This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/8SPFx32KgvVe9lcWznI2Snmx0Rc.roa File: 8SPFx32KgvVe9lcWznI2Snmx0Rc.roa (raw, json) Hash identifier: nh58H0C13D89s99FYORfNnZ+pFC6NWZms6nXMjb65c0= Subject key identifier: F1:23:C5:C7:7D:8A:82:F5:5E:F6:57:16:CE:72:36:4A:79:B1:D1:17 Certificate issuer: /CN=30706b2b95588d780e36ef82a8f54a317d5869e2 Certificate serial: 019B7E38EBD0162A08D9A3E94C332608324B Authority key identifier: 30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/8SPFx32KgvVe9lcWznI2Snmx0Rc.roa Signing time: Fri 02 Jan 2026 10:20:18 +0000 ROA not before: Fri 02 Jan 2026 10:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.64.6.0/24 maxlen: 24 2a10:2307:fffd::/48 maxlen: 48 2a10:2307:fffe::/48 maxlen: 48 2a10:2307:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:eb:d0:16:2a:08:d9:a3:e9:4c:33:26:08:32:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30706b2b95588d780e36ef82a8f54a317d5869e2 Validity Not Before: Jan 2 10:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f123c5c77d8a82f55ef65716ce72364a79b1d117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d0:8f:1a:51:c9:b3:58:3a:4b:e2:00:31:d6: 42:93:de:56:92:7f:51:de:00:f9:6c:3a:83:18:07: b8:3e:12:b2:d1:fa:6d:36:7c:e4:4c:de:86:d4:3b: 42:29:a6:0f:f2:46:4f:a5:2d:b7:4f:cf:b3:80:90: 94:e9:5a:69:ad:f6:56:b4:73:00:ac:da:13:b5:56: ce:ff:81:47:85:93:a4:38:73:d6:9a:51:80:f3:6a: 4e:9c:ad:b8:e3:4c:64:fd:92:4f:c2:4c:6a:4d:e3: 4f:3b:2b:67:32:b4:83:bc:ca:aa:d2:3f:58:82:7e: 76:4a:03:5d:be:60:b1:18:c4:6e:46:bf:17:70:35: 86:2f:f4:28:91:34:3c:90:68:ac:99:c0:0d:2f:6d: 58:24:34:51:61:e3:b8:c4:23:0f:53:3f:0d:26:98: cc:37:fd:47:8b:de:dc:20:46:91:5c:91:a1:dc:9e: 6e:95:db:6c:0b:8b:46:4b:27:78:ee:f0:29:d9:8d: a5:72:e3:17:63:48:12:fd:e8:4b:98:fa:9b:93:d2: 81:79:01:64:09:21:14:af:04:6b:e1:e3:a1:f9:1e: e0:d3:b4:d7:e7:ea:32:35:53:fd:55:84:c0:77:79: ca:cf:82:6a:86:f8:8a:4b:36:1c:ba:22:e0:f2:0f: d0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:23:C5:C7:7D:8A:82:F5:5E:F6:57:16:CE:72:36:4A:79:B1:D1:17 X509v3 Authority Key Identifier: keyid:30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/8SPFx32KgvVe9lcWznI2Snmx0Rc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.64.6.0/24 IPv6: 2a10:2307:fffd::-2a10:2307:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 7d:b0:8a:df:07:e4:59:73:7a:2b:34:99:37:c3:2d:fc:6c:a7: 12:33:78:1e:c3:a3:4e:e2:09:8d:9d:93:e2:20:6f:0d:e2:de: