This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/M8hdjmtzd8hrW3Y8l4qmpPKkDK0.roa File: M8hdjmtzd8hrW3Y8l4qmpPKkDK0.roa (raw, json) Hash identifier: J/z8EzYcLAwxjC5JuidTonZF1YMKXrRg2Bt2mDC3F7U= Subject key identifier: 33:C8:5D:8E:6B:73:77:C8:6B:5B:76:3C:97:8A:A6:A4:F2:A4:0C:AD Certificate issuer: /CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca Certificate serial: 019B7BA40467CAEC392C54742C944A155208 Authority key identifier: BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/M8hdjmtzd8hrW3Y8l4qmpPKkDK0.roa Signing time: Thu 01 Jan 2026 22:18:25 +0000 ROA not before: Thu 01 Jan 2026 22:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13189 IP address blocks: 62.101.32.0/21 maxlen: 21 62.101.40.0/22 maxlen: 22 62.101.44.0/22 maxlen: 22 62.101.48.0/22 maxlen: 22 62.101.56.0/21 maxlen: 21 83.172.64.0/19 maxlen: 19 83.172.96.0/19 maxlen: 19 95.140.176.0/20 maxlen: 20 185.94.72.0/22 maxlen: 22 212.112.32.0/19 maxlen: 19 2001:be8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:04:67:ca:ec:39:2c:54:74:2c:94:4a:15:52:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca Validity Not Before: Jan 1 22:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33c85d8e6b7377c86b5b763c978aa6a4f2a40cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ea:24:e9:79:b0:4c:56:a8:9d:5c:42:81:c3: 08:22:ba:16:00:91:e7:b0:d7:73:ea:8f:25:c8:27: ba:4b:7d:3e:71:9b:98:3a:33:87:7d:f6:d9:37:a0: 7e:a6:b2:c5:e8:c6:d7:a6:09:b5:92:f1:24:8b:41: 8e:d0:d9:89:be:ab:d6:75:27:a1:9f:ea:b6:40:08: 8b:ec:18:75:2c:13:c0:d1:e7:e9:f2:9e:08:3c:0f: 09:61:93:99:ab:9d:41:3e:ac:0a:9b:bb:31:be:ae: d2:dd:69:66:6c:31:4b:8f:29:db:95:d1:36:d0:cb: aa:c3:72:77:51:1e:88:cb:b3:bf:9c:35:a2:d4:c2: 69:e6:fe:d4:b5:45:a8:7c:eb:b4:15:8b:a2:8b:ba: 14:0c:0d:d4:b5:84:cd:b4:6c:9c:2e:64:f2:6b:6e: dd:fb:f0:69:15:d6:42:de:0a:2e:f9:c8:94:79:b2: 88:7f:c6:9f:49:d2:b0:58:2d:1a:13:aa:3c:09:3d: 9c:a0:41:3c:e9:36:70:e2:e0:ca:b7:22:c4:76:dd: e0:fc:62:0b:f9:ff:8e:10:8e:f5:6a:15:45:d6:f2: cf:63:09:40:46:5e:7e:0e:10:a8:00:51:6d:83:fd: b8:95:8d:41:57:44:62:45:18:7e:69:2e:a5:34:dc: a8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C8:5D:8E:6B:73:77:C8:6B:5B:76:3C:97:8A:A6:A4:F2:A4:0C:AD X509v3 Authority Key Identifier: keyid:BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/M8hdjmtzd8hrW3Y8l4qmpPKkDK0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.101.32.0-62.101.51.255 62.101.56.0/21 83.172.64.0/18 95.140.176.0/20 185.94.72.0/22 212.112.32.0/19 IPv6: 2001:be8::/32 Signature Algorithm: sha256WithRSAEncryption 