This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/i8Jkc4pxTLURfEXCzuvgdJ4d5UM.roa File: i8Jkc4pxTLURfEXCzuvgdJ4d5UM.roa (raw, json) Hash identifier: 3Aa3KlSn62IyX7PygJ6vdIXQzOFJ0C/FH3ms8tRbuZk= Subject key identifier: 8B:C2:64:73:8A:71:4C:B5:11:7C:45:C2:CE:EB:E0:74:9E:1D:E5:43 Certificate issuer: /CN=a5afc5435fcbbe348d2b56016a7bc7bcacf1b866 Certificate serial: 019B76EB284B46AEACD24E5C38F7EE7ADD43 Authority key identifier: A5:AF:C5:43:5F:CB:BE:34:8D:2B:56:01:6A:7B:C7:BC:AC:F1:B8:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa_FQ1_LvjSNK1YBanvHvKzxuGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/i8Jkc4pxTLURfEXCzuvgdJ4d5UM.roa Signing time: Thu 01 Jan 2026 00:18:01 +0000 ROA not before: Thu 01 Jan 2026 00:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49719 IP address blocks: 77.87.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.crl rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft rsync://rpki.ripe.net/repository/DEFAULT/pa_FQ1_LvjSNK1YBanvHvKzxuGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:28:4b:46:ae:ac:d2:4e:5c:38:f7:ee:7a:dd:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5afc5435fcbbe348d2b56016a7bc7bcacf1b866 Validity Not Before: Jan 1 00:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bc264738a714cb5117c45c2ceebe0749e1de543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c1:e9:d5:a6:c4:ba:4e:6f:a8:a1:83:5f:3c: ed:e3:1d:46:04:c7:30:cb:32:ae:33:be:c8:4e:f8: 04:40:b3:70:23:ab:50:00:72:4f:7f:6c:41:47:be: 41:bf:9b:be:5b:4c:89:0f:87:de:2b:43:77:c4:e5: 6a:4f:08:f4:03:1b:ca:47:25:fe:c6:41:3d:e8:99: 8f:33:30:45:a1:21:09:3d:b7:c2:a1:fb:b4:9d:2e: e4:15:0a:8e:76:eb:f5:bd:68:42:0a:6e:f9:48:c3: a6:ae:7b:32:c5:af:0c:f0:d4:90:59:30:d4:78:de: 97:90:22:24:90:f8:f2:6a:8b:c3:36:77:88:5a:09: 41:07:99:42:b1:da:79:2c:f1:7f:a0:26:7c:68:0a: 53:48:4a:a6:ed:14:f6:10:e9:16:4b:d8:dc:fc:c8: 19:0d:12:4a:4a:46:de:19:bc:fb:08:7e:6d:64:33: 36:07:4e:23:57:fc:2b:ca:80:10:15:0c:14:99:ef: de:86:aa:b3:d6:fb:56:3f:f3:7e:ec:20:ca:cf:36: 85:a4:0b:d3:98:71:81:84:90:0b:25:76:0d:d4:60: 1f:ce:ab:be:e3:83:f6:7a:40:2d:58:ed:35:6e:b6: 0f:ea:c3:b4:92:36:41:66:a9:43:a3:11:0f:7a:da: fb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C2:64:73:8A:71:4C:B5:11:7C:45:C2:CE:EB:E0:74:9E:1D:E5:43 X509v3 Authority Key Identifier: keyid:A5:AF:C5:43:5F:CB:BE:34:8D:2B:56:01:6A:7B:C7:BC:AC:F1:B8:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa_FQ1_LvjSNK1YBanvHvKzxuGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/i8Jkc4pxTLURfEXCzuvgdJ4d5UM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.87.88.0/21 