This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/8mTPFQW3wW-m-Njwc5f28bH9rKw.roa File: 8mTPFQW3wW-m-Njwc5f28bH9rKw.roa (raw, json) Hash identifier: ycM5ko9FIfkWlLnDoZpXM6ToY3euiLPcPeAx4DLhqfU= Subject key identifier: F2:64:CF:15:05:B7:C1:6F:A6:F8:D8:F0:73:97:F6:F1:B1:FD:AC:AC Certificate issuer: /CN=765ea3400a3748c3b6c61268d492f8bf0a908239 Certificate serial: 019B07DEA1E4EADA48DAF4D9DB0857A5AC32 Authority key identifier: 76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/8mTPFQW3wW-m-Njwc5f28bH9rKw.roa Signing time: Wed 10 Dec 2025 10:46:29 +0000 ROA not before: Wed 10 Dec 2025 10:46:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207254 IP address blocks: 185.154.220.0/24 maxlen: 24 185.154.221.0/24 maxlen: 24 185.154.222.0/24 maxlen: 24 185.154.223.0/24 maxlen: 24 195.130.196.0/24 maxlen: 24 2a0b:6140:1::/48 maxlen: 48 2a0b:6140:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:de:a1:e4:ea:da:48:da:f4:d9:db:08:57:a5:ac:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=765ea3400a3748c3b6c61268d492f8bf0a908239 Validity Not Before: Dec 10 10:46:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f264cf1505b7c16fa6f8d8f07397f6f1b1fdacac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b0:8c:8b:f9:2a:7e:31:c4:a2:30:24:87:f3: f4:a0:fd:ea:3e:ed:be:7f:9a:60:6f:2c:13:74:4f: 14:e6:cf:a3:ff:8f:03:6d:84:f2:a3:66:01:80:00: de:b4:63:64:15:cd:84:40:c2:90:65:4b:2f:af:7c: fb:c0:af:c2:0f:13:ac:2c:09:e0:d0:ab:1e:e4:a9: a3:4b:0d:55:88:8c:2c:5f:71:ee:33:5c:cd:24:3f: 18:61:d8:4d:37:97:a2:fb:e1:64:82:bb:1b:a9:26: 32:4d:f3:ab:a9:8d:d8:53:32:1e:45:ff:97:c2:af: c1:09:bd:43:c7:75:39:cd:14:19:35:a3:33:6f:1e: ac:30:72:bd:86:0e:58:65:2b:94:43:31:c7:7a:81: 89:38:96:12:0e:3d:79:be:4b:ec:cb:da:06:74:c5: d1:2f:bc:2b:60:0f:8a:6e:04:40:b0:70:47:1f:e9: b4:ac:11:95:a2:ea:27:e2:52:b5:d5:ac:cc:48:4c: 28:cc:48:d2:f3:e6:45:37:d5:4c:64:21:67:e7:70: 6e:93:4f:80:b2:bc:d4:e9:b9:be:32:0c:20:55:77: ee:a4:e7:a7:49:73:d2:c5:1a:91:36:66:19:b6:1d: 15:37:20:12:c8:d9:b7:f1:5b:4c:8b:c0:f4:22:9d: f9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:64:CF:15:05:B7:C1:6F:A6:F8:D8:F0:73:97:F6:F1:B1:FD:AC:AC X509v3 Authority Key Identifier: keyid:76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/8mTPFQW3wW-m-Njwc5f28bH9rKw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.154.220.0/22 195.130.196.0/24 IPv6: 2a0b:6140:1::-2a0b:6140:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 13:8f:7d:ab:75:ad:dc:22:03:b0:0e:9b:e1:d8:3f:6b:72:cd: 