This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/8_lZPXz1qGXu2bcpRupkPBB8WRg.roa File: 8_lZPXz1qGXu2bcpRupkPBB8WRg.roa (raw, json) Hash identifier: iMpWEmJ10hJ2hPGyV5Qr3SMaI/AV+ZLzKmFfv1KwPYc= Subject key identifier: F3:F9:59:3D:7C:F5:A8:65:EE:D9:B7:29:46:EA:64:3C:10:7C:59:18 Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718 Certificate serial: 019B7F15034CB0C1736132A0BA8393729D35 Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/8_lZPXz1qGXu2bcpRupkPBB8WRg.roa Signing time: Fri 02 Jan 2026 14:20:42 +0000 ROA not before: Fri 02 Jan 2026 14:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15626 IP address blocks: 171.33.241.0/24 maxlen: 24 185.253.0.0/24 maxlen: 24 195.28.182.0/23 maxlen: 23 2001:67c:2f6c::/48 maxlen: 48 2a0a:8c46::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:03:4c:b0:c1:73:61:32:a0:ba:83:93:72:9d:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718 Validity Not Before: Jan 2 14:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3f9593d7cf5a865eed9b72946ea643c107c5918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7b:f9:e1:eb:8f:c6:3b:3b:72:ad:32:c9:85: d6:12:06:4a:a3:cd:0b:45:1b:cb:e4:bd:38:30:c5: 39:18:c7:c2:5e:e5:50:c1:69:a0:9b:a5:77:b3:7c: d8:34:01:ab:76:03:b4:86:a7:59:ed:1e:9a:02:52: 55:3e:58:3c:08:a2:21:c7:f1:09:b1:c2:73:c9:ac: 5e:56:6a:60:68:e1:08:93:ef:9d:fd:85:23:da:37: de:51:82:c4:42:ab:80:4e:ce:ea:9d:d5:07:7e:2d: 19:55:7c:ec:19:23:a5:39:28:a5:86:18:a9:dd:d0: 3a:03:72:12:ca:92:07:88:fc:41:5b:d9:62:01:32: a7:fb:f2:f3:92:1f:09:7f:22:19:b4:4a:d2:cb:d0: b1:87:12:bc:87:ca:96:81:4c:85:b8:3e:0c:07:5d: f8:51:86:5f:ca:1a:ea:fd:0e:bb:50:5a:fa:99:bf: f3:8a:87:95:14:1b:21:b6:0d:e3:b9:ea:40:c1:6f: 34:38:5e:47:2f:30:d9:9b:54:d9:96:e9:93:ae:90: 40:eb:6a:3f:72:4b:db:b5:c5:3a:b6:ff:81:8c:8f: f3:1c:b5:a5:ac:f2:53:53:cd:25:28:54:5b:1a:88: b9:b6:42:b2:b4:7b:12:be:a7:00:8c:3c:0b:1e:33: cd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F9:59:3D:7C:F5:A8:65:EE:D9:B7:29:46:EA:64:3C:10:7C:59:18 X509v3 Authority Key Identifier: keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/8_lZPXz1qGXu2bcpRupkPBB8WRg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.33.241.0/24 185.253.0.0/24 195.28.182.0/23 IPv6: 2001:67c:2f6c::/48 2a0a:8c46::/32 Signature Algorithm: sha256WithRSAEncryption 20:b0:77:8b:ef:49:45:63:20:96:0c:9a:fe:d8:89:30:87:f2: 