This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/R-8xZhYdW51nsOeZ20ghKc60eyA.roa File: R-8xZhYdW51nsOeZ20ghKc60eyA.roa (raw, json) Hash identifier: hKGV8Y0Pu4S4Qa9iZVTeOAdSns0yIsurosfpDGf4r2w= Subject key identifier: 47:EF:31:66:16:1D:5B:9D:67:B0:E7:99:DB:48:21:29:CE:B4:7B:20 Certificate issuer: /CN=bafed139df0fad6fde0d82869144104d204b92b5 Certificate serial: 019B79ECDFA022119626FD597A762492A4BB Authority key identifier: BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/R-8xZhYdW51nsOeZ20ghKc60eyA.roa Signing time: Thu 01 Jan 2026 14:18:45 +0000 ROA not before: Thu 01 Jan 2026 14:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134835 IP address blocks: 185.170.208.0/24 maxlen: 24 185.170.209.0/24 maxlen: 24 185.170.210.0/24 maxlen: 24 185.170.211.0/24 maxlen: 24 2a0a:68c0::/40 maxlen: 40 2a0a:68c0:ff00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:df:a0:22:11:96:26:fd:59:7a:76:24:92:a4:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bafed139df0fad6fde0d82869144104d204b92b5 Validity Not Before: Jan 1 14:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47ef3166161d5b9d67b0e799db482129ceb47b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0d:e1:93:90:df:a2:df:7b:e0:3d:a5:a0:2a: b9:ed:5b:a3:96:10:78:55:a0:9a:84:0c:95:0e:85: 4c:27:a6:f3:d2:34:b9:9a:26:92:45:b8:19:c9:90: e3:1e:a7:8b:0a:c9:6a:81:a6:3a:f9:5e:e1:b1:36: 9a:b1:aa:8d:72:55:97:40:93:6a:57:ff:16:0b:9e: 2d:59:f6:e7:44:aa:42:16:0d:72:29:64:df:da:c3: b1:7e:b3:d0:7a:78:6f:e8:27:0d:e2:ba:37:7d:72: 19:50:3c:e6:4f:40:d2:99:4d:e8:48:9d:f7:2d:0a: 7f:51:3d:9a:43:38:21:da:c2:f8:65:7b:c4:a2:50: c7:55:6c:96:c6:ad:6e:20:bf:49:0f:ca:40:e6:a9: 94:b8:f5:4a:5b:9c:b1:db:a2:2f:99:65:6b:7d:eb: f1:cb:c9:ed:04:33:35:34:99:e0:45:a8:4d:6e:6e: 40:a1:e4:9a:04:ad:b1:9b:c6:15:b4:ce:bd:14:e9: 8e:ee:7d:c2:03:66:42:02:83:ec:ba:26:1c:8c:b7: f1:0c:11:f5:0c:fe:d5:87:da:49:ad:bc:3d:fd:24: 5e:d8:0e:62:79:57:ce:73:e1:f8:8a:40:75:d3:0e: 52:4d:3b:a9:c9:4a:2f:5f:96:f0:6b:eb:50:6c:9c: e3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:EF:31:66:16:1D:5B:9D:67:B0:E7:99:DB:48:21:29:CE:B4:7B:20 X509v3 Authority Key Identifier: keyid:BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/R-8xZhYdW51nsOeZ20ghKc60eyA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.170.208.0/22 IPv6: 2a0a:68c0::/40 2a0a:68c0:ff00::/40 Signature Algorithm: sha256WithRSAEncryption 6b:51:d0:4d:c0:3a:4d:73:33:20:b6:1d:83:0f:6a:01:b1:23: 