This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8aaF_ED1YXjZ6qQ3NJHXz5B9BUY.roa File: 8aaF_ED1YXjZ6qQ3NJHXz5B9BUY.roa (raw, json) Hash identifier: mTseP7q6/nR/9V/iIGk93m++hqbKLlMKnztgon+RN5s= Subject key identifier: F1:A6:85:FC:40:F5:61:78:D9:EA:A4:37:34:91:D7:CF:90:7D:05:46 Certificate issuer: /CN=f177817124f20772743bd30594a8853b2bdec6aa Certificate serial: 019B7B35C0DD5610E4D4F9A80BE4BA945B3B Authority key identifier: F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8aaF_ED1YXjZ6qQ3NJHXz5B9BUY.roa Signing time: Thu 01 Jan 2026 20:17:58 +0000 ROA not before: Thu 01 Jan 2026 20:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49935 IP address blocks: 83.172.140.0/23 maxlen: 28 83.172.144.0/22 maxlen: 28 83.172.148.0/24 maxlen: 28 83.172.186.0/24 maxlen: 28 185.1.243.0/24 maxlen: 28 185.94.136.0/22 maxlen: 28 185.135.191.0/24 maxlen: 28 195.62.90.0/23 maxlen: 28 2001:678:9ac::/48 maxlen: 126 2001:7f8:12d::/48 maxlen: 126 2a10:1740::/29 maxlen: 126 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c0:dd:56:10:e4:d4:f9:a8:0b:e4:ba:94:5b:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f177817124f20772743bd30594a8853b2bdec6aa Validity Not Before: Jan 1 20:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1a685fc40f56178d9eaa4373491d7cf907d0546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:29:1c:4a:4e:06:14:98:24:4f:f0:9c:39:c5: 49:f1:25:26:d8:ce:52:ca:8c:71:4f:27:80:96:12: bb:d5:b4:68:10:73:53:70:15:bd:f0:fa:b4:9b:f6: 93:0c:fa:ab:d6:9a:12:0a:77:1c:99:c8:c2:7a:73: 7b:26:53:d4:0f:05:2c:c0:c6:e3:fa:80:a3:88:e0: b7:ec:b8:34:73:27:6a:0f:dc:d7:7d:4d:85:47:ae: 6f:54:76:d2:8b:a7:8d:4a:f3:06:9e:9d:f6:81:87: 3a:72:ff:2a:e7:6d:2b:89:8e:c6:e8:35:32:16:d0: 4f:29:1c:a5:5f:a5:ed:e1:49:a2:2c:73:15:62:0d: bc:36:db:5a:96:ec:dd:81:39:49:47:79:15:95:ba: c3:83:4a:f0:60:d8:88:21:f5:88:da:cc:62:9a:d7: da:d2:75:7c:5d:09:b9:c5:f6:aa:54:7d:f5:8e:e3: ac:2d:fa:c4:e1:d5:4c:76:a7:78:cc:54:c1:2f:bc: be:cf:3e:e8:51:28:75:b8:7a:15:04:21:0b:da:6f: c8:e6:2b:8e:b3:74:97:70:3e:94:ba:90:7b:20:e2: 4f:73:3f:1a:90:59:b7:f9:37:35:97:56:cf:3d:87: 8e:9a:18:3c:ec:2c:4f:a4:1b:34:b9:f5:31:7d:23: 25:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A6:85:FC:40:F5:61:78:D9:EA:A4:37:34:91:D7:CF:90:7D:05:46 X509v3 Authority Key Identifier: keyid:F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8aaF_ED1YXjZ6qQ3NJHXz5B9BUY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.172.140.0/23 83.172.144.0-83.172.148.255 83.172.186.0/24 185.1.243.0/24 185.94.136.0/22 185.135.191.0/24 195.62.90.0/23 IPv6: 2001:678:9ac::/48 2001:7f8:12d::/48 2a10:1740::/29 Signature Algorithm: