This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/8BYDJuaf2CuIte9znhQTMnQNfzY.roa File: 8BYDJuaf2CuIte9znhQTMnQNfzY.roa (raw, json) Hash identifier: /nJhQIQ9VVW/Qtz2O6f+WJOXBH0IlvQwIRyYeoC0B4o= Subject key identifier: F0:16:03:26:E6:9F:D8:2B:88:B5:EF:73:9E:14:13:32:74:0D:7F:36 Certificate issuer: /CN=d5dcde2125f04058ad4f478e178884142cf2dad0 Certificate serial: 019B7910CBD9A4E0667443BD85640247AC77 Authority key identifier: D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/8BYDJuaf2CuIte9znhQTMnQNfzY.roa Signing time: Thu 01 Jan 2026 10:18:22 +0000 ROA not before: Thu 01 Jan 2026 10:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31543 IP address blocks: 83.218.160.0/19 maxlen: 24 94.198.136.0/21 maxlen: 24 176.104.224.0/20 maxlen: 24 176.121.56.0/22 maxlen: 24 185.199.80.0/22 maxlen: 24 2a00:15c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:cb:d9:a4:e0:66:74:43:bd:85:64:02:47:ac:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5dcde2125f04058ad4f478e178884142cf2dad0 Validity Not Before: Jan 1 10:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0160326e69fd82b88b5ef739e141332740d7f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f1:58:f3:78:92:9a:a0:c6:cb:66:43:a2:d3: c7:57:fb:fb:d1:51:4b:21:13:8e:99:a7:38:17:c1: f4:4c:d8:60:d4:f6:af:95:b7:f8:5d:03:36:8a:56: 68:a7:5b:77:20:49:01:da:e9:04:6c:d5:d9:79:5a: 2c:36:b7:d8:65:73:ac:d9:44:7d:ed:4c:51:50:29: 17:26:23:2a:a4:51:0b:78:96:6e:ca:63:26:ce:fa: a2:b3:95:ce:f7:9a:64:9c:10:8d:16:a3:04:0a:31: 93:a3:76:3d:43:ab:f7:37:ca:b9:4a:88:35:ec:6d: c0:c6:c0:f3:63:db:d8:4e:94:dd:9c:84:77:27:b7: d3:d7:e2:ce:09:b0:d5:2c:c1:59:3f:cf:81:1c:69: 25:26:d9:d0:12:e7:7e:8d:a5:b1:b3:16:d2:f7:17: 88:02:96:bc:d1:5b:c6:09:4a:5c:4f:db:90:3c:b8: d4:d8:0a:17:d4:77:c0:d4:fa:73:9e:d7:6b:e5:ff: d2:47:1e:80:89:ad:ad:ca:3e:2f:d7:df:a4:cd:a8: 90:e6:35:6a:98:66:ff:e0:69:62:37:3d:c1:4c:59: d3:b0:7b:1b:c8:e8:c9:40:11:27:ac:dd:dd:70:75: 4b:c3:1c:cc:63:1a:5e:18:9f:eb:ef:94:c1:fa:2d: da:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:16:03:26:E6:9F:D8:2B:88:B5:EF:73:9E:14:13:32:74:0D:7F:36 X509v3 Authority Key Identifier: keyid:D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/8BYDJuaf2CuIte9znhQTMnQNfzY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.218.160.0/19 94.198.136.0/21 176.104.224.0/20 176.121.56.0/22 185.199.80.0/22 IPv6: 2a00:15c0::/29 Signature Algorithm: sha256WithRSAEncryption 3d:e4:90:56:ab:8f:16:2a:1e:0a:86:00:ef:f8:ed:0e:b7:87: 