This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8hVawCDbKfLGVmy8uR3L6HSyhjY.roa File: 8hVawCDbKfLGVmy8uR3L6HSyhjY.roa (raw, json) Hash identifier: YVD0bBTAjI7+lAMuKAykSFrhVddz0zyQETcTt1yWfGY= Subject key identifier: F2:15:5A:C0:20:DB:29:F2:C6:56:6C:BC:B9:1D:CB:E8:74:B2:86:36 Certificate issuer: /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1 Certificate serial: 019B7E382E091A75066D7593C1345A9F23E2 Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8hVawCDbKfLGVmy8uR3L6HSyhjY.roa Signing time: Fri 02 Jan 2026 10:19:29 +0000 ROA not before: Fri 02 Jan 2026 10:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34966 IP address blocks: 153.92.184.0/23 maxlen: 24 153.92.186.0/24 maxlen: 24 185.237.32.0/24 maxlen: 24 185.237.33.0/24 maxlen: 24 185.237.35.0/24 maxlen: 24 194.30.174.0/24 maxlen: 24 195.238.224.0/24 maxlen: 24 2a0c:280::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:2e:09:1a:75:06:6d:75:93:c1:34:5a:9f:23:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1 Validity Not Before: Jan 2 10:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2155ac020db29f2c6566cbcb91dcbe874b28636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:28:8c:cb:04:0a:fc:00:25:8a:14:80:ea:d2: 2d:be:2b:ab:49:5e:16:6e:d8:9c:d3:29:67:32:04: d3:fe:a7:4e:12:99:82:dd:e4:16:1c:6e:ee:55:2e: a6:ee:ff:f5:e6:86:b4:80:54:de:26:45:b2:ac:ba: d4:fc:0a:3a:d1:54:3c:28:01:40:4c:c4:44:a4:81: 64:36:5f:48:63:23:35:44:25:c5:db:ad:9a:80:df: 35:de:3d:7c:93:f9:5f:b8:7c:3c:41:02:bf:3a:7a: 81:00:19:26:d5:d5:8a:f3:fb:f7:30:fd:19:c8:10: 18:98:56:d2:d2:c1:e4:44:11:90:f0:df:a6:8a:b9: 49:a0:00:fa:f4:da:bb:13:3d:6d:fb:98:64:53:34: 5e:7a:29:f2:a5:7c:33:0c:f4:d5:df:b9:c3:69:d7: 42:98:a1:e4:4d:fb:1e:59:dc:53:25:0e:fa:61:f0: 52:e8:f0:25:69:f1:54:c2:d0:c8:d8:84:7f:28:f4: 24:76:8c:6d:9e:ec:04:40:58:9f:0a:6a:fe:08:97: 1a:88:a0:ab:b3:bc:62:69:72:37:c9:b9:51:5c:0f: 85:f2:8a:9e:cc:7f:e9:77:39:24:ab:dc:67:93:f8: 33:e7:a3:47:e5:ef:84:5f:fc:7e:6f:82:fb:c3:46: 3a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:15:5A:C0:20:DB:29:F2:C6:56:6C:BC:B9:1D:CB:E8:74:B2:86:36 X509v3 Authority Key Identifier: keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8hVawCDbKfLGVmy8uR3L6HSyhjY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 153.92.184.0-153.92.186.255 185.237.32.0/23 185.237.35.0/24 194.30.174.0/24 195.238.224.0/24 IPv6: 2a0c:280::/30 Signature Algorithm: sha256WithRSAEncryption 3f:86:45:00:f7:de:2b:07:10:01:18:69:04:9f:1c:ed:0a:9f: de:28:1c:15:a3:4e:f9:5b:37:7d:97:26:bd:26:00:b3:db:23: 66:77:a2:af:1f:14:b8:27:12:6f:f9:da:70:61:13:94:82:02: 89:ca:c1:bf:3d:0a:26:ec:54:e8:fb:0a:82:51:86:24:d5:e8: 4d:fe:08:ef:36:bd:28:ca:72:15:c8:ba:96:e4:99:a1:c7:96: 71:09:b0:c4:3b:99:51:09:fc:cb:9e:18:6e:99:2c:aa:81:8f: 3c:cf:82:d1:d3:56:58:49:ec:a0:14:e2:c4:78:f0:5e:22:a1: 14:dc:03:45:c3:86:18:d3:1e:ee:37:92:2f:7d:cf:01:17:62: 81:ae:72:40:3e:13:78:67:49:d4:80:26:e0:92:5c:6d:12:9b: 24:ea:dc:c9:8e:e9:cb:9c:01:68:8d:34:3e:78:14:92:31:be: eb:7d:f1:20:1b:1b:8c:81:0c:7d:b3:dc:24:08:77:75:e6:c3: c8:59:34:ee:22:20:9e:82:95:c5:c6:8e:2f:ec:d8:98:10:29: d1:d6:bc:9b:44:9f:37:74:8d:94:97:67:41:9d:28:6a:14:d4: ce:69:d9:8b:44:21:66:b7:6e:b5:8a:d1:e8:40:e7:be:e5:cc: d3:fd:27:08 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt+OC4JGnUGbXWTwTRanyPiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxODA4ZjFhYmVmOGU2YjU5Y2Q0MzU5YTZiNDQ4MWZjN2M5 NjMxZDEwHhcNMjYwMTAyMTAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjE1NWFjMDIwZGIyOWYyYzY1NjZjYmNiOTFkY2JlODc0YjI4NjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yiMywQK/AAlihSA6tItviurSV4W btic0ylnMgTT/qdOEpmC3eQWHG7uVS6m7v/15oa0gFTeJkWyrLrU/Ao60VQ8KAFA TMREpIFkNl9IYyM1RCXF262agN813j18k/lfuHw8QQK/OnqBABkm1dWK8/v3MP0Z yBAYmFbS0sHkRBGQ8N+mirlJoAD69Nq7Ez1t+5hkUzReeinypXwzDPTV37nDaddC mKHkTfseWdxTJQ76YfBS6PAlafFUwtDI2IR/KPQkdoxtnuwEQFifCmr+CJcaiKCr s7xiaXI3yblRXA+F8oqezH/pdzkkq9xnk/gz56NH5e+EX/x+b4L7w0Y6oQIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFPIVWsAg2ynyxlZsvLkdy+h0soY2MB8GA1UdIwQY MBaAFPGAjxq++Oa1nNQ1mmtEgfx8ljHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFlDUEdyNzQ1cldjMURXYWEwU0JfSHlXTWRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hZTMyNGYtNTRmNS00MWRhLWJlYmYt MDMwNzdlMzdjNjFhLzEvOGhWYXdDRGJLZkxHVm15OHVSM0w2SFN5aGpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9hZTMyNGYtNTRmNS00MWRhLWJlYmYtMDMwNzdlMzdjNjFh LzEvOFlDUEdyNzQ1cldjMURXYWEwU0JfSHlXTWRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmMAwDBAOZXLgD BACZXLoDBAG57SADBAC57SMDBADCHq4DBADD7uAwDQQCAAIwBwMFAioMAoAwDQYJ KoZIhvcNAQELBQADggEBAD+GRQD33isHEAEYaQSfHO0Kn94oHBWjTvlbN32XJr0m ALPbI2Z3oq8fFLgnEm/52nBhE5SCAonKwb89CibsVOj7CoJRhiTV6E3+CO82vSjK chXIupbkmaHHlnEJsMQ7mVEJ/MueGG6ZLKqBjzzPgtHTVlhJ7KAU4sR48F4ioRTc A0XDhhjTHu43ki99zwEXYoGuckA+E3hnSdSAJuCSXG0SmyTq3MmO6cucAWiNND54 FJIxvut98SAbG4yBDH2z3CQId3Xmw8hZNO4iIJ6ClcXGji/s2JgQKdHWvJtEnzd0 jZSXZ0GdKGoU1M5p2YtEIWa3brWK0ehA577lzNP9Jwg= -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:44 2026 by rpki-client