This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/8cM6v3_NRAZ3FP_fGe0mwmajY0k.roa File: 8cM6v3_NRAZ3FP_fGe0mwmajY0k.roa (raw, json) Hash identifier: UZQldaFo6xwnQkumeQ30d5+3aDGt7jMCik6EMuRJupg= Subject key identifier: F1:C3:3A:BF:7F:CD:44:06:77:14:FF:DF:19:ED:26:C2:66:A3:63:49 Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Certificate serial: 019B7B369938BFAB8EF6D1EE26A6EA2FB9DC Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/8cM6v3_NRAZ3FP_fGe0mwmajY0k.roa Signing time: Thu 01 Jan 2026 20:18:54 +0000 ROA not before: Thu 01 Jan 2026 20:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201925 IP address blocks: 109.207.104.0/24 maxlen: 24 109.207.106.0/24 maxlen: 24 109.207.107.0/24 maxlen: 24 109.207.108.0/24 maxlen: 24 185.165.151.0/24 maxlen: 24 194.126.165.0/24 maxlen: 24 194.126.166.0/24 maxlen: 24 194.126.167.0/24 maxlen: 24 217.117.132.0/22 maxlen: 22 2001:67c:2fd0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Feb 2026 11:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:99:38:bf:ab:8e:f6:d1:ee:26:a6:ea:2f:b9:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Validity Not Before: Jan 1 20:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1c33abf7fcd44067714ffdf19ed26c266a36349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:03:a3:44:1d:43:ad:71:22:63:97:65:92:ee: df:00:60:18:ad:a0:a8:58:d1:08:39:a4:11:46:b9: 0f:e2:ea:44:3e:b9:65:4d:90:0c:9e:a3:27:5e:14: 57:8d:43:ae:80:23:5f:31:f6:ca:b1:32:9b:09:fa: f1:16:4c:bb:99:18:4e:54:9c:c7:db:f2:f1:ac:28: c4:24:ae:8d:4f:48:9d:71:ce:6e:80:66:8e:6f:49: 74:1f:d5:a9:60:a4:ab:51:94:e6:80:e0:b7:4b:bf: fd:2a:b0:eb:46:17:07:a4:d0:85:84:36:67:db:e8: 48:c7:82:7b:2f:dd:60:28:d6:72:97:ca:42:6e:6d: 18:8b:41:03:e4:bb:9e:a1:0e:5a:e8:5e:63:96:84: c3:86:e2:2e:ab:69:53:74:09:17:ec:d9:ac:da:50: f2:e2:2d:df:e8:93:87:67:aa:b7:21:d2:2f:19:0a: 33:62:e5:21:65:d2:92:28:9c:3b:1d:a9:1a:b9:17: 95:b7:7b:97:4e:99:d5:16:74:fb:b8:5d:9e:c1:27: 7f:0d:f4:3c:41:bd:bf:57:68:0e:ab:67:7f:59:d8: 9d:e5:18:0e:a8:61:86:f5:50:40:48:48:6c:41:41: 4e:c3:5a:15:be:62:ae:69:58:2c:e9:f8:8a:96:2f: 60:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C3:3A:BF:7F:CD:44:06:77:14:FF:DF:19:ED:26:C2:66:A3:63:49 X509v3 Authority Key Identifier: keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/8cM6v3_NRAZ3FP_fGe0mwmajY0k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.207.104.0/24 109.207.106.0-109.207.108.255 185.165.151.0/24 194.126.165.0-194.126.167.255 217.117.132.0/22 