This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/8qI5M9nt77vE4nTZuhI3O-_7Moo.roa File: 8qI5M9nt77vE4nTZuhI3O-_7Moo.roa (raw, json) Hash identifier: bhOfxE1N9Q9DLTIZ9ruXl8yH7rMWdChvmxBcbOxnD1I= Subject key identifier: F2:A2:39:33:D9:ED:EF:BB:C4:E2:74:D9:BA:12:37:3B:EF:FB:32:8A Certificate issuer: /CN=f5cb856d4269219ed3a0c0dc47333236f155953a Certificate serial: 019B7AC83E8661F815BD48C8B743231CA75E Authority key identifier: F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/8qI5M9nt77vE4nTZuhI3O-_7Moo.roa Signing time: Thu 01 Jan 2026 18:18:22 +0000 ROA not before: Thu 01 Jan 2026 18:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8612 IP address blocks: 82.84.0.0/15 maxlen: 24 82.85.26.128/26 maxlen: 26 82.85.53.0/26 maxlen: 26 82.85.53.64/26 maxlen: 26 84.220.0.0/15 maxlen: 15 84.220.0.0/16 maxlen: 24 84.221.0.0/16 maxlen: 24 94.32.0.0/19 maxlen: 24 94.32.64.0/18 maxlen: 24 94.32.128.0/17 maxlen: 24 94.34.0.0/16 maxlen: 24 94.35.0.0/16 maxlen: 24 185.38.136.0/22 maxlen: 22 193.43.2.0/24 maxlen: 24 217.73.208.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:3e:86:61:f8:15:bd:48:c8:b7:43:23:1c:a7:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5cb856d4269219ed3a0c0dc47333236f155953a Validity Not Before: Jan 1 18:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2a23933d9edefbbc4e274d9ba12373beffb328a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:52:74:aa:d7:a2:14:93:3e:7c:23:d9:93:06: 45:8f:94:01:f2:df:80:f2:7e:81:ee:ff:b0:66:d0: 09:6d:cc:08:79:73:b5:f3:fc:0c:a1:cf:6b:81:0e: f6:38:d3:ab:de:12:01:27:8e:75:4a:e3:58:66:2c: 59:f7:6a:29:9f:ca:35:90:e7:dd:10:9f:45:b9:19: 53:4f:03:6a:f3:c3:71:cd:d6:7b:ed:a8:42:d7:8a: 42:0d:af:55:85:99:f4:f4:5a:7f:fa:37:31:73:d9: d2:95:f4:53:fd:39:4e:81:36:50:ad:59:68:37:8c: 03:a3:05:4e:be:f5:b0:8c:9b:fc:3e:89:38:1e:9a: 7c:56:46:71:bc:7a:86:8a:72:77:41:95:61:97:99: 0d:ec:d0:38:01:67:9c:33:f7:43:60:de:b6:e7:f2: 0d:1c:00:a7:da:1a:05:18:e8:43:41:be:7f:cd:7f: e0:51:6d:f4:66:13:ac:84:53:c5:3e:60:ee:61:62: fa:cb:32:6a:e6:11:92:c1:fa:2d:ff:06:bb:14:78: 08:1b:14:e4:52:82:6e:da:27:d8:93:8a:33:65:d7: 49:5b:19:df:5f:66:19:af:e5:78:36:af:6c:53:af: ff:0a:10:bd:f4:b3:35:70:a9:77:59:9a:65:4c:37: 15:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A2:39:33:D9:ED:EF:BB:C4:E2:74:D9:BA:12:37:3B:EF:FB:32:8A X509v3 Authority Key Identifier: keyid:F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/8qI5M9nt77vE4nTZuhI3O-_7Moo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.84.0.0/15 84.220.0.0/15 94.32.0.0/19 94.32.64.0-94.32.255.255 94.34.0.0/15 185.38.136.0/22 193.43.2.0/24 217.73.208.0/21 