This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/eJ3EsbBMhzFDB-H0FiABM5_1h7o.roa File: eJ3EsbBMhzFDB-H0FiABM5_1h7o.roa (raw, json) Hash identifier: 2Gzq+fr47dBnSE3c78QxSTACSN9b6779m8anTE61jss= Subject key identifier: 78:9D:C4:B1:B0:4C:87:31:43:07:E1:F4:16:20:01:33:9F:F5:87:BA Certificate issuer: /CN=a8153b3d5612234fe260fe60bc7ce028062227a3 Certificate serial: 019B7F150EE5965A53740C6B5C9FD279C0AA Authority key identifier: A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/eJ3EsbBMhzFDB-H0FiABM5_1h7o.roa Signing time: Fri 02 Jan 2026 14:20:45 +0000 ROA not before: Fri 02 Jan 2026 14:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205386 IP address blocks: 185.220.8.0/24 maxlen: 24 185.220.10.0/24 maxlen: 24 185.220.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:0e:e5:96:5a:53:74:0c:6b:5c:9f:d2:79:c0:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8153b3d5612234fe260fe60bc7ce028062227a3 Validity Not Before: Jan 2 14:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=789dc4b1b04c87314307e1f4162001339ff587ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b4:73:1d:72:56:36:86:43:f5:fe:02:59:2a: 55:66:42:a0:d8:de:11:2f:82:74:6a:f7:d7:43:85: c8:44:22:79:e5:96:5c:ba:d2:02:58:7c:62:00:8e: 10:b5:52:68:0c:37:1d:b4:79:91:1d:a9:1a:7d:02: b5:c9:e2:54:b0:45:57:a0:03:49:56:20:5c:6a:82: e5:ea:fc:c0:10:f5:7b:90:9f:af:32:31:70:c9:bd: 38:c3:31:14:62:8d:1b:b1:8f:a7:a6:d7:c2:9a:a6: 8f:ae:93:36:94:75:d9:e3:d9:53:af:f7:11:7e:be: 55:c3:c1:c8:be:4e:b8:54:f7:42:be:43:4a:c5:5b: be:97:31:c1:50:5d:63:6d:80:fa:21:de:43:9f:91: 7d:78:d3:49:29:3d:bc:94:fe:d6:f9:2b:36:4f:af: 04:cd:b9:d2:aa:53:8b:ef:b0:3c:9b:cc:60:74:e5: 2a:e0:ea:3a:8f:7a:e9:06:62:51:d0:7f:cd:92:d9: bc:42:98:cf:53:5d:1c:ba:5e:22:e2:97:c6:1e:bf: 8f:b8:fe:78:63:87:c1:fd:6d:c1:34:21:bc:12:45: 17:36:1f:c7:62:99:4a:ec:1e:03:66:ba:27:fa:03: 96:4c:c7:5b:dd:4d:71:a2:e9:1c:aa:74:ef:70:78: 9e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:9D:C4:B1:B0:4C:87:31:43:07:E1:F4:16:20:01:33:9F:F5:87:BA X509v3 Authority Key Identifier: keyid:A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/eJ3EsbBMhzFDB-H0FiABM5_1h7o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.220.8.0/24 185.220.10.0/23 Signature Algorithm: sha256WithRSAEncryption a2:1b:90:91:ce:55:6b:1b:c2:18:32:ed:e5:85:3e:3f:b4:03: 82:1c:3d:7d:ae:cf:da:2c:64:c4:92:1d:f2:1b:40:d6:4e:22: 