8d:2b:2b:57:22:24:fb:4a:3d:41:4c:09:d2:cb:17:31:b9:71: b4:e8:cc:9e:71:b9:f9:aa:9e:2e:97:13:0f:da:7b:a9:39:d4: a6:3c:c0:c8:83:54:cc:22:f6:89:b5:9b:c2:a3:c4:ff:8b:49: 01:74:2d:44:3c:96:73:b3:c6:d4:4e:09:18:81:c6:b1:69:ca: 8b:dc:81:19:ce:fc:e9:c4:dd:15:46:27:12:bb:60:0e:d7:3c: ce:b4:75:f1:22:49:d6:5c:dd:9c:5e:b9:13:55:0f:af:dd:68: d5:97:bc:d5:3c:78:10:31:27:a0:5d:ea:4f:cf:d4:f9:f7:a8: 3c:e9:8f:e3:bd:32:a8:22:bc:d7:f4:df:b0:76:43:1a:ff:ef: 24:d9:fe:c5:27:15:24:db:57:74:31:2c:18:92:cc:a0:31:bf: 22:d6:ee:82:db:35:2b:8d:b8:ff:83:b0:8e:3c:8a:b1:ea:d4: 0e:67:60:d0:76:35:b4:65:19:d4:7a:9a:8d:0e:80:a3:b8:8f: f4:72:74:63:8b:cb:69:73:5b:7c:a2:68:a7:24:2e:75:00:ca: b7:74:d8:92:23:85:ae:d3:d9:17:0a:db:17:3c:46:c2:d8:12: 29:5a:85:b0 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt57N+gIhGWJv1ZenYkkqS7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhZmVkMTM5ZGYwZmFkNmZkZTBkODI4NjkxNDQxMDRkMjA0 YjkyYjUwHhcNMjYwMTAxMTQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2VmMzE2NjE2MWQ1YjlkNjdiMGU3OTlkYjQ4MjEyOWNlYjQ3YjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA3hk5Dfot974D2loCq57VujlhB4 VaCahAyVDoVMJ6bz0jS5miaSRbgZyZDjHqeLCslqgaY6+V7hsTaasaqNclWXQJNq V/8WC54tWfbnRKpCFg1yKWTf2sOxfrPQenhv6CcN4ro3fXIZUDzmT0DSmU3oSJ33 LQp/UT2aQzgh2sL4ZXvEolDHVWyWxq1uIL9JD8pA5qmUuPVKW5yx26IvmWVrfevx y8ntBDM1NJngRahNbm5AoeSaBK2xm8YVtM69FOmO7n3CA2ZCAoPsuiYcjLfxDBH1 DP7Vh9pJrbw9/SRe2A5ieVfOc+H4ikB10w5STTupyUovX5bwa+tQbJzjCwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFEfvMWYWHVudZ7DnmdtIISnOtHsgMB8GA1UdIwQY MBaAFLr+0TnfD61v3g2ChpFEEE0gS5K1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXY3Uk9kOFByV19lRFlLR2tVUVFUU0JMa3JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9jNTgxMWQtMWRhMC00YzMyLTljNGMt ZDgyYTkwZTM0YzJkLzEvUi04eFpoWWRXNTFuc09lWjIwZ2hLYzYwZXlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9jNTgxMWQtMWRhMC00YzMyLTljNGMtZDgyYTkwZTM0YzJk LzEvdXY3Uk9kOFByV19lRFlLR2tVUVFUU0JMa3JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQCuarQMBYE AgACMBADBgAqCmjAAAMGACoKaMD/MA0GCSqGSIb3DQEBCwUAA4IBAQBrUdBNwDpN czMgth2DD2oBsSONKytXIiT7Sj1BTAnSyxcxuXG06Myecbn5qp4ulxMP2nupOdSm PMDIg1TMIvaJtZvCo8T/i0kBdC1EPJZzs8bUTgkYgcaxacqL3IEZzvzpxN0VRicS u2AO1zzOtHXxIknWXN2cXrkTVQ+v3WjVl7zVPHgQMSegXepPz9T596g86Y/jvTKo IrzX9N+wdkMa/+8k2f7FJxUk21d0MSwYksygMb8i1u6C2zUrjbj/g7COPIqx6tQO Z2DQdjW0ZRnUepqNDoCjuI/0cnRji8tpc1t8ominJC51AMq3dNiSI4Wu09kXCtsX PEbC2BIpWoWw -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:53 2026 by rpki-client