This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/8EPv-E3q9JYSkUGXl6mdrAjIzz8.roa File: 8EPv-E3q9JYSkUGXl6mdrAjIzz8.roa (raw, json) Hash identifier: E0JF7X9/XHoU7PiFgFPjp+o209rtD/x1WqRQ5NKbHU0= Subject key identifier: F0:43:EF:F8:4D:EA:F4:96:12:91:41:97:97:A9:9D:AC:08:C8:CF:3F Certificate issuer: /CN=25717849a69ad8df87088da658b2305b8594c8c4 Certificate serial: 019B7A5B130E319F42865BB94B6504E92325 Authority key identifier: 25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/8EPv-E3q9JYSkUGXl6mdrAjIzz8.roa Signing time: Thu 01 Jan 2026 16:19:07 +0000 ROA not before: Thu 01 Jan 2026 16:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211204 IP address blocks: 185.205.8.0/24 maxlen: 24 185.205.9.0/24 maxlen: 24 185.205.10.0/24 maxlen: 24 185.205.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:13:0e:31:9f:42:86:5b:b9:4b:65:04:e9:23:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25717849a69ad8df87088da658b2305b8594c8c4 Validity Not Before: Jan 1 16:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f043eff84deaf4961291419797a99dac08c8cf3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fa:bc:43:08:f0:f5:39:4a:ef:c2:2e:0c:fc: f1:33:5e:1b:5f:44:ed:71:af:15:2e:a2:3a:25:dd: fb:ee:c2:41:76:2f:ee:9d:1d:d9:e0:e4:3a:97:8d: 7a:61:01:74:86:2a:c5:5c:fe:4c:dd:b8:62:d8:f3: 04:0e:03:be:42:74:22:f9:bd:30:6e:02:88:d8:d7: c3:14:8f:13:62:d1:8f:1b:3b:c1:29:b3:1c:99:52: 33:73:0f:5f:95:40:f4:1e:a0:3f:87:24:64:6d:62: 44:9c:55:c8:b7:7b:64:d8:53:f4:54:c6:cf:95:77: 2b:33:53:82:b2:d5:39:89:2b:b1:42:3f:8e:73:bf: 2c:af:cc:bd:e2:b4:38:d1:28:bf:d9:dc:94:4f:51: 0c:9b:11:60:52:a9:57:2d:a1:3c:b5:ee:e9:11:3d: 75:f0:dc:47:ae:fa:37:80:36:6d:16:dc:8a:72:0a: 45:a7:6b:ce:55:02:38:50:b3:27:c1:75:44:f4:af: 17:fe:ed:e1:9b:92:9e:0a:c4:60:57:ba:93:04:eb: d4:22:37:5c:c5:8f:ab:43:95:72:2a:d5:ec:29:86: 69:bc:7a:73:00:e2:1a:51:18:b4:61:12:64:d0:f2: 3f:da:a1:f3:39:8d:ae:8a:30:0f:1d:de:42:2c:cb: e0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:43:EF:F8:4D:EA:F4:96:12:91:41:97:97:A9:9D:AC:08:C8:CF:3F X509v3 Authority Key Identifier: keyid:25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/8EPv-E3q9JYSkUGXl6mdrAjIzz8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.205.8.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:df:45:d8:fc:2b:ff:71:cf:ff:5b:5c:33:8b:90:a1:d2:87: e2:c2:10:78:92:5b:6c:90:00:b1:ca:7a:06:f2:b4:01:0f:b2: ce:88:3c:5a:57:0b:db:4e:21:20:bb:2b:ec:53:1a:a2:46:c5: 74:f6:96:ef:80:0f:86:b4:6b:3a:74:c4:1b:94:f3:d9:2b:15: 6e:66:ec:11:87:88:63:35:72:e9:c9:9f:de:36:cf:6e:04:88: 9d:bf:b6:8a:f2:06:dd:67:91:f4:4f:3e:48:20:2f:13:5a:a6: 3e:c8:6e:ad:17:1d:dd:ce:75:07:b6:a3:c2:f8:0d:98:2a:fa: 7a:e2:3f:06:cf:4f:77:b1:d2:93:0a:3a:08:e3:24:74:b4:e9: aa:4d:69:22:78:d6:3b:c8:5d:24:18:06:2c:ce:ab:f9:74:42: d6:e5:ad:fa:96:13:23:7e:db:e3:d4:7d:bb:5e:32:46:34:58: a0:71:87:cd:dd:06:d9:12:44:72:97:43:5f:1c:a9:b8:6e:93: 01:79:b5:77:ad:eb:38:de:2d:3e:21:3e:e4:0e:db:34:10:25: 37:8d:dc:f1:eb:5f:d7:bf:93:06:fb:0d:37:e3:96:be:0f:eb: 45:ee:40:af:22:1a:69:de:32:29:23:49:2c:6f:8c:1e:8e:79: a4:c5:f8:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WxMOMZ9Chlu5S2UE6SMlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NzE3ODQ5YTY5YWQ4ZGY4NzA4OGRhNjU4YjIzMDViODU5 NGM4YzQwHhcNMjYwMTAxMTYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDQzZWZmODRkZWFmNDk2MTI5MTQxOTc5N2E5OWRhYzA4YzhjZjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vq8Qwjw9TlK78IuDPzxM14bX0Tt ca8VLqI6Jd377sJBdi/unR3Z4OQ6l416YQF0hirFXP5M3bhi2PMEDgO+QnQi+b0w bgKI2NfDFI8TYtGPGzvBKbMcmVIzcw9flUD0HqA/hyRkbWJEnFXIt3tk2FP0VMbP lXcrM1OCstU5iSuxQj+Oc78sr8y94rQ40Si/2dyUT1EMmxFgUqlXLaE8te7pET11 8NxHrvo3gDZtFtyKcgpFp2vOVQI4ULMnwXVE9K8X/u3hm5KeCsRgV7qTBOvUIjdc xY+rQ5VyKtXsKYZpvHpzAOIaURi0YRJk0PI/2qHzOY2uijAPHd5CLMvgeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPBD7/hN6vSWEpFBl5epnawIyM8/MB8GA1UdIwQY MBaAFCVxeEmmmtjfhwiNpliyMFuFlMjEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhGNFNhYWEyTi1IQ0kybVdMSXdXNFdVeU1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8wOTVlY2YtN2Q2YS00ODgxLTg4ZTct ZmUyNGVkMmFkY2ZmLzEvOEVQdi1FM3E5SllTa1VHWGw2bWRyQWpJeno4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8wOTVlY2YtN2Q2YS00ODgxLTg4ZTctZmUyNGVkMmFkY2Zm LzEvSlhGNFNhYWEyTi1IQ0kybVdMSXdXNFdVeU1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuc0IMA0G CSqGSIb3DQEBCwUAA4IBAQBd30XY/Cv/cc//W1wzi5Ch0ofiwhB4kltskACxynoG 8rQBD7LOiDxaVwvbTiEguyvsUxqiRsV09pbvgA+GtGs6dMQblPPZKxVuZuwRh4hj NXLpyZ/eNs9uBIidv7aK8gbdZ5H0Tz5IIC8TWqY+yG6tFx3dznUHtqPC+A2YKvp6 4j8Gz093sdKTCjoI4yR0tOmqTWkieNY7yF0kGAYszqv5dELW5a36lhMjftvj1H27 XjJGNFigcYfN3QbZEkRyl0NfHKm4bpMBebV3res43i0+IT7kDts0ECU3jdzx61/X v5MG+w0345a+D+tF7kCvIhpp3jIpI0ksb4wejnmkxfjh -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:58 2026 by rpki-client