This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/A8PCXHYtPKOyp3MabVe-odhqYuU.roa File: A8PCXHYtPKOyp3MabVe-odhqYuU.roa (raw, json) Hash identifier: BBukl0iR4BOT3LGjsYPG4CkyN4d3K0S/00+hEdW+8z0= Subject key identifier: 03:C3:C2:5C:76:2D:3C:A3:B2:A7:73:1A:6D:57:BE:A1:D8:6A:62:E5 Certificate issuer: /CN=ea51769ce8672c56d1652bf90a5aefca819b488a Certificate serial: 019B7910EDD735A4882B315B9842E05EF066 Authority key identifier: EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/A8PCXHYtPKOyp3MabVe-odhqYuU.roa Signing time: Thu 01 Jan 2026 10:18:31 +0000 ROA not before: Thu 01 Jan 2026 10:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206121 IP address blocks: 185.177.100.0/22 maxlen: 22 185.177.100.0/23 maxlen: 23 185.177.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ed:d7:35:a4:88:2b:31:5b:98:42:e0:5e:f0:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea51769ce8672c56d1652bf90a5aefca819b488a Validity Not Before: Jan 1 10:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03c3c25c762d3ca3b2a7731a6d57bea1d86a62e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:eb:79:c8:08:a3:b6:a1:73:4b:8b:ad:75:73: a0:0a:81:90:81:99:24:03:00:58:6d:42:22:26:0e: f6:49:81:ab:3c:3c:b3:f0:2b:38:41:1b:c1:bb:80: 08:12:ec:21:23:76:77:92:6a:84:53:e2:2f:b3:3d: 30:46:af:99:95:1a:78:f6:2c:ed:30:3d:32:1c:8d: c7:f1:16:83:a2:06:18:3c:8d:23:9d:e8:fd:3e:87: 91:03:b6:8c:3f:16:7b:f0:1f:d6:45:ca:f3:37:1d: 28:26:8e:08:12:d4:9e:41:c6:ff:6e:7f:7b:5a:6f: cd:0a:bf:c3:fb:db:43:a1:77:3f:ed:cc:82:91:a8: a3:c0:4f:03:8d:3b:ef:e4:98:c3:78:74:77:a1:fd: e9:2b:c7:0a:a6:88:c2:2e:47:bf:fc:9b:a7:e2:d7: 29:97:97:ff:55:fc:79:31:54:5a:ea:29:18:6c:52: 29:43:1b:93:0e:94:b1:ed:ed:58:0d:10:fc:e6:c1: 68:f9:17:8d:8d:14:24:11:4c:ed:1b:a7:c5:9b:18: 99:10:1e:e3:a1:87:bc:17:16:6a:07:34:e3:c7:6a: dc:20:69:e9:fa:54:f4:80:37:d5:36:2b:76:ea:ed: 77:59:68:d3:60:69:00:e5:6c:88:eb:c9:77:b7:3d: 9c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C3:C2:5C:76:2D:3C:A3:B2:A7:73:1A:6D:57:BE:A1:D8:6A:62:E5 X509v3 Authority Key Identifier: keyid:EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/A8PCXHYtPKOyp3MabVe-odhqYuU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.177.100.0/22 Signature Algorithm: sha256WithRSAEncryption 62:21:e3:87:7d:65:e8:45:0c:7f:9e:b6:ed:1d:15:a6:14:b5: 7f:68:b8:ee:cb:fe:be:55:d8:92:b0:53:85:82:34:e9:b7:ff: 