This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/8lyQvVkkT8cJKDB078Bw7EZ1cA4.roa File: 8lyQvVkkT8cJKDB078Bw7EZ1cA4.roa (raw, json) Hash identifier: gveYep3uEwHr6LaxWrdDXfeKga87B02W7vk/P3l0P/c= Subject key identifier: F2:5C:90:BD:59:24:4F:C7:09:28:30:74:EF:C0:70:EC:46:75:70:0E Certificate issuer: /CN=64ef98adbf42d5bacd24cadb0adf092c4576daf3 Certificate serial: 019B7E38417117969D5AF09AD3B7F047159D Authority key identifier: 64:EF:98:AD:BF:42:D5:BA:CD:24:CA:DB:0A:DF:09:2C:45:76:DA:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/8lyQvVkkT8cJKDB078Bw7EZ1cA4.roa Signing time: Fri 02 Jan 2026 10:19:34 +0000 ROA not before: Fri 02 Jan 2026 10:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205806 IP address blocks: 149.249.160.0/19 maxlen: 22 149.249.192.0/19 maxlen: 22 149.249.224.0/20 maxlen: 20 149.249.240.0/22 maxlen: 22 185.147.168.0/22 maxlen: 22 185.178.24.0/22 maxlen: 22 185.206.44.0/22 maxlen: 22 213.208.40.0/21 maxlen: 22 213.208.40.0/22 maxlen: 22 213.208.44.0/22 maxlen: 22 213.208.48.0/22 maxlen: 22 2a11:d480::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:41:71:17:96:9d:5a:f0:9a:d3:b7:f0:47:15:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64ef98adbf42d5bacd24cadb0adf092c4576daf3 Validity Not Before: Jan 2 10:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f25c90bd59244fc709283074efc070ec4675700e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d5:ea:3a:93:d5:a2:68:4c:d0:04:56:aa:a3: 92:ca:b5:93:ad:5b:61:98:00:82:a6:1a:a4:d5:93: b7:1a:8b:37:a4:38:e5:44:0c:26:f4:fe:df:71:6d: c6:7f:4f:c2:e6:fa:33:72:75:60:6b:40:f3:f6:a4: c0:5c:d0:cd:b2:fd:26:1c:fe:67:5e:2f:d4:8b:6e: 93:f8:7a:11:4d:c1:77:45:f9:52:59:1e:ad:75:a7: bf:ea:c0:c1:6e:71:39:07:b1:e0:ca:72:73:86:15: dd:4b:c8:e1:8e:f1:59:0b:19:d7:9c:84:c5:d6:ac: c8:97:f4:d1:fc:dd:be:2f:11:5b:77:b5:9e:22:1b: f7:47:5f:eb:95:1a:2f:d0:e1:9b:9f:04:e3:33:07: 91:ae:4a:d8:70:9f:d1:f3:a4:39:17:ba:14:30:40: 56:09:cf:99:1a:87:92:58:ea:64:dc:be:9d:74:49: c2:0a:58:dd:8a:12:f4:67:51:99:ee:59:70:04:b2: cd:8b:11:ed:1c:58:0d:e6:39:c9:a2:aa:eb:ba:0f: 37:61:d6:f0:d7:73:f1:c0:0d:3e:8a:0a:8e:6e:cc: 0f:86:30:3e:c9:32:45:62:06:67:7f:e8:f6:b4:d7: 6d:68:a4:db:81:61:52:aa:2d:e8:ad:20:37:b9:3c: 0e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:5C:90:BD:59:24:4F:C7:09:28:30:74:EF:C0:70:EC:46:75:70:0E X509v3 Authority Key Identifier: keyid:64:EF:98:AD:BF:42:D5:BA:CD:24:CA:DB:0A:DF:09:2C:45:76:DA:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/8lyQvVkkT8cJKDB078Bw7EZ1cA4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.249.160.0-149.249.243.255 185.147.168.0/22 185.178.24.0/22 185.206.44.0/22 213.208.40.0-213.208.51.255 