This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/8Hj63DuSPA7Ht457MhBvt5rAzCo.roa File: 8Hj63DuSPA7Ht457MhBvt5rAzCo.roa (raw, json) Hash identifier: /JX6zlbBh/f3Q4c+ifBYnU8yxbIOW6a8gYL/3LC86tc= Subject key identifier: F0:78:FA:DC:3B:92:3C:0E:C7:B7:8E:7B:32:10:6F:B7:9A:C0:CC:2A Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Certificate serial: 019B7DC9CFC9F58193E42EDEF84082B628A3 Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/8Hj63DuSPA7Ht457MhBvt5rAzCo.roa Signing time: Fri 02 Jan 2026 08:18:56 +0000 ROA not before: Fri 02 Jan 2026 08:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200590 IP address blocks: 185.116.192.0/24 maxlen: 24 185.116.193.0/24 maxlen: 24 185.116.194.0/24 maxlen: 24 185.116.195.0/24 maxlen: 24 185.121.80.0/24 maxlen: 24 185.121.81.0/24 maxlen: 24 185.121.82.0/24 maxlen: 24 185.121.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:cf:c9:f5:81:93:e4:2e:de:f8:40:82:b6:28:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Validity Not Before: Jan 2 08:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f078fadc3b923c0ec7b78e7b32106fb79ac0cc2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:89:f2:f0:54:a8:40:8a:25:e6:3d:7c:0b:be: 20:39:a3:5b:f7:ff:3b:f8:ab:d1:05:da:3a:5c:b2: 08:6b:95:29:da:9d:f8:cc:74:4b:97:dc:0e:f1:c4: 7d:3c:51:9e:4f:73:6f:64:2a:18:7d:1b:94:64:e4: e5:42:10:4c:d4:7d:4d:28:65:01:02:6c:d5:0a:4c: 9b:81:35:6e:8d:52:02:d6:c5:e7:4b:98:2f:b3:f1: ea:a0:2b:61:e9:35:2f:f7:fb:13:8c:d7:0a:3d:1a: e6:c3:2a:3d:89:ee:5a:fb:28:4a:33:da:07:0b:5c: cb:46:23:f9:58:a7:bd:f8:2f:db:06:e6:3b:89:42: 96:62:84:6c:1f:df:91:ab:aa:e3:cf:fc:ce:df:7f: 9e:81:29:58:aa:c1:41:33:c0:50:e8:c4:89:ce:56: 17:54:9e:a1:50:cb:54:7b:c8:0c:52:47:04:b2:b5: f8:3c:7e:24:a6:1f:b0:44:66:a4:d4:2c:fa:2e:cd: 8b:1f:ef:3d:15:80:f5:57:68:03:77:cc:1c:84:be: fe:89:91:7a:c4:ad:81:08:05:07:72:7a:9a:0c:eb: e3:51:60:9a:d2:eb:81:5a:cb:ff:1e:21:d3:71:2d: 35:dc:7d:c4:ec:1c:06:e7:a2:e2:ea:79:d9:a1:57: 6e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:78:FA:DC:3B:92:3C:0E:C7:B7:8E:7B:32:10:6F:B7:9A:C0:CC:2A X509v3 Authority Key Identifier: keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/8Hj63DuSPA7Ht457MhBvt5rAzCo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.116.192.0/22 185.121.80.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:0a:12:2f:45:f8:1e:e5:de:90:5c:a8:70:13:80:38:f1:08: bf:d0:f5:0f:57:7c:59:57:13:89:d1:17:5b:30:59:4c:e6:f6: 9c:38:b9:a4:77:6f:24:74:94:63:18:7a:d0:61:be:29:19:40: ea:4b:cc:89:66:f5:53:86:2a:30:83:c8:46:b5:49:f1:d6:c7: 27:af:3b:3c:b9:90:69:4a:f7:e1:85:75:b6:a7:8a:5a:30:33: f5:66:19:0f:ed:22:49:4e:b2:82:bc:4f:69:f7:87:0f:dd:cc: 3e:30:ad:e8:70:67:1c:33:26:8d:84:fa:2d:32:5a:bf:fc:4a: 1c:23:bd:96:93:89:ac:08:72:cc:f5:93:5c:80:b6:72:2e:f5: f5:0b:4a:c8:46:50:66:aa:84:3d:3a:d0:31:96:de:7e:28:40: 1b:d7:39:a7:0c:d4:3d:a1:b2:b3:a2:55:cb:f6:8a:2a:3d:77: 46:d6:ee:54:16:7b:d4:1d:93:82:f4:22:43:06:2e:91:fe:31: 5f:02:61:d4:da:31:9c:13:10:52:2d:0e:d4:d2:56:ce:4b:81: be:f9:af:6e:a6:91:9e:cd:19:5d:f2:ee:b5:6a:52:a6:7b:b8: b2:49:e5:77:5f:08:52:dd:46:c3:8c:87:98:6b:70:e3:00:0f: 64:a6:d8:cc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yc/J9YGT5C7e+ECCtiijMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy ZjM5NzEwHhcNMjYwMTAyMDgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDc4ZmFkYzNiOTIzYzBlYzdiNzhlN2IzMjEwNmZiNzlhYzBjYzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzony8FSoQIol5j18C74gOaNb9/87 +KvRBdo6XLIIa5Up2p34zHRLl9wO8cR9PFGeT3NvZCoYfRuUZOTlQhBM1H1NKGUB AmzVCkybgTVujVIC1sXnS5gvs/HqoCth6TUv9/sTjNcKPRrmwyo9ie5a+yhKM9oH C1zLRiP5WKe9+C/bBuY7iUKWYoRsH9+Rq6rjz/zO33+egSlYqsFBM8BQ6MSJzlYX VJ6hUMtUe8gMUkcEsrX4PH4kph+wRGak1Cz6Ls2LH+89FYD1V2gDd8wchL7+iZF6 xK2BCAUHcnqaDOvjUWCa0uuBWsv/HiHTcS013H3E7BwG56Li6nnZoVduvQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPB4+tw7kjwOx7eOezIQb7eawMwqMB8GA1UdIwQY MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt NzA0NDYzZWJhZDM2LzEvOEhqNjNEdVNQQTdIdDQ1N01oQnZ0NXJBekNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2 LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuXTAAwQC uXlQMA0GCSqGSIb3DQEBCwUAA4IBAQBeChIvRfge5d6QXKhwE4A48Qi/0PUPV3xZ VxOJ0RdbMFlM5vacOLmkd28kdJRjGHrQYb4pGUDqS8yJZvVThiowg8hGtUnx1scn rzs8uZBpSvfhhXW2p4paMDP1ZhkP7SJJTrKCvE9p94cP3cw+MK3ocGccMyaNhPot Mlq//EocI72Wk4msCHLM9ZNcgLZyLvX1C0rIRlBmqoQ9OtAxlt5+KEAb1zmnDNQ9 obKzolXL9ooqPXdG1u5UFnvUHZOC9CJDBi6R/jFfAmHU2jGcExBSLQ7U0lbOS4G+ +a9uppGezRld8u61alKme7iySeV3XwhS3UbDjIeYa3DjAA9kptjM -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:12 2026 by rpki-client