This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/8cEfC1N1e8UVOvxoeOQe4DTgdIo.roa File: 8cEfC1N1e8UVOvxoeOQe4DTgdIo.roa (raw, json) Hash identifier: LRaPlos+9PMu+yFLBbBjOJX5cPq1n8kJxvNzrnZnp+M= Subject key identifier: F1:C1:1F:0B:53:75:7B:C5:15:3A:FC:68:78:E4:1E:E0:34:E0:74:8A Certificate issuer: /CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7 Certificate serial: 019B7BA44F794EB7AEA06D4EC86A4D2F8E05 Authority key identifier: 36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/8cEfC1N1e8UVOvxoeOQe4DTgdIo.roa Signing time: Thu 01 Jan 2026 22:18:44 +0000 ROA not before: Thu 01 Jan 2026 22:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51871 IP address blocks: 185.239.20.0/22 maxlen: 22 185.239.20.0/24 maxlen: 24 185.239.21.0/24 maxlen: 24 185.239.22.0/24 maxlen: 24 185.239.23.0/24 maxlen: 24 193.34.28.0/22 maxlen: 22 193.34.28.0/24 maxlen: 24 193.34.29.0/24 maxlen: 24 193.34.30.0/24 maxlen: 24 193.34.31.0/24 maxlen: 24 2001:67c:21b0::/48 maxlen: 48 2a13:9140::/29 maxlen: 29 2a13:9140::/32 maxlen: 32 2a13:9141::/32 maxlen: 32 2a13:9142::/32 maxlen: 32 2a13:9143::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:4f:79:4e:b7:ae:a0:6d:4e:c8:6a:4d:2f:8e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7 Validity Not Before: Jan 1 22:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1c11f0b53757bc5153afc6878e41ee034e0748a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:48:66:d7:58:a7:d2:0d:00:d3:e3:4f:65:47: 48:27:05:7b:5d:ab:7a:fc:bc:57:00:b1:8a:ad:72: 5f:c3:44:ce:23:a6:bf:b8:6b:f5:49:c2:e7:71:03: ba:cf:1b:ea:c9:61:37:c0:d8:15:a1:01:96:43:50: 1f:5c:38:ba:00:37:c0:c9:24:ce:30:57:d4:ba:c9: 42:66:5c:28:9a:42:8b:81:3b:0a:17:b8:f0:64:e4: 74:56:34:73:70:96:24:53:4a:56:04:05:0c:4e:6c: 2b:c9:47:b5:20:79:34:d3:6b:e0:4d:5c:32:32:37: 76:a6:2b:2b:f9:0f:8e:4d:ec:f1:1c:c4:b4:26:d7: 5e:d7:9c:4b:09:91:96:83:22:48:dc:8d:11:61:06: 6d:07:a6:ef:bb:bc:22:36:e1:ce:4a:9d:3d:f1:72: 5d:9f:d0:3a:83:f4:f0:2a:43:fd:38:6d:d0:a6:95: 27:ab:48:af:a6:f6:e6:dc:26:cc:98:a3:98:51:2f: 72:92:6d:1a:1d:0c:6d:ec:91:5a:4c:72:54:51:d9: 64:fe:20:6b:91:44:0b:0a:f1:5a:fc:7b:81:49:52: ca:1e:54:0f:54:1d:2a:45:36:cb:25:dd:69:61:c9: 22:cf:5d:73:13:9e:03:c8:81:d7:17:70:64:35:b0: e1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C1:1F:0B:53:75:7B:C5:15:3A:FC:68:78:E4:1E:E0:34:E0:74:8A X509v3 Authority Key Identifier: keyid:36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/8cEfC1N1e8UVOvxoeOQe4DTgdIo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.239.20.0/22 193.34.28.0/22 IPv6: 2001:67c:21b0::/48 2a13:9140::/29 