This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/8JmGNshMSYZovGEGptxvSVmLazw.roa File: 8JmGNshMSYZovGEGptxvSVmLazw.roa (raw, json) Hash identifier: cBtmgXslMy9oeFHfquJAM4IBewoqUtnRBO1wAOTF0Qk= Subject key identifier: F0:99:86:36:C8:4C:49:86:68:BC:61:06:A6:DC:6F:49:59:8B:6B:3C Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Certificate serial: 019B7B364CF7BC71416C9415527D31C92005 Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/8JmGNshMSYZovGEGptxvSVmLazw.roa Signing time: Thu 01 Jan 2026 20:18:34 +0000 ROA not before: Thu 01 Jan 2026 20:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205544 IP address blocks: 176.113.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 19:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:4c:f7:bc:71:41:6c:94:15:52:7d:31:c9:20:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Validity Not Before: Jan 1 20:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0998636c84c498668bc6106a6dc6f49598b6b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:7b:23:8a:a2:83:e3:cb:41:fc:24:bd:85:8f: 49:c2:e4:3c:fb:ec:d4:57:2d:56:c4:53:7b:1d:cd: f4:de:27:01:14:99:04:07:e0:b9:f1:e7:75:0d:cd: 29:50:b3:ec:e3:3b:f2:f3:d6:67:60:16:91:b0:22: 3c:9d:2c:71:a6:ce:07:f2:fd:1c:d5:24:fa:ec:5a: cc:81:ee:8c:8e:3e:9c:71:ee:2f:3a:dd:cd:4a:85: 84:1f:4f:3f:7b:81:cc:cf:2d:a1:f5:7c:93:75:f0: b6:ae:f0:43:12:d7:67:c3:b8:45:d0:7f:ba:3d:15: 4d:61:f9:c1:76:26:89:d8:4c:14:7c:20:4f:87:3c: fd:1c:42:7c:3b:82:8f:0b:0c:0d:71:54:2d:4e:63: e6:b4:51:e9:8a:5c:89:37:34:22:8d:84:cb:fa:83: 29:aa:98:8f:74:c0:9e:80:7b:a9:07:1c:fc:04:c1: 8a:bb:ca:ba:57:c4:7a:4c:b5:99:2a:3e:97:69:0c: ad:58:f4:f4:86:65:54:f0:ba:d3:63:e0:97:88:0f: 95:2d:fd:0c:d7:fe:ef:4f:3c:4d:c3:63:f7:51:44: 23:13:64:25:6b:bc:f5:02:e0:b9:24:74:cc:9d:ac: 89:23:ec:82:b2:45:31:bf:37:bf:85:3b:92:02:57: 02:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:99:86:36:C8:4C:49:86:68:BC:61:06:A6:DC:6F:49:59:8B:6B:3C X509v3 Authority Key Identifier: keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/8JmGNshMSYZovGEGptxvSVmLazw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.113.64.0/22 Signature Algorithm: sha256WithRSAEncryption 28:64:b0:06:ed:7b:f0:f8:01:bf:cf:e4:85:12:7e:f8:7d:00: 85:17:4c:e0:66:06:64:a5:f2:c5:8e:8d:42:b9:94:68:be:1f: 6a:55:a0:4e:7f:75:96:e0:01:10:56:1b:b9:c2:ae:b6:cf:63: 2b:24:e5:fa:70:2a:09:1d:f5:6c:4c:10:1c:4d:53:cb:b3:49: 76:11:f6:a6:c9:cc:b9:bb:25:fb:4c:0d:35:34:59:6a:b0:f9: 71:74:6c:ac:d9:26:f1:61:9d:40:a5:b1:a2:d2:5d:e8:0c:09: e4:5b:89:d9:08:7c:e0:e2:8a:97:6a:e8:e7:90:19:cf:14:20: 1a:ed:f6:f0:be:d6:5d:96:d7:d2:c7:b5:73:d2:44:d1:72:01: 33:ae:ea:0a:63:54:95:19:6e:27:6f:09:55:1b:0f:1d:1a:c5: de:39:9a:bd:9b:87:7b:ea:4c:69:21:56:a6:d5:18:dc:0e:cf: 68:c9:78:c5:d7:5c:e3:26:54:38:85:23:65:cb:19:bd:c9:64: 2a:08:46:cb:c0:2f:22:84:5a:17:a1:49:45:ff:1a:ce:ab:5d: 0f:5a:b2:3b:f0:eb:b9:45:ca:71:99:8e:a7:58:48:8e:c1:7f: e8:65:54:34:90:75:9f:bc:ce:cb:71:38:72:0a:a7:30:f1:51: 44:56:5e:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nkz3vHFBbJQVUn0xySAFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTY0M2JiMzk5YzZkODdhZGM0YzdjYmE1ZDJiNzJmYmQw MGQwNDYwHhcNMjYwMTAxMjAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDk5ODYzNmM4NGM0OTg2NjhiYzYxMDZhNmRjNmY0OTU5OGI2YjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XsjiqKD48tB/CS9hY9JwuQ8++zU Vy1WxFN7Hc303icBFJkEB+C58ed1Dc0pULPs4zvy89ZnYBaRsCI8nSxxps4H8v0c 1ST67FrMge6Mjj6cce4vOt3NSoWEH08/e4HMzy2h9XyTdfC2rvBDEtdnw7hF0H+6 PRVNYfnBdiaJ2EwUfCBPhzz9HEJ8O4KPCwwNcVQtTmPmtFHpilyJNzQijYTL+oMp qpiPdMCegHupBxz8BMGKu8q6V8R6TLWZKj6XaQytWPT0hmVU8LrTY+CXiA+VLf0M 1/7vTzxNw2P3UUQjE2Qla7z1AuC5JHTMnayJI+yCskUxvze/hTuSAlcCMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPCZhjbITEmGaLxhBqbcb0lZi2s8MB8GA1UdIwQY MBaAFHymQ7s5nG2HrcTHy6XSty+9ANBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMt NDRlYTY0NzIxYzllLzEvOEptR05zaE1TWVpvdkdFR3B0eHZTVm1MYXp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMtNDRlYTY0NzIxYzll LzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsHFAMA0G CSqGSIb3DQEBCwUAA4IBAQAoZLAG7Xvw+AG/z+SFEn74fQCFF0zgZgZkpfLFjo1C uZRovh9qVaBOf3WW4AEQVhu5wq62z2MrJOX6cCoJHfVsTBAcTVPLs0l2Efamycy5 uyX7TA01NFlqsPlxdGys2SbxYZ1ApbGi0l3oDAnkW4nZCHzg4oqXaujnkBnPFCAa 7fbwvtZdltfSx7Vz0kTRcgEzruoKY1SVGW4nbwlVGw8dGsXeOZq9m4d76kxpIVam 1RjcDs9oyXjF11zjJlQ4hSNlyxm9yWQqCEbLwC8ihFoXoUlF/xrOq10PWrI78Ou5 RcpxmY6nWEiOwX/oZVQ0kHWfvM7LcThyCqcw8VFEVl5g -----END CERTIFICATE-----Generated at Sat Jan 24 00:39:09 2026 by rpki-client