This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/8EjBwuh_9in2Z1YECnIBdQ9VNrg.roa File: 8EjBwuh_9in2Z1YECnIBdQ9VNrg.roa (raw, json) Hash identifier: PZyLvuJ766MtPxGWe7ycqZ9uJ2ybPMELzypr1ODKQyU= Subject key identifier: F0:48:C1:C2:E8:7F:F6:29:F6:67:56:04:0A:72:01:75:0F:55:36:B8 Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c Certificate serial: 019B7AC94D41103CDB3FE522D7F1179F836C Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/8EjBwuh_9in2Z1YECnIBdQ9VNrg.roa Signing time: Thu 01 Jan 2026 18:19:31 +0000 ROA not before: Thu 01 Jan 2026 18:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28944 IP address blocks: 80.231.174.0/24 maxlen: 24 80.231.248.0/24 maxlen: 24 85.187.213.0/24 maxlen: 24 85.187.214.0/24 maxlen: 24 85.187.215.0/24 maxlen: 24 130.250.109.0/24 maxlen: 24 130.250.133.0/24 maxlen: 24 130.250.134.0/24 maxlen: 24 147.185.246.0/23 maxlen: 24 147.185.246.0/24 maxlen: 24 147.185.247.0/24 maxlen: 24 147.185.254.0/23 maxlen: 24 147.185.254.0/24 maxlen: 24 147.185.255.0/24 maxlen: 24 151.237.11.0/24 maxlen: 24 151.237.12.0/24 maxlen: 24 151.237.13.0/24 maxlen: 24 151.237.14.0/24 maxlen: 24 151.237.15.0/24 maxlen: 24 151.237.95.0/24 maxlen: 24 161.115.64.0/19 maxlen: 24 195.219.123.0/24 maxlen: 24 195.234.98.0/24 maxlen: 24 2a01:3e7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:4d:41:10:3c:db:3f:e5:22:d7:f1:17:9f:83:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c Validity Not Before: Jan 1 18:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f048c1c2e87ff629f66756040a7201750f5536b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:74:90:5a:e1:d5:4a:d4:20:3c:f3:cc:36:ab: cb:90:45:37:9f:2c:c5:3f:c8:b4:13:46:5c:e5:07: 26:91:b6:38:49:10:2e:94:38:d3:7e:51:ec:d1:24: 22:85:ba:1f:53:6c:b2:db:b6:cb:3e:58:72:7f:3a: 63:1e:91:c6:8e:94:bb:a0:89:21:6d:7c:01:73:ea: 68:72:78:b6:34:64:02:e9:fe:cc:ae:c9:30:b6:b7: 72:89:45:61:a2:60:b7:a7:4a:78:42:fc:9d:ed:a5: e4:78:77:a1:e9:c9:b8:b7:e1:3c:99:1f:7c:5d:03: b4:af:e5:1b:dc:2e:ee:26:d4:d7:ef:64:fc:52:6b: 37:ac:19:54:0d:96:6e:cc:a7:4c:27:1e:09:71:03: 91:ca:f3:96:82:9e:3a:f8:70:f2:22:73:8e:22:ad: ca:ad:f0:70:63:65:56:28:4e:11:2c:3b:e0:66:66: 17:93:6b:d1:f3:30:ef:07:27:ab:db:55:4f:e0:10: fc:45:b9:c4:0f:a6:66:2c:f7:19:6e:d3:78:b5:cc: 8f:86:ac:55:8a:bf:8a:37:b2:39:b0:fd:56:4e:02: 4e:71:06:27:e1:40:10:40:84:22:b3:06:c1:d9:5e: e6:56:28:3f:11:62:1c:8e:95:b9:e5:db:4d:41:d4: 8e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:48:C1:C2:E8:7F:F6:29:F6:67:56:04:0A:72:01:75:0F:55:36:B8 X509v3 Authority Key Identifier: keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/8EjBwuh_9in2Z1YECnIBdQ9VNrg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.231.174.0/24 80.231.248.0/24 85.187.213.0-85.187.215.255 