This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/i4f87X_0C7m80wat_32uyA77P4s.roa File: i4f87X_0C7m80wat_32uyA77P4s.roa (raw, json) Hash identifier: NnithLavPGEPqVaUWB0SoEr6mdo3qwwkmSh7hW+SQRM= Subject key identifier: 8B:87:FC:ED:7F:F4:0B:B9:BC:D3:06:AD:FF:7D:AE:C8:0E:FB:3F:8B Certificate issuer: /CN=6fa32e6581183f2c4897a7652333901f7f5bee73 Certificate serial: 019B78351A7CC9BD5B999032E6CD17B5F7D1 Authority key identifier: 6F:A3:2E:65:81:18:3F:2C:48:97:A7:65:23:33:90:1F:7F:5B:EE:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6MuZYEYPyxIl6dlIzOQH39b7nM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/i4f87X_0C7m80wat_32uyA77P4s.roa Signing time: Thu 01 Jan 2026 06:18:24 +0000 ROA not before: Thu 01 Jan 2026 06:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39138 IP address blocks: 185.218.107.0/24 maxlen: 24 2a10:d1c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.mft rsync://rpki.ripe.net/repository/DEFAULT/b6MuZYEYPyxIl6dlIzOQH39b7nM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:1a:7c:c9:bd:5b:99:90:32:e6:cd:17:b5:f7:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fa32e6581183f2c4897a7652333901f7f5bee73 Validity Not Before: Jan 1 06:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b87fced7ff40bb9bcd306adff7daec80efb3f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fc:a0:92:2e:85:85:bf:7b:f0:99:0b:94:1e: 24:0a:15:5c:1c:0f:50:49:fc:f7:ce:01:12:86:e0: 3a:42:dc:ce:9d:f3:2b:5b:1b:5b:5e:e1:5b:62:64: bf:ea:32:73:92:44:16:86:47:69:9f:d9:d2:d2:37: f5:00:c9:bf:b2:b5:00:1e:af:2f:79:2d:3e:49:31: a7:a9:25:d5:44:3e:7a:3e:d3:f2:f6:42:a0:a8:38: fe:9f:38:b0:2b:28:51:99:ca:78:3a:9b:3e:74:37: 57:2c:e5:77:0e:97:11:f3:1d:1f:fe:9f:d5:1d:45: 53:23:70:7b:3a:33:9f:11:08:4b:be:e8:83:7b:d4: 9b:e4:39:45:a2:8a:50:97:32:7e:3e:9a:98:1f:04: 0a:2f:b1:35:e4:9a:cd:bc:25:8d:90:43:dd:26:7f: 6d:c0:0f:75:63:6e:10:66:95:ea:b8:7a:4b:7b:b0: 0a:30:d7:8d:7b:d5:80:4b:3e:07:17:18:c0:f9:d0: 78:98:51:25:93:54:b3:ae:6d:88:90:26:2d:4b:9a: c0:e9:4a:49:44:51:f2:2c:3b:b1:db:5c:e5:b5:6a: dc:9a:c8:5a:07:57:db:27:a6:88:b5:bf:25:b5:92: 47:35:2e:a0:31:d0:5b:3d:e0:81:36:2d:e1:08:74: e7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:87:FC:ED:7F:F4:0B:B9:BC:D3:06:AD:FF:7D:AE:C8:0E:FB:3F:8B X509v3 Authority Key Identifier: keyid:6F:A3:2E:65:81:18:3F:2C:48:97:A7:65:23:33:90:1F:7F:5B:EE:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6MuZYEYPyxIl6dlIzOQH39b7nM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/i4f87X_0C7m80wat_32uyA77P4s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.218.107.0/24 IPv6: 