This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/1-8pYu0OrjC9qLQ6X0Vz4rzpi4xs.roa File: 1-8pYu0OrjC9qLQ6X0Vz4rzpi4xs.roa (raw, json) Hash identifier: v8h+idHdPhaBswH4S1i+10SArJAwwzpb48HkIAMaMbM= Subject key identifier: FB:CA:58:BB:43:AB:8C:2F:6A:2D:0E:97:D1:5C:F8:AF:3A:62:E3:1B Certificate issuer: /CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c Certificate serial: 019B7BA36B8034020D387AE7D558660FC3EF Authority key identifier: 74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/1-8pYu0OrjC9qLQ6X0Vz4rzpi4xs.roa Signing time: Thu 01 Jan 2026 22:17:46 +0000 ROA not before: Thu 01 Jan 2026 22:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198473 IP address blocks: 2.59.184.0/22 maxlen: 22 91.235.100.0/24 maxlen: 24 185.149.229.0/24 maxlen: 24 185.149.230.0/24 maxlen: 24 2a10:b080::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:6b:80:34:02:0d:38:7a:e7:d5:58:66:0f:c3:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c Validity Not Before: Jan 1 22:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbca58bb43ab8c2f6a2d0e97d15cf8af3a62e31b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d6:a5:e9:19:49:ba:d2:90:2a:6f:bd:eb:bf: 90:dd:cd:08:8a:81:04:8c:64:72:3e:08:de:1a:9d: ce:df:b3:2e:9c:3c:dc:dd:50:d1:c3:4a:9f:35:1c: 79:b5:5e:e1:a5:99:fa:de:73:5d:f6:d3:70:96:fb: 76:86:1f:18:63:e7:a9:cc:a2:ad:68:04:be:9c:0e: ff:7c:e3:ea:86:71:b7:c7:f1:a8:68:2e:54:21:46: c2:ad:06:aa:fa:05:3a:2b:41:0f:26:c9:37:53:d6: 1e:7d:5c:c6:02:fa:b4:b9:d2:3d:1d:f0:0c:8b:31: 61:32:e2:f5:42:cc:cf:70:59:3a:0a:70:18:c3:c6: 21:5e:9b:e1:21:bd:cf:6c:98:e7:41:83:7e:84:e8: 79:e4:f9:b5:d7:72:c8:2f:6f:a7:aa:a8:61:2a:fd: 85:cf:d8:eb:a5:ff:57:b8:6d:dd:ab:e6:12:13:a0: 8c:89:db:2d:aa:71:0d:21:00:ff:49:dc:87:14:29: 0e:52:a7:d7:36:13:de:94:b3:bd:d1:6f:e4:9a:ea: be:1b:24:75:36:a4:17:03:42:5b:b7:9e:7a:a2:cb: 4e:ec:ae:f6:91:6e:c3:5a:a5:2e:f4:50:37:e5:2a: d6:39:6e:32:8d:8e:25:e9:24:04:c8:b3:f8:8c:69: 3e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:CA:58:BB:43:AB:8C:2F:6A:2D:0E:97:D1:5C:F8:AF:3A:62:E3:1B X509v3 Authority Key Identifier: keyid:74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/1-8pYu0OrjC9qLQ6X0Vz4rzpi4xs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.184.0/22 91.235.100.0/24 185.149.229.0-185.149.230.255 IPv6: 2a10:b080::/29 Signature Algorithm: sha256WithRSAEncryption 86:f3:23:c2:ba:2a:87:42:bf:78:1a:16:9f:b8:94:a8:10:00: cf:c7:6e:6f:d5:36:36:05:93:e2:f8:ed:43:2b:99:8a:11:c3: 00:5a:2e:ed:1f:48:63:da:54:de:ca:a3:36:1a:3b:84:d3:5d: 30:30:8b:88:c8:2e:da:12:2d:ec:a2:1a:c4:92:1a:ca:a0:93: 25:de:b9:ec:1a:b7:93:03:6b:d3:6e:76:b9:41:51:e9:66:6a: 4d:d2:b7:37:24:4e:53:3b:d1:7e:d5:97:ae:cb:60:df:7d:45: a5:8e:d0:42:fb:bc:59:fc:d4:a1:db:1c:b3:3b:9a:9b:62:43: 0b:c4:dc:1b:7b:9d:8b:34:d0:a8:0a:06:1b:63:cf:cf:a7:74: 58:4b:69:90:f9:86:2a:74:4f:cb:ab:8d:b2:22:df:f5:55:4b: 40:d4:f3:84:e0:9b:08:1f:90:14:40:b1:51:dd:d9:2e:6e:40: 11:5f:09:95:86:46:6f:df:e5:0b:28:e7:da:a9:35:53:5f:60: e6:d1:22:81:36:92:b3:48:fb:d9:b5:9a:06:e6:67:77:54:aa: da:31:69:e5:7a:1b:d1:8f:b4:e0:e0:03:3b:26:fc:09:fe:c7: 8b:44:c5:e2:e0:df:fa:b8:16:dc:33:e2:55:50:1e:a0:3b:da: 9f:9e:de:e2 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt7o2uANAINOHrn1VhmD8PvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTBjZTZiNmY4Zjc1MGUwMzU4NGViYmQ3YmRhZDBmMTFm YmUzMWMwHhcNMjYwMTAxMjIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmNhNThiYjQzYWI4YzJmNmEyZDBlOTdkMTVjZjhhZjNhNjJlMzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtal6RlJutKQKm+967+Q3c0IioEE jGRyPgjeGp3O37MunDzc3VDRw0qfNRx5tV7hpZn63nNd9tNwlvt2hh8YY+epzKKt aAS+nA7/fOPqhnG3x/GoaC5UIUbCrQaq+gU6K0EPJsk3U9YefVzGAvq0udI9HfAM izFhMuL1QszPcFk6CnAYw8YhXpvhIb3PbJjnQYN+hOh55Pm113LIL2+nqqhhKv2F z9jrpf9XuG3dq+YSE6CMidstqnENIQD/SdyHFCkOUqfXNhPelLO90W/kmuq+GyR1 NqQXA0Jbt556ostO7K72kW7DWqUu9FA35SrWOW4yjY4l6SQEyLP4jGk+4wIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFPvKWLtDq4wvai0Ol9Fc+K86YuMbMB8GA1UdIwQY MBaAFHSQzmtvj3UOA1hOu9e9rQ8R++McMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9lZDhlYmEtNmJkNC00NDM4LWIzZTAt YzQ5NmY5Y2FmYTgzLzEvMS04cFl1ME9yakM5cUxRNlgwVno0cnpwaTR4cy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZjcvZWQ4ZWJhLTZiZDQtNDQzOC1iM2UwLWM0OTZmOWNhZmE4 My8xL2RKRE9hMi1QZFE0RFdFNjcxNzJ0RHhINzR4dy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBCBggrBgEFBQcBBwEB/wQzMDEwIAQCAAEwGgMEAgI7uAME AFvrZDAMAwQAuZXlAwQAuZXmMA0EAgACMAcDBQMqELCAMA0GCSqGSIb3DQEBCwUA A4IBAQCG8yPCuiqHQr94GhafuJSoEADPx25v1TY2BZPi+O1DK5mKEcMAWi7tH0hj 2lTeyqM2GjuE010wMIuIyC7aEi3sohrEkhrKoJMl3rnsGreTA2vTbna5QVHpZmpN 0rc3JE5TO9F+1Zeuy2DffUWljtBC+7xZ/NSh2xyzO5qbYkMLxNwbe52LNNCoCgYb Y8/Pp3RYS2mQ+YYqdE/Lq42yIt/1VUtA1POE4JsIH5AUQLFR3dkubkARXwmVhkZv 3+ULKOfaqTVTX2Dm0SKBNpKzSPvZtZoG5md3VKraMWnlehvRj7Tg4AM7JvwJ/seL RMXi4N/6uBbcM+JVUB6gO9qfnt7i -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:11 2026 by rpki-client