This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8Z0nr51fEeyZcFeTUjjB-bSjNVw.roa File: 8Z0nr51fEeyZcFeTUjjB-bSjNVw.roa (raw, json) Hash identifier: FBXFcwuhZxsAv5AhzscwAfK1mlr4dPt0zlKIYNRTW70= Subject key identifier: F1:9D:27:AF:9D:5F:11:EC:99:70:57:93:52:38:C1:F9:B4:A3:35:5C Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C13762B0E26B7F4BB68B04A4D4B10A2 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8Z0nr51fEeyZcFeTUjjB-bSjNVw.roa Signing time: Fri 02 Jan 2026 00:20:08 +0000 ROA not before: Fri 02 Jan 2026 00:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60609 IP address blocks: 185.150.76.0/24 maxlen: 24 185.150.78.0/23 maxlen: 23 194.26.174.0/23 maxlen: 23 194.26.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:76:2b:0e:26:b7:f4:bb:68:b0:4a:4d:4b:10:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f19d27af9d5f11ec997057935238c1f9b4a3355c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4c:7d:e7:57:ca:ce:28:27:76:13:45:c9:b8: 42:cd:b8:8a:b5:01:8b:fa:cc:8b:90:5f:ff:0d:8d: 0c:66:2a:f2:1f:ee:71:42:18:4f:97:82:94:72:27: e0:84:c5:85:85:ab:d8:1d:b5:1e:01:e9:b4:7d:ee: 6c:7e:ff:af:fe:ca:bb:de:46:33:38:ca:79:81:a5: 05:68:d2:6c:1c:63:92:b7:b1:f9:b5:e8:bd:c6:bf: ec:b7:e9:4c:34:82:16:0d:4d:fb:61:32:86:69:fc: fc:8f:0e:12:4b:d4:b0:26:47:95:45:bd:b0:b9:cf: ad:52:c0:3f:ff:67:1f:96:3d:93:94:a7:6b:88:fa: 57:19:5d:52:7f:a5:5a:8e:60:19:d1:0f:b9:6e:3f: 37:6f:56:fb:c0:01:b0:3e:ba:92:7a:69:78:71:4e: 5a:f3:c2:b9:91:f0:0d:cf:41:52:36:c8:ce:87:81: eb:2d:0e:51:26:18:ff:aa:9b:3d:c7:5f:39:4b:ec: a5:7e:52:8f:0f:b3:c1:4b:73:ad:f4:35:6e:8f:81: d2:89:ee:da:bc:2f:41:6e:90:a0:3f:95:2a:60:80: f0:da:3a:58:ec:ca:c8:cf:b8:79:84:32:76:6c:76: 61:1e:74:69:05:5f:53:7f:f7:2b:87:b1:e8:92:a0: c0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:9D:27:AF:9D:5F:11:EC:99:70:57:93:52:38:C1:F9:B4:A3:35:5C X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8Z0nr51fEeyZcFeTUjjB-bSjNVw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.150.76.0/24 185.150.78.0/23 194.26.174.0/23 Signature Algorithm: sha256WithRSAEncryption 38:d4:16:67:be:7f:5f:9e:48:e5:79:04:e8:63:fd:3a:98:70: 5d:95:4c:2a:47:de:d3:e2:1a:7c:90:f3:5f:98:9c:41:cb:c0: eb:9e:fb:f4:8a:62:6f:25:f6:c9:c8:bd:74:c2:ab:4b:e7:d1: e6:98:20:61:e6:8a:fe:34:ef:cf:50:b8:20:f4:c2:d0:ca:37: cf:80:3a:4e:bd:7e:eb:53:34:3e:b6:83:0e:f8:8b:94:5c:bb: d8:36:a0:8d:64:bd:d3:81:31:93:07:d6:c5:4c:cd:9f:b8:15: 0a:f3:20:b6:08:45:32:38:4b:7b:fc:3e:b8:12:aa:4d:f8:d1: c8:42:a0:53:1a:d4:5f:f4:d7:bb:ac:1a:d4:3a:09:f7:77:36: db:61:9f:79:8a:e6:39:4f:c1:28:da:bd:20:8e:4a:dd:55:cf: d3:68:00:fe:78:01:bb:b9:e6:1b:96:e9:b5:80:87:41:81:29: 39:38:0d:f6:39:e4:96:c5:7a:24:24:0c:18:d8:1e:18:e3:84: 78:40:1e:99:e4:8a:0c:70:e4:ff:a2:a5:e8:ff:93:ca:a2:b9: 5e:aa:f5:24:c4:42:ba:17:25:13:9f:9e:33:2e:cf:e8:e2:09: 6d:56:a3:79:b0:8f:1a:a3:05:6a:ec:f7:aa:85:e6:75:3a:95: 3d:f3:79:0a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8E3YrDia39LtosEpNSxCiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTlkMjdhZjlkNWYxMWVjOTk3MDU3OTM1MjM4YzFmOWI0YTMzNTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEx951fKzigndhNFybhCzbiKtQGL +syLkF//DY0MZiryH+5xQhhPl4KUcifghMWFhavYHbUeAem0fe5sfv+v/sq73kYz OMp5gaUFaNJsHGOSt7H5tei9xr/st+lMNIIWDU37YTKGafz8jw4SS9SwJkeVRb2w uc+tUsA//2cflj2TlKdriPpXGV1Sf6VajmAZ0Q+5bj83b1b7wAGwPrqSeml4cU5a 88K5kfANz0FSNsjOh4HrLQ5RJhj/qps9x185S+ylflKPD7PBS3Ot9DVuj4HSie7a vC9BbpCgP5UqYIDw2jpY7MrIz7h5hDJ2bHZhHnRpBV9Tf/crh7HokqDAVwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPGdJ6+dXxHsmXBXk1I4wfm0ozVcMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvOFowbnI1MWZFZXlaY0ZlVFVqakItYlNqTlZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuZZMAwQB uZZOAwQBwhquMA0GCSqGSIb3DQEBCwUAA4IBAQA41BZnvn9fnkjleQToY/06mHBd lUwqR97T4hp8kPNfmJxBy8Drnvv0imJvJfbJyL10wqtL59HmmCBh5or+NO/PULgg 9MLQyjfPgDpOvX7rUzQ+toMO+IuUXLvYNqCNZL3TgTGTB9bFTM2fuBUK8yC2CEUy OEt7/D64EqpN+NHIQqBTGtRf9Ne7rBrUOgn3dzbbYZ95iuY5T8Eo2r0gjkrdVc/T aAD+eAG7ueYblum1gIdBgSk5OA32OeSWxXokJAwY2B4Y44R4QB6Z5IoMcOT/oqXo /5PKorleqvUkxEK6FyUTn54zLs/o4gltVqN5sI8aowVq7PeqheZ1OpU983kK -----END CERTIFICATE-----Generated at Fri Jan 2 23:53:18 2026 by rpki-client