05:ed:28:04:c5:7d:ee:56:86:ad:51:7e:56:fe:e7:20:07:91: 22:e4:90:be:77:c2:b0:f6:c8:9d:aa:6e:6d:97:0f:83:af:4f: 79:c4:e1:e9:8e:b2:ce:1c:f4:15:c2:88:9f:14:6b:ed:e4:a8: 01:f2:a2:73:9a:fb:67:91:5c:c6:6d:e3:d9:5b:46:37:b4:7a: 45:a4:5e:02:39:6c:b2:08:a8:b7:0e:fe:45:00:39:55:c6:c4: 81:7b:e4:30:81:75:99:15:12:ab:2c:42:ae:82:b4:4c:ad:97: 45:78:83:bb:b0:b1:70:89:1f:af:57:c7:de:54:8a:43:79:94: ba:a9:16:bc:b7:27:be:97:f1:53:e7:ef:dd:db:44:b0:39:4a: 96:23:2c:c7:ad:68:9e:e9:bc:54:7e:23:79:cf:50:5c:4d:3b: 63:ea:73:0b:aa:61:ea:8a:90:d6:33:54:e8:70:45:10:57:93: db:9d:2c:15:a0:f0:34:3d:36:3b:4c:10:da:d7:5e:8f:a9:39: d3:67:5e:90:17:c3:7f:33:48:85:2e:59:36:bc:4e:b0:68:7a: 22:df:78:85 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FQ7lllpTdAxrXJ/SecCqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MTUzYjNkNTYxMjIzNGZlMjYwZmU2MGJjN2NlMDI4MDYy MjI3YTMwHhcNMjYwMTAyMTQyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODlkYzRiMWIwNGM4NzMxNDMwN2UxZjQxNjIwMDEzMzlmZjU4N2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7RzHXJWNoZD9f4CWSpVZkKg2N4R L4J0avfXQ4XIRCJ55ZZcutICWHxiAI4QtVJoDDcdtHmRHakafQK1yeJUsEVXoANJ ViBcaoLl6vzAEPV7kJ+vMjFwyb04wzEUYo0bsY+nptfCmqaPrpM2lHXZ49lTr/cR fr5Vw8HIvk64VPdCvkNKxVu+lzHBUF1jbYD6Id5Dn5F9eNNJKT28lP7W+Ss2T68E zbnSqlOL77A8m8xgdOUq4Oo6j3rpBmJR0H/Nktm8QpjPU10cul4i4pfGHr+PuP54 Y4fB/W3BNCG8EkUXNh/HYplK7B4DZron+gOWTMdb3U1xoukcqnTvcHieHQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHidxLGwTIcxQwfh9BYgATOf9Ye6MB8GA1UdIwQY MBaAFKgVOz1WEiNP4mD+YLx84CgGIiejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUJVN1BWWVNJMF9pWVA1Z3ZIemdLQVlpSjZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9kNGQ4ZGQtNTBkOC00M2M3LTliNTUt OWFhN2NkNjUwNWU1LzEvZUozRXNiQk1oekZEQi1IMEZpQUJNNV8xaDdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9kNGQ4ZGQtNTBkOC00M2M3LTliNTUtOWFhN2NkNjUwNWU1 LzEvcUJVN1BWWVNJMF9pWVA1Z3ZIemdLQVlpSjZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAudwIAwQB udwKMA0GCSqGSIb3DQEBCwUAA4IBAQCiG5CRzlVrG8IYMu3lhT4/tAOCHD19rs/a LGTEkh3yG0DWTiIF7SgExX3uVoatUX5W/ucgB5Ei5JC+d8Kw9sidqm5tlw+Dr095 xOHpjrLOHPQVwoifFGvt5KgB8qJzmvtnkVzGbePZW0Y3tHpFpF4COWyyCKi3Dv5F ADlVxsSBe+QwgXWZFRKrLEKugrRMrZdFeIO7sLFwiR+vV8feVIpDeZS6qRa8tye+ l/FT5+/d20SwOUqWIyzHrWie6bxUfiN5z1BcTTtj6nMLqmHqipDWM1TocEUQV5Pb nSwVoPA0PTY7TBDa116PqTnTZ16QF8N/M0iFLlk2vE6waHoi33iF -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:17 2026 by rpki-client