96:30:77:12:53:c2:cc:67:f3:1f:37:25:c5:eb:43:c5:94:f5: 4e:6b:3a:4e:55:a8:5c:da:89:49:a8:78:df:2b:ef:8e:78:49: 27:3f:5d:ab:3e:8e:7c:13:0b:51:b6:7b:01:a4:6a:f9:e5:69: d2:27:87:04:d5:05:02:76:12:73:66:37:ee:d3:14:22:91:43: 33:dc:87:38:35:38:bd:ac:00:27:2f:a4:6e:bc:ab:b5:7c:11: 8d:3d:0f:14:f3:a2:ff:3a:5b:b0:9d:e3:81:4d:45:14:da:4f: a2:cf:c3:92:bd:bd:20:0f:ff:70:d4:c0:02:0b:e6:9c:86:71: 80:7b:ed:b0:c0:9c:85:5e:9a:93:a1:92:e4:6d:8e:2e:d2:dd: 9e:21:78:d1:2b:51:dd:84:cf:bc:56:2d:de:b9:b9:d3:bb:c6: 55:cb:7b:83:b7:56:33:ae:e0:ec:d7:8a:22:4e:73:17:40:3a: 6c:10:42:40:aa:56:3d:dc:a1:9e:71:ca:a6:53:f1:ed:6a:61: 11:f8:61:9a:29:24:28:fe:64:ce:2c:5e:b6:e4:c7:d1:f2:32: d2:ba:b1:80:b4:14:fa:58:3c:bd:91:db:40:88:01:68:43:17: eb:6f:76:29 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZsH3qHk6tpI2vTZ2whXpawyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NWVhMzQwMGEzNzQ4YzNiNmM2MTI2OGQ0OTJmOGJmMGE5 MDgyMzkwHhcNMjUxMjEwMTA0NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjY0Y2YxNTA1YjdjMTZmYTZmOGQ4ZjA3Mzk3ZjZmMWIxZmRhY2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7CMi/kqfjHEojAkh/P0oP3qPu2+ f5pgbywTdE8U5s+j/48DbYTyo2YBgADetGNkFc2EQMKQZUsvr3z7wK/CDxOsLAng 0Kse5KmjSw1ViIwsX3HuM1zNJD8YYdhNN5ei++FkgrsbqSYyTfOrqY3YUzIeRf+X wq/BCb1Dx3U5zRQZNaMzbx6sMHK9hg5YZSuUQzHHeoGJOJYSDj15vkvsy9oGdMXR L7wrYA+KbgRAsHBHH+m0rBGVouon4lK11azMSEwozEjS8+ZFN9VMZCFn53Buk0+A srzU6bm+MgwgVXfupOenSXPSxRqRNmYZth0VNyASyNm38VtMi8D0Ip35wwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFPJkzxUFt8FvpvjY8HOX9vGx/aysMB8GA1UdIwQY MBaAFHZeo0AKN0jDtsYSaNSS+L8KkII5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGw2alFBbzNTTU8yeGhKbzFKTDR2d3FRZ2prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83NGUxNWYtZjQ4Ny00NTU5LWJmZGQt MGZjNThlNThjYWM5LzEvOG1UUEZRVzN3Vy1tLU5qd2M1ZjI4Ykg5ckt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS83NGUxNWYtZjQ4Ny00NTU5LWJmZGQtMGZjNThlNThjYWM5 LzEvZGw2alFBbzNTTU8yeGhKbzFKTDR2d3FRZ2prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDASBAIAATAMAwQCuZrcAwQA w4LEMBoEAgACMBQwEgMHACoLYUAAAQMHACoLYUAAAjANBgkqhkiG9w0BAQsFAAOC AQEAE499q3Wt3CIDsA6b4dg/a3LNljB3ElPCzGfzHzclxetDxZT1Tms6TlWoXNqJ Sah43yvvjnhJJz9dqz6OfBMLUbZ7AaRq+eVp0ieHBNUFAnYSc2Y37tMUIpFDM9yH ODU4vawAJy+kbryrtXwRjT0PFPOi/zpbsJ3jgU1FFNpPos/Dkr29IA//cNTAAgvm nIZxgHvtsMCchV6ak6GS5G2OLtLdniF40StR3YTPvFYt3rm507vGVct7g7dWM67g 7NeKIk5zF0A6bBBCQKpWPdyhnnHKplPx7WphEfhhmikkKP5kzixetuTH0fIy0rqx gLQU+lg8vZHbQIgBaEMX6292KQ== -----END CERTIFICATE-----Generated at Tue Dec 16 06:35:35 2025 by rpki-client