2a10:d1c0::/32 Signature Algorithm: sha256WithRSAEncryption 0f:f5:bf:e2:06:74:fd:ae:94:25:2c:6d:8d:b9:37:67:4d:1f: 07:fa:c9:ed:41:9d:2a:bd:94:b1:40:04:c4:ae:79:f7:e7:bc: cd:fb:12:ef:92:9a:8d:6f:7d:61:27:88:73:3b:29:e2:fb:15: 09:65:8b:2c:9d:81:34:c5:8b:af:51:20:a3:36:5f:85:9a:d7: 63:f3:5a:19:f4:45:ea:5f:f3:55:3c:8f:b2:01:07:5f:35:0c: 92:e0:6c:23:47:6d:56:d8:14:36:b2:1d:0f:82:02:35:30:8a: 37:b0:1b:90:d1:65:84:e8:f5:b5:4f:13:e4:62:ac:fc:c3:f8: ca:d1:57:c2:6d:07:ae:45:cc:39:8e:b1:90:b1:34:c0:c2:d2: 04:24:87:01:d7:17:b1:45:05:33:28:43:af:b8:f5:96:86:69: eb:98:6e:8a:26:46:4f:dd:04:6c:12:e2:3c:20:16:aa:b0:8d: 72:fb:b4:1a:da:0a:52:7c:dc:b9:2f:9d:e6:9f:42:36:6a:81: bb:ab:9f:32:f5:fb:90:07:2d:68:d3:1b:1e:18:25:19:83:7c: 47:4f:a8:74:28:99:40:e3:3e:e1:22:18:e0:bf:cb:8a:0c:45: 98:eb:b7:47:c3:a3:5d:8d:76:b8:a6:69:89:6f:86:c0:f5:88: 4a:1c:30:41 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NRp8yb1bmZAy5s0XtffRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYTMyZTY1ODExODNmMmM0ODk3YTc2NTIzMzM5MDFmN2Y1 YmVlNzMwHhcNMjYwMTAxMDYxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Yjg3ZmNlZDdmZjQwYmI5YmNkMzA2YWRmZjdkYWVjODBlZmIzZjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/ygki6Fhb978JkLlB4kChVcHA9Q Sfz3zgEShuA6QtzOnfMrWxtbXuFbYmS/6jJzkkQWhkdpn9nS0jf1AMm/srUAHq8v eS0+STGnqSXVRD56PtPy9kKgqDj+nziwKyhRmcp4Ops+dDdXLOV3DpcR8x0f/p/V HUVTI3B7OjOfEQhLvuiDe9Sb5DlFoopQlzJ+PpqYHwQKL7E15JrNvCWNkEPdJn9t wA91Y24QZpXquHpLe7AKMNeNe9WASz4HFxjA+dB4mFElk1Szrm2IkCYtS5rA6UpJ RFHyLDux21zltWrcmshaB1fbJ6aItb8ltZJHNS6gMdBbPeCBNi3hCHTnSwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIuH/O1/9Au5vNMGrf99rsgO+z+LMB8GA1UdIwQY MBaAFG+jLmWBGD8sSJenZSMzkB9/W+5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjZNdVpZRVlQeXhJbDZkbEl6T1FIMzliN25NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi84NWNhOGUtZDc0Yi00YzA1LTgxYjYt NzcwZjA1NzJjMGU3LzEvaTRmODdYXzBDN204MHdhdF8zMnV5QTc3UDRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi84NWNhOGUtZDc0Yi00YzA1LTgxYjYtNzcwZjA1NzJjMGU3 LzEvYjZNdVpZRVlQeXhJbDZkbEl6T1FIMzliN25NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAudprMA0E AgACMAcDBQAqENHAMA0GCSqGSIb3DQEBCwUAA4IBAQAP9b/iBnT9rpQlLG2NuTdn TR8H+sntQZ0qvZSxQATErnn357zN+xLvkpqNb31hJ4hzOyni+xUJZYssnYE0xYuv USCjNl+Fmtdj81oZ9EXqX/NVPI+yAQdfNQyS4GwjR21W2BQ2sh0PggI1MIo3sBuQ 0WWE6PW1TxPkYqz8w/jK0VfCbQeuRcw5jrGQsTTAwtIEJIcB1xexRQUzKEOvuPWW hmnrmG6KJkZP3QRsEuI8IBaqsI1y+7Qa2gpSfNy5L53mn0I2aoG7q58y9fuQBy1o 0xseGCUZg3xHT6h0KJlA4z7hIhjgv8uKDEWY67dHw6NdjXa4pmmJb4bA9YhKHDBB -----END CERTIFICATE-----Generated at Mon Feb 9 23:42:39 2026 by rpki-client