This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8b2a08Co10_6hpcBCGoqiUduVl0.roa File: 8b2a08Co10_6hpcBCGoqiUduVl0.roa (raw, json) Hash identifier: tZiQIOkWRMC/si9K1uYgesJ5/HUX1DelT0R1hJdGMws= Subject key identifier: F1:BD:9A:D3:C0:A8:D7:4F:FA:86:97:01:08:6A:2A:89:47:6E:56:5D Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1A9BA4DAF628E73487F7ACABE754C Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8b2a08Co10_6hpcBCGoqiUduVl0.roa Signing time: Fri 02 Jan 2026 18:21:42 +0000 ROA not before: Fri 02 Jan 2026 18:21:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28753 IP address blocks: 185.155.203.0/24 maxlen: 24 2a04:9f40::/29 maxlen: 29 2a05:b900::/29 maxlen: 29 2a06:1184:101::/48 maxlen: 48 2a06:3bc0::/29 maxlen: 29 2a07:8a40::/29 maxlen: 29 2a09:7b00::/29 maxlen: 29 2a09:b700::/29 maxlen: 29 2a0a:2d06:102::/48 maxlen: 48 2a0a:2d06:103::/48 maxlen: 48 2a0a:7d00::/29 maxlen: 29 2a0c:4880::/29 maxlen: 29 2a0c:7886:99::/48 maxlen: 48 2a0c:7886:100::/48 maxlen: 48 2a0e:15c7:99::/48 maxlen: 48 2a0f:17c0::/29 maxlen: 29 2a0f:2500::/29 maxlen: 29 2a0f:27c0::/29 maxlen: 29 2a0f:3640::/29 maxlen: 29 2a0f:7f00::/29 maxlen: 29 2a0f:a200::/29 maxlen: 29 2a0f:d200::/29 maxlen: 29 2a0f:db40::/29 maxlen: 29 2a10:34c0::/29 maxlen: 29 2a11:8880::/29 maxlen: 29 2a12:4ac0::/29 maxlen: 29 2a12:ac43:1312::/48 maxlen: 48 2a12:ecc0:158::/48 maxlen: 48 2a12:ecc6:1312::/48 maxlen: 48 2a13:1380::/29 maxlen: 29 2a13:18c6:66::/48 maxlen: 48 2a13:18c6:88::/48 maxlen: 48 2a13:2cc0::/29 maxlen: 29 2a13:2d40::/29 maxlen: 29 2a13:2dc0::/29 maxlen: 29 2a13:2e40::/29 maxlen: 29 2a13:3040::/29 maxlen: 29 2a13:3380::/29 maxlen: 29 2a13:4900::/29 maxlen: 29 2a13:5b80::/29 maxlen: 29 2a13:7900::/29 maxlen: 29 2a13:7d80::/29 maxlen: 29 2a13:8200::/29 maxlen: 29 2a13:9080::/29 maxlen: 29 2a13:9480::/29 maxlen: 29 2a13:d100::/29 maxlen: 29 2a13:d700::/29 maxlen: 29 2a13:d900::/29 maxlen: 29 2a13:f900::/29 maxlen: 29 2a13:fb00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 12:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:a9:ba:4d:af:62:8e:73:48:7f:7a:ca:be:75:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1bd9ad3c0a8d74ffa869701086a2a89476e565d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f8:1d:72:12:5e:ca:44:0d:1c:a9:93:1b:9d: ca:cc:52:a8:c2:b0:f0:51:9a:4f:e2:22:e0:30:93: 12:ce:f7:11:72:9a:7f:67:81:66:b6:92:f4:70:be: 4e:bc:f4:79:b7:80:d8:da:86:6c:df:65:01:0e:ab: cd:94:e7:4f:bd:16:6c:fa:03:91:e3:b6:f0:3f:b3: 8b:30:50:de:e7:38:81:5f:79:41:a1:a2:67:f0:98: f1:cc:62:c1:ed:5a:92:92:70:f9:ba:c1:1b:6f:58: 85:0a:36:38:66:f1:ef:66:39:0b:40:55:40:e5:f4: 28:10:d0:06:f3:c6:0d:87:16:26:a5:64:0d:ff:be: b1:3e:74:90:f4:35:0c:86:84:ee:70:13:7c:ea:51: 88:e1:9d:2d:d8:fc:1b:88:d5:38:45:f6:5c:9d:8b: 0d:73:4b:84:f9:81:87:71:f5:72:79:29:ab:7a:75: 5c:d0:90:ce:51:bf:56:f6:4a:88:15:a1:a1:6f:1e: 0f:ab:bb:ef:9d:9e:76:e5:e3:51:40:60:a1:43:4c: 3d:03:fb:bc:91:a7:81:a5:48:16:bf:22:6d:ea:3c: f2:e7:40:e9:80:1f:26:a9:66:e0:db:27:c6:f1:02: b1:3a:86:76:99:cc:70:35:f3:97:31:94:3b:15:43: 4c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:BD:9A:D3:C0:A8:D7:4F:FA:86:97:01:08:6A:2A:89:47:6E:56:5D X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8b2a08Co10_6hpcBCGoqiUduVl0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.203.0/24 IPv6: 2a04:9f40::/29 2a05:b900::/29 2a06:1184:101::/48 2a06:3bc0::/29 2a07:8a40::/29 2a09:7b00::/29 2a09:b700::/29 2a0a:2d06:102::/47 2a0a:7d00::/29 2a0c:4880::/29 2a0c:7886:99::/48 2a0c:7886:100::/48 2a0e:15c7:99::/48 2a0f:17c0::/29 2a0f:2500::/29 2a0f:27c0::/29 2a0f:3640::/29 2a0f:7f00::/29 2a0f:a200::/29 2a0f:d200::/29 2a0f:db40::/29 2a10:34c0::/29 2a11:8880::/29 2a12:4ac0::/29 2a12:ac43:1312::/48 2a12:ecc0:158::/48 2a12:ecc6:1312::/48 2a13:1380::/29 2a13:18c6:66::/48 2a13:18c6:88::/48 2a13:2cc0::/29 2a13:2d40::/29 2a13:2dc0::/29 2a13:2e40::/29 2a13:3040::/29 2a13:3380::/29 2a13:4900::/29 2a13:5b80::/29 2a13:7900::/29 2a13:7d80::/29 2a13:8200::/29 2a13:9080::/29 2a13:9480::/29 2a13:d100::/29 2a13:d700::/29 2a13:d900::/29 2a13:f900::/29 2a13:fb00::/29 Signature Algorithm: sha256WithRSAEncryption 2d:0b:d7:03:67:e9:b4:45:d5:54:fd:93:c4:92:8b:16:ef:86: dc:d8:8a:78:d5:9f:8e:50:ad:4a:4c:2c:0c:79:cc:62:cd:f1: bb:f6:1f:26:c5:74:a4:3d:79:25:3a:ca:a7:48:61:38:fa:cc: f2:b8:6d:91:e9:78:06:4b:18:a9:d5:0f:6e:d9:f5:0a:40:d5: a0:e9:3e:cb:d3:50:35:d5:82:be:11:5f:36:2e:75:46:56:1e: 71:a1:2b:f4:50:27:bc:c0:0e:1a:e3:b5:c9:85:ed:49:35:df: 