This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/u8jIlP-9sy1xmDDwt89PXIovv5w.roa File: u8jIlP-9sy1xmDDwt89PXIovv5w.roa (raw, json) Hash identifier: e83kW8pSB5IhX9GGs940RM/rz2pGIWlSPel7ssIVenI= Subject key identifier: BB:C8:C8:94:FF:BD:B3:2D:71:98:30:F0:B7:CF:4F:5C:8A:2F:BF:9C Certificate issuer: /CN=e1e8b7cab521e88e8022a36424544185538a7b33 Certificate serial: 019B797EF38ED5B22C094BCE7A9F698123D4 Authority key identifier: E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/u8jIlP-9sy1xmDDwt89PXIovv5w.roa Signing time: Thu 01 Jan 2026 12:18:41 +0000 ROA not before: Thu 01 Jan 2026 12:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52209 IP address blocks: 185.154.190.0/24 maxlen: 24 2a13:1640::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f3:8e:d5:b2:2c:09:4b:ce:7a:9f:69:81:23:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1e8b7cab521e88e8022a36424544185538a7b33 Validity Not Before: Jan 1 12:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbc8c894ffbdb32d719830f0b7cf4f5c8a2fbf9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a9:25:6c:40:88:19:b4:3f:61:39:82:33:1b: 3b:32:3e:b8:43:7a:e1:90:ec:7c:d6:53:20:14:b6: ab:d3:10:a8:d2:25:06:20:54:cb:5f:17:84:40:00: 7b:7c:bf:bb:70:cf:8b:b0:71:f4:6f:00:b9:cc:71: be:db:2b:a2:25:ad:01:fe:d6:37:97:3a:e0:c6:52: 34:86:53:51:a9:b4:5f:40:19:df:3d:ef:6c:62:38: 3a:b8:57:96:e5:c0:36:96:a5:04:cc:05:1b:99:c8: 31:cd:7a:6a:b0:59:55:03:85:a0:7c:8e:ea:70:40: a7:8c:e3:f8:e7:e7:d5:7c:ef:dc:0e:ba:b1:8b:82: 6d:ef:5d:ac:d5:ac:26:1d:ae:70:1b:01:7c:fa:52: 88:20:88:9c:0d:4d:1a:21:d4:91:b3:a5:da:31:33: 26:64:cb:bd:d6:53:4f:e8:5e:e1:76:8c:72:79:6d: 7a:a5:03:e6:ab:29:87:46:92:07:e5:b1:5b:32:4c: 63:69:44:72:36:b2:4c:a1:d2:99:8c:d6:a9:5c:7a: 0a:18:21:e5:66:7a:7b:49:5b:8e:b0:63:21:f9:c9: 79:5f:34:69:0e:20:86:06:ba:9d:91:0b:0c:5c:a5: 5a:b4:51:63:2c:87:9b:99:0b:c6:1e:3c:c0:ed:6b: 5e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C8:C8:94:FF:BD:B3:2D:71:98:30:F0:B7:CF:4F:5C:8A:2F:BF:9C X509v3 Authority Key Identifier: keyid:E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/u8jIlP-9sy1xmDDwt89PXIovv5w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.154.190.0/24 IPv6: 2a13:1640::/29 Signature Algorithm: sha256WithRSAEncryption 87:b2:72:43:39:1f:4b:e1:27:4b:a3:9f:f9:a1:da:b6:50:6b: 0c:9a:7e:7b:d2:d1:d1:52:32:2c:2d:14:91:92:f9:2b:c8:7f: 