This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/t9yzXj9IkLEOWLc9xcwlhBFkG8g.roa File: t9yzXj9IkLEOWLc9xcwlhBFkG8g.roa (raw, json) Hash identifier: +W8dztnmYQdC4cm96ghABWrij2U/BNP7WSR+9tFEBZo= Subject key identifier: B7:DC:B3:5E:3F:48:90:B1:0E:58:B7:3D:C5:CC:25:84:11:64:1B:C8 Certificate issuer: /CN=5a8f81366ffc43c71f5bb521f81501760ebeb074 Certificate serial: 019B7DCAC8F170A45EBE724CCB1BC927965F Authority key identifier: 5A:8F:81:36:6F:FC:43:C7:1F:5B:B5:21:F8:15:01:76:0E:BE:B0:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/t9yzXj9IkLEOWLc9xcwlhBFkG8g.roa Signing time: Fri 02 Jan 2026 08:20:00 +0000 ROA not before: Fri 02 Jan 2026 08:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61345 IP address blocks: 185.8.12.0/22 maxlen: 24 185.144.76.0/22 maxlen: 24 185.144.248.0/22 maxlen: 24 2a03:3140::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:c8:f1:70:a4:5e:be:72:4c:cb:1b:c9:27:96:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a8f81366ffc43c71f5bb521f81501760ebeb074 Validity Not Before: Jan 2 08:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7dcb35e3f4890b10e58b73dc5cc258411641bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:90:ee:59:6f:25:66:ab:1f:25:ea:d3:d0:11: 47:38:7d:70:81:3b:dc:57:fe:9b:b5:7f:db:03:bd: e3:04:3b:ec:3d:5a:a0:dc:e0:28:26:49:e3:cc:7f: 5a:eb:7c:c9:0c:02:0f:aa:1b:a2:a5:aa:9d:89:b0: e9:34:46:39:d7:75:48:48:f7:0b:a6:8b:30:3d:5a: 0f:39:dd:af:e9:c6:f8:8c:8c:55:5e:a1:10:0d:c5: 06:55:e4:be:a9:75:54:d9:70:9d:a4:c5:df:a4:b9: dc:7c:74:d2:73:6d:2b:a8:48:82:e9:d9:c6:e3:d9: f0:2b:1a:11:be:89:1f:cd:25:89:a3:a7:49:61:e2: 2b:dd:db:27:92:20:1e:59:64:7a:9f:c6:6d:6d:b1: 37:23:d5:9a:21:9b:69:34:9e:fe:2c:f3:27:43:71: 51:58:fb:25:38:a1:a4:a4:44:82:27:55:89:8c:67: fb:73:5c:39:38:1d:ed:25:2e:45:60:27:f3:97:60: 07:aa:ba:f9:bf:30:6b:e6:5a:38:ab:47:cd:40:f4: a5:ae:5a:34:cc:2b:d8:8c:f2:59:0a:e7:2b:c8:88: b5:fe:b2:46:a7:57:a5:41:83:6c:f4:1d:5e:00:ac: 31:3a:77:fc:f1:89:52:78:38:99:07:1c:96:54:51: 9f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:DC:B3:5E:3F:48:90:B1:0E:58:B7:3D:C5:CC:25:84:11:64:1B:C8 X509v3 Authority Key Identifier: keyid:5A:8F:81:36:6F:FC:43:C7:1F:5B:B5:21:F8:15:01:76:0E:BE:B0:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/t9yzXj9IkLEOWLc9xcwlhBFkG8g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.8.12.0/22 185.144.76.0/22 185.144.248.0/22 IPv6: 2a03:3140::/32 Signature Algorithm: sha256WithRSAEncryption 3c:32:c8:c9:8b:81:b3:b5:59:d6:a1:67:e9:08:07:ad:8d:2d: 