This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/y8jNmRtCcoJvhTYHSFz8gUZoKWk.roa File: y8jNmRtCcoJvhTYHSFz8gUZoKWk.roa (raw, json) Hash identifier: qGY7pcgxV5figV+GOxJcO4jkBi8y1M4gXZR3q6tSYQ0= Subject key identifier: CB:C8:CD:99:1B:42:72:82:6F:85:36:07:48:5C:FC:81:46:68:29:69 Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Certificate serial: 019C4C172CC8A8FA77EEC77C2A5ECC02021D Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/y8jNmRtCcoJvhTYHSFz8gUZoKWk.roa Signing time: Wed 11 Feb 2026 09:45:13 +0000 ROA not before: Wed 11 Feb 2026 09:45:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 87.254.2.0/24 maxlen: 24 87.254.10.0/24 maxlen: 24 87.254.11.0/24 maxlen: 24 87.254.12.0/23 maxlen: 24 87.254.18.0/23 maxlen: 24 87.254.22.0/24 maxlen: 24 87.254.29.0/24 maxlen: 24 185.210.168.0/23 maxlen: 24 185.210.170.0/23 maxlen: 23 217.25.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:4c:17:2c:c8:a8:fa:77:ee:c7:7c:2a:5e:cc:02:02:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Validity Not Before: Feb 11 09:45:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbc8cd991b4272826f853607485cfc8146682969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1f:53:08:a3:0c:71:ac:a2:7a:f0:c1:64:85: aa:bf:2a:be:4d:f1:6a:41:1b:ba:02:2e:f2:69:01: 22:9a:51:fa:68:85:4b:26:32:99:bf:51:79:d1:62: 03:86:4f:26:29:7f:6f:03:3d:1d:97:d1:25:d0:a3: 6d:31:71:c5:85:f8:20:d6:81:70:f6:d9:07:f2:48: 63:5d:2e:a5:61:0d:c0:81:f0:43:df:17:e8:20:ac: 78:9e:d1:ba:56:f9:70:06:a1:f8:26:1a:82:1b:72: c4:0c:da:81:20:f1:6e:d7:ac:20:6f:4e:93:01:4c: 2c:3b:58:74:45:01:f7:fe:e0:3a:4b:07:2d:a2:16: 15:28:f9:60:40:99:15:64:5f:43:1a:bf:43:bb:9d: fa:ce:bf:33:b1:43:0f:36:96:5a:90:49:e7:43:ca: 0f:66:1d:ef:cb:36:48:82:75:b7:e8:0b:c2:b6:f2: fd:ef:7d:49:d3:ef:8e:75:de:2f:ac:4d:6a:26:83: 1a:0d:2d:30:15:6d:ce:67:bb:75:aa:7b:39:54:26: b9:3e:99:d3:ce:e3:10:59:f0:31:3d:c4:0a:fb:ca: ce:39:6d:31:9e:0d:dc:9d:ac:9b:c0:e5:7c:90:9e: 89:b9:c7:61:aa:96:86:4b:d3:ff:d7:7c:82:f2:ba: 67:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C8:CD:99:1B:42:72:82:6F:85:36:07:48:5C:FC:81:46:68:29:69 X509v3 Authority Key Identifier: keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/y8jNmRtCcoJvhTYHSFz8gUZoKWk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.254.2.0/24 87.254.10.0-87.254.13.255 87.254.18.0/23 87.254.22.0/24 87.254.29.0/24 185.210.168.0/22 217.25.3.0/24 Signature Algorithm: sha256WithRSAEncryption 40:07:0c:78:95:39:96:66:c4:2f:68:6b:42:02:53:83:27:53: d8:a2:6a:40:08:c5:59:89:7b:32:56:64:f9:54:2c:3a:9e:20: b1:0c:7e:5a:64:a8:7d:a1:48:3b:f1:f2:c6:d2:c8:74:2b:fe: 84:36:3a:9b:cc:0e:68:b9:9a:78:82:b7:80:86:69:03:7c:a5: 34:cd:27:e2:75:ef:74:ca:64:4e:db:f4:7d:7e:f9:fb:7c:d8: 4f:a6:d5:c7:97:fe:4b:0c:e1:4f:01:39:b3:b3:65:63:6b:32: f1:cd:24:32:6a:06:e7:40:6a:52:58:fd:dc:40:87:68:e7:9f: c6:79:c9:6a:01:fd:6b:61:79:9b:69:60:8e:0c:68:73:48:e1: 20:2f:61:78:08:ba:b3:85:56:6e:25:81:ff:08:85:e6:02:1e: 8a:a6:cc:38:66:93:b1:be:fb:39:27:82:ef:1a:ab:01:02:3d: 5c:09:cd:b2:9b:0d:75:67:b4:4d:7b:75:51:86:bd:8f:ca:72: 8d:46:00:b1:a3:46:b4:c1:0d:9a:ac:a3:88:2c:9a:db:ab:43: 1f:65:dd:1c:9f:98:29:c4:eb:54:8f:97:c1:1b:d2:7e:1c:e1: 5f:08:7a:08:e9:7f:93:9b:4c:7e:c8:72:a0:93:2a:d9:55:5e: ed:9c:84:84 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZxMFyzIqPp37sd8Kl7MAgIdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1 OGRjZDQwHhcNMjYwMjExMDk0NTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmM4Y2Q5OTFiNDI3MjgyNmY4NTM2MDc0ODVjZmM4MTQ2NjgyOTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR9TCKMMcayievDBZIWqvyq+TfFq QRu6Ai7yaQEimlH6aIVLJjKZv1F50WIDhk8mKX9vAz0dl9El0KNtMXHFhfgg1oFw 9tkH8khjXS6lYQ3AgfBD3xfoIKx4ntG6VvlwBqH4JhqCG3LEDNqBIPFu16wgb06T AUwsO1h0RQH3/uA6SwctohYVKPlgQJkVZF9DGr9Du536zr8zsUMPNpZakEnnQ8oP Zh3vyzZIgnW36AvCtvL9731J0++Odd4vrE1qJoMaDS0wFW3OZ7t1qns5VCa5PpnT zuMQWfAxPcQK+8rOOW0xng3cnaybwOV8kJ6JucdhqpaGS9P/13yC8rpnFwIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFMvIzZkbQnKCb4U2B0hc/IFGaClpMB8GA1UdIwQY MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt NmZjZGNkNWFiNjYwLzEveThqTm1SdENjb0p2aFRZSFNGejhnVVpvS1drLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAV/4CMAwD BAFX/goDBAFX/gwDBAFX/hIDBABX/hYDBABX/h0DBAK50qgDBADZGQMwDQYJKoZI hvcNAQELBQADggEBAEAHDHiVOZZmxC9oa0ICU4MnU9iiakAIxVmJezJWZPlULDqe ILEMflpkqH2hSDvx8sbSyHQr/oQ2OpvMDmi5mniCt4CGaQN8pTTNJ+J173TKZE7b 9H1++ft82E+m1ceX/ksM4U8BObOzZWNrMvHNJDJqBudAalJY/dxAh2jnn8Z5yWoB /WtheZtpYI4MaHNI4SAvYXgIurOFVm4lgf8IheYCHoqmzDhmk7G++zkngu8aqwEC PVwJzbKbDXVntE17dVGGvY/Kco1GALGjRrTBDZqso4gsmturQx9l3RyfmCnE61SP l8Eb0n4c4V8Iegjpf5ObTH7IcqCTKtlVXu2chIQ= -----END CERTIFICATE-----Generated at Sat Feb 14 17:25:15 2026 by rpki-client