This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/8gaFDPVm7425HwLUH8kmf-jVUCE.roa File: 8gaFDPVm7425HwLUH8kmf-jVUCE.roa (raw, json) Hash identifier: U1D2gfVixMPcnJRary8djiMaZdiJbp1bCUJ4yOL20hY= Subject key identifier: F2:06:85:0C:F5:66:EF:8D:B9:1F:02:D4:1F:C9:26:7F:E8:D5:50:21 Certificate issuer: /CN=87e965e78831a88ba8fa419432a9d7bac9db38a3 Certificate serial: 019B7A5AD34BBA971842C716768698DD5F20 Authority key identifier: 87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/8gaFDPVm7425HwLUH8kmf-jVUCE.roa Signing time: Thu 01 Jan 2026 16:18:51 +0000 ROA not before: Thu 01 Jan 2026 16:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210275 IP address blocks: 83.229.65.0/24 maxlen: 24 152.114.228.0/22 maxlen: 24 176.105.148.0/22 maxlen: 24 185.35.78.0/23 maxlen: 24 185.169.32.0/22 maxlen: 24 185.169.33.0/24 maxlen: 24 2a13:2400::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d3:4b:ba:97:18:42:c7:16:76:86:98:dd:5f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87e965e78831a88ba8fa419432a9d7bac9db38a3 Validity Not Before: Jan 1 16:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f206850cf566ef8db91f02d41fc9267fe8d55021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:86:2d:2d:9b:62:12:93:71:4e:a5:ef:d5:3a: 5a:29:b9:75:62:6d:2f:a2:71:32:af:ac:5b:27:4c: c8:d8:33:af:bc:f8:8a:d6:d1:bf:a5:9c:6f:6b:34: 59:5a:99:6e:a6:31:63:76:21:8f:78:ef:bf:c3:98: bd:e5:ab:c0:fa:4f:1b:48:01:fa:c6:34:84:c9:72: 9a:37:b5:cc:36:56:b2:2e:cb:ae:8e:25:0f:0c:0e: bd:fb:b5:df:5b:5c:62:f8:81:62:43:99:ea:55:7d: bc:1b:e4:cb:36:6b:03:03:c9:fa:45:50:5f:48:b4: db:ff:9b:4e:ee:2c:7a:ed:42:8b:0e:b0:82:4a:c7: a0:9e:6a:2b:4a:84:81:d1:7d:8c:53:d3:36:f9:f2: 7e:f5:ee:9e:b7:96:a5:d8:ea:fc:88:3e:19:a5:af: 58:ed:33:cf:30:07:d5:52:57:8f:93:dc:58:00:28: 68:e4:0d:27:e2:ac:1e:8f:51:a7:90:54:01:0b:f3: 9f:c2:b4:98:ab:f1:e4:22:fd:61:3e:90:9b:24:04: 86:5d:73:7e:43:c8:9a:79:82:f7:ad:aa:30:72:8f: 55:7d:9a:b8:aa:45:8c:18:57:e1:8b:9d:70:a9:e1: 38:2f:c5:b9:24:ca:13:b5:9e:05:31:f2:d8:b2:ad: 73:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:06:85:0C:F5:66:EF:8D:B9:1F:02:D4:1F:C9:26:7F:E8:D5:50:21 X509v3 Authority Key Identifier: keyid:87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/8gaFDPVm7425HwLUH8kmf-jVUCE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.229.65.0/24 152.114.228.0/22 176.105.148.0/22 185.35.78.0/23 185.169.32.0/22 IPv6: 2a13:2400::/29 Signature Algorithm: sha256WithRSAEncryption ca:05:df:db:4c:77:a8:6f:88:3e:be:7d:3a:5e:aa:6f:8c:87: b2:fe:49:b8:d8:9b:ba:aa:ed:b2:53:e0:3e:11:4c:41:0d:5a: ba:28:89:8a:18:e3:04:bf:4b:68:b6:98:73:9b:1a:21:62:4d: 91:49:66:52:de:18:12:89:00:a3:0c:e3:7a:d4:00:7e:2a:1f: 32:bb:7a:c8:05:0b:26:a2:f7:b9:fd:04:4a:9f:f4:ba:e9:ac: a3:0d:f8:7e:75:58:d6:55:07:fa:32:59:0a:cd:70:13:64:e4: 75:e1:e3:6f:e0:29:3e:31:56:ae:0b:b9:72:af:98:40:6e:58: 2d:66:01:14:c1:a0:1c:57:a6:fe:34:ae:96:40:9e:c2:5a:4e: 23:c1:9a:39:f9:42:f0:d9:9b:2c:1f:a3:4e:9f:d1:09:10:2b: 4f:55:fb:f5:27:88:3c:6c:cc:f0:d3:fc:17:21:bb:59:05:3f: e1:25:03:a3:74:d4:40:89:87:1b:4d:ec:af:5a:8e:3e:ad:93: 88:57:9f:3d:7b:cf:b9:f9:37:8e:0c:be:ce:c1:ab:6c:b5:77: c3:a0:89:c0:34:89:37:08:f0:70:2c:41:11:11:07:fe:86:6c: 1e:42:d4:bf:89:58:6e:86:c7:16:44:76:e1:16:fd:5a:e0:16: 6a:c7:37:a1 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt6WtNLupcYQscWdoaY3V8gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZTk2NWU3ODgzMWE4OGJhOGZhNDE5NDMyYTlkN2JhYzlk YjM4YTMwHhcNMjYwMTAxMTYxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjA2ODUwY2Y1NjZlZjhkYjkxZjAyZDQxZmM5MjY3ZmU4ZDU1MDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4YtLZtiEpNxTqXv1TpaKbl1Ym0v onEyr6xbJ0zI2DOvvPiK1tG/pZxvazRZWplupjFjdiGPeO+/w5i95avA+k8bSAH6 xjSEyXKaN7XMNlayLsuujiUPDA69+7XfW1xi+IFiQ5nqVX28G+TLNmsDA8n6RVBf SLTb/5tO7ix67UKLDrCCSsegnmorSoSB0X2MU9M2+fJ+9e6et5al2Or8iD4Zpa9Y 7TPPMAfVUlePk9xYACho5A0n4qwej1GnkFQBC/OfwrSYq/HkIv1hPpCbJASGXXN+ Q8iaeYL3raowco9VfZq4qkWMGFfhi51wqeE4L8W5JMoTtZ4FMfLYsq1z3QIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFPIGhQz1Zu+NuR8C1B/JJn/o1VAhMB8GA1UdIwQY MBaAFIfpZeeIMaiLqPpBlDKp17rJ2zijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaC1sbDU0Z3hxSXVvLWtHVU1xblh1c25iT0tNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wNTA1MzMtYTU3ZS00YThiLWJmMGQt Y2VlM2I0OTI5MDJlLzEvOGdhRkRQVm03NDI1SHdMVUg4a21mLWpWVUNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8wNTA1MzMtYTU3ZS00YThiLWJmMGQtY2VlM2I0OTI5MDJl LzEvaC1sbDU0Z3hxSXVvLWtHVU1xblh1c25iT0tNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAU+VBAwQC mHLkAwQCsGmUAwQBuSNOAwQCuakgMA0EAgACMAcDBQMqEyQAMA0GCSqGSIb3DQEB CwUAA4IBAQDKBd/bTHeob4g+vn06XqpvjIey/km42Ju6qu2yU+A+EUxBDVq6KImK GOMEv0totphzmxohYk2RSWZS3hgSiQCjDON61AB+Kh8yu3rIBQsmove5/QRKn/S6 6ayjDfh+dVjWVQf6MlkKzXATZOR14eNv4Ck+MVauC7lyr5hAblgtZgEUwaAcV6b+ NK6WQJ7CWk4jwZo5+ULw2ZssH6NOn9EJECtPVfv1J4g8bMzw0/wXIbtZBT/hJQOj dNRAiYcbTeyvWo4+rZOIV589e8+5+TeODL7OwatstXfDoInANIk3CPBwLEEREQf+ hmweQtS/iVhuhscWRHbhFv1a4BZqxzeh -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:17 2026 by rpki-client