This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/8tyX_G1-_nW7kgFUYT9y4ShiVPc.roa File: 8tyX_G1-_nW7kgFUYT9y4ShiVPc.roa (raw, json) Hash identifier: L+fAM2wTev7jcaaHyppAq65XRuAVybyECH1GJHGUgB8= Subject key identifier: F2:DC:97:FC:6D:7E:FE:75:BB:92:01:54:61:3F:72:E1:28:62:54:F7 Certificate issuer: /CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec Certificate serial: 019B7EA4C5EC74EA39AD5D16AF6888284388 Authority key identifier: DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/8tyX_G1-_nW7kgFUYT9y4ShiVPc.roa Signing time: Fri 02 Jan 2026 12:18:06 +0000 ROA not before: Fri 02 Jan 2026 12:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201446 IP address blocks: 89.46.88.0/24 maxlen: 24 89.46.89.0/24 maxlen: 24 89.46.90.0/24 maxlen: 24 89.46.91.0/24 maxlen: 24 185.18.198.0/24 maxlen: 24 185.18.199.0/24 maxlen: 24 185.23.116.0/24 maxlen: 24 185.23.117.0/24 maxlen: 24 185.23.118.0/24 maxlen: 24 185.23.119.0/24 maxlen: 24 185.45.73.0/24 maxlen: 24 185.45.74.0/24 maxlen: 24 185.45.75.0/24 maxlen: 24 185.68.108.0/24 maxlen: 24 185.68.109.0/24 maxlen: 24 185.68.110.0/24 maxlen: 24 185.68.111.0/24 maxlen: 24 185.92.244.0/24 maxlen: 24 185.92.245.0/24 maxlen: 24 185.92.246.0/24 maxlen: 24 185.92.247.0/24 maxlen: 24 185.177.152.0/24 maxlen: 24 185.177.153.0/24 maxlen: 24 185.177.154.0/24 maxlen: 24 185.177.155.0/24 maxlen: 24 212.63.108.0/24 maxlen: 24 212.63.109.0/24 maxlen: 24 212.63.110.0/24 maxlen: 24 212.63.111.0/24 maxlen: 24 217.148.138.0/24 maxlen: 24 217.148.139.0/24 maxlen: 24 2a03:f6c0::/32 maxlen: 32 2a03:f6c0::/52 maxlen: 52 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:c5:ec:74:ea:39:ad:5d:16:af:68:88:28:43:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec Validity Not Before: Jan 2 12:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2dc97fc6d7efe75bb920154613f72e1286254f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:08:3c:f6:3e:4e:7c:ae:35:88:bd:76:aa:4d: a3:86:fb:18:d4:f8:63:7c:83:c8:7b:6c:6b:e2:80: 20:95:f2:7d:b9:5a:85:99:ee:1d:f0:fc:b1:2b:15: b2:ea:34:4a:4e:c9:77:56:aa:a0:e2:76:81:58:af: d2:dd:73:ae:4d:50:dc:b8:12:ed:f8:79:bc:48:38: f3:c7:5d:5c:17:63:d0:e4:77:19:94:17:c5:1a:25: 88:44:dc:3d:78:77:07:b5:84:63:8f:22:51:01:b2: 9f:57:35:4d:75:ad:10:85:dd:b5:2c:87:97:05:28: ba:c4:13:ca:3b:f8:dd:13:9e:f2:22:f0:69:21:38: 18:f1:93:37:c6:17:40:32:ef:b5:56:8a:60:32:b1: 09:08:66:99:ae:68:2c:4a:18:b1:78:0b:6d:e6:a2: 64:d6:5e:ef:01:3b:3e:bd:83:d4:23:c6:44:c6:b0: 50:8a:ae:b2:28:31:2b:f8:d8:b2:2a:fd:3f:0a:29: 1d:3a:45:5b:fb:09:e7:4a:e6:0d:14:b5:e9:89:b7: 1a:4f:3c:36:be:b1:39:1d:07:df:93:99:39:03:50: 04:ba:64:a6:35:99:d5:76:9e:6d:6e:db:70:98:39: 18:91:3c:ce:86:d9:3f:57:78:20:aa:cd:72:db:b7: 9f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:DC:97:FC:6D:7E:FE:75:BB:92:01:54:61:3F:72:E1:28:62:54:F7 X509v3 Authority Key Identifier: keyid:DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/8tyX_G1-_nW7kgFUYT9y4ShiVPc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.46.88.0/22 185.18.198.0/23 185.23.116.0/22 185.45.73.0-185.45.75.255 185.68.108.0/22 185.92.244.0/22 185.177.152.0/22 212.63.108.0/22 217.148.138.0/23 IPv6: 2a03:f6c0::/32 Signature Algorithm: sha256WithRSAEncryption 4d:83:e4:1c:73:45:85:e8:83:3c:35:be:0b:5b:22:8d:8c:1a: 91:3f:90:76:21:29:2f:7b:c2:dc:04:5a:3b:74:be:37:55:1b: e5:6b:05:d7:e1:7d:9a:6b:16:9c:be:c1:d6:d7:39:9e:07:15: 83:28:c1:05:b2:18:f7:4a:50:a0:75:a4:1f:d8:05:1d:25:c8: 0b:5d:98:fa:b0:af:00:8a:09:09:bf:55:87:a7:27:7a:02:a0: 20:e7:74:96:ae:9e:9b:50:1f:26:e7:09:c2:d4:cd:a5:c2:39: cb:6b:24:21:5e:a9:88:de:9f:a1:1c:90:6d:8e:a3:ac:da:b7: fa:15:58:14:93:61:ea:97:1c:4b:d0:62:d6:61:6a:02:eb:64: 42:b0:35:b4:40:3c:9c:b7:c6:0e:95:d9:07:9e:a9:c2:d0:f0: 00:03:ea:cd:dd:eb:95:7c:6f:22:aa:88:6d:53:3d:b8:e6:de: db:45:0e:76:e6:79:59:fa:03:b7:b3:d9:25:0d:70:0b:cc:37: ff:47:2b:16:2f:a6:96:46:10:a6:f0:a6:80:77:ba:88:3c:8d: 4c:96:61:bd:6c:e1:45:d2:92:85:b6:04:0c:88:d0:0b:2f:1a: 8f:d6:a3:91:e9:c9:30:13:ee:6f:7b:95:03:3f:1e:3e:19:a6: fd:13:4c:09 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgISAZt+pMXsdOo5rV0Wr2iIKEOIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjM2NiMjBjNWNhN2M0ZWQ4ZTQyMDc4YjFhNjcyODdhMGQ5 OTFjZWMwHhcNMjYwMTAyMTIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmRjOTdmYzZkN2VmZTc1YmI5MjAxNTQ2MTNmNzJlMTI4NjI1NGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygg89j5OfK41iL12qk2jhvsY1Phj fIPIe2xr4oAglfJ9uVqFme4d8PyxKxWy6jRKTsl3Vqqg4naBWK/S3XOuTVDcuBLt +Hm8SDjzx11cF2PQ5HcZlBfFGiWIRNw9eHcHtYRjjyJRAbKfVzVNda0Qhd21LIeX BSi6xBPKO/jdE57yIvBpITgY8ZM3xhdAMu+1VopgMrEJCGaZrmgsShixeAtt5qJk 1l7vATs+vYPUI8ZExrBQiq6yKDEr+NiyKv0/CikdOkVb+wnnSuYNFLXpibcaTzw2 vrE5HQffk5k5A1AEumSmNZnVdp5tbttwmDkYkTzOhtk/V3ggqs1y27efXwIDAQAB o4ICUDCCAkwwHQYDVR0OBBYEFPLcl/xtfv51u5IBVGE/cuEoYlT3MB8GA1UdIwQY MBaAFNw8sgxcp8TtjkIHixpnKHoNmRzsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0R5eURGeW54TzJPUWdlTEdtY29lZzJaSE93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hODVmM2QtNjVhMi00ZjZjLTljYjkt ODI2NjBlZTRlYWM0LzEvOHR5WF9HMS1fblc3a2dGVVlUOXk0U2hpVlBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9hODVmM2QtNjVhMi00ZjZjLTljYjktODI2NjBlZTRlYWM0 LzEvM0R5eURGeW54TzJPUWdlTEdtY29lZzJaSE93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTBEBAIAATA+AwQCWS5YAwQB uRLGAwQCuRd0MAwDBAC5LUkDBAK5LUgDBAK5RGwDBAK5XPQDBAK5sZgDBALUP2wD BAHZlIowDQQCAAIwBwMFACoD9sAwDQYJKoZIhvcNAQELBQADggEBAE2D5BxzRYXo gzw1vgtbIo2MGpE/kHYhKS97wtwEWjt0vjdVG+VrBdfhfZprFpy+wdbXOZ4HFYMo wQWyGPdKUKB1pB/YBR0lyAtdmPqwrwCKCQm/VYenJ3oCoCDndJaunptQHybnCcLU zaXCOctrJCFeqYjen6EckG2Oo6zat/oVWBSTYeqXHEvQYtZhagLrZEKwNbRAPJy3 xg6V2QeeqcLQ8AAD6s3d65V8byKqiG1TPbjm3ttFDnbmeVn6A7ez2SUNcAvMN/9H KxYvppZGEKbwpoB3uog8jUyWYb1s4UXSkoW2BAyI0AsvGo/Wo5HpyTAT7m97lQM/ Hj4Zpv0TTAk= -----END CERTIFICATE-----Generated at Sun Jan 25 14:39:36 2026 by rpki-client