Signature Algorithm: sha256WithRSAEncryption 48:79:9d:ee:79:3b:7f:47:5b:89:eb:78:f3:2f:54:7b:b8:f3: f4:5b:28:c1:c4:a5:f8:68:b5:76:3b:ed:64:e3:39:c3:c1:2e: 62:72:0d:a0:2a:2f:e2:7c:85:b9:c5:ca:c7:b2:6c:9c:67:45: 8b:38:b6:53:b9:7a:65:2c:8a:7f:6c:69:6b:9a:36:81:09:b7: d2:35:94:0c:cb:cb:91:39:32:62:36:84:97:30:17:21:2d:cc: a7:13:cd:2f:76:e0:b5:f3:72:c9:43:e4:41:e1:74:8a:16:4d: 41:f2:55:28:c6:d8:c7:cf:75:af:b6:9a:aa:fe:37:bf:13:a1: 94:ff:98:4b:81:b4:63:95:7e:a7:c4:1d:6c:65:1f:71:22:3c: 29:8a:cd:36:3e:88:8f:c3:f0:be:43:38:c2:71:a4:3c:06:07: b4:f8:1c:b0:7b:e0:53:90:22:b1:02:62:28:86:58:b8:2d:11: b6:e0:4b:b2:29:ab:60:6e:73:8d:a8:a3:70:41:f6:04:d5:1c: 9c:94:27:c5:7c:0c:06:ab:4f:98:3c:a5:f7:76:72:92:c9:40: 51:06:d6:09:4a:54:1c:99:64:f7:ef:bb:90:41:41:21:f4:8b: 07:6f:12:c8:44:49:ce:03:ba:46:85:a6:c5:6e:08:ba:b1:c2: 6e:c5:29:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26yhLRq6s0k5cOPfuet1DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWZjNTQzNWZjYmJlMzQ4ZDJiNTYwMTZhN2JjN2JjYWNm MWI4NjYwHhcNMjYwMTAxMDAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmMyNjQ3MzhhNzE0Y2I1MTE3YzQ1YzJjZWViZTA3NDllMWRlNTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMHp1abEuk5vqKGDXzzt4x1GBMcw yzKuM77ITvgEQLNwI6tQAHJPf2xBR75Bv5u+W0yJD4feK0N3xOVqTwj0AxvKRyX+ xkE96JmPMzBFoSEJPbfCofu0nS7kFQqOduv1vWhCCm75SMOmrnsyxa8M8NSQWTDU eN6XkCIkkPjyaovDNneIWglBB5lCsdp5LPF/oCZ8aApTSEqm7RT2EOkWS9jc/MgZ DRJKSkbeGbz7CH5tZDM2B04jV/wryoAQFQwUme/ehqqz1vtWP/N+7CDKzzaFpAvT mHGBhJALJXYN1GAfzqu+44P2ekAtWO01brYP6sO0kjZBZqlDoxEPetr7EwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIvCZHOKcUy1EXxFws7r4HSeHeVDMB8GA1UdIwQY MBaAFKWvxUNfy740jStWAWp7x7ys8bhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGFfRlExX0x2alNOSzFZQmFudkh2S3p4dUdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC80MTlhZjAtY2JkNi00MjMzLWI1MmYt ZDc0ODRiZjljYTJiLzEvaThKa2M0cHhUTFVSZkVYQ3p1dmdkSjRkNVVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC80MTlhZjAtY2JkNi00MjMzLWI1MmYtZDc0ODRiZjljYTJi LzEvcGFfRlExX0x2alNOSzFZQmFudkh2S3p4dUdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTVdYMA0G CSqGSIb3DQEBCwUAA4IBAQBIeZ3ueTt/R1uJ63jzL1R7uPP0WyjBxKX4aLV2O+1k 4znDwS5icg2gKi/ifIW5xcrHsmycZ0WLOLZTuXplLIp/bGlrmjaBCbfSNZQMy8uR OTJiNoSXMBchLcynE80vduC183LJQ+RB4XSKFk1B8lUoxtjHz3Wvtpqq/je/E6GU /5hLgbRjlX6nxB1sZR9xIjwpis02PoiPw/C+QzjCcaQ8Bge0+Bywe+BTkCKxAmIo hli4LRG24EuyKatgbnONqKNwQfYE1RyclCfFfAwGq0+YPKX3dnKSyUBRBtYJSlQc mWT377uQQUEh9IsHbxLIREnOA7pGhabFbgi6scJuxSnI -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:42 2026 by rpki-client