This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/8mKhApHYp_839P6yQXD0oAwm2qo.roa File: 8mKhApHYp_839P6yQXD0oAwm2qo.roa (raw, json) Hash identifier: dEUbCXMVw9xAIsh0W5Y8ji1NQ46062f5dJUppcXKzCY= Subject key identifier: F2:62:A1:02:91:D8:A7:FF:37:F4:FE:B2:41:70:F4:A0:0C:26:DA:AA Certificate issuer: /CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6 Certificate serial: 019B7F8529367DB3FDBC516388524770115E Authority key identifier: 88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/8mKhApHYp_839P6yQXD0oAwm2qo.roa Signing time: Fri 02 Jan 2026 16:23:11 +0000 ROA not before: Fri 02 Jan 2026 16:23:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60855 IP address blocks: 143.196.14.0/24 maxlen: 24 143.196.22.0/23 maxlen: 23 143.196.22.0/24 maxlen: 24 143.196.23.0/24 maxlen: 24 143.196.146.0/23 maxlen: 23 143.196.146.0/24 maxlen: 24 143.196.147.0/24 maxlen: 24 143.196.148.0/24 maxlen: 24 143.196.172.0/24 maxlen: 24 143.196.175.0/24 maxlen: 24 143.196.176.0/24 maxlen: 24 143.196.187.0/24 maxlen: 24 143.196.192.0/24 maxlen: 24 143.196.199.0/24 maxlen: 24 143.196.200.0/24 maxlen: 24 143.196.207.0/24 maxlen: 24 143.196.208.0/24 maxlen: 24 143.196.215.0/24 maxlen: 24 143.196.224.0/24 maxlen: 24 143.196.231.0/24 maxlen: 24 143.196.251.0/24 maxlen: 24 143.196.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:29:36:7d:b3:fd:bc:51:63:88:52:47:70:11:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6 Validity Not Before: Jan 2 16:23:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f262a10291d8a7ff37f4feb24170f4a00c26daaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7b:77:6d:5b:d1:55:57:8d:72:ba:8f:10:3d: d6:b6:cd:84:07:45:fd:36:95:41:12:45:17:b1:33: e6:49:b5:2e:5d:2a:8a:48:08:5b:1c:ef:60:20:2c: d1:71:d2:6f:fe:b5:20:b5:06:04:31:9a:21:50:08: 62:17:64:d4:c2:8c:fd:0c:e8:fe:44:ab:91:d8:12: f4:f6:fd:10:4c:ae:7a:22:96:c1:07:87:a4:64:05: 7c:40:fb:11:39:5e:95:c7:0c:53:bc:39:1c:4c:c4: 2c:48:4f:cd:ae:59:48:19:ec:2f:95:ac:26:f9:df: 2f:db:1f:43:1c:73:42:07:4c:28:94:8d:8c:35:48: bd:23:63:17:09:d1:8a:b6:af:64:21:10:91:8e:19: 22:52:9c:cf:ec:1f:9c:d4:36:3d:76:af:83:02:15: 5f:b4:61:69:57:4e:8b:5b:81:31:2e:a4:6a:92:9d: f7:d2:43:ea:d5:13:74:32:71:71:d0:59:58:be:e4: 5b:3c:61:48:b6:79:b3:c6:9e:e7:fc:ff:33:9d:4e: bf:a2:01:d7:a5:c6:ed:24:6e:ec:a0:de:9d:78:39: 31:0b:6c:0c:35:11:7c:0b:fb:24:f1:12:b8:ed:3e: d6:8f:55:91:22:bb:1e:48:58:ba:fe:84:04:6e:76: 7d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:62:A1:02:91:D8:A7:FF:37:F4:FE:B2:41:70:F4:A0:0C:26:DA:AA X509v3 Authority Key Identifier: keyid:88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/8mKhApHYp_839P6yQXD0oAwm2qo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.196.14.0/24 143.196.22.0/23 143.196.146.0-143.196.148.255 143.196.172.0/24 143.196.175.0-143.196.176.255 143.196.187.0/24 143.196.192.0/24 