This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/G8qIU8xdg-eGrekMsYX2y3Sqyjo.roa File: G8qIU8xdg-eGrekMsYX2y3Sqyjo.roa (raw, json) Hash identifier: PTp7lArfHNtuWaR7R/n6Gi8/CAlTdTaxaE7Xlo7wKwI= Subject key identifier: 1B:CA:88:53:CC:5D:83:E7:86:AD:E9:0C:B1:85:F6:CB:74:AA:CA:3A Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A3379AAB8E997A5B3709BEA4AA6817 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/G8qIU8xdg-eGrekMsYX2y3Sqyjo.roa Signing time: Thu 01 Jan 2026 08:18:41 +0000 ROA not before: Thu 01 Jan 2026 08:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209333 IP address blocks: 212.73.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:37:9a:ab:8e:99:7a:5b:37:09:be:a4:aa:68:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bca8853cc5d83e786ade90cb185f6cb74aaca3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e4:7d:81:52:ec:17:44:85:98:63:23:ca:7a: 62:63:9e:ff:3f:9a:8d:25:70:ce:4a:fc:9f:49:97: 58:a9:cb:a9:5e:7e:79:1e:f3:75:b2:89:9f:12:69: 37:f3:27:b8:85:98:e4:7a:ab:b9:1a:fe:1a:f1:0c: e8:6c:0c:63:1d:a5:c0:26:b0:f6:95:41:05:5c:fc: 4a:62:fc:6b:92:13:36:aa:9b:de:56:c0:07:79:9d: 0d:27:a9:c1:e6:79:93:dc:fc:5b:ff:7d:ef:86:a1: 69:0d:de:33:47:82:dd:b1:28:37:7a:be:0b:56:31: c1:8c:f8:42:5b:da:65:7d:5d:64:14:66:b6:7c:40: 55:99:5c:81:c8:a5:c5:ad:74:70:a2:2e:52:a1:eb: 10:05:a8:e1:d5:dc:29:74:84:4f:e1:03:e1:d3:df: 46:a1:74:a4:f5:33:07:ad:5c:15:ab:c6:15:94:cb: 9a:36:4f:23:ea:bb:b9:ad:88:6e:37:c6:f2:34:58: 4e:5e:08:20:73:c6:33:67:08:ec:9b:c1:dc:55:37: f1:e0:d2:92:dd:71:40:fd:ef:e3:1a:fa:48:9a:34: b2:3b:75:25:0e:c5:31:cf:69:d8:9a:60:a0:92:e5: fb:e0:60:d9:d8:2f:36:72:27:f0:a4:59:6c:ad:af: b2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CA:88:53:CC:5D:83:E7:86:AD:E9:0C:B1:85:F6:CB:74:AA:CA:3A X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/G8qIU8xdg-eGrekMsYX2y3Sqyjo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.73.156.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:7f:e1:2f:bf:e8:c5:d1:9f:b9:1c:02:4a:3a:39:55:52:ac: 9d:e8:2a:77:e0:9e:12:62:9c:6c:29:d2:9c:dc:6e:c1:00:64: 1b:b2:8d:34:46:da:56:a6:56:1d:74:c8:d9:11:0c:05:cf:5a: 9c:5b:d4:03:09:1d:b7:ff:77:aa:34:6c:1d:63:20:55:90:e8: bb:c4:ef:c7:c7:4c:dc:de:1a:e0:fa:ca:f0:35:c5:e5:8e:37: 1b:87:18:6f:12:a8:7e:29:0a:f6:43:cc:ad:ba:65:e6:86:7d: ef:9d:34:49:e8:50:37:e3:f2:32:2d:bd:cf:3a:5b:b5:e6:f1: 6f:c8:7f:90:06:7c:c8:6c:6e:2f:ee:bb:7a:3c:1b:1b:b0:76: 34:b6:5e:b2:be:01:d3:57:b8:4b:ff:23:e1:f8:f7:a8:a8:93: 87:69:46:2c:ad:05:c0:9b:f3:2c:91:c4:81:27:c3:8c:e4:7f: 41:98:8b:cf:1c:34:91:13:8f:87:d5:3d:48:8f:a1:df:ea:69: 9a:e9:48:1f:7c:f5:95:e6:14:7c:69:7d:b8:d8:4a:b8:0f:bc: 29:f6:3d:a5:7c:32:c4:2c:c9:67:99:29:d3:4a:3f:52:11:5d: cd:3e:2e:97:ff:fb:a6:88:a2:00:f7:da:53:1e:2a:e4:9b:be: f5:a5:a3:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ozeaq46Zels3Cb6kqmgXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmNhODg1M2NjNWQ4M2U3ODZhZGU5MGNiMTg1ZjZjYjc0YWFjYTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OR9gVLsF0SFmGMjynpiY57/P5qN JXDOSvyfSZdYqcupXn55HvN1somfEmk38ye4hZjkequ5Gv4a8QzobAxjHaXAJrD2 lUEFXPxKYvxrkhM2qpveVsAHeZ0NJ6nB5nmT3Pxb/33vhqFpDd4zR4LdsSg3er4L VjHBjPhCW9plfV1kFGa2fEBVmVyByKXFrXRwoi5SoesQBajh1dwpdIRP4QPh099G oXSk9TMHrVwVq8YVlMuaNk8j6ru5rYhuN8byNFhOXgggc8YzZwjsm8HcVTfx4NKS 3XFA/e/jGvpImjSyO3UlDsUxz2nYmmCgkuX74GDZ2C82cifwpFlsra+y8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBvKiFPMXYPnhq3pDLGF9st0qso6MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvRzhxSVU4eGRnLWVHcmVrTXNZWDJ5M1NxeWpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EmcMA0G CSqGSIb3DQEBCwUAA4IBAQBPf+Evv+jF0Z+5HAJKOjlVUqyd6Cp34J4SYpxsKdKc 3G7BAGQbso00RtpWplYddMjZEQwFz1qcW9QDCR23/3eqNGwdYyBVkOi7xO/Hx0zc 3hrg+srwNcXljjcbhxhvEqh+KQr2Q8ytumXmhn3vnTRJ6FA34/IyLb3POlu15vFv yH+QBnzIbG4v7rt6PBsbsHY0tl6yvgHTV7hL/yPh+PeoqJOHaUYsrQXAm/MskcSB J8OM5H9BmIvPHDSRE4+H1T1Ij6Hf6mma6UgffPWV5hR8aX242Eq4D7wp9j2lfDLE LMlnmSnTSj9SEV3NPi6X//umiKIA99pTHirkm771paMX -----END CERTIFICATE-----Generated at Fri Jan 2 12:05:22 2026 by rpki-client