This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/8Q0Zf_p2yrZ0sNHZrjCdOSKVFH0.roa File: 8Q0Zf_p2yrZ0sNHZrjCdOSKVFH0.roa (raw, json) Hash identifier: yTf6BtJWlrsaOEBrk5U/warCLRXhsKvIf1U8hGm0E84= Subject key identifier: F1:0D:19:7F:FA:76:CA:B6:74:B0:D1:D9:AE:30:9D:39:22:95:14:7D Certificate issuer: /CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0 Certificate serial: 019B7DCA722B06E687454C5281C830CF49C1 Authority key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/8Q0Zf_p2yrZ0sNHZrjCdOSKVFH0.roa Signing time: Fri 02 Jan 2026 08:19:38 +0000 ROA not before: Fri 02 Jan 2026 08:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200596 IP address blocks: 62.146.248.0/21 maxlen: 24 85.184.228.0/22 maxlen: 24 135.84.148.0/22 maxlen: 24 145.63.64.0/18 maxlen: 24 147.12.16.0/20 maxlen: 24 185.101.196.0/22 maxlen: 24 2a00:5ea0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:72:2b:06:e6:87:45:4c:52:81:c8:30:cf:49:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0 Validity Not Before: Jan 2 08:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f10d197ffa76cab674b0d1d9ae309d392295147d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:48:a7:a0:24:8b:78:9d:9a:d1:e5:cb:91:37: 49:cc:fd:55:a1:2f:18:25:5e:9f:b7:a6:e6:a6:c7: 49:a3:0f:3f:ff:d0:29:4f:2d:8e:41:68:bd:30:55: 02:a6:d9:24:f5:f4:4c:9f:ca:c1:52:7e:36:6d:24: bd:e7:06:93:58:a1:2d:11:d2:c5:5b:aa:f0:0d:af: ca:f8:d4:d0:2a:a6:2a:1d:e2:36:81:a2:58:01:e4: 2c:16:ac:9f:0c:b3:30:67:7e:68:f9:a3:2d:07:4d: b3:7b:22:54:85:de:ae:3d:c8:ee:d1:b2:98:31:27: 84:d8:86:03:85:34:0c:b9:b5:ad:bf:fe:9a:b9:39: 23:bc:26:e3:b5:12:b2:65:61:38:e0:41:84:3d:22: e6:0d:d6:aa:d6:a9:c5:1f:05:23:cb:66:4e:d5:72: 2d:62:ec:1c:77:f3:1f:b7:33:cd:15:24:22:94:65: 25:3b:30:c4:8f:e0:a3:19:0b:e6:f9:10:d9:13:f8: e9:cf:66:20:3a:b5:e1:f3:e9:7b:6c:08:cb:64:39: 2b:11:6b:79:54:8c:84:57:db:cc:47:72:6d:da:ca: eb:c3:31:60:e9:db:f8:10:7b:b1:7a:35:f5:ce:2f: 13:5a:95:cc:71:a8:74:a6:65:b4:8d:60:c6:81:af: 0c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0D:19:7F:FA:76:CA:B6:74:B0:D1:D9:AE:30:9D:39:22:95:14:7D X509v3 Authority Key Identifier: keyid:61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/8Q0Zf_p2yrZ0sNHZrjCdOSKVFH0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.146.248.0/21 85.184.228.0/22 135.84.148.0/22 145.63.64.0/18 147.12.16.0/20 185.101.196.0/22 IPv6: 2a00:5ea0::/29 Signature Algorithm: sha256WithRSAEncryption 17:7c:ce:82:02:0e:04:c8:17:fa:13:d0:63:2c:4f:d6:61:01: fe:c8:b1:9c:31:b4:b8:af:b6:1f:44:b3:4c:26:d9:b7:0a:04: 31:55:54:da:d2:14:dc:e9:c3:53:43:ac:a2:9c:d2:b7:41:5b: 49:fb:ed:08:3d:b1:29:d4:31:65:0c:51:ef:da:90:50:59:a6: 1a:d1:d5:68:3e:32:e8:24:3b:94:2f:f0:7f:ec:a8:4d:f5:0e: ab:c5:7e:2d:c7:7e:b5:8e:e9:68:8b:5b:cb:3f:58:0a:30:f2: 46:ce:60:4f:19:9a:33:b9:aa:04:0d:c1:1a:61:0c:e9:5d:ed: 48:6a:c5:50:30:bb:47:54:93:2a:a7:ea:21:d6:e0:7a:f9:5b: a1:db:69:73:5f:75:d1:7f:ef:6f:d9:ed:ba:ea:a0:28:2e:ac: 1c:76:b8:c2:14:35:22:24:ba:5c:4c:de:2c:18:53:19:57:3b: 46:ab:ce:bb:fe:e0:d1:70:50:e0:a2:50:1f:b2:9b:46:26:df: cb:47:bb:76:f5:a3:19:85:3c:9a:4a:f8:13:93:ad:d4:b7:85: 06:53:70:c9:bd:df:26:90:9f:67:06:1a:da:08:15:c5:57:f7: c8:c3:41:f0:46:6b:79:5f:ca:03:32:44:f7:af:15:af:23:10: 31:f1:bc:6e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt9ynIrBuaHRUxSgcgwz0nBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxN2NkOGQ0OGI1ZDE1NjY3YmYxMzEzOTZkNGE2YzU5ZDdk MTY3YzAwHhcNMjYwMTAyMDgxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTBkMTk3ZmZhNzZjYWI2NzRiMGQxZDlhZTMwOWQzOTIyOTUxNDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEinoCSLeJ2a0eXLkTdJzP1VoS8Y JV6ft6bmpsdJow8//9ApTy2OQWi9MFUCptkk9fRMn8rBUn42bSS95waTWKEtEdLF W6rwDa/K+NTQKqYqHeI2gaJYAeQsFqyfDLMwZ35o+aMtB02zeyJUhd6uPcju0bKY MSeE2IYDhTQMubWtv/6auTkjvCbjtRKyZWE44EGEPSLmDdaq1qnFHwUjy2ZO1XIt Yuwcd/MftzPNFSQilGUlOzDEj+CjGQvm+RDZE/jpz2YgOrXh8+l7bAjLZDkrEWt5 VIyEV9vMR3Jt2srrwzFg6dv4EHuxejX1zi8TWpXMcah0pmW0jWDGga8MswIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFPENGX/6dsq2dLDR2a4wnTkilRR9MB8GA1UdIwQY MBaAFGF82NSLXRVme/ExOW1KbFnX0WfAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVh6WTFJdGRGV1o3OFRFNWJVcHNXZGZSWjhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8xMDVlMjMtNmNlNi00Y2UwLTkzZmEt YmY2ZTk3ZGRkMDc5LzEvOFEwWmZfcDJ5clowc05IWnJqQ2RPU0tWRkgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8xMDVlMjMtNmNlNi00Y2UwLTkzZmEtYmY2ZTk3ZGRkMDc5 LzEvWVh6WTFJdGRGV1o3OFRFNWJVcHNXZGZSWjhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDPpL4AwQC VbjkAwQCh1SUAwQGkT9AAwQEkwwQAwQCuWXEMA0EAgACMAcDBQMqAF6gMA0GCSqG SIb3DQEBCwUAA4IBAQAXfM6CAg4EyBf6E9BjLE/WYQH+yLGcMbS4r7YfRLNMJtm3 CgQxVVTa0hTc6cNTQ6yinNK3QVtJ++0IPbEp1DFlDFHv2pBQWaYa0dVoPjLoJDuU L/B/7KhN9Q6rxX4tx361juloi1vLP1gKMPJGzmBPGZozuaoEDcEaYQzpXe1IasVQ MLtHVJMqp+oh1uB6+Vuh22lzX3XRf+9v2e266qAoLqwcdrjCFDUiJLpcTN4sGFMZ VztGq867/uDRcFDgolAfsptGJt/LR7t29aMZhTyaSvgTk63Ut4UGU3DJvd8mkJ9n BhraCBXFV/fIw0HwRmt5X8oDMkT3rxWvIxAx8bxu -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:44 2026 by rpki-client