This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/8dEAYi52_22zUX_SiXzKUWNxBaw.roa File: 8dEAYi52_22zUX_SiXzKUWNxBaw.roa (raw, json) Hash identifier: xFQLvjgZzeqcV2os4NMEXXqLMmXWf96ISePDLbOs/n4= Subject key identifier: F1:D1:00:62:2E:76:FF:6D:B3:51:7F:D2:89:7C:CA:51:63:71:05:AC Certificate issuer: /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c Certificate serial: 019B7910DF21430D60871AC84F39E8051DB6 Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/8dEAYi52_22zUX_SiXzKUWNxBaw.roa Signing time: Thu 01 Jan 2026 10:18:27 +0000 ROA not before: Thu 01 Jan 2026 10:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 79.137.133.0/24 maxlen: 24 79.137.184.0/24 maxlen: 24 79.137.194.0/23 maxlen: 23 79.137.196.0/22 maxlen: 22 79.137.202.0/23 maxlen: 23 79.137.204.0/23 maxlen: 23 79.137.206.0/24 maxlen: 24 79.137.207.0/24 maxlen: 24 79.137.248.0/24 maxlen: 24 85.192.24.0/24 maxlen: 24 85.192.25.0/24 maxlen: 24 85.192.26.0/24 maxlen: 24 85.192.27.0/24 maxlen: 24 85.192.28.0/24 maxlen: 24 85.192.29.0/24 maxlen: 24 85.192.31.0/24 maxlen: 24 85.192.37.0/24 maxlen: 24 85.192.38.0/24 maxlen: 24 85.192.40.0/23 maxlen: 23 85.192.42.0/24 maxlen: 24 85.192.56.0/24 maxlen: 24 85.192.60.0/24 maxlen: 24 85.192.61.0/24 maxlen: 24 85.192.63.0/24 maxlen: 24 89.208.96.0/24 maxlen: 24 89.208.97.0/24 maxlen: 24 89.208.103.0/24 maxlen: 24 89.208.104.0/22 maxlen: 22 89.208.113.0/24 maxlen: 24 89.208.137.0/24 maxlen: 24 89.208.142.0/24 maxlen: 24 92.38.240.0/24 maxlen: 24 92.38.241.0/24 maxlen: 24 95.163.152.0/24 maxlen: 24 95.163.153.0/24 maxlen: 24 95.163.176.0/24 maxlen: 24 185.125.100.0/24 maxlen: 24 185.125.101.0/24 maxlen: 24 185.125.102.0/24 maxlen: 24 185.125.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:df:21:43:0d:60:87:1a:c8:4f:39:e8:05:1d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c Validity Not Before: Jan 1 10:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1d100622e76ff6db3517fd2897cca51637105ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d4:79:44:f6:f4:72:93:cb:d6:b0:a5:4f:37: af:53:12:28:a9:03:ed:4c:26:dd:b9:51:a4:4e:e5: cc:89:f5:ae:56:1e:66:d1:36:1d:1f:8d:a3:00:66: 71:27:4c:f8:53:3d:10:e5:f8:84:fe:71:a6:13:d5: 55:7e:5e:b4:67:fc:ef:34:95:77:92:14:9a:e3:04: 2c:79:cb:cb:46:9d:e5:a8:99:f4:b3:6e:28:e9:27: e7:24:63:c6:80:52:66:52:22:a6:6e:1c:6c:d4:a3: 7d:9b:1a:76:ba:9f:33:7e:3a:f7:1d:2e:92:8e:0e: 52:8c:cc:b1:24:a4:20:06:13:f2:d6:3b:10:89:89: 23:86:75:a7:a0:c4:2f:c1:06:d1:a5:fa:01:3f:ad: 17:52:07:2d:fd:e8:39:0b:cd:3c:f5:a3:81:3a:f4: b3:dc:61:57:99:44:3e:db:bd:34:5b:c7:59:80:49: 35:2b:cc:1e:33:91:3f:fd:89:32:92:21:e6:24:a0: 86:0b:cd:2b:9f:bc:30:0e:35:a0:9f:d7:38:cf:c9: bc:62:3e:5c:66:b8:8e:a1:9b:91:44:d4:fc:f8:1b: 32:64:ac:5a:b5:33:4e:d1:07:18:37:3a:ba:73:2a: 7b:c6:70:de:47:2e:c1:84:ee:6b:c8:c6:07:65:b3: 17:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D1:00:62:2E:76:FF:6D:B3:51:7F:D2:89:7C:CA:51:63:71:05:AC X509v3 Authority Key Identifier: keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/8dEAYi52_22zUX_SiXzKUWNxBaw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.137.133.0/24 