This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/Ps8zJSRRSbDwX3XJR7eOmD7m2uE.roa File: Ps8zJSRRSbDwX3XJR7eOmD7m2uE.roa (raw, json) Hash identifier: 4gOrAZeHV5DljjLNX3EiWeFFJsFqa+d+OW/WO4pBac4= Subject key identifier: 3E:CF:33:25:24:51:49:B0:F0:5F:75:C9:47:B7:8E:98:3E:E6:DA:E1 Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db Certificate serial: 019B7CECFB6A589F55A160A737D13F9BE904 Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/Ps8zJSRRSbDwX3XJR7eOmD7m2uE.roa Signing time: Fri 02 Jan 2026 04:17:44 +0000 ROA not before: Fri 02 Jan 2026 04:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8903 IP address blocks: 185.123.120.0/22 maxlen: 24 212.66.160.0/24 maxlen: 24 212.80.160.0/19 maxlen: 24 213.170.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:fb:6a:58:9f:55:a1:60:a7:37:d1:3f:9b:e9:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db Validity Not Before: Jan 2 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ecf3325245149b0f05f75c947b78e983ee6dae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e8:4f:6f:d9:26:c5:45:82:50:d8:e7:ba:4f: 5f:22:ec:74:7d:91:55:7e:9c:fa:3a:5e:d9:53:35: 8f:eb:0c:2c:13:3b:97:1d:19:0f:95:b3:aa:75:28: 3d:f8:4c:40:e3:1b:28:75:d1:50:99:54:50:d4:26: dd:a2:da:c5:70:68:87:ee:f1:a5:f4:75:ab:a2:d4: ff:8a:6d:f4:22:9f:9e:a5:ea:18:2f:46:e0:ae:fa: 75:f1:5b:26:7c:10:f2:cf:69:ec:b8:04:fb:a4:94: 69:35:7b:fc:b0:4d:97:8a:ee:5c:d8:d4:ef:9a:06: e9:b8:53:56:6d:ff:8e:5c:85:10:e0:6f:7a:f7:e3: 1f:de:bd:c2:9c:b8:e7:1d:49:24:35:df:b6:51:6e: 1e:48:ca:b5:fe:a8:43:eb:4b:a5:d2:b6:7d:26:c1: 3d:4f:20:4b:9e:10:6e:2e:53:0f:32:4e:f9:5e:68: 3d:14:57:f0:41:84:65:8b:c3:56:01:96:9b:58:75: 30:b4:50:cb:80:a4:9c:2b:95:11:29:1a:04:5d:18: 6d:a7:50:ab:ca:88:d2:bc:dd:d4:e9:f0:3d:b5:06: 50:f0:53:31:84:ca:ca:ff:f7:33:f9:4f:e2:9d:92: 92:25:eb:2c:18:4e:a3:be:da:0f:08:ac:23:4d:2b: d8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CF:33:25:24:51:49:B0:F0:5F:75:C9:47:B7:8E:98:3E:E6:DA:E1 X509v3 Authority Key Identifier: keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/Ps8zJSRRSbDwX3XJR7eOmD7m2uE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.123.120.0/22 212.66.160.0/24 212.80.160.0/19 213.170.32.0/19 Signature Algorithm: sha256WithRSAEncryption 9a:bb:61:27:b9:0d:37:68:8a:b6:b3:78:5f:f7:ee:f8:f1:37: be:3a:91:a5:f1:e9:3c:13:48:4d:69:44:27:62:8d:c2:3f:56: cc:f6:b6:a5:f9:73:30:75:8e:76:fa:98:eb:fe:7b:48:9b:51: 13:79:bb:36:78:d3:7a:92:5a:9d:b7:08:8c:37:d1:b7:a6:81: f0:9d:46:cd:b9:68:b1:16:46:71:be:91:59:be:b0:42:9a:39: 75:f6:e6:55:a4:13:22:8e:8e:fd:8b:0f:b0:22:b9:62:22:bd: 6f:3a:ac:75:35:50:44:e1:58:3a:21:29:b9:f8:5f:ba:f2:28: 61:14:b0:a7:50:c2:97:d9:0f:b6:2e:89:46:3a:ac:90:6f:91: dd:57:0b:67:e4:dd:19:f0:20:86:ab:f1:cc:c6:0d:95:0e:03: b3:c0:fe:9c:a5:f5:35:0c:ca:44:a2:3c:e4:b4:23:a8:c0:46: ec:45:a3:62:9a:56:ee:d2:75:5a:10:7b:2d:fc:de:56:8a:c3: 96:d1:a9:34:a1:90:77:d8:dd:8a:29:be:8d:04:8f:39:a2:de: 37:1a:ec:b0:fc:97:2d:bb:1c:7a:f1:08:7b:b1:8a:43:b2:15: 53:0a:5b:30:c7:2f:97:f5:3f:dd:c5:28:c1:42:e6:c6:ca:50: 74:00:ac:8e -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt87PtqWJ9VoWCnN9E/m+kEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NDAzYjVlNDVjZDU4YmU1ZjZjNWQzM2ZhNTY1YWI0OTIy M2UzZGIwHhcNMjYwMTAyMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWNmMzMyNTI0NTE0OWIwZjA1Zjc1Yzk0N2I3OGU5ODNlZTZkYWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+hPb9kmxUWCUNjnuk9fIux0fZFV fpz6Ol7ZUzWP6wwsEzuXHRkPlbOqdSg9+ExA4xsoddFQmVRQ1CbdotrFcGiH7vGl 9HWrotT/im30Ip+epeoYL0bgrvp18VsmfBDyz2nsuAT7pJRpNXv8sE2Xiu5c2NTv mgbpuFNWbf+OXIUQ4G969+Mf3r3CnLjnHUkkNd+2UW4eSMq1/qhD60ul0rZ9JsE9 TyBLnhBuLlMPMk75Xmg9FFfwQYRli8NWAZabWHUwtFDLgKScK5URKRoEXRhtp1Cr yojSvN3U6fA9tQZQ8FMxhMrK//cz+U/inZKSJessGE6jvtoPCKwjTSvYKQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFD7PMyUkUUmw8F91yUe3jpg+5trhMB8GA1UdIwQY MBaAFOhAO15FzVi+X2xdM/pWWrSSI+PbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEt YTg3MWVjYzIxMmE2LzEvUHM4ekpTUlJTYkR3WDNYSlI3ZU9tRDdtMnVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEtYTg3MWVjYzIxMmE2 LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCuXt4AwQA 1EKgAwQF1FCgAwQF1aogMA0GCSqGSIb3DQEBCwUAA4IBAQCau2EnuQ03aIq2s3hf 9+748Te+OpGl8ek8E0hNaUQnYo3CP1bM9ral+XMwdY52+pjr/ntIm1ETebs2eNN6 klqdtwiMN9G3poHwnUbNuWixFkZxvpFZvrBCmjl19uZVpBMijo79iw+wIrliIr1v Oqx1NVBE4Vg6ISm5+F+68ihhFLCnUMKX2Q+2LolGOqyQb5HdVwtn5N0Z8CCGq/HM xg2VDgOzwP6cpfU1DMpEojzktCOowEbsRaNimlbu0nVaEHst/N5WisOW0ak0oZB3 2N2KKb6NBI85ot43Guyw/Jctuxx68Qh7sYpDshVTClswxy+X9T/dxSjBQubGylB0 AKyO -----END CERTIFICATE-----Generated at Mon Jan 26 05:49:42 2026 by rpki-client