41:62:d2:47:2d:30:7c:39:87:c2:ca:3a:31:93:37:65:ca:80: 71:27:7d:a0:fd:d7:78:f3:9a:65:1d:7e:46:fc:42:2d:de:4e: ba:fa:a7:ce:b4:0c:5a:8a:4f:f0:79:17:c7:d8:44:62:14:c3: bb:db:5f:71:65:b6:e7:af:66:a9:c8:cf:c9:54:c0:e1:97:0b: 47:27:85:3c:51:4a:97:9a:94:32:64:8a:13:1c:5b:88:8b:ba: 9d:05:d0:04:a8:9f:dc:23:8a:11:82:9c:40:6e:7c:bb:cf:10: e2:04:bb:10:4b:3f:29:66:ec:f9:cc:d9:35:cf:73:73:f8:b7: 46:11:ea:6d:c9:ca:2f:2f:4c:10:98:c4:39:dc:04:c0:05:18: 66:3d:c9:09:7c:9f:98:5b:fa:af:a4:5a:f6:d8:70:4e:f1:5f: 26:91:21:ac:2e:e8:16:3d:5c:46:d7:3b:42:37:65:5a:fd:3e: 89:55:4d:28:99:06:e9:37:41:28:09:06:45:f5:e5:5a:f1:6b: bc:f3:47:76:83:68:77:44:4a:75:51:c3:66:b9:39:aa:09:50: fc:07:93:b5:4c:dc:28:51:3c:24:9f:20:8d:75:e2:74:1f:c3: 84:a5:33:f8 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9ysjxcKRevnJMyxvJJ5ZfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOGY4MTM2NmZmYzQzYzcxZjViYjUyMWY4MTUwMTc2MGVi ZWIwNzQwHhcNMjYwMTAyMDgyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2RjYjM1ZTNmNDg5MGIxMGU1OGI3M2RjNWNjMjU4NDExNjQxYmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pDuWW8lZqsfJerT0BFHOH1wgTvc V/6btX/bA73jBDvsPVqg3OAoJknjzH9a63zJDAIPqhuipaqdibDpNEY513VISPcL poswPVoPOd2v6cb4jIxVXqEQDcUGVeS+qXVU2XCdpMXfpLncfHTSc20rqEiC6dnG 49nwKxoRvokfzSWJo6dJYeIr3dsnkiAeWWR6n8ZtbbE3I9WaIZtpNJ7+LPMnQ3FR WPslOKGkpESCJ1WJjGf7c1w5OB3tJS5FYCfzl2AHqrr5vzBr5lo4q0fNQPSlrlo0 zCvYjPJZCucryIi1/rJGp1elQYNs9B1eAKwxOnf88YlSeDiZBxyWVFGfbQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFLfcs14/SJCxDli3PcXMJYQRZBvIMB8GA1UdIwQY MBaAFFqPgTZv/EPHH1u1IfgVAXYOvrB0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV28tQk5tXzhROGNmVzdVaC1CVUJkZzYtc0hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iODNhYjUtY2RiMi00MTc0LTgwOTMt ODAyZDA5Y2ZjODM1LzEvdDl5elhqOUlrTEVPV0xjOXhjd2xoQkZrRzhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9iODNhYjUtY2RiMi00MTc0LTgwOTMtODAyZDA5Y2ZjODM1 LzEvV28tQk5tXzhROGNmVzdVaC1CVUJkZzYtc0hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuQgMAwQC uZBMAwQCuZD4MA0EAgACMAcDBQAqAzFAMA0GCSqGSIb3DQEBCwUAA4IBAQA8MsjJ i4GztVnWoWfpCAetjS1BYtJHLTB8OYfCyjoxkzdlyoBxJ32g/dd485plHX5G/EIt 3k66+qfOtAxaik/weRfH2ERiFMO7219xZbbnr2apyM/JVMDhlwtHJ4U8UUqXmpQy ZIoTHFuIi7qdBdAEqJ/cI4oRgpxAbny7zxDiBLsQSz8pZuz5zNk1z3Nz+LdGEept ycovL0wQmMQ53ATABRhmPckJfJ+YW/qvpFr22HBO8V8mkSGsLugWPVxG1ztCN2Va /T6JVU0omQbpN0EoCQZF9eVa8Wu880d2g2h3REp1UcNmuTmqCVD8B5O1TNwoUTwk nyCNdeJ0H8OEpTP4 -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:27 2026 by rpki-client