This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/K8HecFRRKEjS3qKmvuFAnvz_-uc.roa File: K8HecFRRKEjS3qKmvuFAnvz_-uc.roa (raw, json) Hash identifier: vesVSy2mT3SX5WV3LlmG2YI3Cv5I/bjZoprTrOQYHHA= Subject key identifier: 2B:C1:DE:70:54:51:28:48:D2:DE:A2:A6:BE:E1:40:9E:FC:FF:FA:E7 Certificate issuer: /CN=bbc264b5a6494f890fa314f61fd7d27587e35830 Certificate serial: 019B7CECDA64A7C4E9127EF4F1ACCFAF84DE Authority key identifier: BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/K8HecFRRKEjS3qKmvuFAnvz_-uc.roa Signing time: Fri 02 Jan 2026 04:17:35 +0000 ROA not before: Fri 02 Jan 2026 04:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200026 IP address blocks: 145.14.248.0/21 maxlen: 24 145.14.255.0/24 maxlen: 24 153.92.112.0/21 maxlen: 21 185.40.52.0/22 maxlen: 22 2a00:f120::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:da:64:a7:c4:e9:12:7e:f4:f1:ac:cf:af:84:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbc264b5a6494f890fa314f61fd7d27587e35830 Validity Not Before: Jan 2 04:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2bc1de7054512848d2dea2a6bee1409efcfffae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:be:b2:80:40:e2:96:11:3b:6d:ca:13:be:2b: a2:9d:8f:f5:2b:1a:f9:f9:44:97:6a:92:2e:45:a3: 1b:03:8f:58:95:73:cf:35:46:c4:bd:c2:74:e2:81: da:08:14:aa:00:49:58:5f:72:0f:10:d6:d7:3c:45: 89:92:9a:8b:b7:be:1b:c0:ee:c4:f7:2b:a8:26:63: 69:22:be:91:ba:bb:93:d4:16:e4:d9:2a:6d:a7:29: af:86:07:e3:14:1e:b4:e6:1e:1c:1b:37:80:6d:5e: 28:eb:6a:d3:c9:d6:a8:ea:b3:12:95:f3:89:80:a5: 4d:cd:d7:b6:f3:6f:fa:66:1e:3e:35:bd:33:ff:f4: 35:19:57:15:fd:ba:cf:ed:e0:e6:e2:77:ef:0e:82: 21:bc:b6:ec:9b:62:bf:6c:6a:17:00:93:a2:1b:cc: 80:58:f2:91:0d:aa:9b:43:31:ae:cd:88:ac:5c:25: b6:75:35:b5:31:f0:d3:a2:de:80:b4:bb:63:1d:92: ca:bb:d2:f4:57:0a:af:8d:62:3e:22:f3:14:59:95: ab:68:9f:6f:16:a9:de:21:aa:67:ac:12:6e:24:0b: 6f:5c:cf:0c:35:72:95:ac:a7:61:b7:20:e7:b8:f7: 7e:36:2d:3a:c8:19:f5:4e:e7:52:33:9b:9c:11:9b: ed:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C1:DE:70:54:51:28:48:D2:DE:A2:A6:BE:E1:40:9E:FC:FF:FA:E7 X509v3 Authority Key Identifier: keyid:BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/K8HecFRRKEjS3qKmvuFAnvz_-uc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.14.248.0/21 153.92.112.0/21 185.40.52.0/22 IPv6: 2a00:f120::/32 Signature Algorithm: sha256WithRSAEncryption 67:1f:24:72:43:80:f5:6f:2c:45:1e:c3:34:44:3a:03:65:79: 05:1d:f9:33:f2:ad:e7:9c:d1:a1:73:d9:f5:15:12:05:ea:1e: 