sha256WithRSAEncryption 5a:5a:5f:9d:9a:3e:52:c1:66:b0:80:83:8f:1f:0f:07:c0:f4: 6e:eb:ee:7f:1d:8a:d4:27:76:91:a6:39:b5:08:6c:9e:9d:ec: 83:54:74:ca:db:0f:65:10:99:5a:a6:6b:49:01:3a:2d:f2:35: 21:7e:4c:54:b8:2b:5f:4e:eb:5a:bf:74:b5:81:58:98:ca:f1: fb:d4:46:99:a5:39:ef:32:31:5e:4c:40:4a:19:1a:b6:2a:87: 14:79:66:83:96:7e:d9:fc:15:e9:08:0e:48:c5:84:9f:af:11: 21:ec:19:fe:58:a4:14:d1:a7:63:23:cb:02:69:49:70:05:39: 40:aa:7c:bb:c9:64:98:32:0d:b2:97:f6:0d:d4:7b:03:82:80: b3:d2:83:2f:03:04:d6:18:b6:44:91:22:fe:b5:50:e7:86:bc: 90:b0:9a:d5:fa:d2:e0:f7:7e:20:dc:0f:80:2c:af:8c:04:e1: 05:37:a8:06:ad:07:60:84:59:8f:ec:f7:b4:7b:66:b2:35:8d: ac:25:19:19:dc:e2:57:7e:72:f3:4c:57:85:19:59:bd:d2:3e: 6c:ab:16:b8:a6:83:0e:24:fb:aa:6a:39:dc:7f:a0:49:0b:ba: 60:02:6e:a8:d7:b9:9e:66:2b:7e:b9:1a:5d:0c:2c:1f:bc:ad: 52:fd:fe:ba -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgISAZt7NcDdVhDk1PmoC+S6lFs7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNzc4MTcxMjRmMjA3NzI3NDNiZDMwNTk0YTg4NTNiMmJk ZWM2YWEwHhcNMjYwMTAxMjAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWE2ODVmYzQwZjU2MTc4ZDllYWE0MzczNDkxZDdjZjkwN2QwNTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SkcSk4GFJgkT/CcOcVJ8SUm2M5S yoxxTyeAlhK71bRoEHNTcBW98Pq0m/aTDPqr1poSCnccmcjCenN7JlPUDwUswMbj +oCjiOC37Lg0cydqD9zXfU2FR65vVHbSi6eNSvMGnp32gYc6cv8q520riY7G6DUy FtBPKRylX6Xt4UmiLHMVYg28NttaluzdgTlJR3kVlbrDg0rwYNiIIfWI2sximtfa 0nV8XQm5xfaqVH31juOsLfrE4dVMdqd4zFTBL7y+zz7oUSh1uHoVBCEL2m/I5iuO s3SXcD6UupB7IOJPcz8akFm3+Tc1l1bPPYeOmhg87CxPpBs0ufUxfSMlIwIDAQAB o4ICVjCCAlIwHQYDVR0OBBYEFPGmhfxA9WF42eqkNzSR18+QfQVGMB8GA1UdIwQY MBaAFPF3gXEk8gdydDvTBZSohTsr3saqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFhlQmNTVHlCM0owTzlNRmxLaUZPeXZleHFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMDQ0ZTItYTg0Mi00OGFiLWJjNTQt NjI1NDIyMjgyOTFjLzEvOGFhRl9FRDFZWGpaNnFRM05KSFh6NUI5QlVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8wMDQ0ZTItYTg0Mi00OGFiLWJjNTQtNjI1NDIyMjgyOTFj LzEvOFhlQmNTVHlCM0owTzlNRmxLaUZPeXZleHFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEHAQH/BF0wWzA4BAIAATAyAwQBU6yMMAwD BARTrJADBABTrJQDBABTrLoDBAC5AfMDBAK5XogDBAC5h78DBAHDPlowHwQCAAIw GQMHACABBngJrAMHACABB/gBLQMFAyoQF0AwDQYJKoZIhvcNAQELBQADggEBAFpa X52aPlLBZrCAg48fDwfA9G7r7n8ditQndpGmObUIbJ6d7INUdMrbD2UQmVqma0kB Oi3yNSF+TFS4K19O61q/dLWBWJjK8fvURpmlOe8yMV5MQEoZGrYqhxR5ZoOWftn8 FekIDkjFhJ+vESHsGf5YpBTRp2MjywJpSXAFOUCqfLvJZJgyDbKX9g3UewOCgLPS gy8DBNYYtkSRIv61UOeGvJCwmtX60uD3fiDcD4Asr4wE4QU3qAatB2CEWY/s97R7 ZrI1jawlGRnc4ld+cvNMV4UZWb3SPmyrFrimgw4k+6pqOdx/oEkLumACbqjXuZ5m K365Gl0MLB+8rVL9/ro= -----END CERTIFICATE-----Generated at Mon Jan 26 00:38:43 2026 by rpki-client