IPv6: 2001:67c:2fd0::/48 Signature Algorithm: sha256WithRSAEncryption 1e:54:7e:67:d3:96:ea:d3:6e:af:7c:4b:6d:c2:a0:30:fb:46: 0c:6c:39:d8:7f:bf:b8:dd:10:40:01:74:fb:08:af:ac:3d:b0: b0:1b:ae:16:06:1f:0e:89:a3:dc:f7:57:35:f7:77:21:b8:ae: 71:a9:0a:62:1a:f1:4f:60:1b:85:3c:49:5b:f1:df:c3:f2:8e: 13:bc:89:c6:ae:a2:10:1e:6b:8f:62:3e:ce:64:c0:69:ff:0e: 3f:bc:6a:4a:02:36:ca:ab:35:7e:ba:60:92:72:10:f3:75:7c: e2:35:c8:32:7b:43:c8:4f:8f:5b:ff:d1:c6:61:db:f2:e1:0b: 58:85:9b:49:b3:2e:86:f8:5f:e5:87:29:a4:08:e9:3c:d0:b3: 8b:6b:17:ac:55:1e:e4:88:d0:ac:25:3e:d2:38:43:ed:08:eb: ae:3b:5a:46:ed:0d:05:0c:1d:ce:c3:9a:eb:c9:f6:ad:04:9c: f2:aa:25:eb:bf:f3:e1:b4:b1:d2:53:4d:18:a4:c4:10:ac:65: 77:8d:3b:0d:b5:23:d7:9a:0e:71:f5:1b:1e:33:18:34:ba:88: 9c:88:d6:fd:64:8c:b4:0e:74:b6:fc:f3:62:57:ed:ef:f0:63: 53:38:27:f7:60:69:24:41:14:2c:57:49:37:6c:31:f9:ca:c8: 47:86:87:05 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt7Npk4v6uO9tHuJqbqL7ncMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZDU2ZjA3YmUxODRjYmE1MmY2ZmRjMDQ5ZTgxMTRkMjYx NmMzMmEwHhcNMjYwMTAxMjAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWMzM2FiZjdmY2Q0NDA2NzcxNGZmZGYxOWVkMjZjMjY2YTM2MzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwOjRB1DrXEiY5dlku7fAGAYraCo WNEIOaQRRrkP4upEPrllTZAMnqMnXhRXjUOugCNfMfbKsTKbCfrxFky7mRhOVJzH 2/LxrCjEJK6NT0idcc5ugGaOb0l0H9WpYKSrUZTmgOC3S7/9KrDrRhcHpNCFhDZn 2+hIx4J7L91gKNZyl8pCbm0Yi0ED5LueoQ5a6F5jloTDhuIuq2lTdAkX7Nms2lDy 4i3f6JOHZ6q3IdIvGQozYuUhZdKSKJw7HakauReVt3uXTpnVFnT7uF2ewSd/DfQ8 Qb2/V2gOq2d/Wdid5RgOqGGG9VBASEhsQUFOw1oVvmKuaVgs6fiKli9gowIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFPHDOr9/zUQGdxT/3xntJsJmo2NJMB8GA1UdIwQY MBaAFNPVbwe+GEy6Uvb9wEnoEU0mFsMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt MWIwNmQxYzcwNGMxLzEvOGNNNnYzX05SQVozRlBfZkdlMG13bWFqWTBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx LzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA0BAIAATAuAwQAbc9oMAwD BAFtz2oDBABtz2wDBAC5pZcwDAMEAMJ+pQMEA8J+oAMEAtl1hDAPBAIAAjAJAwcA IAEGfC/QMA0GCSqGSIb3DQEBCwUAA4IBAQAeVH5n05bq026vfEttwqAw+0YMbDnY f7+43RBAAXT7CK+sPbCwG64WBh8OiaPc91c193chuK5xqQpiGvFPYBuFPElb8d/D 8o4TvInGrqIQHmuPYj7OZMBp/w4/vGpKAjbKqzV+umCSchDzdXziNcgye0PIT49b /9HGYdvy4QtYhZtJsy6G+F/lhymkCOk80LOLaxesVR7kiNCsJT7SOEPtCOuuO1pG 7Q0FDB3Ow5rryfatBJzyqiXrv/PhtLHSU00YpMQQrGV3jTsNtSPXmg5x9RseMxg0 uoiciNb9ZIy0DnS2/PNiV+3v8GNTOCf3YGkkQRQsV0k3bDH5yshHhocF -----END CERTIFICATE-----Generated at Fri Feb 6 20:10:49 2026 by rpki-client