51:ae:23:cc:7c:26:b4:4c:09:df:c9:d0:1f:f2:d1:02:ad:7a: 81:15:d7:94:12:f1:f3:dc:a1:0c:38:cf:d9:b7:c8:22:b9:57: e5:23:48:bf:5a:f1:48:61:8f:30:d1:83:88:41:f0:fd:9e:c0: 35:c7:b6:b2:36:dd:a9:71:79:2e:5d:08:93:98:d8:be:2b:ed: b0:27:79:a6:3c:47:1e:b3:77:76:d7:e3:1a:ed:91:24:b4:0c: 46:b9:03:71:07:8c:8a:bd:9c:54:85:6b:78:ff:f8:1b:95:a2: c5:80:60:ba:d3:27:70:5d:32:66:3a:fa:80:06:fc:85:87:2d: 88:21:21:90:f3:e1:97:23:79:8a:b4:10:5d:dc:45:5b:b3:4c: 3c:47:d2:2a:70:1f:92:cf:62:a8:68:49:10:1e:a4:93:d6:e7: c6:c3:b2:ea:32:76:84:75:22:6d:a3:95:07:17:73:b0:fb:41: f4:11:3f:96:68:b7:c8:9b:aa:bf:25:39:19:4b:eb:ad:66:d5: c6:ca:29:fd:c8:66:5a:27:d2:df:7f:d9:12:55:78:02:0e:7b: f8:19:5c:2a -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt87Npkp8TpEn708azPr4TeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYzI2NGI1YTY0OTRmODkwZmEzMTRmNjFmZDdkMjc1ODdl MzU4MzAwHhcNMjYwMTAyMDQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmMxZGU3MDU0NTEyODQ4ZDJkZWEyYTZiZWUxNDA5ZWZjZmZmYWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL6ygEDilhE7bcoTviuinY/1Kxr5 +USXapIuRaMbA49YlXPPNUbEvcJ04oHaCBSqAElYX3IPENbXPEWJkpqLt74bwO7E 9yuoJmNpIr6RuruT1Bbk2SptpymvhgfjFB605h4cGzeAbV4o62rTydao6rMSlfOJ gKVNzde282/6Zh4+Nb0z//Q1GVcV/brP7eDm4nfvDoIhvLbsm2K/bGoXAJOiG8yA WPKRDaqbQzGuzYisXCW2dTW1MfDTot6AtLtjHZLKu9L0VwqvjWI+IvMUWZWraJ9v FqneIapnrBJuJAtvXM8MNXKVrKdhtyDnuPd+Ni06yBn1TudSM5ucEZvteQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFCvB3nBUUShI0t6ipr7hQJ78//rnMB8GA1UdIwQY MBaAFLvCZLWmSU+JD6MU9h/X0nWH41gwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdThKa3RhWkpUNGtQb3hUMkg5ZlNkWWZqV0RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9lYTRlNjQtNmQ3MC00YmZkLTkwOWQt ZjA1NDZjZmFiMDYxLzEvSzhIZWNGUlJLRWpTM3FLbXZ1RkFudnpfLXVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9lYTRlNjQtNmQ3MC00YmZkLTkwOWQtZjA1NDZjZmFiMDYx LzEvdThKa3RhWkpUNGtQb3hUMkg5ZlNkWWZqV0RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDkQ74AwQD mVxwAwQCuSg0MA0EAgACMAcDBQAqAPEgMA0GCSqGSIb3DQEBCwUAA4IBAQBnHyRy Q4D1byxFHsM0RDoDZXkFHfkz8q3nnNGhc9n1FRIF6h5RriPMfCa0TAnfydAf8tEC rXqBFdeUEvHz3KEMOM/Zt8giuVflI0i/WvFIYY8w0YOIQfD9nsA1x7ayNt2pcXku XQiTmNi+K+2wJ3mmPEces3d21+Ma7ZEktAxGuQNxB4yKvZxUhWt4//gblaLFgGC6 0ydwXTJmOvqABvyFhy2IISGQ8+GXI3mKtBBd3EVbs0w8R9IqcB+Sz2KoaEkQHqST 1ufGw7LqMnaEdSJto5UHF3Ow+0H0ET+WaLfIm6q/JTkZS+utZtXGyin9yGZaJ9Lf f9kSVXgCDnv4GVwq -----END CERTIFICATE-----Generated at Tue Feb 10 04:53:43 2026 by rpki-client