07:99:02:80:d3:ca:5b:bd:d0:78:67:76:cb:c6:d7:0e:cb:55: e0:fc:1c:09:65:52:46:2c:5b:ce:b2:3b:ba:8e:8b:dc:83:a0: e2:46:16:21:ea:23:f3:cc:6c:81:16:47:ce:85:10:b6:41:51: 6f:77:67:6f:6d:bb:fe:cf:d6:cf:9b:a3:93:3b:ba:97:a8:43: a2:a6:ce:a0:c9:d3:65:f0:f0:36:9e:6d:be:cc:c4:2f:19:1b: 83:6b:49:1a:d5:40:e8:f4:b7:1c:0a:96:3d:9d:80:20:fb:cc: f0:84:ac:1c:32:97:5d:3b:f1:6e:38:f7:d5:3f:d0:b1:33:ee: 1f:10:a9:99:c7:a8:e1:00:65:6e:da:26:75:63:67:ef:dc:18: 68:f4:44:46:74:a2:7e:50:9f:2f:83:5e:79:6c:38:ce:0c:56: f2:fa:cb:4f:49:25:72:87:45:85:6e:4e:85:34:17:a9:e9:04: 33:d4:57:3c:eb:b6:97:0f:48:05:1a:ca:3b:e5:31:9f:94:03: 09:b8:79:1b:29:3b:e9:35:d8:b0:5b:a5:df:42:b5:e6:22:c7: b6:a7:e9:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EO3XNaSIKzFbmELgXvBmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNTE3NjljZTg2NzJjNTZkMTY1MmJmOTBhNWFlZmNhODE5 YjQ4OGEwHhcNMjYwMTAxMTAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2MzYzI1Yzc2MmQzY2EzYjJhNzczMWE2ZDU3YmVhMWQ4NmE2MmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ut5yAijtqFzS4utdXOgCoGQgZkk AwBYbUIiJg72SYGrPDyz8Cs4QRvBu4AIEuwhI3Z3kmqEU+Ivsz0wRq+ZlRp49izt MD0yHI3H8RaDogYYPI0jnej9PoeRA7aMPxZ78B/WRcrzNx0oJo4IEtSeQcb/bn97 Wm/NCr/D+9tDoXc/7cyCkaijwE8DjTvv5JjDeHR3of3pK8cKpojCLke//Jun4tcp l5f/Vfx5MVRa6ikYbFIpQxuTDpSx7e1YDRD85sFo+ReNjRQkEUztG6fFmxiZEB7j oYe8FxZqBzTjx2rcIGnp+lT0gDfVNit26u13WWjTYGkA5WyI68l3tz2cSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAPDwlx2LTyjsqdzGm1XvqHYamLlMB8GA1UdIwQY MBaAFOpRdpzoZyxW0WUr+Qpa78qBm0iKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmxGMm5PaG5MRmJSWlN2NUNscnZ5b0diU0lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kYmY4YmUtNjhhMi00YjNkLTk3ZGIt ODJlMmQ1ZWU5YzkwLzEvQThQQ1hIWXRQS095cDNNYWJWZS1vZGhxWXVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9kYmY4YmUtNjhhMi00YjNkLTk3ZGItODJlMmQ1ZWU5Yzkw LzEvNmxGMm5PaG5MRmJSWlN2NUNscnZ5b0diU0lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubFkMA0G CSqGSIb3DQEBCwUAA4IBAQBiIeOHfWXoRQx/nrbtHRWmFLV/aLjuy/6+VdiSsFOF gjTpt/8HmQKA08pbvdB4Z3bLxtcOy1Xg/BwJZVJGLFvOsju6jovcg6DiRhYh6iPz zGyBFkfOhRC2QVFvd2dvbbv+z9bPm6OTO7qXqEOips6gydNl8PA2nm2+zMQvGRuD a0ka1UDo9LccCpY9nYAg+8zwhKwcMpddO/FuOPfVP9CxM+4fEKmZx6jhAGVu2iZ1 Y2fv3Bho9ERGdKJ+UJ8vg155bDjODFby+stPSSVyh0WFbk6FNBep6QQz1Fc867aX D0gFGso75TGflAMJuHkbKTvpNdiwW6XfQrXmIse2p+n3 -----END CERTIFICATE-----Generated at Tue Feb 10 01:13:16 2026 by rpki-client