79.137.184.0/24 79.137.194.0-79.137.199.255 79.137.202.0-79.137.207.255 79.137.248.0/24 85.192.24.0-85.192.29.255 85.192.31.0/24 85.192.37.0-85.192.38.255 85.192.40.0-85.192.42.255 85.192.56.0/24 85.192.60.0/23 85.192.63.0/24 89.208.96.0/23 89.208.103.0-89.208.107.255 89.208.113.0/24 89.208.137.0/24 89.208.142.0/24 92.38.240.0/23 95.163.152.0/23 95.163.176.0/24 185.125.100.0/22 Signature Algorithm: sha256WithRSAEncryption 54:9b:ef:ed:d9:df:7c:53:cd:d8:52:89:55:e8:91:d5:27:cf: d0:65:38:f9:9e:4b:b3:5a:84:32:e4:d0:18:72:3c:35:93:20: 1c:d7:ac:85:1e:70:0c:d4:13:d2:98:13:cb:5a:7a:4b:81:43: d9:f5:47:85:cd:d7:f5:75:f0:ed:c5:82:dd:f8:83:13:17:94: 0e:84:f3:69:61:d2:c8:d1:51:b0:5b:fc:5f:fc:ce:9f:63:d5: bc:13:88:15:ea:f1:3e:53:3d:06:25:87:27:a9:5e:92:d8:2c: 4e:80:9a:1e:cf:9e:b4:1c:0a:fa:f1:92:6b:13:1f:2d:c2:89: a7:b8:6c:ce:ad:f7:e4:68:ea:70:c9:b5:fe:0e:d0:02:4b:63: fc:4f:f9:09:17:97:48:ea:54:14:79:be:2c:23:7e:a2:3b:07: b9:26:ef:bd:19:25:6b:fe:f0:ec:3b:8f:6a:07:e6:78:db:34: 52:87:46:5c:b4:6f:12:04:14:9c:8d:fc:9f:b8:73:bc:17:96: b9:29:d8:c1:f7:aa:dd:12:ed:a6:0e:60:70:2a:da:06:93:06: de:8e:0a:0e:0a:a8:0f:24:60:f8:0d:9a:68:8b:3e:30:79:33: fb:90:bb:1a:6d:ee:93:0d:e1:a0:9b:7e:bc:b9:f3:79:3b:f5: ee:b9:70:06 -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgISAZt5EN8hQw1ghxrITznoBR22MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMWM3NTcxNTk2ZTQ0NGFhMzIzNzFjYmFiNzI0ZDQ2ZDNj M2M1MmMwHhcNMjYwMTAxMTAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWQxMDA2MjJlNzZmZjZkYjM1MTdmZDI4OTdjY2E1MTYzNzEwNWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NR5RPb0cpPL1rClTzevUxIoqQPt TCbduVGkTuXMifWuVh5m0TYdH42jAGZxJ0z4Uz0Q5fiE/nGmE9VVfl60Z/zvNJV3 khSa4wQsecvLRp3lqJn0s24o6SfnJGPGgFJmUiKmbhxs1KN9mxp2up8zfjr3HS6S jg5SjMyxJKQgBhPy1jsQiYkjhnWnoMQvwQbRpfoBP60XUgct/eg5C8089aOBOvSz 3GFXmUQ+2700W8dZgEk1K8weM5E//YkykiHmJKCGC80rn7wwDjWgn9c4z8m8Yj5c ZriOoZuRRNT8+BsyZKxatTNO0QcYNzq6cyp7xnDeRy7BhO5ryMYHZbMXgQIDAQAB o4ICtjCCArIwHQYDVR0OBBYEFPHRAGIudv9ts1F/0ol8ylFjcQWsMB8GA1UdIwQY MBaAFMocdXFZbkRKoyNxy6tyTUbTw8UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zMzYyYzYtYTAzYS00ZjlmLWEwOTEt Yjc2MmMwMTc1ZjI3LzEvOGRFQVlpNTJfMjJ6VVhfU2lYektVV054QmF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zMzYyYzYtYTAzYS00ZjlmLWEwOTEtYjc2MmMwMTc1ZjI3 LzEveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHLBggrBgEFBQcBBwEB/wSBuzCBuDCBtQQCAAEwga4DBABP iYUDBABPibgwDAMEAU+JwgMEA0+JwDAMAwQBT4nKAwQET4nAAwQAT4n4MAwDBANV wBgDBAFVwBwDBABVwB8wDAMEAFXAJQMEAFXAJjAMAwQDVcAoAwQAVcAqAwQAVcA4 AwQBVcA8AwQAVcA/AwQBWdBgMAwDBABZ0GcDBAJZ0GgDBABZ0HEDBABZ0IkDBABZ 0I4DBAFcJvADBAFfo5gDBABfo7ADBAK5fWQwDQYJKoZIhvcNAQELBQADggEBAFSb 7+3Z33xTzdhSiVXokdUnz9BlOPmeS7NahDLk0BhyPDWTIBzXrIUecAzUE9KYE8ta ekuBQ9n1R4XN1/V18O3Fgt34gxMXlA6E82lh0sjRUbBb/F/8zp9j1bwTiBXq8T5T PQYlhyepXpLYLE6Amh7PnrQcCvrxkmsTHy3Ciae4bM6t9+Ro6nDJtf4O0AJLY/xP +QkXl0jqVBR5viwjfqI7B7km770ZJWv+8Ow7j2oH5njbNFKHRly0bxIEFJyN/J+4 c7wXlrkp2MH3qt0S7aYOYHAq2gaTBt6OCg4KqA8kYPgNmmiLPjB5M/uQuxpt7pMN 4aCbfry583k79e65cAY= -----END CERTIFICATE-----Generated at Tue Jan 20 06:03:48 2026 by rpki-client