143.196.199.0-143.196.200.255 143.196.207.0-143.196.208.255 143.196.215.0/24 143.196.224.0/24 143.196.231.0/24 143.196.251.0/24 143.196.255.0/24 Signature Algorithm: sha256WithRSAEncryption b2:8d:bb:f9:57:91:88:bd:ed:f9:c4:be:3d:c5:e4:9b:f8:7d: 79:cd:7a:9c:0c:9c:c3:66:12:4b:2a:81:ba:f2:32:dd:86:84: f0:4f:81:ff:42:95:55:88:a0:b8:e9:68:48:4f:d6:96:4a:76: 74:cd:c1:83:26:7d:d9:b1:90:6d:19:9a:df:ec:2d:a9:7d:8d: 6d:37:56:00:1b:86:13:94:c8:81:a0:c5:2c:de:61:22:10:24: ab:92:be:7b:93:3f:59:a0:ff:cd:95:d4:fa:37:72:e3:25:d4: 49:b8:af:7c:39:23:73:e5:cb:59:33:fd:a1:fc:fb:42:73:b4: 9f:55:0d:86:35:73:e2:0c:64:75:61:d7:82:0e:f6:12:74:33: b8:68:93:74:9b:8f:cb:74:06:74:9f:7d:e5:bd:76:5a:b2:8d: b6:e6:a8:e9:f2:d6:e8:55:5c:89:5f:52:56:2b:9d:46:98:64: b3:df:dd:8e:2c:05:e1:35:f9:c9:57:cd:54:e3:43:8d:20:9a: 83:70:e2:3f:a1:ab:c1:e0:b6:b9:50:66:a4:70:0a:06:c5:2e: f3:5a:c2:b9:d8:5e:97:64:56:84:5e:9f:e1:3a:5e:31:3e:0e: f7:b1:a1:04:b8:8f:3e:e1:3b:63:37:24:c6:42:8c:21:86:b7: 5b:fa:42:35 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgISAZt/hSk2fbP9vFFjiFJHcBFeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MWJkMTQwMjkyNGVjMmE2NDRlOGY1NGU2OTk0Y2I0YWM4 ZTI0YTYwHhcNMjYwMTAyMTYyMzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjYyYTEwMjkxZDhhN2ZmMzdmNGZlYjI0MTcwZjRhMDBjMjZkYWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnt3bVvRVVeNcrqPED3Wts2EB0X9 NpVBEkUXsTPmSbUuXSqKSAhbHO9gICzRcdJv/rUgtQYEMZohUAhiF2TUwoz9DOj+ RKuR2BL09v0QTK56IpbBB4ekZAV8QPsROV6VxwxTvDkcTMQsSE/NrllIGewvlawm +d8v2x9DHHNCB0wolI2MNUi9I2MXCdGKtq9kIRCRjhkiUpzP7B+c1DY9dq+DAhVf tGFpV06LW4ExLqRqkp330kPq1RN0MnFx0FlYvuRbPGFItnmzxp7n/P8znU6/ogHX pcbtJG7soN6deDkxC2wMNRF8C/sk8RK47T7Wj1WRIrseSFi6/oQEbnZ9PQIDAQAB o4ICeDCCAnQwHQYDVR0OBBYEFPJioQKR2Kf/N/T+skFw9KAMJtqqMB8GA1UdIwQY MBaAFIgb0UApJOwqZE6PVOaZTLSsjiSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJ2UlFDa2s3Q3BrVG85VTVwbE10S3lPSktZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9kY2QzYjctN2NjMC00YzQ5LWJhYjMt N2EwYjE0NWNmNjJiLzEvOG1LaEFwSFlwXzgzOVA2eVFYRDBvQXdtMnFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9kY2QzYjctN2NjMC00YzQ5LWJhYjMtN2EwYjE0NWNmNjJi LzEvaUJ2UlFDa2s3Q3BrVG85VTVwbE10S3lPSktZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEAI/EDgME AY/EFjAMAwQBj8SSAwQAj8SUAwQAj8SsMAwDBACPxK8DBACPxLADBACPxLsDBACP xMAwDAMEAI/ExwMEAI/EyDAMAwQAj8TPAwQAj8TQAwQAj8TXAwQAj8TgAwQAj8Tn AwQAj8T7AwQAj8T/MA0GCSqGSIb3DQEBCwUAA4IBAQCyjbv5V5GIve35xL49xeSb +H15zXqcDJzDZhJLKoG68jLdhoTwT4H/QpVViKC46WhIT9aWSnZ0zcGDJn3ZsZBt GZrf7C2pfY1tN1YAG4YTlMiBoMUs3mEiECSrkr57kz9ZoP/NldT6N3LjJdRJuK98 OSNz5ctZM/2h/PtCc7SfVQ2GNXPiDGR1YdeCDvYSdDO4aJN0m4/LdAZ0n33lvXZa so225qjp8tboVVyJX1JWK51GmGSz392OLAXhNfnJV81U40ONIJqDcOI/oavB4La5 UGakcAoGxS7zWsK52F6XZFaEXp/hOl4xPg73saEEuI8+4TtjNyTGQowhhrdb+kI1 -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:03 2026 by rpki-client