This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/E-8LwQ3nkmMPj6iBH79pH_Ioo7Q.roa File: E-8LwQ3nkmMPj6iBH79pH_Ioo7Q.roa (raw, json) Hash identifier: H+Jw3qwj6HENxblKk3mtHeFWeilk4ouDaO2sDtbof3Y= Subject key identifier: 13:EF:0B:C1:0D:E7:92:63:0F:8F:A8:81:1F:BF:69:1F:F2:28:A3:B4 Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0 Certificate serial: 019B7C7FBBB5A906F6E5E50FD7AE12576E15 Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/E-8LwQ3nkmMPj6iBH79pH_Ioo7Q.roa Signing time: Fri 02 Jan 2026 02:18:24 +0000 ROA not before: Fri 02 Jan 2026 02:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200350 IP address blocks: 31.44.8.0/21 maxlen: 24 37.230.172.0/22 maxlen: 24 37.230.188.0/22 maxlen: 24 45.133.96.0/22 maxlen: 24 46.21.244.0/22 maxlen: 24 46.243.209.0/24 maxlen: 24 46.243.212.0/24 maxlen: 24 51.250.0.0/17 maxlen: 24 62.84.112.0/20 maxlen: 24 84.201.128.0/18 maxlen: 24 84.252.128.0/20 maxlen: 24 89.104.112.0/23 maxlen: 24 89.169.128.0/18 maxlen: 24 89.232.188.0/22 maxlen: 24 92.255.1.0/24 maxlen: 24 92.255.3.0/24 maxlen: 24 92.255.13.0/24 maxlen: 24 93.77.160.0/19 maxlen: 24 111.88.144.0/20 maxlen: 24 111.88.240.0/20 maxlen: 24 130.193.32.0/19 maxlen: 24 158.160.0.0/16 maxlen: 24 178.154.192.0/18 maxlen: 24 185.206.164.0/22 maxlen: 24 185.216.194.0/23 maxlen: 24 193.32.216.0/22 maxlen: 24 194.247.51.0/24 maxlen: 24 213.165.192.0/19 maxlen: 24 217.28.224.0/20 maxlen: 24 217.198.168.0/21 maxlen: 24 2a0d:d6c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:bb:b5:a9:06:f6:e5:e5:0f:d7:ae:12:57:6e:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0 Validity Not Before: Jan 2 02:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13ef0bc10de792630f8fa8811fbf691ff228a3b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4c:be:93:b5:46:ec:94:88:a4:fc:c2:81:b7: f4:5a:f5:b0:ed:23:bd:55:e5:51:d2:ff:93:91:ea: e2:3e:eb:92:c7:98:1b:14:79:b3:55:12:5e:c2:c2: 18:db:b0:16:8f:2e:d4:9a:fc:68:56:73:ca:47:00: 06:79:af:5b:a0:5b:03:fc:94:97:8d:d3:6f:39:84: b3:ad:0d:1c:b6:87:28:1c:dd:af:c2:33:ee:94:2c: e3:b7:2f:dd:c8:9e:70:3d:0c:6e:b8:11:79:e5:12: c3:82:91:9d:48:52:a0:67:26:d9:2c:5c:36:e3:bd: e7:94:92:b2:ba:b6:c1:23:16:36:79:f4:41:e8:12: 66:87:36:57:ed:1a:85:34:6e:0d:b9:a2:8d:bd:7b: 79:47:f4:5d:27:26:6c:b8:4d:f1:28:b1:3e:fc:16: 65:a2:79:31:88:f9:15:90:46:6b:84:21:64:2b:f3: 8e:6f:da:a2:21:15:32:66:e2:8a:e7:b5:aa:fb:24: d2:c9:ee:89:53:cf:d4:10:9e:3d:14:b1:d5:7b:61: 16:a8:e1:39:4b:80:50:fd:94:9a:1e:ed:e6:fd:6d: f6:7f:c0:a9:10:2b:ed:b4:95:7f:ae:63:fb:dd:c8: 69:34:60:66:bd:6d:db:b6:4a:0a:7b:69:78:02:00: 4f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:EF:0B:C1:0D:E7:92:63:0F:8F:A8:81:1F:BF:69:1F:F2:28:A3:B4 X509v3 Authority Key Identifier: keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/E-8LwQ3nkmMPj6iBH79pH_Ioo7Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.44.8.0/21 37.230.172.0/22 37.230.188.0/22 45.133.96.0/22 46.21.244.0/22 46.243.209.0/24 46.243.212.0/24 51.250.0.0/17 62.84.112.0/20 84.201.128.0/18 