This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/u8iAL6kiAUCT8QCBq9yxqc5mLFo.roa File: u8iAL6kiAUCT8QCBq9yxqc5mLFo.roa (raw, json) Hash identifier: r6rnkbAhvfbGHKyfBNTeQRNYalM2DFJdCsY04ysXtbY= Subject key identifier: BB:C8:80:2F:A9:22:01:40:93:F1:00:81:AB:DC:B1:A9:CE:66:2C:5A Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7C90D7A201E570AB33E0E99617730 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/u8iAL6kiAUCT8QCBq9yxqc5mLFo.roa Signing time: Thu 01 Jan 2026 18:17:51 +0000 ROA not before: Thu 01 Jan 2026 18:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34073 IP address blocks: 85.254.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:c9:0d:7a:20:1e:57:0a:b3:3e:0e:99:61:77:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbc8802fa922014093f10081abdcb1a9ce662c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:69:99:40:58:1b:97:25:6f:7d:54:77:74:01: f1:4c:4f:b3:e4:fe:95:81:19:51:1a:58:84:08:3a: 97:f7:5d:b8:e7:2f:57:08:b2:d7:80:12:1f:e1:d5: 38:42:3e:52:a9:c0:d9:f4:88:9d:6c:3f:95:57:6d: 8f:3c:0f:bd:8a:3f:a7:10:34:09:c0:61:4d:68:97: b6:68:4c:5a:23:11:04:33:06:ce:57:0b:5e:58:