00:46:9a:80:93:b3:8f:ab:13:13:46:8c:1f:20:3b:d8:e2:3f: 45:f1:56:b2:9d:e7:7a:cf:8a:19:0c:62:6d:b8:a1:89:2d:f5: 5d:5d:ed:c2:6c:e8:23:5a:de:dd:78:7a:8c:d8:0b:11:cf:7f: 8a:dc:9c:50:59:c8:48:76:65:15:9e:fa:12:f8:bc:0d:2d:f0: bc:51:0d:15:e9:2a:2b:a7:df:77:eb:32:8e:bc:22:0a:f2:ec: e4:53:fb:55:cc:b5:6e:6c:4b:2a:69:0e:2b:47:df:7c:e4:e4: 91:0d:0c:40:00:99:5b:61:72:75:6c:fb:a9:ae:76:fd:72:d1: f7:80:79:6f:a2:a0:31:3d:c6:2e:ed:a8:78:78:dc:68:fb:5a: 6f:c2:af:2a:25:1d:71:87:32:ec:d5:ce:5b:b4:25:45:b3:95: 2a:12:e2:ce:16:1f:11:d9:43:95:c8:cd:3d:14:2f:88:0f:eb: 57:cb:2a:cc:8a:82:72:1e:e8:2f:58:df:db:c3:4f:15:f2:c1: 19:65:09:49:d1:16:3f:dd:fd:c9:5e:54:cd:26:45:51:55:50: 44:7e:de:b2:af:29:a0:36:d6:c1:2f:95:d5:b5:5f:a6:48:a0: e6:13:42:87 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt/FQNMsMFzYTKguoOTcp01MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmY2NkZmZkYTZhNGM0ODkxNGI1ZThjZGU3ZGE1ZDgyMGI5 Yzk3MTgwHhcNMjYwMTAyMTQyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2Y5NTkzZDdjZjVhODY1ZWVkOWI3Mjk0NmVhNjQzYzEwN2M1OTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33v54euPxjs7cq0yyYXWEgZKo80L RRvL5L04MMU5GMfCXuVQwWmgm6V3s3zYNAGrdgO0hqdZ7R6aAlJVPlg8CKIhx/EJ scJzyaxeVmpgaOEIk++d/YUj2jfeUYLEQquATs7qndUHfi0ZVXzsGSOlOSilhhip 3dA6A3ISypIHiPxBW9liATKn+/Lzkh8JfyIZtErSy9CxhxK8h8qWgUyFuD4MB134 UYZfyhrq/Q67UFr6mb/zioeVFBshtg3juepAwW80OF5HLzDZm1TZlumTrpBA62o/ ckvbtcU6tv+BjI/zHLWlrPJTU80lKFRbGoi5tkKytHsSvqcAjDwLHjPN+QIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFPP5WT189ahl7tm3KUbqZDwQfFkYMB8GA1UdIwQY MBaAFG/M3/2mpMSJFLXozefaXYILnJcYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jYjAxNTMtODAzYS00YmI2LWIxOWQt YTc3NGU0MWQyNjRjLzEvOF9sWlBYejFxR1h1MmJjcFJ1cGtQQkI4V1JnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9jYjAxNTMtODAzYS00YmI2LWIxOWQtYTc3NGU0MWQyNjRj LzEvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAYBAIAATASAwQAqyHxAwQA uf0AAwQBwxy2MBYEAgACMBADBwAgAQZ8L2wDBQAqCoxGMA0GCSqGSIb3DQEBCwUA A4IBAQAgsHeL70lFYyCWDJr+2Ikwh/IARpqAk7OPqxMTRowfIDvY4j9F8Vayned6 z4oZDGJtuKGJLfVdXe3CbOgjWt7deHqM2AsRz3+K3JxQWchIdmUVnvoS+LwNLfC8 UQ0V6Sorp9936zKOvCIK8uzkU/tVzLVubEsqaQ4rR9985OSRDQxAAJlbYXJ1bPup rnb9ctH3gHlvoqAxPcYu7ah4eNxo+1pvwq8qJR1xhzLs1c5btCVFs5UqEuLOFh8R 2UOVyM09FC+ID+tXyyrMioJyHugvWN/bw08V8sEZZQlJ0RY/3f3JXlTNJkVRVVBE ft6yrymgNtbBL5XVtV+mSKDmE0KH -----END CERTIFICATE-----Generated at Sun Jan 25 17:35:53 2026 by rpki-client