This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/b8pxCfgVbYZbiA_OA-s4IAg2LZI.roa File: b8pxCfgVbYZbiA_OA-s4IAg2LZI.roa (raw, json) Hash identifier: J+IrH96dkk4qiDFeus4aE0u+r2utLyjmelYRT1wTqnQ= Subject key identifier: 6F:CA:71:09:F8:15:6D:86:5B:88:0F:CE:03:EB:38:20:08:36:2D:92 Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 019B7B365588446FC3F6CAA0A30AC17432A1 Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/b8pxCfgVbYZbiA_OA-s4IAg2LZI.roa Signing time: Thu 01 Jan 2026 20:18:36 +0000 ROA not before: Thu 01 Jan 2026 20:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215066 IP address blocks: 31.222.220.0/24 maxlen: 24 31.222.221.0/24 maxlen: 24 31.222.222.0/24 maxlen: 24 31.222.223.0/24 maxlen: 24 185.253.124.0/24 maxlen: 24 185.253.125.0/24 maxlen: 24 185.253.126.0/24 maxlen: 24 185.253.127.0/24 maxlen: 24 188.64.36.0/22 maxlen: 24 194.164.226.0/24 maxlen: 24 194.164.227.0/24 maxlen: 24 194.164.228.0/24 maxlen: 24 194.164.229.0/24 maxlen: 24 195.22.134.0/24 maxlen: 24 195.22.135.0/24 maxlen: 24 195.144.8.0/24 maxlen: 24 2a07:244::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:55:88:44:6f:c3:f6:ca:a0:a3:0a:c1:74:32:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: Jan 1 20:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fca7109f8156d865b880fce03eb382008362d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:50:94:53:05:ae:ec:3d:f7:69:a4:6b:ec:10: 94:02:80:75:09:7f:47:d6:18:84:79:6b:da:ee:14: 6c:5f:4f:f1:83:3b:18:b5:4a:5d:46:04:51:06:a5: 96:02:91:8e:b5:0d:07:ad:2d:74:ab:4d:2b:ee:d3: 50:7b:eb:74:61:cd:ba:4f:43:66:b4:83:ff:37:1c: 1f:77:ca:0e:23:db:f6:cb:70:3c:ef:f6:fa:72:db: 11:1c:0a:00:c9:50:f3:ed:5d:bb:6f:27:94:4a:87: 69:a2:95:6c:9f:bd:c7:ac:6a:21:49:98:d6:77:70: e5:70:79:4d:4c:05:a7:0d:75:6a:b0:f3:a4:c6:96: b9:35:41:8b:5a:4f:ec:2b:e1:69:bb:d5:94:24:84: 5b:b7:e8:a0:c7:ec:91:9e:90:56:d0:5a:17:3e:a9: a3:87:1d:c5:24:3b:5b:d6:82:48:dd:9c:5a:e6:78: ec:b3:2e:30:79:b6:78:4b:51:2c:d8:59:10:41:4d: 11:43:67:14:87:79:3c:4b:63:e3:9a:32:61:ce:79: f2:71:51:48:b7:7f:9a:1b:a7:ff:a4:a4:58:00:98: 90:bc:06:3c:38:cd:55:7d:b7:43:68:37:60:fc:01: 03:03:07:68:c6:0a:14:29:48:99:d8:d0:19:0b:3b: df:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:CA:71:09:F8:15:6D:86:5B:88:0F:CE:03:EB:38:20:08:36:2D:92 X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/b8pxCfgVbYZbiA_OA-s4IAg2LZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.222.220.0/22 