IPv6: 2a11:d480::/29 Signature Algorithm: sha256WithRSAEncryption 70:df:bb:f7:41:5c:b9:fe:1d:c6:67:e8:a4:64:6f:6c:49:5e: 11:47:88:08:56:6f:f3:ab:11:48:48:7b:84:83:13:fc:fe:d3: 70:47:2c:4b:f7:45:41:54:3d:c5:87:58:44:6f:ec:6f:2e:65: a0:ef:03:1d:42:08:0f:a8:b7:63:90:b2:3d:6b:d1:33:1a:f7: 32:7e:14:b1:d4:3d:e4:3f:6c:11:77:0b:df:7a:bb:38:69:39: cb:f7:f0:26:67:7d:58:1e:1a:1e:20:6c:5e:c3:bf:7a:6e:22: af:52:14:78:37:83:96:de:96:98:5b:80:e4:d1:dd:5f:46:56: 2c:6d:43:b5:f6:5b:8e:16:49:85:d7:52:97:84:d0:8e:06:94: 69:c7:78:d6:bb:4a:54:ec:26:1a:67:71:f8:ca:a8:9d:97:41: 52:26:08:f3:f1:ec:7b:7f:5e:07:af:6d:cd:07:2f:a5:f2:6c: b5:a5:0c:f6:30:79:9d:12:e5:b1:ed:b0:03:3f:29:f9:48:86: 93:44:92:db:06:8f:07:d1:da:a2:d1:b2:04:83:fd:f2:9e:58: 4c:6f:8d:f0:df:fc:a4:b4:d8:e4:70:a0:5f:96:3a:6e:36:98: 6c:88:2c:5f:88:c3:b7:7b:63:18:9c:e3:37:1c:42:2f:d9:6f: 6d:16:4f:1f -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgISAZt+OEFxF5adWvCa07fwRxWdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZWY5OGFkYmY0MmQ1YmFjZDI0Y2FkYjBhZGYwOTJjNDU3 NmRhZjMwHhcNMjYwMTAyMTAxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjVjOTBiZDU5MjQ0ZmM3MDkyODMwNzRlZmMwNzBlYzQ2NzU3MDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tXqOpPVomhM0ARWqqOSyrWTrVth mACCphqk1ZO3Gos3pDjlRAwm9P7fcW3Gf0/C5vozcnVga0Dz9qTAXNDNsv0mHP5n Xi/Ui26T+HoRTcF3RflSWR6tdae/6sDBbnE5B7HgynJzhhXdS8jhjvFZCxnXnITF 1qzIl/TR/N2+LxFbd7WeIhv3R1/rlRov0OGbnwTjMweRrkrYcJ/R86Q5F7oUMEBW Cc+ZGoeSWOpk3L6ddEnCCljdihL0Z1GZ7llwBLLNixHtHFgN5jnJoqrrug83Ydbw 13PxwA0+igqObswPhjA+yTJFYgZnf+j2tNdtaKTbgWFSqi3orSA3uTwOGwIDAQAB o4ICQDCCAjwwHQYDVR0OBBYEFPJckL1ZJE/HCSgwdO/AcOxGdXAOMB8GA1UdIwQY MBaAFGTvmK2/QtW6zSTK2wrfCSxFdtrzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk8tWXJiOUMxYnJOSk1yYkN0OEpMRVYyMnZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lNDliYzUtNjhjNS00Y2UyLWE5Yjkt MDNjNmZlYWYxZDlmLzEvOGx5UXZWa2tUOGNKS0RCMDc4Qnc3RVoxY0E0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9lNDliYzUtNjhjNS00Y2UyLWE5YjktMDNjNmZlYWYxZDlm LzEvWk8tWXJiOUMxYnJOSk1yYkN0OEpMRVYyMnZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTA0BAIAATAuMAwDBAWV+aAD BAKV+fADBAK5k6gDBAK5shgDBAK5ziwwDAMEA9XQKAMEAtXQMDANBAIAAjAHAwUD KhHUgDANBgkqhkiG9w0BAQsFAAOCAQEAcN+790Fcuf4dxmfopGRvbEleEUeICFZv 86sRSEh7hIMT/P7TcEcsS/dFQVQ9xYdYRG/sby5loO8DHUIID6i3Y5CyPWvRMxr3 Mn4UsdQ95D9sEXcL33q7OGk5y/fwJmd9WB4aHiBsXsO/em4ir1IUeDeDlt6WmFuA 5NHdX0ZWLG1DtfZbjhZJhddSl4TQjgaUacd41rtKVOwmGmdx+MqonZdBUiYI8/Hs e39eB69tzQcvpfJstaUM9jB5nRLlse2wAz8p+UiGk0SS2waPB9HaotGyBIP98p5Y TG+N8N/8pLTY5HCgX5Y6bjaYbIgsX4jDt3tjGJzjNxxCL9lvbRZPHw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:12 2026 by rpki-client