d4:de:ff:a5:7b:90:32:90:15:5d:de:5b:db:0b:05:51:ec:82: 88:0c:b6:0c:11:70:f8:86:05:52:c5:ed:0e:dd:fa:6b:46:96: 71:cb:e1:14:7a:d5:28:c7:72:83:5b:28:42:5d:5c:31:4d:46: e7:5f:44:54:5e:0f:9e:a4:ac:3d:6d:b5:8b:41:2d:d3:d6:d0: 07:fa:08:25:0a:31:4e:26:97:22:ed:50:19:34:ee:18:40:d1: a3:a6:38:e5:55:0f:30:08:a7:94:e6:e2:38:c9:63:16:a4:d9: 4f:47:a9:5b:b8:35:56:a2:59:54:30:61:2f:4c:fd:23:16:32: e7:f1:69:b5:4d:97:b2:02:e0:9e:2f:08:d4:3e:8b:06:67:1d: 8b:3f:74:2c:ef:3c:6e:dd:d3:b4:c0:d8:fd:67:b7:51:aa:36: 8c:2e:2f:6a:26:6a:26:15:0a:e9:15:74:87:8e:1d:92:d3:95: b9:b5:e2:59:f2:c7:be:99:e9:dc:e9:37:c6:c5:35:be:07:48: 8a:f5:a7:a5:d4:09:e9:40:df:eb:2d:f1:ef:6f:78:5b:3b:07: 13:5b:73:14 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt+OOvQFioI2aPpTDMmCDJLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNzA2YjJiOTU1ODhkNzgwZTM2ZWY4MmE4ZjU0YTMxN2Q1 ODY5ZTIwHhcNMjYwMTAyMTAyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTIzYzVjNzdkOGE4MmY1NWVmNjU3MTZjZTcyMzY0YTc5YjFkMTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dCPGlHJs1g6S+IAMdZCk95Wkn9R 3gD5bDqDGAe4PhKy0fptNnzkTN6G1DtCKaYP8kZPpS23T8+zgJCU6VpprfZWtHMA rNoTtVbO/4FHhZOkOHPWmlGA82pOnK2440xk/ZJPwkxqTeNPOytnMrSDvMqq0j9Y gn52SgNdvmCxGMRuRr8XcDWGL/QokTQ8kGismcANL21YJDRRYeO4xCMPUz8NJpjM N/1Hi97cIEaRXJGh3J5uldtsC4tGSyd47vAp2Y2lcuMXY0gS/ehLmPqbk9KBeQFk CSEUrwRr4eOh+R7g07TX5+oyNVP9VYTAd3nKz4JqhviKSzYcuiLg8g/QnQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFPEjxcd9ioL1XvZXFs5yNkp5sdEXMB8GA1UdIwQY MBaAFDBwayuVWI14Djbvgqj1SjF9WGniMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUhCcks1VllqWGdPTnUtQ3FQVktNWDFZYWVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yOGRlYmItM2E1OS00ZWUxLWJkMzct ODRlZDkxZWMxYzY1LzEvOFNQRngzMktndlZlOWxjV3puSTJTbm14MFJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8yOGRlYmItM2E1OS00ZWUxLWJkMzctODRlZDkxZWMxYzY1 LzEvTUhCcks1VllqWGdPTnUtQ3FQVktNWDFZYWVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAuUAGMBgE AgACMBIwEAMHACoQIwf//QMFAyoQIwAwDQYJKoZIhvcNAQELBQADggEBAH2wit8H 5Flzeis0mTfDLfxspxIzeB7Do07iCY2dk+Igbw3i3tTe/6V7kDKQFV3eW9sLBVHs gogMtgwRcPiGBVLF7Q7d+mtGlnHL4RR61SjHcoNbKEJdXDFNRudfRFReD56krD1t tYtBLdPW0Af6CCUKMU4mlyLtUBk07hhA0aOmOOVVDzAIp5Tm4jjJYxak2U9HqVu4 NVaiWVQwYS9M/SMWMufxabVNl7IC4J4vCNQ+iwZnHYs/dCzvPG7d07TA2P1nt1Gq NowuL2omaiYVCukVdIeOHZLTlbm14lnyx76Z6dzpN8bFNb4HSIr1p6XUCelA3+st 8e9veFs7BxNbcxQ= -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:49 2026 by rpki-client