45:77:ab:6f:c1:63:5f:9c:37:c1:e6:e7:c2:99:8b:dd:11:a6: 88:9b:1c:d4:17:f2:55:61:d8:00:a8:4d:c8:ba:1f:f7:be:16: fd:ed:a1:15:89:c4:af:4c:b2:72:9c:29:e8:4d:05:53:e7:d2: 56:bf:9b:f1:4d:bb:ef:04:2b:6b:3f:ee:3d:f4:91:63:a7:98: ef:3f:92:e8:48:6b:c4:e8:4c:ca:e6:91:5f:10:cb:63:c1:37: b7:69:36:d7:92:2e:6a:32:35:c0:e6:6a:74:8e:41:1e:10:b4: b3:ee:42:42:a0:47:90:8a:b2:c8:01:4f:20:ff:77:ba:66:07: e1:a0:d3:c6:7f:4a:48:a6:54:54:a9:36:85:4d:de:30:0c:fb: 67:a9:2f:08:6d:74:d0:b4:ba:2e:75:a8:27:b5:9a:63:59:99: e5:bb:7f:28:9d:8d:ad:c0:81:cd:b6:ab:41:5c:58:14:48:9d: b7:0a:a3:fc:ac:1f:8c:cf:df:4e:bd:38:a6:ec:f9:d5:c9:e4: 11:95:7d:1e:9f:e3:d0:f8:a0:c8:c5:15:38:83:93:6f:84:fc: 70:f4:74:e3 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fvOO1bIsCUvOep9pgSPUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZThiN2NhYjUyMWU4OGU4MDIyYTM2NDI0NTQ0MTg1NTM4 YTdiMzMwHhcNMjYwMTAxMTIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmM4Yzg5NGZmYmRiMzJkNzE5ODMwZjBiN2NmNGY1YzhhMmZiZjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaklbECIGbQ/YTmCMxs7Mj64Q3rh kOx81lMgFLar0xCo0iUGIFTLXxeEQAB7fL+7cM+LsHH0bwC5zHG+2yuiJa0B/tY3 lzrgxlI0hlNRqbRfQBnfPe9sYjg6uFeW5cA2lqUEzAUbmcgxzXpqsFlVA4WgfI7q cECnjOP45+fVfO/cDrqxi4Jt712s1awmHa5wGwF8+lKIIIicDU0aIdSRs6XaMTMm ZMu91lNP6F7hdoxyeW16pQPmqymHRpIH5bFbMkxjaURyNrJModKZjNapXHoKGCHl Znp7SVuOsGMh+cl5XzRpDiCGBrqdkQsMXKVatFFjLIebmQvGHjzA7WtelwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLvIyJT/vbMtcZgw8LfPT1yKL7+cMB8GA1UdIwQY MBaAFOHot8q1IeiOgCKjZCRUQYVTinszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGVpM3lyVWg2STZBSXFOa0pGUkJoVk9LZXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8xNGYyYzUtNDZmZS00NjcwLTlkZDYt MjFjNTg0NzBiOGQyLzEvdThqSWxQLTlzeTF4bUREd3Q4OVBYSW92djV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8xNGYyYzUtNDZmZS00NjcwLTlkZDYtMjFjNTg0NzBiOGQy LzEvNGVpM3lyVWg2STZBSXFOa0pGUkJoVk9LZXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuZq+MA0E AgACMAcDBQMqExZAMA0GCSqGSIb3DQEBCwUAA4IBAQCHsnJDOR9L4SdLo5/5odq2 UGsMmn570tHRUjIsLRSRkvkryH9Fd6tvwWNfnDfB5ufCmYvdEaaImxzUF/JVYdgA qE3Iuh/3vhb97aEVicSvTLJynCnoTQVT59JWv5vxTbvvBCtrP+499JFjp5jvP5Lo SGvE6EzK5pFfEMtjwTe3aTbXki5qMjXA5mp0jkEeELSz7kJCoEeQirLIAU8g/3e6 ZgfhoNPGf0pIplRUqTaFTd4wDPtnqS8IbXTQtLoudagntZpjWZnlu38onY2twIHN tqtBXFgUSJ23CqP8rB+Mz99OvTim7PnVyeQRlX0en+PQ+KDIxRU4g5NvhPxw9HTj -----END CERTIFICATE-----Generated at Mon Jan 26 02:13:18 2026 by rpki-client