e:34:90:b9:ac:39: 72:1c:6c:47:6c:0b:fa:9d:21:e7:95:7a:cc:8a:4c: 0d:b6:26:06:9c:c2:62:3b:5a:ab:1e:d6:e5:d0:e2: 94:a8:94:da:46:77:eb:74:a4:c1:43:cb:a0:c5:9c: e7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B0:FE:ED:04:DE:80:48:39:D8:4D:22:66:9A:72:09:D0:D4:9F:39 X509v3 Authority Key Identifier: keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/8bD-7QTegEg52E0iZppyCdDUnzk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.10.164.0/22 185.35.140.0/22 IPv6: 2a00:dd60::/32 Signature Algorithm: sha256WithRSAEncryption 61:d5:87:bd:8c:b4:76:bd:49:36:e6:bc:9e:26:fe:64:b8:d0: 40:92:88:9b:f7:ef:4a:f4:19:52:19:75:24:3b:23:1b:d7:b8: 13:63:38:19:2c:c1:69:15:70:1f:cb:6d:64:e5:45:30:05:84: 72:f7:bd:2e:dd:09:3e:bf:90:50:16:a0:36:dc:a7:71:ba:8e: 52:5f:3e:a1:37:6e:b2:95:d5:24:21:af:21:25:59:5e:ef:1f: 87:0e:1c:e1:0c:54:c2:9b:d3:21:c0:61:7f:a4:16:c4:66:ad: 89:c3:4d:5a:2c:e5:f5:70:b4:d1:98:6a:4c:09:94:0e:ee:d8: 6d:39:c0:c1:ba:95:a2:fb:02:86:f0:68:19:77:87:fb:64:b8: 63:48:ac:11:73:39:b9:c2:07:10:6f:e6:64:7a:2b:f1:38:ab: 9d:16:74:1d:18:e8:6c:15:15:ef:81:4d:33:93:cb:68:9a:21: 8e:5b:d3:de:bb:f2:57:52:f0:b6:63:61:f8:dd:5d:69:25:16: 00:2d:ee:d4:c6:9d:87:1e:12:47:0c:0b:5b:0c:28:1f:b9:61: bf:5b:34:1a:fa:e6:2b:28:78:ce:42:fe:ed:10:db:58:55:36: f9:e9:7a:03:d7:33:53:dd:e6:09:23:ce:1e:a6:6e:74:05:b2: bf:02:14:29 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7pSUmQa1xA5+MIRh4B3FaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjN2YyNTFhYzExOTBjOWRlZGM4ZTViZTA4NWQ1NDM4N2Y0 MDFhMzcwHhcNMjYwMTAxMjIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWIwZmVlZDA0ZGU4MDQ4MzlkODRkMjI2NjlhNzIwOWQwZDQ5ZjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFyRPvZSdFCwtnGKUKnrWRgvDPli cdzOmdom5+mJWOMjkhA6ZkLyyy8USxaSdRoW37WLxClHdUoatUOUypCbvuhhr6Yq YXI38DK4ybRCRPcxkY7J1mW6We53i3kIQv+rAsh+u5aSnOYeQeSn7VkzR/KEflPn pVpSJevPHb8FOs96yYTKwEPhdI3jD7VCy97XzU48PtLEF9mhJZCJpT+5KOTpuFaq pRSTCf8OZ9b3JGjZY0e2NETWpSKp+cCrrLbHUj8E3qemde2NxqWeNJC5rDlyHGxH bAv6nSHnlXrMikwNtiYGnMJiO1qrHtbl0OKUqJTaRnfrdKTBQ8ugxZznQQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPGw/u0E3oBIOdhNImaacgnQ1J85MB8GA1UdIwQY MBaAFIx/JRrBGQyd7cjlvghdVDh/QBo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9iMmUzNTAtYWY5MC00ZjliLThmYmYt NTAwYzdjNDVmNDE5LzEvOGJELTdRVGVnRWc1MkUwaVpwcHlDZERVbnprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9iMmUzNTAtYWY5MC00ZjliLThmYmYtNTAwYzdjNDVmNDE5 LzEvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuQqkAwQC uSOMMA0EAgACMAcDBQAqAN1gMA0GCSqGSIb3DQEBCwUAA4IBAQBh1Ye9jLR2vUk2 5ryeJv5kuNBAkoib9+9K9BlSGXUkOyMb17gTYzgZLMFpFXAfy21k5UUwBYRy970u 3Qk+v5BQFqA23Kdxuo5SXz6hN26yldUkIa8hJVle7x+HDhzhDFTCm9MhwGF/pBbE Zq2Jw01aLOX1cLTRmGpMCZQO7thtOcDBupWi+wKG8GgZd4f7ZLhjSKwRczm5wgcQ b+ZkeivxOKudFnQdGOhsFRXvgU0zk8tomiGOW9Peu/JXUvC2Y2H43V1pJRYALe7U xp2HHhJHDAtbDCgfuWG/WzQa+uYrKHjOQv7tENtYVTb56XoD1zNT3eYJI84epm50 BbK/AhQp -----END CERTIFICATE-----Generated at Sat Feb 7 04:04:25 2026 by rpki-client