This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/8aFsvbvvtoXgKKeiSZDIorn0lcs.roa File: 8aFsvbvvtoXgKKeiSZDIorn0lcs.roa (raw, json) Hash identifier: wv6uTigREH5R3i/ivV6vqDKvGBKTQpySFX+WLF4afYM= Subject key identifier: F1:A1:6C:BD:BB:EF:B6:85:E0:28:A7:A2:49:90:C8:A2:B9:F4:95:CB Certificate issuer: /CN=1acbdd00d27b8a8befc866caf378f19027684769 Certificate serial: 019B7C12445391F1A277718621CD201FCEA9 Authority key identifier: 1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/8aFsvbvvtoXgKKeiSZDIorn0lcs.roa Signing time: Fri 02 Jan 2026 00:18:50 +0000 ROA not before: Fri 02 Jan 2026 00:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35717 IP address blocks: 185.12.48.0/22 maxlen: 22 185.114.4.0/22 maxlen: 22 185.128.236.0/23 maxlen: 23 185.128.238.0/24 maxlen: 24 185.129.44.0/22 maxlen: 22 185.199.40.0/22 maxlen: 24 193.36.45.0/24 maxlen: 24 195.137.184.0/24 maxlen: 24 195.200.195.0/24 maxlen: 24 2a03:7fc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:44:53:91:f1:a2:77:71:86:21:cd:20:1f:ce:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acbdd00d27b8a8befc866caf378f19027684769 Validity Not Before: Jan 2 00:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1a16cbdbbefb685e028a7a24990c8a2b9f495cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:46:45:08:27:7f:36:fd:4e:66:7e:ab:35:90: 8d:c9:c3:a8:33:77:62:8c:1b:1c:ce:44:7f:dd:17: fa:33:6c:26:6f:80:01:44:d8:aa:df:67:c3:4a:e8: ed:e1:e1:d2:c2:74:f9:a3:3f:83:42:22:97:1b:2c: 3c:ea:f8:32:4b:86:a0:b5:97:02:06:c3:18:7f:07: f7:ec:b3:78:0a:8a:bd:f8:21:33:8e:ce:82:e8:f4: 75:23:89:e2:93:a2:c9:4b:fe:6a:cd:d2:da:56:77: 0f:97:85:b1:f4:95:bd:40:65:bd:53:4b:3b:5d:a7: e4:7f:af:6d:94:b5:d1:ba:8f:32:0f:32:18:7b:e6: d6:2a:fe:7d:a1:f5:6b:19:a8:11:54:f0:46:f9:10: 20:e1:e1:0c:57:30:60:09:aa:7e:c0:e2:8c:42:d1: 90:41:c5:64:e7:06:31:a6:a5:16:ab:2c:c0:27:3b: 3f:bf:48:88:6c:28:a1:3d:50:7a:42:95:e7:ee:c2: e3:75:4f:25:98:24:ab:75:01:6f:dc:5b:76:12:ec: d4:94:1c:6f:03:86:f3:31:fb:b2:d9:83:c1:88:ee: ec:43:28:35:7f:8f:af:90:39:28:2b:da:41:c6:a6: f6:c2:b1:7e:da:a4:bc:87:2f:7b:0f:fb:1d:5e:6e: f9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A1:6C:BD:BB:EF:B6:85:E0:28:A7:A2:49:90:C8:A2:B9:F4:95:CB X509v3 Authority Key Identifier: keyid:1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/8aFsvbvvtoXgKKeiSZDIorn0lcs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.12.48.0/22 185.114.4.0/22 185.128.236.0-185.128.238.255 185.129.44.0/22 185.199.40.0/22 193.36.45.0/24 195.137.184.0/24 195.200.195.0/24 IPv6: 2a03:7fc0::/32 Signature Algorithm: sha256WithRSAEncryption 