Signature Algorithm: sha256WithRSAEncryption c6:35:71:98:66:10:af:ae:5b:b3:21:e1:cf:c4:ed:10:b8:4b: cf:a2:66:41:2a:a1:ab:37:b3:86:74:b6:80:de:11:8d:e5:cc: ec:7c:72:f2:ab:e7:ba:ee:39:33:6d:e1:3f:43:57:77:9e:8f: c1:3f:2f:46:b8:7a:5a:26:3c:ca:9f:da:13:c6:40:8c:7c:0d: 1c:46:0d:55:10:f6:7f:f6:39:d1:f8:c9:bf:66:60:20:10:a9: af:80:59:45:b3:50:c0:5a:c1:1c:62:d4:f9:64:44:c7:6f:ad: ac:da:fc:3b:91:63:ab:7c:c7:d5:77:2a:b5:d8:f3:16:2a:56: c1:40:69:c9:85:eb:54:8d:b5:e8:04:e9:b9:bb:af:79:01:fa: a1:71:7d:f4:48:6a:11:48:14:ef:83:1d:ac:79:22:e6:68:83: 30:bf:6d:ab:18:df:be:67:ad:a1:42:61:4b:be:39:dc:df:b3: 60:f5:0e:93:7a:cf:45:c7:6b:ab:16:bc:9e:fd:92:ed:22:2a: f6:cc:fa:df:aa:2c:3f:9e:5f:09:6e:ef:78:59:b0:41:fe:a8: b0:f5:ca:9a:5e:1c:3c:7f:18:79:76:17:33:4f:37:7e:fa:c8: 10:0b:32:7d:73:fe:92:0e:0d:72:b8:fe:97:d0:fd:ef:16:93: f8:e9:4f:b4 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZt6yD6GYfgVvUjIt0MjHKdeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1Y2I4NTZkNDI2OTIxOWVkM2EwYzBkYzQ3MzMzMjM2ZjE1 NTk1M2EwHhcNMjYwMTAxMTgxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmEyMzkzM2Q5ZWRlZmJiYzRlMjc0ZDliYTEyMzczYmVmZmIzMjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFJ0qteiFJM+fCPZkwZFj5QB8t+A 8n6B7v+wZtAJbcwIeXO18/wMoc9rgQ72ONOr3hIBJ451SuNYZixZ92opn8o1kOfd EJ9FuRlTTwNq88NxzdZ77ahC14pCDa9VhZn09Fp/+jcxc9nSlfRT/TlOgTZQrVlo N4wDowVOvvWwjJv8Pok4Hpp8VkZxvHqGinJ3QZVhl5kN7NA4AWecM/dDYN625/IN HACn2hoFGOhDQb5/zX/gUW30ZhOshFPFPmDuYWL6yzJq5hGSwfot/wa7FHgIGxTk UoJu2ifYk4ozZddJWxnfX2YZr+V4Nq9sU6//ChC99LM1cKl3WZplTDcVBwIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFPKiOTPZ7e+7xOJ02boSNzvv+zKKMB8GA1UdIwQY MBaAFPXLhW1CaSGe06DA3EczMjbxVZU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWN1RmJVSnBJWjdUb01EY1J6TXlOdkZWbFRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS83NGIyODAtZTFiNC00MzEwLTgwODUt ZDY1NjE3YmQzYjRmLzEvOHFJNU05bnQ3N3ZFNG5UWnVoSTNPLV83TW9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS83NGIyODAtZTFiNC00MzEwLTgwODUtZDY1NjE3YmQzYjRm LzEvOWN1RmJVSnBJWjdUb01EY1J6TXlOdkZWbFRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwMBUlQDAwFU 3AMEBV4gADALAwQGXiBAAwMAXiADAwFeIgMEArkmiAMEAMErAgMEA9lJ0DANBgkq hkiG9w0BAQsFAAOCAQEAxjVxmGYQr65bsyHhz8TtELhLz6JmQSqhqzezhnS2gN4R jeXM7Hxy8qvnuu45M23hP0NXd56PwT8vRrh6WiY8yp/aE8ZAjHwNHEYNVRD2f/Y5 0fjJv2ZgIBCpr4BZRbNQwFrBHGLU+WREx2+trNr8O5Fjq3zH1XcqtdjzFipWwUBp yYXrVI216ATpubuveQH6oXF99EhqEUgU74MdrHki5miDML9tqxjfvmetoUJhS745 3N+zYPUOk3rPRcdrqxa8nv2S7SIq9sz636osP55fCW7veFmwQf6osPXKml4cPH8Y eXYXM083fvrIEAsyfXP+kg4Ncrj+l9D97xaT+OlPtA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:44 2026 by rpki-client