This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/OID8tjeNGcvl-U05xYDOrvAV85Q.roa File: OID8tjeNGcvl-U05xYDOrvAV85Q.roa (raw, json) Hash identifier: DoKOlAJhyiXBimvQV1xzGBuM02NxNEv94D9qTsvoxlU= Subject key identifier: 38:80:FC:B6:37:8D:19:CB:E5:F9:4D:39:C5:80:CE:AE:F0:15:F3:94 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019BDF2D3AB26F5C93B4E7B861A0889CB497 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/OID8tjeNGcvl-U05xYDOrvAV85Q.roa Signing time: Wed 21 Jan 2026 06:10:41 +0000 ROA not before: Wed 21 Jan 2026 06:10:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214025 IP address blocks: 147.90.1.0/24 maxlen: 24 158.173.204.0/24 maxlen: 24 158.173.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:2d:3a:b2:6f:5c:93:b4:e7:b8:61:a0:88:9c:b4:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 21 06:10:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3880fcb6378d19cbe5f94d39c580ceaef015f394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1d:05:b2:72:4c:b5:54:94:03:e0:3a:6f:0b: 8b:08:db:4f:96:04:ad:b9:aa:78:40:8c:03:b7:90: 77:a0:42:cc:96:51:13:05:22:1e:8d:34:cf:34:b8: 33:eb:1a:14:c7:e4:bb:c8:f3:f2:2c:82:51:ae:d5: d4:c6:e1:4e:08:43:4f:6c:66:47:d1:b9:48:18:d2: 72:9a:ee:84:8d:a5:01:3b:06:f4:35:a7:f1:dc:c4: 20:0e:84:65:4f:63:b7:4f:c3:92:e1:bb:c5:3b:61: 88:c3:85:6c:54:78:e1:72:d8:b4:03:43:36:18:c5: 1b:09:8b:75:05:5c:f7:76:3c:ec:b0:e5:3d:4d:22: c7:cf:82:f9:26:eb:d1:89:6e:40:56:2d:10:00:bc: d1:aa:58:17:1e:2c:f7:d4:50:e7:1c:78:95:cd:f5: db:ab:83:82:d1:a3:aa:1d:47:69:0b:cf:c0:f5:ad: 34:89:12:93:bb:d5:0a:36:ce:e3:cd:6a:e2:12:31: 59:a3:76:07:c2:e7:35:59:67:cc:08:95:06:5a:f1: ba:30:60:75:ea:e5:f6:1b:94:da:50:dd:89:1e:a7: 1f:24:51:2a:5e:ae:89:27:94:43:da:2d:ae:c4:39: 8a:6d:76:e3:cd:43:97:d0:12:dc:72:d8:ac:3c:e1: bf:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:80:FC:B6:37:8D:19:CB:E5:F9:4D:39:C5:80:CE:AE:F0:15:F3:94 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/OID8tjeNGcvl-U05xYDOrvAV85Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.90.1.0/24 158.173.204.0/24 158.173.210.0/24 Signature Algorithm: sha256WithRSAEncryption 23:a2:46:ac:92:14:cc:55:34:f8:88:98:39:31:3b:0f:00:5c: c4:4d:b5:e1:0d:ed:61:76:86:5e:0f:4d:d7:b4:7e:72:0b:ec: e0:f1:a6:73:50:b5:fb:05:81:60:e5:6b:bb:c8:43:31:42:ee: e6:96:24:21:6c:d2:1e:0b:8e:bd:df:78:cf:83:f9:a9:79:c6: e5:97:40:0b:2d:46:e8:1b:b3:04:f4:69:d8:8e:23:99:8a:50: b4:9a:a2:bc:ab:bd:b2:f1:fe:b6:40:f4:ec:2a:53:17:cc:aa: dc:4f:0e:b4:e0:6b:da:28:0b:6f:0c:39:90:51:a4:f7:c5:ce: 3a:21:1c:1c:13:52:55:43:94:4f:bf:e1:d9:11:e7:f9:a2:f5: 98:23:f0:23:82:8c:9d:c1:90:f6:05:e0:86:f0:07:a0:a7:16: 8c:2a:36:1c:65:3c:24:b5:ad:1c:59:3b:9e:e9:7c:a1:a3:9e: 26:17:c4:0c:51:05:bc:2d:fc:17:2f:13:35:a0:b7:13:12:d6: f5:79:e2:75:78:4b:65:18:7b:b6:cd:a3:58:18:e3:8a:e1:ba: ab:43:94:7a:b7:28:ff:99:eb:6f:bc:16:3e:bf:e2:56:f6:f8: 49:18:fe:94:07:55:67:f5:47:db:b5:ac:4a:f0:0c:82:9b:87: ef:f8:53:61 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZvfLTqyb1yTtOe4YaCInLSXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTIxMDYxMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODgwZmNiNjM3OGQxOWNiZTVmOTRkMzljNTgwY2VhZWYwMTVmMzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR0FsnJMtVSUA+A6bwuLCNtPlgSt uap4QIwDt5B3oELMllETBSIejTTPNLgz6xoUx+S7yPPyLIJRrtXUxuFOCENPbGZH 0blIGNJymu6EjaUBOwb0Nafx3MQgDoRlT2O3T8OS4bvFO2GIw4VsVHjhcti0A0M2 GMUbCYt1BVz3djzssOU9TSLHz4L5JuvRiW5AVi0QALzRqlgXHiz31FDnHHiVzfXb q4OC0aOqHUdpC8/A9a00iRKTu9UKNs7jzWriEjFZo3YHwuc1WWfMCJUGWvG6MGB1 6uX2G5TaUN2JHqcfJFEqXq6JJ5RD2i2uxDmKbXbjzUOX0BLcctisPOG/UQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDiA/LY3jRnL5flNOcWAzq7wFfOUMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvT0lEOHRqZU5HY3ZsLVUwNXhZRE9ydkFWODVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAk1oBAwQA nq3MAwQAnq3SMA0GCSqGSIb3DQEBCwUAA4IBAQAjokaskhTMVTT4iJg5MTsPAFzE TbXhDe1hdoZeD03XtH5yC+zg8aZzULX7BYFg5Wu7yEMxQu7mliQhbNIeC46933jP g/mpecbll0ALLUboG7ME9GnYjiOZilC0mqK8q72y8f62QPTsKlMXzKrcTw604Gva KAtvDDmQUaT3xc46IRwcE1JVQ5RPv+HZEef5ovWYI/AjgoydwZD2BeCG8AegpxaM KjYcZTwkta0cWTue6Xyho54mF8QMUQW8LfwXLxM1oLcTEtb1eeJ1eEtlGHu2zaNY GOOK4bqrQ5R6tyj/metvvBY+v+JW9vhJGP6UB1Vn9UfbtaxK8AyCm4fv+FNh -----END CERTIFICATE-----Generated at Fri Jan 23 04:39:25 2026 by rpki-client