32:2d:08:ce:87:97:68:88:a3:15:55:c4:aa:3e:9a:8e:d8:db: 95:24:24:1e:56:36:a8:66:19:b3:24:e5:62:72:b9:a8:63:ae: 11:69:ea:5e:e7:68:2a:48:1b:89:9a:00:aa:47:e7:7b:4a:18: 43:38:40:cf:a4:cf:cb:1d:63:5e:b2:c0:79:a2:c8:63:60:44: 6e:ac:5f:2f:9d:c6:81:fa:a9:e5:dc:b7:bb:b8:9d:75:15:1c: 5a:f0:ea:28:6e:82:aa:59:26:d3:d3:f8:dd:59:b8:bd:c8:51: 90:14:74:da:93:12:ef:1b:90:0d:ef:45:13:86:39:94:f7:c7: 60:7b:a5:88:01:b2:f3:43:86:c4:ef:e1:ed:f6:32:08:08:eb: 88:e6:f0:8d:ec:09:56:6d:c2:7b:ec:94:3b:d9:44:65:b1:13: 77:46:3d:e6:1c:3a:9f:81:da:0a:73:60:53:70:7f:e5:ac:0e: 5a:d1:d9:dc:1e:48:e3:32:ae:9e:38:0c:6c:76:05:41:6b:82: 47:8c:3e:4c:9c:05:bc:c5:e4:e8:11:7b:05:6d:1f:94:3f:5c: 22:57:56:9c:49:2a:7c:e1:7b:21:6c:1e:64:7f:75:bc:46:f0: 1d:c5:a0:76:3d:70:65:d4:1c:6d:d2:24:64:61:aa:ac:b6:a0: 33:e7:08:78 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgISAZt8EkRTkfGid3GGIc0gH86pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2JkZDAwZDI3YjhhOGJlZmM4NjZjYWYzNzhmMTkwMjc2 ODQ3NjkwHhcNMjYwMTAyMDAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWExNmNiZGJiZWZiNjg1ZTAyOGE3YTI0OTkwYzhhMmI5ZjQ5NWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10ZFCCd/Nv1OZn6rNZCNycOoM3di jBsczkR/3Rf6M2wmb4ABRNiq32fDSujt4eHSwnT5oz+DQiKXGyw86vgyS4agtZcC BsMYfwf37LN4Coq9+CEzjs6C6PR1I4nik6LJS/5qzdLaVncPl4Wx9JW9QGW9U0s7 Xafkf69tlLXRuo8yDzIYe+bWKv59ofVrGagRVPBG+RAg4eEMVzBgCap+wOKMQtGQ QcVk5wYxpqUWqyzAJzs/v0iIbCihPVB6QpXn7sLjdU8lmCSrdQFv3Ft2EuzUlBxv A4bzMfuy2YPBiO7sQyg1f4+vkDkoK9pBxqb2wrF+2qS8hy97D/sdXm75xwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPGhbL2777aF4CinokmQyKK59JXLMB8GA1UdIwQY MBaAFBrL3QDSe4qL78hmyvN48ZAnaEdpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N2ZEFOSjdpb3Z2eUdiSzgzanhrQ2RvUjJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9kYjQyMDUtZDU3Yy00Y2EyLTg4OTQt OWY5NTM2YmIyYzM3LzEvOGFGc3ZidnZ0b1hnS0tlaVNaRElvcm4wbGNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9kYjQyMDUtZDU3Yy00Y2EyLTg4OTQtOWY5NTM2YmIyYzM3 LzEvR3N2ZEFOSjdpb3Z2eUdiSzgzanhrQ2RvUjJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzA+BAIAATA4AwQCuQwwAwQC uXIEMAwDBAK5gOwDBAC5gO4DBAK5gSwDBAK5xygDBADBJC0DBADDibgDBADDyMMw DQQCAAIwBwMFACoDf8AwDQYJKoZIhvcNAQELBQADggEBADItCM6Hl2iIoxVVxKo+ mo7Y25UkJB5WNqhmGbMk5WJyuahjrhFp6l7naCpIG4maAKpH53tKGEM4QM+kz8sd Y16ywHmiyGNgRG6sXy+dxoH6qeXct7u4nXUVHFrw6ihugqpZJtPT+N1ZuL3IUZAU dNqTEu8bkA3vRROGOZT3x2B7pYgBsvNDhsTv4e32MggI64jm8I3sCVZtwnvslDvZ RGWxE3dGPeYcOp+B2gpzYFNwf+WsDlrR2dweSOMyrp44DGx2BUFrgkeMPkycBbzF 5OgRewVtH5Q/XCJXVpxJKnzheyFsHmR/dbxG8B3FoHY9cGXUHG3SJGRhqqy2oDPn CHg= -----END CERTIFICATE-----Generated at Sat Jan 3 06:22:35 2026 by rpki-client