5d:eb:00:ca:18:1c:34:2d:4b:4c:05:44:7c:0e:0a:ed:fd:e1: 59:32:1e:fa:b3:e9:4f:47:69:d8:be:c3:12:bb:84:8f:23:85: 8e:b2:86:2e:68:f4:f4:fb:f2:e6:63:fa:b9:09:3b:e7:4a:64: fe:e1:89:7b:8e:b9:2c:6f:c6:43:98:81:51:c7:bb:62:3c:d9: 94:73:05:c8:66:7a:03:f8:c3:72:53:93:6e:97:0d:02:9d:9e: a0:bc:95:a3:9f:2f:40:ea:ab:8e:35:d7:32:0b:88:8a:9b:1b: f0:91:af:89:c9:ea:db:bc:bb:ff:31:a9:67:0a:8c:fa:67:cf: 45:0a:92:d1:e4:a4:74:b9:8b:78:bd:a0:06:7f:e0:53:64:b1: d0:23:16:ee:b1:99:99:36:40:3c:4d:41:82:5f:2f:e4:f4:54: ad:29:a8:c2:04:be:10:ad:63:0e:c4:bb:28:db:29:32:33:d9: 0a:79:4d:5b:a3:3d:4b:ea:ec:6c:a8:64:5d:fe:8f:fd:34:5b: 37:6f:33:99:8b:cb:21:c6:fa:3a:ca:4b:b2:17:52:b6:10:db: 3f:f9:ef:55:b3:16:d0:50:6b:14:de:f9:ff:fc:9c:04:c0:6e: 67:10:c9:94 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt5EMvZpOBmdEO9hWQCR6x3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZGNkZTIxMjVmMDQwNThhZDRmNDc4ZTE3ODg4NDE0MmNm MmRhZDAwHhcNMjYwMTAxMTAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDE2MDMyNmU2OWZkODJiODhiNWVmNzM5ZTE0MTMzMjc0MGQ3ZjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvFY83iSmqDGy2ZDotPHV/v70VFL IROOmac4F8H0TNhg1Pavlbf4XQM2ilZop1t3IEkB2ukEbNXZeVosNrfYZXOs2UR9 7UxRUCkXJiMqpFELeJZuymMmzvqis5XO95pknBCNFqMECjGTo3Y9Q6v3N8q5Sog1 7G3AxsDzY9vYTpTdnIR3J7fT1+LOCbDVLMFZP8+BHGklJtnQEud+jaWxsxbS9xeI Apa80VvGCUpcT9uQPLjU2AoX1HfA1Ppzntdr5f/SRx6Aia2tyj4v19+kzaiQ5jVq mGb/4GliNz3BTFnTsHsbyOjJQBEnrN3dcHVLwxzMYxpeGJ/r75TB+i3a6QIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFPAWAybmn9griLXvc54UEzJ0DX82MB8GA1UdIwQY MBaAFNXc3iEl8EBYrU9HjheIhBQs8trQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWR6ZUlTWHdRRml0VDBlT0Y0aUVGQ3p5MnRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81OTE1YzgtMDAzYy00ZDk4LTgyNDMt Y2ZkYWRiZGM0OGVjLzEvOEJZREp1YWYyQ3VJdGU5em5oUVRNblFOZnpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy81OTE1YzgtMDAzYy00ZDk4LTgyNDMtY2ZkYWRiZGM0OGVj LzEvMWR6ZUlTWHdRRml0VDBlT0Y0aUVGQ3p5MnRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQFU9qgAwQD XsaIAwQEsGjgAwQCsHk4AwQCucdQMA0EAgACMAcDBQMqABXAMA0GCSqGSIb3DQEB CwUAA4IBAQA95JBWq48WKh4KhgDv+O0Ot4dd6wDKGBw0LUtMBUR8Dgrt/eFZMh76 s+lPR2nYvsMSu4SPI4WOsoYuaPT0+/LmY/q5CTvnSmT+4Yl7jrksb8ZDmIFRx7ti PNmUcwXIZnoD+MNyU5Nulw0CnZ6gvJWjny9A6quONdcyC4iKmxvwka+JyerbvLv/ MalnCoz6Z89FCpLR5KR0uYt4vaAGf+BTZLHQIxbusZmZNkA8TUGCXy/k9FStKajC BL4QrWMOxLso2ykyM9kKeU1boz1L6uxsqGRd/o/9NFs3bzOZi8shxvo6ykuyF1K2 ENs/+e9VsxbQUGsU3vn//JwEwG5nEMmU -----END CERTIFICATE-----Generated at Mon Feb 9 21:24:22 2026 by rpki-client