130.250.109.0/24 130.250.133.0-130.250.134.255 147.185.246.0/23 147.185.254.0/23 151.237.11.0-151.237.15.255 151.237.95.0/24 161.115.64.0/19 195.219.123.0/24 195.234.98.0/24 IPv6: 2a01:3e7::/32 Signature Algorithm: sha256WithRSAEncryption cf:31:fa:72:d0:88:0a:ea:47:bc:34:2a:6b:94:22:ce:f9:df: 07:b6:6f:20:02:a9:ab:7b:ed:d9:85:27:d8:cc:e1:41:ca:fe: f2:4d:9d:56:ab:c3:66:29:47:24:30:20:08:29:fd:b6:af:b8: d0:5d:fc:2d:68:65:d5:95:0e:db:35:ce:df:6b:7a:8d:d8:cd: a9:a9:a8:7d:dc:c8:34:0f:bd:f6:04:31:cf:d9:70:3b:af:42: 66:d5:e9:f5:d0:6e:24:01:7b:7c:27:af:07:00:d4:70:e5:b0: 74:4b:79:0b:27:b8:73:f3:e5:e9:b3:36:38:75:e5:dd:92:16: c4:ed:d6:a8:f1:a2:7a:51:f3:49:b5:33:48:09:db:c5:2d:6c: 49:5a:4c:e7:2d:01:73:16:7d:80:f4:21:5e:3d:0b:dc:8c:84: 0c:96:c7:dd:39:85:d9:1c:aa:15:2b:51:73:ec:80:f4:73:2b: 30:fa:15:e0:54:14:2d:3a:cf:2e:b4:76:80:11:98:d8:d0:81: 3a:cb:6e:7e:b3:a7:4f:fd:18:62:ad:e5:6b:e2:70:63:a1:8c: 48:83:b5:18:4d:39:8d:61:b8:9c:2e:6a:c0:09:22:14:a5:18: f8:ce:b6:a0:e3:9f:36:c5:1f:d2:e3:df:25:d6:86:d4:22:ba: 28:e6:89:9b -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgISAZt6yU1BEDzbP+Ui1/EXn4NsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDFiMjU4NzQ5MGFkMDYxY2IyMDcxNzZiZGVlYzgxYTUz MTU4OGMwHhcNMjYwMTAxMTgxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDQ4YzFjMmU4N2ZmNjI5ZjY2NzU2MDQwYTcyMDE3NTBmNTUzNmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynSQWuHVStQgPPPMNqvLkEU3nyzF P8i0E0Zc5QcmkbY4SRAulDjTflHs0SQihbofU2yy27bLPlhyfzpjHpHGjpS7oIkh bXwBc+pocni2NGQC6f7MrskwtrdyiUVhomC3p0p4Qvyd7aXkeHeh6cm4t+E8mR98 XQO0r+Ub3C7uJtTX72T8Ums3rBlUDZZuzKdMJx4JcQORyvOWgp46+HDyInOOIq3K rfBwY2VWKE4RLDvgZmYXk2vR8zDvByer21VP4BD8RbnED6ZmLPcZbtN4tcyPhqxV ir+KN7I5sP1WTgJOcQYn4UAQQIQiswbB2V7mVig/EWIcjpW55dtNQdSOnQIDAQAB o4ICczCCAm8wHQYDVR0OBBYEFPBIwcLof/Yp9mdWBApyAXUPVTa4MB8GA1UdIwQY MBaAFE3Rslh0kK0GHLIHF2ve7IGlMViMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUt ZGI0NjNjNWZiMGI0LzEvOEVqQnd1aF85aW4yWjFZRUNuSUJkUTlWTnJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUtZGI0NjNjNWZiMGI0 LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGIBggrBgEFBQcBBwEB/wR5MHcwZgQCAAEwYAMEAFDnrgME AFDn+DAMAwQAVbvVAwQDVbvQAwQAgvptMAwDBACC+oUDBACC+oYDBAGTufYDBAGT uf4wDAMEAJftCwMEBJftAAMEAJftXwMEBaFzQAMEAMPbewMEAMPqYjANBAIAAjAH AwUAKgED5zANBgkqhkiG9w0BAQsFAAOCAQEAzzH6ctCICupHvDQqa5QizvnfB7Zv IAKpq3vt2YUn2MzhQcr+8k2dVqvDZilHJDAgCCn9tq+40F38LWhl1ZUO2zXO32t6 jdjNqamofdzINA+99gQxz9lwO69CZtXp9dBuJAF7fCevBwDUcOWwdEt5Cye4c/Pl 6bM2OHXl3ZIWxO3WqPGielHzSbUzSAnbxS1sSVpM5y0BcxZ9gPQhXj0L3IyEDJbH 3TmF2RyqFStRc+yA9HMrMPoV4FQULTrPLrR2gBGY2NCBOstufrOnT/0YYq3la+Jw Y6GMSIO1GE05jWG4nC5qwAkiFKUY+M62oOOfNsUf0uPfJdaG1CK6KOaJmw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:29 2026 by rpki-client