Signature Algorithm: sha256WithRSAEncryption 48:3d:05:eb:10:68:3e:f2:0b:44:1a:cc:3f:f7:83:b6:41:b2: c6:9e:d2:a9:af:dc:e2:81:22:ea:ee:38:e5:69:af:3a:78:a7: 3c:f2:6f:bf:ae:d3:12:60:f1:1b:11:e0:89:56:38:b1:63:bc: a2:f7:af:0f:6c:79:93:9c:fa:f7:81:8a:76:69:1f:96:8c:8d: 71:9d:05:e9:92:ca:8a:fe:82:9a:cd:de:87:94:7f:b8:cf:7e: a1:a3:ec:e0:25:75:a4:53:fc:8b:10:df:60:d6:b2:e3:48:73: 49:bc:e4:d7:ef:a2:a9:64:61:79:c1:1c:a1:73:8b:7f:79:1a: ea:97:bf:d2:30:fa:3b:18:d0:9e:0f:55:7d:33:9a:6b:9f:2f: 74:a1:04:43:ca:a3:d1:20:8e:de:f2:93:b9:1d:53:bd:0b:b7: c3:59:26:5b:f0:6c:44:b2:81:b3:08:dd:6c:dd:57:98:6b:34: cf:7b:6f:44:ff:72:a3:ad:f3:18:f5:87:f9:ac:64:60:97:10: 9b:27:ad:f5:7a:61:1e:cc:e8:f4:b5:36:b8:c9:1d:34:24:61: 56:1e:82:48:29:37:62:d0:8e:69:5f:14:c0:55:c2:04:8f:24: cc:61:40:79:ea:a9:63:72:e8:58:d9:b5:50:20:0f:1b:e5:94: ea:da:dc:01 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt7pE95TreuoG1OyGpNL44FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NDgyZjJlZmVmYjkyN2EzY2FmZmVhMWQ5MWYyNDE3ZjNk MmU3ZDcwHhcNMjYwMTAxMjIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWMxMWYwYjUzNzU3YmM1MTUzYWZjNjg3OGU0MWVlMDM0ZTA3NDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUhm11in0g0A0+NPZUdIJwV7Xat6 /LxXALGKrXJfw0TOI6a/uGv1ScLncQO6zxvqyWE3wNgVoQGWQ1AfXDi6ADfAySTO MFfUuslCZlwomkKLgTsKF7jwZOR0VjRzcJYkU0pWBAUMTmwryUe1IHk002vgTVwy Mjd2pisr+Q+OTezxHMS0Jtde15xLCZGWgyJI3I0RYQZtB6bvu7wiNuHOSp098XJd n9A6g/TwKkP9OG3QppUnq0ivpvbm3CbMmKOYUS9ykm0aHQxt7JFaTHJUUdlk/iBr kUQLCvFa/HuBSVLKHlQPVB0qRTbLJd1pYckiz11zE54DyIHXF3BkNbDh/QIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFPHBHwtTdXvFFTr8aHjkHuA04HSKMB8GA1UdIwQY MBaAFDZILy7++5J6PK/+odkfJBfz0ufXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmtndkx2Nzdrbm84cl82aDJSOGtGX1BTNTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lNGIwMGMtYTkyOS00OGQ0LWI3ZDgt NzY4ODczMWJlZDlkLzEvOGNFZkMxTjFlOFVWT3Z4b2VPUWU0RFRnZElvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9lNGIwMGMtYTkyOS00OGQ0LWI3ZDgtNzY4ODczMWJlZDlk LzEvTmtndkx2Nzdrbm84cl82aDJSOGtGX1BTNTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQCue8UAwQC wSIcMBYEAgACMBADBwAgAQZ8IbADBQMqE5FAMA0GCSqGSIb3DQEBCwUAA4IBAQBI PQXrEGg+8gtEGsw/94O2QbLGntKpr9zigSLq7jjlaa86eKc88m+/rtMSYPEbEeCJ VjixY7yi968PbHmTnPr3gYp2aR+WjI1xnQXpksqK/oKazd6HlH+4z36ho+zgJXWk U/yLEN9g1rLjSHNJvOTX76KpZGF5wRyhc4t/eRrql7/SMPo7GNCeD1V9M5prny90 oQRDyqPRII7e8pO5HVO9C7fDWSZb8GxEsoGzCN1s3VeYazTPe29E/3KjrfMY9Yf5 rGRglxCbJ631emEezOj0tTa4yR00JGFWHoJIKTdi0I5pXxTAVcIEjyTMYUB56qlj cuhY2bVQIA8b5ZTq2twB -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:28 2026 by rpki-client