6c:d9:5a:dc:65:d0:d1:63:12:e1:a4:12:67:0c:41:e1:60:3a: 8b:b9:f5:fe:78:81:66:2a:c0:c0:cc:32:ad:45:4e:c5:63:ef: 43:1d:62:36:80:9b:e7:89:3f:06:64:3a:7b:d7:76:ad:c5:10: e1:23:69:d7:34:78:79:16:ac:34:18:44:eb:b2:17:07:58:1e: e8:c6:68:7b:57:cf:bc:89:3a:b1:b4:50:70:6d:02:48:eb:a2: 30:39:3c:cd:5e:95:da:e7:fb:24:a0:b5:ea:32:4a:5d:d2:d2: 43:e5:b0:07:e6:b5:c2:b0:07:92:64:ca:79:a8:cc:c4:bb:ee: 5e:dc:a7:4e:f9:82:8c:40:09:66:49:49:03:32:4c:19:41:3a: 0f:6a:b9:75 -----BEGIN CERTIFICATE----- MIIGczCCBVugAwIBAgISAZt/8am6Ta9ijnNIf3rKvnVMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWJkOWFkM2MwYThkNzRmZmE4Njk3MDEwODZhMmE4OTQ3NmU1NjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vgdchJeykQNHKmTG53KzFKowrDw UZpP4iLgMJMSzvcRcpp/Z4FmtpL0cL5OvPR5t4DY2oZs32UBDqvNlOdPvRZs+gOR 47bwP7OLMFDe5ziBX3lBoaJn8JjxzGLB7VqSknD5usEbb1iFCjY4ZvHvZjkLQFVA 5fQoENAG88YNhxYmpWQN/76xPnSQ9DUMhoTucBN86lGI4Z0t2PwbiNU4RfZcnYsN c0uE+YGHcfVyeSmrenVc0JDOUb9W9kqIFaGhbx4Pq7vvnZ525eNRQGChQ0w9A/u8 kaeBpUgWvyJt6jzy50DpgB8mqWbg2yfG8QKxOoZ2mcxwNfOXMZQ7FUNMIwIDAQAB o4IDfzCCA3swHQYDVR0OBBYEFPG9mtPAqNdP+oaXAQhqKolHblZdMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvOGIyYTA4Q28xMF82aHBjQkNHb3FpVWR1VmwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBkwYIKwYBBQUHAQcBAf8EggGCMIIBfjAMBAIAATAGAwQA uZvLMIIBbAQCAAIwggFkAwUDKgSfQAMFAyoFuQADBwAqBhGEAQEDBQMqBjvAAwUD KgeKQAMFAyoJewADBQMqCbcAAwcBKgotBgECAwUDKgp9AAMFAyoMSIADBwAqDHiG AJkDBwAqDHiGAQADBwAqDhXHAJkDBQMqDxfAAwUDKg8lAAMFAyoPJ8ADBQMqDzZA AwUDKg9/AAMFAyoPogADBQMqD9IAAwUDKg/bQAMFAyoQNMADBQMqEYiAAwUDKhJK wAMHACoSrEMTEgMHACoS7MABWAMHACoS7MYTEgMFAyoTE4ADBwAqExjGAGYDBwAq ExjGAIgDBQMqEyzAAwUDKhMtQAMFAyoTLcADBQMqEy5AAwUDKhMwQAMFAyoTM4AD BQMqE0kAAwUDKhNbgAMFAyoTeQADBQMqE32AAwUDKhOCAAMFAyoTkIADBQMqE5SA AwUDKhPRAAMFAyoT1wADBQMqE9kAAwUDKhP5AAMFAyoT+wAwDQYJKoZIhvcNAQEL BQADggEBAC0L1wNn6bRF1VT9k8SSixbvhtzYinjVn45QrUpMLAx5zGLN8bv2HybF dKQ9eSU6yqdIYTj6zPK4bZHpeAZLGKnVD27Z9QpA1aDpPsvTUDXVgr4RXzYudUZW HnGhK/RQJ7zADhrjtcmF7Uk132zZWtxl0NFjEuGkEmcMQeFgOou59f54gWYqwMDM Mq1FTsVj70MdYjaAm+eJPwZkOnvXdq3FEOEjadc0eHkWrDQYROuyFwdYHujGaHtX z7yJOrG0UHBtAkjrojA5PM1eldrn+ySgteoySl3S0kPlsAfmtcKwB5JkynmozMS7 7l7cp075goxACWZJSQMyTBlBOg9quXU= -----END CERTIFICATE-----Generated at Wed Jan 7 17:19:36 2026 by rpki-client