This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/8eYijGU89HKkHPl1vQkVznR2YWI.roa File: 8eYijGU89HKkHPl1vQkVznR2YWI.roa (raw, json) Hash identifier: GVKbdEH+zbWNIRI6lkz6XipadG7YSN2rD9CEidAiQUs= Subject key identifier: F1:E6:22:8C:65:3C:F4:72:A4:1C:F9:75:BD:09:15:CE:74:76:61:62 Certificate issuer: /CN=adf0df77114741e13a17d7213e6956bf9627b558 Certificate serial: 019B7D5C4E73F2C76AFE9B77FB3A4D5CF36F Authority key identifier: AD:F0:DF:77:11:47:41:E1:3A:17:D7:21:3E:69:56:BF:96:27:B5:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/8eYijGU89HKkHPl1vQkVznR2YWI.roa Signing time: Fri 02 Jan 2026 06:19:19 +0000 ROA not before: Fri 02 Jan 2026 06:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62319 IP address blocks: 37.44.248.0/23 maxlen: 23 37.44.250.0/24 maxlen: 24 91.142.136.0/24 maxlen: 24 91.194.36.0/23 maxlen: 23 91.216.118.0/24 maxlen: 24 178.209.160.0/22 maxlen: 22 178.209.165.0/24 maxlen: 24 178.209.166.0/24 maxlen: 24 178.209.167.0/24 maxlen: 24 178.209.168.0/24 maxlen: 24 178.209.169.0/24 maxlen: 24 178.209.170.0/24 maxlen: 24 178.209.171.0/24 maxlen: 24 178.209.172.0/24 maxlen: 24 178.209.173.0/24 maxlen: 24 178.209.174.0/24 maxlen: 24 178.209.175.0/24 maxlen: 24 178.209.176.0/23 maxlen: 23 178.209.178.0/23 maxlen: 23 178.209.180.0/22 maxlen: 22 178.209.184.0/22 maxlen: 22 178.209.188.0/23 maxlen: 23 178.209.190.0/24 maxlen: 24 178.209.191.0/24 maxlen: 24 185.4.216.0/23 maxlen: 23 185.4.218.0/24 maxlen: 24 185.4.219.0/24 maxlen: 24 185.40.44.0/22 maxlen: 22 185.66.184.0/22 maxlen: 22 185.150.72.0/22 maxlen: 22 185.203.0.0/22 maxlen: 22 193.106.120.0/22 maxlen: 22 193.169.74.0/23 maxlen: 23 194.116.178.0/23 maxlen: 23 194.126.192.0/24 maxlen: 24 2a02:c900::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.crl rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:4e:73:f2:c7:6a:fe:9b:77:fb:3a:4d:5c:f3:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf0df77114741e13a17d7213e6956bf9627b558 Validity Not Before: Jan 2 06:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1e6228c653cf472a41cf975bd0915ce74766162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e0:55:ef:e5:27:bf:d1:a1:8c:41:0c:3b:f4: d6:63:34:39:ab:61:4f:7e:75:bd:9e:ae:9a:49:35: 0c:25:e7:50:b4:a7:72:b8:73:c5:c4:4a:31:82:43: de:6d:94:af:a9:1a:c4:32:7a:8a:fb:0f:17:42:56: 4f:1b:57:49:dc:4e:7b:7e:90:a4:2a:f4:5b:9d:74: aa:f5:50:e7:03:d2:b9:00:f4:12:30:ff:11:76:37: ab:8a:3d:3b:4f:07:5e:43:22:0b:3f:10:99:7e:25: ea:c6:3f:e9:fd:8e:c2:33:24:a5:3c:92:98:80:a5: a9:05:1a:cc:56:cd:05:59:8b:c4:6b:bf:79:e1:09: 70:3b:8b:3a:29:00:9a:2c:8e:8f:02:ca:9e:f7:39: 08:e1:ad:3e:63:66:71:f9:28:2e:62:bb:68:87:0a: c0:02:af:3d:ec:c3:31:db:20:f6:46:39:82:04:6e: 1e:bf:43:9b:05:12:b6:83:3c:a3:e6:d9:fe:ca:e6: 03:9d:d2:8a:71:20:73:2e:2b:5b:1a:52:f8:ff:6b: ae:b8:d9:6a:3b:ec:5b:4f:37:cd:3c:aa:55:64:07: 1e:f2:53:75:44:50:eb:0e:31:ce:12:d9:2a:dd:e7: d2:12:57:49:04:1d:fd:f5:72:21:23:41:32:76:09: da:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E6:22:8C:65:3C:F4:72:A4:1C:F9:75:BD:09:15:CE:74:76:61:62 X509v3 Authority Key Identifier: keyid:AD:F0:DF:77:11:47:41:E1:3A:17:D7:21:3E:69:56:BF:96:27:B5:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/8eYijGU89HKkHPl1vQkVznR2YWI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.44.248.0-37.44.250.255 91.142.136.0/24 91.194.36.0/23 91.216.118.0/24 178.209.160.0/22 178.209.165.0-178.209.191.255 185.4.216.0/22 185.40.44.0/22 185.66.184.0/22 185.150.72.0/22 185.203.0.0/22 193.106.120.0/22 193.169.74.0/23 194.116.178.0/23 194.126.192.0/24 IPv6: 2a02:c900::/29 Signature Algorithm: sha256WithRSAEncryption 80:08:6b:21:79:5d:c4:95:2b:c1:b3:8e:ae:c3:cd:e9:51:5a: 72:cf:c8:aa:ef:3f:94:13:8a:60:99:8f:62:34:0d:a2:ef:1a: cc:17:31:6a:13:ad:79:8c:cf:58:27:bc:2f:58:3c:f8:bf:c8: 8f:f5:76:77:f6:cc:5a:c2:5c:d0:78:65:ab:9d:2b:14:3a:74: 0d:00:57:c8:11:17:62:b2:4b:46:a1:17:3e:5b:11:5a:03:df: 43:7e:a8:8c:8b:54:f6:e6:3d:e3:ea:9a:1c:7a:a8:a0:17:b1: 7d:48:2e:b0:70:38:d4:50:03:92:6a:d8:2d:63:68:ea:52:7a: d2:72:e3:7e:7f:4b:12:81:e9:39:c6:44:c5:d5:8c:24:3a:9c: 2c:2c:7a:00:55:ff:61:3d:86:52:09:f2:e8:0b:98:b4:67:95: e3:b3:af:5a:ec:d1:ba:bb:c5:05:08:94:ac:c9:b8:66:7a:f7: a8:c8:d0:de:d8:88:ce:97:9f:75:be:58:ff:5f:7b:5b:8a:09: e3:8b:7c:37:83:4e:c7:90:19:e9:70:b2:16:16:fb:d8:a7:b9: a6:f1:b9:74:40:b5:b3:13:02:0b:b9:27:7f:92:11:8f:fb:41: 4b:92:99:af:00:ad:af:90:d8:b3:c2:96:b0:4d:be:af:b5:71: 33:34:25:8f -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9XE5z8sdq/pt3+zpNXPNvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjBkZjc3MTE0NzQxZTEzYTE3ZDcyMTNlNjk1NmJmOTYy N2I1NTgwHhcNMjYwMTAyMDYxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWU2MjI4YzY1M2NmNDcyYTQxY2Y5NzViZDA5MTVjZTc0NzY2MTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+BV7+Unv9GhjEEMO/TWYzQ5q2FP fnW9nq6aSTUMJedQtKdyuHPFxEoxgkPebZSvqRrEMnqK+w8XQlZPG1dJ3E57fpCk KvRbnXSq9VDnA9K5APQSMP8Rdjerij07TwdeQyILPxCZfiXqxj/p/Y7CMySlPJKY gKWpBRrMVs0FWYvEa7954QlwO4s6KQCaLI6PAsqe9zkI4a0+Y2Zx+SguYrtohwrA Aq897MMx2yD2RjmCBG4ev0ObBRK2gzyj5tn+yuYDndKKcSBzLitbGlL4/2uuuNlq O+xbTzfNPKpVZAce8lN1RFDrDjHOEtkq3efSEldJBB399XIhI0EydgnaqwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFPHmIoxlPPRypBz5db0JFc50dmFiMB8GA1UdIwQY MBaAFK3w33cRR0HhOhfXIT5pVr+WJ7VYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZEZmR4RkhRZUU2RjljaFBtbFd2NVludFZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9hMzBiZWEtOWU5My00MDkxLWI2ZTEt ZTFlZjI3NzcyZWFmLzEvOGVZaWpHVTg5SEtrSFBsMXZRa1Z6blIyWVdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9hMzBiZWEtOWU5My00MDkxLWI2ZTEtZTFlZjI3NzcyZWFm LzEvcmZEZmR4RkhRZUU2RjljaFBtbFd2NVludFZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGUBggrBgEFBQcBBwEB/wSBhDCBgTBwBAIAATBqMAwDBAMl LPgDBAAlLPoDBABbjogDBAFbwiQDBABb2HYDBAKy0aAwDAMEALLRpQMEBrLRgAME ArkE2AMEArkoLAMEArlCuAMEArmWSAMEArnLAAMEAsFqeAMEAcGpSgMEAcJ0sgME AMJ+wDANBAIAAjAHAwUDKgLJADANBgkqhkiG9w0BAQsFAAOCAQEAgAhrIXldxJUr wbOOrsPN6VFacs/Iqu8/lBOKYJmPYjQNou8azBcxahOteYzPWCe8L1g8+L/Ij/V2 d/bMWsJc0Hhlq50rFDp0DQBXyBEXYrJLRqEXPlsRWgPfQ36ojItU9uY94+qaHHqo oBexfUgusHA41FADkmrYLWNo6lJ60nLjfn9LEoHpOcZExdWMJDqcLCx6AFX/YT2G Ugny6AuYtGeV47OvWuzRurvFBQiUrMm4Znr3qMjQ3tiIzpefdb5Y/197W4oJ44t8 N4NOx5AZ6XCyFhb72Ke5pvG5dEC1sxMCC7knf5IRj/tBS5KZrwCtr5DYs8KWsE2+ r7VxMzQljw== -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:06 2026 by rpki-client