185.253.124.0/22 188.64.36.0/22 194.164.226.0-194.164.229.255 195.22.134.0/23 195.144.8.0/24 IPv6: 2a07:244::/32 Signature Algorithm: sha256WithRSAEncryption 7f:c6:54:f3:d8:bd:47:0c:44:5e:47:eb:83:92:4b:f3:d3:0c: 16:9c:7d:1d:7a:4d:ce:d2:d3:f9:f6:b9:3d:53:d7:51:1f:83: 58:a0:b5:aa:fd:1b:11:cf:97:3e:8d:25:dc:0f:9c:c2:60:91: a0:e0:f0:c6:99:38:ac:42:e4:f9:24:1f:9f:98:6c:28:ff:d3: fc:2c:32:bf:54:03:db:e6:d4:70:e5:0b:bf:71:ae:50:d9:66: 76:2e:97:3f:f3:f3:ab:ed:c4:d7:ef:e7:d5:d8:4b:07:e8:35: 03:46:0e:53:c6:2e:fe:7d:50:68:3d:73:84:8c:d0:33:73:4c: a0:23:00:a0:c8:9f:2f:2d:e1:d9:ba:67:63:52:8f:a2:d1:78: 7a:aa:03:1c:6c:41:2b:7f:9f:38:ce:ae:6e:f3:af:5a:d0:79: 18:50:eb:3d:80:9a:fb:ef:9e:b4:80:28:63:67:f0:6f:9d:13: f9:8c:d1:17:a3:12:c5:2e:ae:f5:40:c9:38:4a:5f:4e:0a:66: a5:d5:85:25:cd:ce:92:30:92:cb:60:69:a1:2c:87:b5:49:54: 1e:47:3d:36:08:9c:c6:b1:96:dd:37:3f:8e:83:f1:8a:9a:45: 2f:0f:40:58:f4:f8:c6:a4:74:fc:3e:22:7f:b1:34:8c:e8:24: 7f:7d:29:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgISAZt7NlWIRG/D9sqgowrBdDKhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjYwMTAxMjAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmNhNzEwOWY4MTU2ZDg2NWI4ODBmY2UwM2ViMzgyMDA4MzYyZDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1CUUwWu7D33aaRr7BCUAoB1CX9H 1hiEeWva7hRsX0/xgzsYtUpdRgRRBqWWApGOtQ0HrS10q00r7tNQe+t0Yc26T0Nm tIP/Nxwfd8oOI9v2y3A87/b6ctsRHAoAyVDz7V27byeUSodpopVsn73HrGohSZjW d3DlcHlNTAWnDXVqsPOkxpa5NUGLWk/sK+Fpu9WUJIRbt+igx+yRnpBW0FoXPqmj hx3FJDtb1oJI3Zxa5njssy4webZ4S1Es2FkQQU0RQ2cUh3k8S2PjmjJhznnycVFI t3+aG6f/pKRYAJiQvAY8OM1VfbdDaDdg/AEDAwdoxgoUKUiZ2NAZCzvfEQIDAQAB o4ICPjCCAjowHQYDVR0OBBYEFG/KcQn4FW2GW4gPzgPrOCAINi2SMB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvYjhweENmZ1ZiWVpiaUFfT0EtczRJQWcyTFpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAyBAIAATAsAwQCH97cAwQC uf18AwQCvEAkMAwDBAHCpOIDBAHCpOQDBAHDFoYDBADDkAgwDQQCAAIwBwMFACoH AkQwDQYJKoZIhvcNAQELBQADggEBAH/GVPPYvUcMRF5H64OSS/PTDBacfR16Tc7S 0/n2uT1T11Efg1igtar9GxHPlz6NJdwPnMJgkaDg8MaZOKxC5PkkH5+YbCj/0/ws Mr9UA9vm1HDlC79xrlDZZnYulz/z86vtxNfv59XYSwfoNQNGDlPGLv59UGg9c4SM 0DNzTKAjAKDIny8t4dm6Z2NSj6LReHqqAxxsQSt/nzjOrm7zr1rQeRhQ6z2Amvvv nrSAKGNn8G+dE/mM0RejEsUurvVAyThKX04KZqXVhSXNzpIwkstgaaEsh7VJVB5H PTYInMaxlt03P46D8YqaRS8PQFj0+MakdPw+In+xNIzoJH99Kcg= -----END CERTIFICATE-----Generated at Mon Jan 26 03:05:50 2026 by rpki-client