This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/8lHTKcd0GYAhajj68n6yCoBLBmg.roa File: 8lHTKcd0GYAhajj68n6yCoBLBmg.roa (raw, json) Hash identifier: /WULm6fdsfbYX9Ht5hhngSNry2Eyx0hFZ+HW4F+/kU4= Subject key identifier: F2:51:D3:29:C7:74:19:80:21:6A:38:FA:F2:7E:B2:0A:80:4B:06:68 Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Certificate serial: 019B7A5B12B355652C0F62BFAF456EDE1093 Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/8lHTKcd0GYAhajj68n6yCoBLBmg.roa Signing time: Thu 01 Jan 2026 16:19:07 +0000 ROA not before: Thu 01 Jan 2026 16:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25252 IP address blocks: 79.170.16.0/24 maxlen: 24 79.170.17.0/24 maxlen: 24 79.170.18.0/24 maxlen: 24 79.170.19.0/24 maxlen: 24 79.170.20.0/24 maxlen: 24 79.170.21.0/24 maxlen: 24 79.170.22.0/24 maxlen: 24 79.170.23.0/24 maxlen: 24 153.112.132.0/22 maxlen: 22 153.112.139.0/24 maxlen: 24 153.112.149.0/24 maxlen: 24 153.112.150.0/23 maxlen: 23 153.112.160.0/21 maxlen: 21 153.112.173.0/24 maxlen: 24 153.112.176.0/20 maxlen: 20 153.112.208.0/23 maxlen: 23 153.112.240.0/24 maxlen: 24 153.112.241.0/24 maxlen: 24 192.138.109.0/24 maxlen: 24 192.138.110.0/23 maxlen: 23 192.138.116.0/23 maxlen: 23 192.157.8.0/23 maxlen: 23 192.157.8.0/24 maxlen: 24 192.157.9.0/24 maxlen: 24 192.157.10.0/24 maxlen: 24 192.157.11.0/24 maxlen: 24 193.53.25.0/24 maxlen: 24 2a02:f784:20::/48 maxlen: 48 2a02:f784:30::/48 maxlen: 48 2a02:f784:8000::/48 maxlen: 48 2a02:f784:8001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:12:b3:55:65:2c:0f:62:bf:af:45:6e:de:10:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Validity Not Before: Jan 1 16:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f251d329c7741980216a38faf27eb20a804b0668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:1f:e8:49:ec:d7:2b:b1:17:ff:d3:83:9b:09: 5c:dc:fd:09:f0:96:d2:78:8f:19:13:1d:1b:e4:7a: ee:bc:19:69:f8:13:cd:be:6a:e0:ee:c4:fe:56:66: 18:ba:2b:8e:bf:bb:9e:b3:43:35:b5:37:5e:b4:ae: 8f:a0:1f:de:db:5b:11:fd:77:22:3a:e0:66:f7:1e: d5:ce:95:fb:91:27:37:b9:60:66:4c:c3:05:d7:73: cd:f2:f1:91:9d:27:a1:e8:52:cd:eb:02:0b:18:49: 93:48:e7:7e:0d:51:29:0e:24:d1:f6:b7:f2:e7:28: ac:37:32:45:ec:1a:79:d5:4d:19:3e:0b:33:2c:8e: 39:cf:0e:c6:4f:e1:01:64:94:df:b6:b3:1a:41:dc: 56:dc:32:9c:cb:71:81:47:4e:56:a3:e2:50:a7:6a: 8e:68:73:a9:17:18:67:6a:52:a6:2f:a0:be:71:5d: 3d:92:c8:c9:55:a5:a2:ea:69:86:13:6c:36:d6:f9: 0d:da:68:7c:9e:a5:4d:1e:96:91:93:ed:32:0f:cc: d8:73:b4:40:3f:2a:f0:97:ba:ff:20:62:82:01:3b: f0:76:95:4f:93:91:a1:60:e1:e9:d8:3d:42:c5:49: 67:b2:c7:ab:19:22:ba:7f:b1:d9:b0:66:cf:ca:d2: 2c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:51:D3:29:C7:74:19:80:21:6A:38:FA:F2:7E:B2:0A:80:4B:06:68 X509v3 Authority Key Identifier: keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/8lHTKcd0GYAhajj68n6yCoBLBmg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.170.16.0/21 