This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/183182-430b-4d68-9149-3513992ebea9/1/8zsn6uw0avdJfnmMv5bDQt94aRQ.roa File: 8zsn6uw0avdJfnmMv5bDQt94aRQ.roa (raw, json) Hash identifier: fx5LZeJGBC5Vad7UFqMnP+6pEpxvbhublGGrjhNwrb4= Subject key identifier: F3:3B:27:EA:EC:34:6A:F7:49:7E:79:8C:BF:96:C3:42:DF:78:69:14 Certificate issuer: /CN=156f67d500ca96a48d0e4b6a47c41b233b7466bd Certificate serial: 019C22EA0F0EADBE30ED2C4089A20A037B52 Authority key identifier: 15:6F:67:D5:00:CA:96:A4:8D:0E:4B:6A:47:C4:1B:23:3B:74:66:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FW9n1QDKlqSNDktqR8QbIzt0Zr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/183182-430b-4d68-9149-3513992ebea9/1/8zsn6uw0avdJfnmMv5bDQt94aRQ.roa Signing time: Tue 03 Feb 2026 09:51:30 +0000 ROA not before: Tue 03 Feb 2026 09:51:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57758 IP address blocks: 185.167.204.0/24 maxlen: 24 185.167.205.0/24 maxlen: 24 185.167.206.0/24 maxlen: 24 185.167.207.0/24 maxlen: 24 2a0b:b600:110::/44 maxlen: 44 2a0b:b600:2000::/38 maxlen: 38 2a0b:b600:2400::/38 maxlen: 38 2a0b:b600:3802::/48 maxlen: 48 2a0b:b600:3803::/48 maxlen: 48 2a0b:b600:3c04::/48 maxlen: 48 2a0b:b602:1000::/36 maxlen: 36 2a0b:b602:2000::/36 maxlen: 36 2a0b:b602:3000::/36 maxlen: 36 2a0b:b602:4000::/36 maxlen: 36 2a0b:b602:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/183182-430b-4d68-9149-3513992ebea9/1/FW9n1QDKlqSNDktqR8QbIzt0Zr0.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/183182-430b-4d68-9149-3513992ebea9/1/FW9n1QDKlqSNDktqR8QbIzt0Zr0.mft rsync://rpki.ripe.net/repository/DEFAULT/FW9n1QDKlqSNDktqR8QbIzt0Zr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:22:ea:0f:0e:ad:be:30:ed:2c:40:89:a2:0a:03:7b:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156f67d500ca96a48d0e4b6a47c41b233b7466bd Validity Not Before: Feb 3 09:51:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f33b27eaec346af7497e798cbf96c342df786914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b0:a9:76:bf:df:e6:a2:62:8a:77:e1:98:d2: f9:d8:58:e9:8c:a1:f1:e8:00:82:7d:02:3c:1f:36: 7e:27:7b:e3:fd:6f:94:9b:e5:11:3f:7d:fa:36:ad: c6:bb:3e:fa:40:58:74:b8:27:c5:bc:2f:30:b4:a0: 8a:d3:af:03:62:ca:d4:bf:4a:da:16:48:a0:eb:32: 7b:1f:3f:1b:c4:be:b6:58:60:9f:07:61:ed:ef:21: f9:43:ac:2d:60:c7:b7:c4:3c:92:cd:eb:f0:4f:be: 16:8b:d7:92:0d:f9:47:b5:fb:fd:43:80:b8:16:71: f4:67:cb:1b:24:23:4f:23:31:3d:b3:e7:bb:9b:cd: 23:3c:9f:83:82:ff:b4:67:22:ac:f5:b4:97:12:94: 5f:53:14:12:bc:4f:55:b2:32:02:62:be:48:9e:73: 0d:ba:f0:b1:c3:27:cf:56:46:6f:b0:b1:04:1c:eb: 20:98:58:04:4d:58:3a:82:f3:07:81:eb:b0:f8:00: b6:14:45:f4:87:11:d4:a8:80:d9:c6:f9:3f:53:6f: 19:45:d4:e7:39:2b:51:8a:5c:02:09:b4:45:92:b6: 09:05:2f:75:cd:d7:ae:1b:f0:94:7c:f3:7e:c1:5d: 91:c5:e2:93:dd:3f:23:44:c7:b4:03:f7:e5:ec:7e: 9b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3B:27:EA:EC:34:6A:F7:49:7E:79:8C:BF:96:C3:42:DF:78:69:14 X509v3 Authority Key Identifier: keyid:15:6F:67:D5:00:CA:96:A4:8D:0E:4B:6A:47:C4:1B:23:3B:74:66:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW9n1QDKlqSNDktqR8QbIzt0Zr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/183182-430b-4d68-9149-3513992ebea9/1/8zsn6uw0avdJfnmMv5bDQt94aRQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/183182-430b-4d68-9149-3513992ebea9/1/FW9n1QDKlqSNDktqR8QbIzt0Zr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.167.204.0/22 IPv6: 2a0b:b600:110::/44 2a0b:b600:2000::/37 2a0b:b600:3802::/47 2a0b:b600:3c04::/48 2a0b:b602:1000::-2a0b:b602:4fff:ffff:ffff:ffff:ffff:ffff 2a0b:b602:8000::/36 Signature Algorithm: sha256WithRSAEncryption 42:1c:92:47:7d:cd:7c:9e:ba:af:aa:f6:fc:ed:7f:74:b5:86: 1e:bf:65:6f:6a:9c:4e:4f:58:52:df:40:26:02:8a:41:ad:5d: 99:43:cd:de:3a:18:51:4b:d0:bc:00:93:77:16:68:06:6d:1d: ac:5d:c6:1d:27:fc:8b:a5:1e:bf:d8:0b:59:bd:ba:bf:61:29: f0:74:06:c1:42:bf:81:27:11:65:45:3a:2a:d5:3e:1f:41:17: 14:c4:0d:66:5d:32:f5:9e:6a:52:23:0b:81:a6:19:86:b3:f2: 89:fe:e1:67:a6:71:ec:d6:3a:bf:0a:0c:59:31:7f:39:76:5f: 61:b5:f4:b3:44:f1:ae:ee:ef:a4:b4:be:de:f7:08:a1:b6:bc: 36:b6:6d:52:07:1d:aa:35:04:fc:fa:de:6c:bb:6b:48:0c:10: a7:db:ce:da:c6:92:fa:4c:b5:fd:04:16:b9:01:cc:56:b2:d7: 63:11:57:fc:ef:a9:f3:eb:9f:45:9f:24:9a:45:fb:d4:a1:f5: 0d:7f:d2:ff:99:34:23:71:aa:85:8e:0d:fe:83:c0:b9:d3:a8: 28:2d:f6:72:10:9d:f0:69:1d:e9:d8:9d:72:17:2f:98:ad:e0: 33:b6:f1:8e:03:59:0c:3b:9c:ee:ce:d2:26:89:c8:a1:61:51: 44:8a:9b:ca -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZwi6g8Orb4w7SxAiaIKA3tSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1NmY2N2Q1MDBjYTk2YTQ4ZDBlNGI2YTQ3YzQxYjIzM2I3 NDY2YmQwHhcNMjYwMjAzMDk1MTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzNiMjdlYWVjMzQ2YWY3NDk3ZTc5OGNiZjk2YzM0MmRmNzg2OTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrCpdr/f5qJiinfhmNL52FjpjKHx 6ACCfQI8HzZ+J3vj/W+Um+URP336Nq3Guz76QFh0uCfFvC8wtKCK068DYsrUv0ra Fkig6zJ7Hz8bxL62WGCfB2Ht7yH5Q6wtYMe3xDySzevwT74Wi9eSDflHtfv9Q4C4 FnH0Z8sbJCNPIzE9s+e7m80jPJ+Dgv+0ZyKs9bSXEpRfUxQSvE9VsjICYr5InnMN uvCxwyfPVkZvsLEEHOsgmFgETVg6gvMHgeuw+AC2FEX0hxHUqIDZxvk/U28ZRdTn OStRilwCCbRFkrYJBS91zdeuG/CUfPN+wV2RxeKT3T8jRMe0A/fl7H6bMwIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFPM7J+rsNGr3SX55jL+Ww0LfeGkUMB8GA1UdIwQY MBaAFBVvZ9UAypakjQ5LakfEGyM7dGa9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlc5bjFRREtscVNORGt0cVI4UWJJenQwWnIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xODMxODItNDMwYi00ZDY4LTkxNDkt MzUxMzk5MmViZWE5LzEvOHpzbjZ1dzBhdmRKZm5tTXY1YkRRdDk0YVJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xODMxODItNDMwYi00ZDY4LTkxNDktMzUxMzk5MmViZWE5 LzEvRlc5bjFRREtscVNORGt0cVI4UWJJenQwWnIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzAMBAIAATAGAwQCuafMMEME AgACMD0DBwQqC7YAARADBgMqC7YAIAMHASoLtgA4AgMHACoLtgA8BDAQAwYEKgu2 AhADBgQqC7YCQAMGBCoLtgKAMA0GCSqGSIb3DQEBCwUAA4IBAQBCHJJHfc18nrqv qvb87X90tYYev2VvapxOT1hS30AmAopBrV2ZQ83eOhhRS9C8AJN3FmgGbR2sXcYd J/yLpR6/2AtZvbq/YSnwdAbBQr+BJxFlRToq1T4fQRcUxA1mXTL1nmpSIwuBphmG s/KJ/uFnpnHs1jq/CgxZMX85dl9htfSzRPGu7u+ktL7e9wihtrw2tm1SBx2qNQT8 +t5su2tIDBCn287axpL6TLX9BBa5AcxWstdjEVf876nz659FnySaRfvUofUNf9L/ mTQjcaqFjg3+g8C506goLfZyEJ3waR3p2J1yFy+YreAztvGOA1kMO5zuztImicih YVFEipvK -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:38 2026 by rpki-client