84.252.128.0/20 89.104.112.0/23 89.169.128.0/18 89.232.188.0/22 92.255.1.0/24 92.255.3.0/24 92.255.13.0/24 93.77.160.0/19 111.88.144.0/20 111.88.240.0/20 130.193.32.0/19 158.160.0.0/16 178.154.192.0/18 185.206.164.0/22 185.216.194.0/23 193.32.216.0/22 194.247.51.0/24 213.165.192.0/19 217.28.224.0/20 217.198.168.0/21 IPv6: 2a0d:d6c0::/29 Signature Algorithm: sha256WithRSAEncryption 64:fe:e2:b4:9e:69:dd:41:ee:41:54:2e:0c:29:3d:76:2a:f3: 81:24:56:ee:5c:ff:5b:ea:86:3c:54:de:6b:18:29:07:5f:e9: 83:87:44:fb:e9:fe:66:c3:ed:02:e0:80:ef:e9:4b:9f:73:03: 80:8c:43:3f:91:6c:c5:e0:64:a0:36:cb:4c:18:41:12:2c:6d: 22:13:7d:e3:2f:c5:e7:c7:1f:27:b8:6b:33:f2:f5:d0:c4:e5: a1:80:92:22:ff:bb:91:24:67:13:02:75:fe:9a:97:10:af:6f: 9e:8b:20:51:81:35:01:38:ba:ff:eb:30:dd:63:d4:0c:a8:47: 96:fa:f8:67:6f:4a:6b:e1:dd:37:dd:c3:9f:9a:db:1a:2c:52: 8e:a3:c2:89:5c:6e:2c:71:df:de:9e:d9:df:6f:e3:4f:bd:46: 69:6c:c5:c4:4c:b8:8b:ae:02:ac:c5:72:98:4c:4a:44:55:31: 33:a6:21:7a:c7:93:0b:77:df:e1:0d:13:dd:8e:a7:dd:fb:07: a3:04:fc:9e:8d:0b:3b:dc:77:c2:64:f5:aa:55:59:57:39:1f: a0:18:be:b2:ec:1e:83:6d:6e:36:4d:1f:f4:dd:89:b3:6e:0f: 65:38:37:95:29:e2:54:5d:11:74:6f:ea:56:59:21:3a:93:c1: 88:64:2e:4f -----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgISAZt8f7u1qQb25eUP164SV24VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjODZlM2U5MjhjN2YwYzlkYjY5NTE1ZmYzYWExZjY3OGNl ZTQzYzAwHhcNMjYwMTAyMDIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2VmMGJjMTBkZTc5MjYzMGY4ZmE4ODExZmJmNjkxZmYyMjhhM2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjky+k7VG7JSIpPzCgbf0WvWw7SO9 VeVR0v+TkeriPuuSx5gbFHmzVRJewsIY27AWjy7UmvxoVnPKRwAGea9boFsD/JSX jdNvOYSzrQ0ctocoHN2vwjPulCzjty/dyJ5wPQxuuBF55RLDgpGdSFKgZybZLFw2 473nlJKyurbBIxY2efRB6BJmhzZX7RqFNG4NuaKNvXt5R/RdJyZsuE3xKLE+/BZl onkxiPkVkEZrhCFkK/OOb9qiIRUyZuKK57Wq+yTSye6JU8/UEJ49FLHVe2EWqOE5 S4BQ/ZSaHu3m/W32f8CpECvttJV/rmP73chpNGBmvW3btkoKe2l4AgBPTwIDAQAB o4ICyjCCAsYwHQYDVR0OBBYEFBPvC8EN55JjD4+ogR+/aR/yKKO0MB8GA1UdIwQY MBaAFNyG4+kox/DJ22lRX/OqH2eM7kPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjIt OWM4ZTU5YzI3NzFjLzEvRS04THdRM25rbU1QajZpQkg3OXBIX0lvbzdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjItOWM4ZTU5YzI3NzFj LzEvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHfBggrBgEFBQcBBwEB/wSBzzCBzDCBugQCAAEwgbMDBAMf LAgDBAIl5qwDBAIl5rwDBAIthWADBAIuFfQDBAAu89EDBAAu89QDBAcz+gADBAQ+ VHADBAZUyYADBARU/IADBAFZaHADBAZZqYADBAJZ6LwDBABc/wEDBABc/wMDBABc /w0DBAVdTaADBARvWJADBARvWPADBAWCwSADAwCeoAMEBrKawAMEArnOpAMEAbnY wgMEAsEg2AMEAML3MwMEBdWlwAMEBNkc4AMEA9nGqDANBAIAAjAHAwUDKg3WwDAN BgkqhkiG9w0BAQsFAAOCAQEAZP7itJ5p3UHuQVQuDCk9dirzgSRW7lz/W+qGPFTe axgpB1/pg4dE++n+ZsPtAuCA7+lLn3MDgIxDP5FsxeBkoDbLTBhBEixtIhN94y/F 58cfJ7hrM/L10MTloYCSIv+7kSRnEwJ1/pqXEK9vnosgUYE1ATi6/+sw3WPUDKhH lvr4Z29Ka+HdN93Dn5rbGixSjqPCiVxuLHHf3p7Z32/jT71GaWzFxEy4i64CrMVy mExKRFUxM6YheseTC3ff4Q0T3Y6n3fsHowT8no0LO9x3wmT1qlVZVzkfoBi+suwe g21uNk0f9N2Js24PZTg3lSniVF0RdG/qVlkhOpPBiGQuTw== -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:48 2026 by rpki-client