This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/8mfySGwTbXk-kyUdS_kN8j97UXs.roa File: 8mfySGwTbXk-kyUdS_kN8j97UXs.roa (raw, json) Hash identifier: umX00/QtByILeR56I5S6BuyzviCNwqrKZKDQse00Reo= Subject key identifier: F2:67:F2:48:6C:13:6D:79:3E:93:25:1D:4B:F9:0D:F2:3F:7B:51:7B Certificate issuer: /CN=d949caba3d4315607f4a6d627ece1ecea8cbc319 Certificate serial: 019B8109A9DEF4F0FDFEA889AD497D14AE10 Authority key identifier: D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/8mfySGwTbXk-kyUdS_kN8j97UXs.roa Signing time: Fri 02 Jan 2026 23:27:32 +0000 ROA not before: Fri 02 Jan 2026 23:27:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208764 IP address blocks: 185.244.92.0/23 maxlen: 23 194.169.51.0/24 maxlen: 24 194.169.53.0/24 maxlen: 24 194.169.159.0/24 maxlen: 24 194.169.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:81:09:a9:de:f4:f0:fd:fe:a8:89:ad:49:7d:14:ae:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d949caba3d4315607f4a6d627ece1ecea8cbc319 Validity Not Before: Jan 2 23:27:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f267f2486c136d793e93251d4bf90df23f7b517b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1a:d4:2e:2f:e3:19:92:2c:1b:96:2c:2f:78: 86:c5:0a:3e:2f:c1:26:eb:47:00:f8:51:5d:2c:f8: ec:6d:88:8b:27:c7:ea:5c:77:34:93:86:6e:f7:3f: 19:ee:6f:cd:ec:77:fe:ab:f0:2a:d2:1a:85:04:28: 43:d9:0b:0d:d5:5c:f9:0a:cc:73:82:2d:08:c3:e3: 5a:db:ae:04:58:77:58:8b:20:ef:dc:45:43:14:5e: ca:f8:c0:1e:c9:c6:c7:e6:94:5a:bb:2d:b0:f8:4a: 90:ba:22:6e:26:db:17:ec:90:fb:f8:77:15:06:4a: d0:50:6f:ec:58:0c:86:2d:1b:e1:72:c4:e5:99:d9: 90:4e:53:95:39:1d:75:f2:14:7c:ff:d0:42:6a:45: 25:39:20:f5:a6:de:27:cc:62:b8:19:ab:10:fb:a2: 2f:ed:63:3a:51:df:03:67:7a:33:6e:7a:5c:21:32: 7f:68:5d:1f:63:c6:16:45:22:6d:c6:52:fe:a3:fc: 01:28:d6:93:a4:1e:0c:5a:54:3c:55:40:b2:44:e0: e8:53:da:32:76:c4:4c:ff:49:8b:4b:58:3c:ce:db: 35:10:4a:dd:8a:79:a5:3d:5a:95:0a:79:f8:79:aa: f7:58:be:52:c4:77:a1:8b:61:c8:df:b5:f9:90:ab: f2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:67:F2:48:6C:13:6D:79:3E:93:25:1D:4B:F9:0D:F2:3F:7B:51:7B X509v3 Authority Key Identifier: keyid:D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/8mfySGwTbXk-kyUdS_kN8j97UXs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.244.92.0/23 194.169.51.0/24 194.169.53.0/24 194.169.159.0/24 194.169.182.0/24 Signature Algorithm: sha256WithRSAEncryption 74:90:63:2a:ae:8b:21:29:7e:b0:70:3b:36:a6:22:7e:44:5a: c2:a7:c6:ad:93:7a:d1:b0:a6:fe:17:e2:4e:ee:74:78:22:07: aa:1f:76:73:11:ba:16:d5:a4:d9:d1:3d:ee:1c:df:fc:fb:d5: a9:6e:4b:47:a3:7a:f3:6f:1e:ee:a7:6d:68:1b:f0:79:f1:64: 13:62:bf:e0:ac:60:2b:2e:89:7d:13:98:97:e6:d9:60:66:17: 29:08:28:5e:a2:f5:a3:0a:a0:df:a4:1c:5f:f0:18:75:09:3a: eb:f2:8a:20:df:16:6d:ac:bc:8e:e9:c6:1a:71:bd:ed:73:22: 97:43:9b:c5:88:e4:68:79:c7:91:b0:dc:15:48:2a:18:a5:eb: 21:c1:37:f4:42:fe:c6:35:51:16:9e:3b:8c:76:ca:27:b2:fe: 93:db:b8:e8:ad:84:77:bd:bb:72:cb:57:92:f5:11:fe:e9:5a: b3:6b:ef:cf:a6:33:b9:ea:fe:6f:5b:57:15:99:14:24:65:e2: c9:bd:5d:46:b6:eb:96:10:69:7b:8e:be:15:6c:16:e3:6b:a7: 3f:4d:1c:c5:f1:5d:cb:d5:e5:57:e8:e0:62:e4:72:cf:73:2c: c9:64:bf:11:45:b5:77:49:aa:9b:ff:13:c5:16:9f:18:8a:0c: 83:42:cd:ba -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZuBCane9PD9/qiJrUl9FK4QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NDljYWJhM2Q0MzE1NjA3ZjRhNmQ2MjdlY2UxZWNlYThj YmMzMTkwHhcNMjYwMTAyMjMyNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjY3ZjI0ODZjMTM2ZDc5M2U5MzI1MWQ0YmY5MGRmMjNmN2I1MTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RrULi/jGZIsG5YsL3iGxQo+L8Em 60cA+FFdLPjsbYiLJ8fqXHc0k4Zu9z8Z7m/N7Hf+q/Aq0hqFBChD2QsN1Vz5Csxz gi0Iw+Na264EWHdYiyDv3EVDFF7K+MAeycbH5pRauy2w+EqQuiJuJtsX7JD7+HcV BkrQUG/sWAyGLRvhcsTlmdmQTlOVOR118hR8/9BCakUlOSD1pt4nzGK4GasQ+6Iv 7WM6Ud8DZ3ozbnpcITJ/aF0fY8YWRSJtxlL+o/wBKNaTpB4MWlQ8VUCyRODoU9oy dsRM/0mLS1g8zts1EErdinmlPVqVCnn4ear3WL5SxHehi2HI37X5kKvyuQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFPJn8khsE215PpMlHUv5DfI/e1F7MB8GA1UdIwQY MBaAFNlJyro9QxVgf0ptYn7OHs6oy8MZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlVuS3VqMURGV0JfU20xaWZzNGV6cWpMd3hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9mZTY5MDQtZWI1Ni00NDkzLTkyOWMt MWE5ZGYzOGY1OTAxLzEvOG1meVNHd1RiWGsta3lVZFNfa044ajk3VVhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9mZTY5MDQtZWI1Ni00NDkzLTkyOWMtMWE5ZGYzOGY1OTAx LzEvMlVuS3VqMURGV0JfU20xaWZzNGV6cWpMd3hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBufRcAwQA wqkzAwQAwqk1AwQAwqmfAwQAwqm2MA0GCSqGSIb3DQEBCwUAA4IBAQB0kGMqrosh KX6wcDs2piJ+RFrCp8atk3rRsKb+F+JO7nR4IgeqH3ZzEboW1aTZ0T3uHN/8+9Wp bktHo3rzbx7up21oG/B58WQTYr/grGArLol9E5iX5tlgZhcpCCheovWjCqDfpBxf 8Bh1CTrr8oog3xZtrLyO6cYacb3tcyKXQ5vFiORoeceRsNwVSCoYpeshwTf0Qv7G NVEWnjuMdsonsv6T27jorYR3vbtyy1eS9RH+6Vqza+/PpjO56v5vW1cVmRQkZeLJ vV1GtuuWEGl7jr4VbBbja6c/TRzF8V3L1eVX6OBi5HLPcyzJZL8RRbV3Saqb/xPF Fp8YigyDQs26 -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:22 2026 by rpki-client