5f:18:fe:c2:f3:2e:1c:61:c4:78:f6:e3:03:78:05:e2:d4:5b: 38:e9:ef:8d:8c:ab:af:38:e1:68:a9:2f:7d:5a:40:28:ad:f6: 7b:27:b8:30:26:5d:3b:b8:48:4a:c3:07:8c:9c:f1:8d:62:36: 6d:5e:21:8e:55:4a:a6:08:d3:c0:c3:c2:08:ef:74:de:ba:2e: e0:f1:5d:0a:be:19:33:0f:8a:2a:d8:a0:0f:c6:9b:a9:c3:4a: 1a:6b:fb:df:88:41:3d:36:56:dc:4b:55:45:8f:4c:fc:81:ae: dd:ed:2c:13:52:4a:9f:8f:5e:c8:df:3c:db:b3:2c:69:2a:f8: f5:a3:b8:f8:d2:27:ec:36:e2:ed:05:13:a8:55:a8:1a:d1:e4: fa:8f:a6:a9:2a:34:b2:5a:8c:21:02:aa:b2:a1:ea:3f:fb:83: 44:02:09:fb:f9:09:c4:10:30:a2:b1:90:61:ef:76:c3:a6:b9: 76:ee:c3:66:f0:1d:ff:57:01:c6:f8:28:ee:3c:97:1c:52:42: b3:82:ba:f4:d0:a6:ec:79:d7:8a:62:81:50:20:3a:0b:37:79: 31:dd:11:31:9d:b8:ca:e1:1c:a8:e9:30:65:f6:77:89:0e:5b: 30:80:c7:12:8f:04:22:85:ee:52:a0:63:f4:07:9d:86:91:e7: c1:f9:b2:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgISAZt7pARnyuw5LFR0LJRKFVIIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMjgwNTk5MmU2NTMxZDNkYTMxZWUxYWY2YmNkNWMwNmQw MmI2Y2EwHhcNMjYwMTAxMjIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2M4NWQ4ZTZiNzM3N2M4NmI1Yjc2M2M5NzhhYTZhNGYyYTQwY2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteok6XmwTFaonVxCgcMIIroWAJHn sNdz6o8lyCe6S30+cZuYOjOHffbZN6B+prLF6MbXpgm1kvEki0GO0NmJvqvWdSeh n+q2QAiL7Bh1LBPA0efp8p4IPA8JYZOZq51BPqwKm7sxvq7S3WlmbDFLjynbldE2 0Muqw3J3UR6Iy7O/nDWi1MJp5v7UtUWofOu0FYuii7oUDA3UtYTNtGycLmTya27d +/BpFdZC3gou+ciUebKIf8afSdKwWC0aE6o8CT2coEE86TZw4uDKtyLEdt3g/GIL +f+OEI71ahVF1vLPYwlARl5+DhCoAFFtg/24lY1BV0RiRRh+aS6lNNyo2QIDAQAB o4ICPjCCAjowHQYDVR0OBBYEFDPIXY5rc3fIa1t2PJeKpqTypAytMB8GA1UdIwQY MBaAFL8oBZkuZTHT2jHuGva81cBtArbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnlnRm1TNWxNZFBhTWU0YTlyelZ3RzBDdHNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi83NTg0NjctNjgxOC00ZTg0LTg3YmEt NWQ4Mzg2NjhiZWJlLzEvTThoZGptdHpkOGhyVzNZOGw0cW1wUEtrREswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi83NTg0NjctNjgxOC00ZTg0LTg3YmEtNWQ4Mzg2NjhiZWJl LzEvdnlnRm1TNWxNZFBhTWU0YTlyelZ3RzBDdHNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAyBAIAATAsMAwDBAU+ZSAD BAI+ZTADBAM+ZTgDBAZTrEADBARfjLADBAK5XkgDBAXUcCAwDQQCAAIwBwMFACAB C+gwDQYJKoZIhvcNAQELBQADggEBAF8Y/sLzLhxhxHj24wN4BeLUWzjp742Mq684 4WipL31aQCit9nsnuDAmXTu4SErDB4yc8Y1iNm1eIY5VSqYI08DDwgjvdN66LuDx XQq+GTMPiirYoA/Gm6nDShpr+9+IQT02VtxLVUWPTPyBrt3tLBNSSp+PXsjfPNuz LGkq+PWjuPjSJ+w24u0FE6hVqBrR5PqPpqkqNLJajCECqrKh6j/7g0QCCfv5CcQQ MKKxkGHvdsOmuXbuw2bwHf9XAcb4KO48lxxSQrOCuvTQpux514pigVAgOgs3eTHd ETGduMrhHKjpMGX2d4kOWzCAxxKPBCKF7lKgY/QHnYaR58H5sgQ= -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:51 2026 by rpki-client