This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/S8bTyJBZhokS15ViVs9bepd7lJY.roa File: S8bTyJBZhokS15ViVs9bepd7lJY.roa (raw, json) Hash identifier: 8XtBGUfQ0OE1e70++hji6820sGNOYH1fI8pCKjr4jm4= Subject key identifier: 4B:C6:D3:C8:90:59:86:89:12:D7:95:62:56:CF:5B:7A:97:7B:94:96 Certificate issuer: /CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc Certificate serial: 019B79ECCAE4F4BBDC6AA4C4454C5535EA3A Authority key identifier: 4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/S8bTyJBZhokS15ViVs9bepd7lJY.roa Signing time: Thu 01 Jan 2026 14:18:40 +0000 ROA not before: Thu 01 Jan 2026 14:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49556 IP address blocks: 185.155.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ca:e4:f4:bb:dc:6a:a4:c4:45:4c:55:35:ea:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc Validity Not Before: Jan 1 14:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bc6d3c89059868912d7956256cf5b7a977b9496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7f:02:a3:3b:64:36:d8:f4:0c:68:f8:24:88: 7a:88:21:45:92:91:eb:da:a5:c2:3e:1a:5d:37:b7: 24:a4:d8:0d:e3:c5:21:7b:2f:9c:a9:19:31:b5:f2: c3:8e:ec:c3:45:e4:7c:15:d2:0d:d3:9d:70:d7:2c: da:a6:88:59:01:0c:ed:1d:15:77:ef:92:28:a5:71: 12:ea:64:50:d6:aa:b9:90:ce:c0:b1:8a:78:a2:c0: 27:20:fd:ee:af:0a:79:5d:52:a0:90:28:42:97:d9: 35:1e:3c:f3:e4:15:68:5c:71:40:56:f9:b2:99:fb: 19:d9:35:23:d0:cc:5d:b1:04:2e:11:6a:2d:96:93: ee:f4:99:00:3e:89:5a:e3:e1:0a:21:d2:26:2c:05: 18:13:41:d1:8a:d3:fe:eb:22:9e:8b:6d:2e:49:6c: 11:42:8a:61:e7:4a:14:72:8f:85:19:5e:d1:18:d2: 62:bc:62:6e:fd:0a:35:a1:c6:a1:78:bd:fe:ac:ab: 88:80:8f:11:40:cd:e8:9d:82:28:95:d4:ee:9c:7e: 8c:38:f9:bb:6c:65:2e:ab:b5:53:3c:c1:41:1e:03: 5f:ff:a6:4c:a2:c1:25:3f:95:ac:00:e2:44:d9:b3: 91:0d:87:cb:ec:5b:e2:72:3c:ea:c5:7f:df:a3:fd: c2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C6:D3:C8:90:59:86:89:12:D7:95:62:56:CF:5B:7A:97:7B:94:96 X509v3 Authority Key Identifier: keyid:4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/S8bTyJBZhokS15ViVs9bepd7lJY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.72.0/24 Signature Algorithm: sha256WithRSAEncryption 63:08:c1:a3:75:4c:a7:de:b0:20:82:56:18:62:cc:77:d9:90: 36:0b:17:5d:26:d7:2c:ea:0c:91:54:0c:d7:45:01:69:59:4f: 11:7a:a6:df:e2:0d:cc:e6:83:eb:25:ef:05:6f:e2:da:ad:86: 51:58:2a:67:a3:3e:33:40:f8:df:5f:3e:70:27:a9:22:6a:83: 8e:aa:29:9a:d7:c6:2c:22:12:c7:28:6d:29:b3:09:86:a4:b7: e5:a6:4f:77:dd:95:3f:11:c8:5b:34:97:d7:63:79:d1:e6:a4: b8:d1:37:f2:cf:40:ff:31:3a:c0:7f:9e:2c:56:09:24:15:e3: 5f:26:6f:f8:d7:de:80:ff:91:14:5c:33:2c:7a:f4:f9:10:2c: 01:63:e4:ab:8b:43:f4:32:7b:45:f8:ac:22:e5:92:37:ba:d0: ed:37:a5:8f:17:ff:42:ae:e6:c7:1a:21:ff:16:77:01:2a:ca: 3f:b5:66:b9:eb:5e:e3:75:27:be:b6:4a:14:a4:8e:09:ca:5f: 75:be:e6:b0:e8:7e:aa:a8:e0:b2:1d:79:8e:6d:49:9a:66:3e: 1d:4b:09:2c:7c:6d:c4:a7:84:d2:2b:a5:14:21:18:a2:aa:19: 73:6b:17:f8:52:bc:55:56:15:5b:7a:f3:04:b8:97:11:f5:1b: c4:c1:cd:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Mrk9LvcaqTERUxVNeo6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlODU5NGViZGM3ZDdjZjdkYTJlMDAzYzg0ZDg2YTdjMWFm ODcxYmMwHhcNMjYwMTAxMTQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmM2ZDNjODkwNTk4Njg5MTJkNzk1NjI1NmNmNWI3YTk3N2I5NDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAin8CoztkNtj0DGj4JIh6iCFFkpHr 2qXCPhpdN7ckpNgN48Uhey+cqRkxtfLDjuzDReR8FdIN051w1yzapohZAQztHRV3 75IopXES6mRQ1qq5kM7AsYp4osAnIP3urwp5XVKgkChCl9k1Hjzz5BVoXHFAVvmy mfsZ2TUj0MxdsQQuEWotlpPu9JkAPola4+EKIdImLAUYE0HRitP+6yKei20uSWwR Qoph50oUco+FGV7RGNJivGJu/Qo1ocaheL3+rKuIgI8RQM3onYIoldTunH6MOPm7 bGUuq7VTPMFBHgNf/6ZMosElP5WsAOJE2bORDYfL7FvicjzqxX/fo/3CrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEvG08iQWYaJEteVYlbPW3qXe5SWMB8GA1UdIwQY MBaAFE6FlOvcfXz32i4APITYanwa+HG8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG9XVTY5eDlmUGZhTGdBOGhOaHFmQnI0Y2J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9mZmU3ZDUtZDkxZC00OGFlLThlZTUt Y2U5NGUzOGU4MmQ2LzEvUzhiVHlKQlpob2tTMTVWaVZzOWJlcGQ3bEpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9mZmU3ZDUtZDkxZC00OGFlLThlZTUtY2U5NGUzOGU4MmQ2 LzEvVG9XVTY5eDlmUGZhTGdBOGhOaHFmQnI0Y2J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZtIMA0G CSqGSIb3DQEBCwUAA4IBAQBjCMGjdUyn3rAgglYYYsx32ZA2CxddJtcs6gyRVAzX RQFpWU8Reqbf4g3M5oPrJe8Fb+LarYZRWCpnoz4zQPjfXz5wJ6kiaoOOqima18Ys IhLHKG0pswmGpLflpk933ZU/EchbNJfXY3nR5qS40Tfyz0D/MTrAf54sVgkkFeNf Jm/4196A/5EUXDMsevT5ECwBY+Sri0P0MntF+Kwi5ZI3utDtN6WPF/9CrubHGiH/ FncBKso/tWa5617jdSe+tkoUpI4Jyl91vuaw6H6qqOCyHXmObUmaZj4dSwksfG3E p4TSK6UUIRiiqhlzaxf4UrxVVhVbevMEuJcR9RvEwc1Z -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:47 2026 by rpki-client