153.112.132.0/22 153.112.139.0/24 153.112.149.0-153.112.151.255 153.112.160.0/21 153.112.173.0/24 153.112.176.0/20 153.112.208.0/23 153.112.240.0/23 192.138.109.0-192.138.111.255 192.138.116.0/23 192.157.8.0/22 193.53.25.0/24 IPv6: 2a02:f784:20::/48 2a02:f784:30::/48 2a02:f784:8000::/47 Signature Algorithm: sha256WithRSAEncryption 1c:45:f1:07:08:b2:46:ef:41:c2:e6:ce:cc:81:18:51:f4:68: fc:dc:eb:4a:ae:d8:41:71:65:2d:d6:86:6a:78:69:fb:98:0b: 11:ce:ac:f9:f5:8d:7a:b5:b9:39:05:39:52:7b:f6:34:d3:10: d0:03:da:65:2b:c2:ac:c7:62:08:ca:1b:5c:5c:14:38:a7:ef: 98:6e:30:ee:bb:61:cf:17:f8:4d:df:60:5d:5f:db:1d:52:29: 50:e9:1c:a0:c6:5c:ef:f4:23:74:d7:b7:f1:9e:53:fd:a8:47: 8a:3d:1c:9f:bc:98:08:74:63:eb:f5:1e:63:7a:8f:53:ae:0b: 65:82:8b:23:9e:66:7c:7f:be:7c:e9:2e:f6:1f:e1:57:c0:bd: d2:fe:8a:95:7f:2b:32:ab:2c:6b:f7:a9:2f:57:10:97:c0:e9: ba:ae:d8:07:8e:e1:cd:47:95:36:4c:48:f8:23:56:0a:d3:0a: 25:dd:b1:25:01:e5:a2:cf:b3:30:1c:ea:9a:82:01:0b:86:37: 48:08:ce:90:10:fe:38:7a:4d:26:8a:54:24:bb:63:66:01:a8: 27:0c:f4:f0:25:90:fc:af:de:f5:07:b6:ce:b3:71:50:cb:e8: 0b:75:d8:50:bd:8d:2b:ab:2a:2b:8e:18:24:95:c1:ee:c7:6e: f7:f4:59:19 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt6WxKzVWUsD2K/r0Vu3hCTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw YzE0NWEwHhcNMjYwMTAxMTYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjUxZDMyOWM3NzQxOTgwMjE2YTM4ZmFmMjdlYjIwYTgwNGIwNjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9B/oSezXK7EX/9ODmwlc3P0J8JbS eI8ZEx0b5HruvBlp+BPNvmrg7sT+VmYYuiuOv7ues0M1tTdetK6PoB/e21sR/Xci OuBm9x7VzpX7kSc3uWBmTMMF13PN8vGRnSeh6FLN6wILGEmTSOd+DVEpDiTR9rfy 5yisNzJF7Bp51U0ZPgszLI45zw7GT+EBZJTftrMaQdxW3DKcy3GBR05Wo+JQp2qO aHOpFxhnalKmL6C+cV09ksjJVaWi6mmGE2w21vkN2mh8nqVNHpaRk+0yD8zYc7RA Pyrwl7r/IGKCATvwdpVPk5GhYOHp2D1CxUlnsserGSK6f7HZsGbPytIsLQIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFPJR0ynHdBmAIWo4+vJ+sgqASwZoMB8GA1UdIwQY MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt ZjcxMDM4ZTk2N2E0LzEvOGxIVEtjZDBHWUFoYWpqNjhuNnlDb0JMQm1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0 LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGcBggrBgEFBQcBBwEB/wSBjDCBiTBkBAIAATBeAwQDT6oQ AwQCmXCEAwQAmXCLMAwDBACZcJUDBAOZcJADBAOZcKADBACZcK0DBASZcLADBAGZ cNADBAGZcPAwDAMEAMCKbQMEBMCKYAMEAcCKdAMEAsCdCAMEAME1GTAhBAIAAjAb AwcAKgL3hAAgAwcAKgL3hAAwAwcBKgL3hIAAMA0GCSqGSIb3DQEBCwUAA4IBAQAc RfEHCLJG70HC5s7MgRhR9Gj83OtKrthBcWUt1oZqeGn7mAsRzqz59Y16tbk5BTlS e/Y00xDQA9plK8Ksx2IIyhtcXBQ4p++YbjDuu2HPF/hN32BdX9sdUilQ6Rygxlzv 9CN017fxnlP9qEeKPRyfvJgIdGPr9R5jeo9TrgtlgosjnmZ8f7586S72H+FXwL3S /oqVfysyqyxr96kvVxCXwOm6rtgHjuHNR5U2TEj4I1YK0wol3bElAeWiz7MwHOqa ggELhjdICM6QEP44ek0milQku2NmAagnDPTwJZD8r971B7bOs3FQy+gLddhQvY0r qyorjhgklcHux2739FkZ -----END CERTIFICATE-----Generated at Sun Jan 25 15:07:42 2026 by rpki-client