This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/8DZHOiJKogEPxhrCvwEEoG2aKz0.roa File: 8DZHOiJKogEPxhrCvwEEoG2aKz0.roa (raw, json) Hash identifier: RXwXL+IANRdEA6d/tWMOwfqTTWcjrzohS99vWFn/qxI= Subject key identifier: F0:36:47:3A:22:4A:A2:01:0F:C6:1A:C2:BF:01:04:A0:6D:9A:2B:3D Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC843B76E0B16AAA0C85642FC52BB0F Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/8DZHOiJKogEPxhrCvwEEoG2aKz0.roa Signing time: Thu 01 Jan 2026 18:18:23 +0000 ROA not before: Thu 01 Jan 2026 18:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 205.237.92.0/23 maxlen: 24 205.237.94.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 17:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:43:b7:6e:0b:16:aa:a0:c8:56:42:fc:52:bb:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f036473a224aa2010fc61ac2bf0104a06d9a2b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:26:a6:e2:9e:58:09:89:5b:f6:1a:df:66:a3: b6:b2:e1:cd:43:a1:06:f5:5d:ac:d8:45:4c:1e:09: b5:bc:6a:7a:23:e2:18:36:e9:cf:a7:49:73:f2:12: a7:9a:5d:60:fd:2d:2e:51:cb:a8:e5:71:51:e5:d9: 0b:ec:54:15:8c:56:9f:5c:a5:27:89:fb:09:4d:8d: bb:e7:5c:6f:cc:fd:cb:da:29:5d:89:e2:a4:93:29: 9d:4b:cc:d6:62:01:cb:aa:96:81:e2:a6:f9:9b:1a: 78:b4:d0:1c:c3:85:c9:08:08:5d:1e:96:7f:38:47: 39:de:f3:8e:85:d5:de:6e:a7:d3:1c:f1:7c:5b:6f: 5b:39:75:b4:c7:d5:e9:89:cc:7f:22:da:f0:61:f4: f8:48:ca:08:d4:3d:f3:0b:98:d5:0a:af:fb:78:b4: 89:06:2d:90:37:30:34:ab:d4:b0:ef:db:a3:dd:63: 3d:64:74:f5:75:2e:5e:f6:b1:4f:62:81:b1:80:00: 8a:6f:87:1f:47:68:bc:6d:40:b4:53:e2:a4:f0:31: d9:d2:17:e0:5c:97:c0:27:11:38:12:eb:42:44:24: 75:42:2e:29:bc:ec:fa:24:07:19:ff:ce:ba:fd:eb: 54:f6:0e:73:38:e6:3f:cc:2f:74:35:2e:d5:40:2e: 52:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:36:47:3A:22:4A:A2:01:0F:C6:1A:C2:BF:01:04:A0:6D:9A:2B:3D X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/8DZHOiJKogEPxhrCvwEEoG2aKz0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.237.92.0/22 Signature Algorithm: sha256WithRSAEncryption ad:53:f0:32:c8:9b:36:5d:0e:64:bf:80:82:92:35:90:37:eb: df:03:e6:1c:4e:5d:51:8c:8f:99:c8:6b:95:e5:e4:81:85:1d: cd:5b:5b:f4:9f:70:27:40:b1:5d:c8:91:21:99:13:32:73:71: 63:8c:e1:33:cc:7b:02:e8:84:9c:08:5e:a1:76:af:50:23:dd: 04:c2:38:26:83:16:37:49:5c:b8:7a:d0:40:2f:dd:34:96:b2: 48:67:6e:1a:dc:85:61:9a:87:46:ea:16:eb:4d:60:aa:47:10: b1:d7:22:b6:43:33:a7:23:ca:a6:2a:e9:46:61:6d:a1:56:34: 74:ee:1c:a1:e7:a6:02:ce:fe:8a:50:3d:5e:54:7e:62:b8:f6: f8:2f:03:bd:1e:02:57:31:d7:90:40:b7:e5:81:ab:69:53:97: db:97:11:4c:13:12:4b:35:c3:74:ba:8f:d1:18:26:09:6a:99: 9f:fe:70:c8:1c:ae:5e:5b:1c:b5:72:0c:2b:b0:d0:8a:bf:a7: 8b:4b:fd:2d:13:e7:ce:c2:99:cb:1e:de:ca:3e:f3:92:7a:cc: 3a:1f:0a:8d:5f:66:be:74:cc:4b:12:65:a0:89:70:2e:6e:6d: 01:18:b4:6b:fd:65:71:26:2c:8a:54:35:28:d2:b1:f9:c0:13: 63:2d:f1:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yEO3bgsWqqDIVkL8UrsPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDM2NDczYTIyNGFhMjAxMGZjNjFhYzJiZjAxMDRhMDZkOWEyYjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCam4p5YCYlb9hrfZqO2suHNQ6EG 9V2s2EVMHgm1vGp6I+IYNunPp0lz8hKnml1g/S0uUcuo5XFR5dkL7FQVjFafXKUn ifsJTY2751xvzP3L2ildieKkkymdS8zWYgHLqpaB4qb5mxp4tNAcw4XJCAhdHpZ/ OEc53vOOhdXebqfTHPF8W29bOXW0x9Xpicx/ItrwYfT4SMoI1D3zC5jVCq/7eLSJ Bi2QNzA0q9Sw79uj3WM9ZHT1dS5e9rFPYoGxgACKb4cfR2i8bUC0U+Kk8DHZ0hfg XJfAJxE4EutCRCR1Qi4pvOz6JAcZ/866/etU9g5zOOY/zC90NS7VQC5SjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPA2RzoiSqIBD8Yawr8BBKBtmis9MB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvOERaSE9pSktvZ0VQeGhyQ3Z3RUVvRzJhS3owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCze1cMA0G CSqGSIb3DQEBCwUAA4IBAQCtU/AyyJs2XQ5kv4CCkjWQN+vfA+YcTl1RjI+ZyGuV 5eSBhR3NW1v0n3AnQLFdyJEhmRMyc3FjjOEzzHsC6IScCF6hdq9QI90EwjgmgxY3 SVy4etBAL900lrJIZ24a3IVhmodG6hbrTWCqRxCx1yK2QzOnI8qmKulGYW2hVjR0 7hyh56YCzv6KUD1eVH5iuPb4LwO9HgJXMdeQQLflgatpU5fblxFMExJLNcN0uo/R GCYJapmf/nDIHK5eWxy1cgwrsNCKv6eLS/0tE+fOwpnLHt7KPvOSesw6HwqNX2a+ dMxLEmWgiXAubm0BGLRr/WVxJiyKVDUo0rH5wBNjLfGe -----END CERTIFICATE-----Generated at Mon Jan 12 00:51:38 2026 by rpki-client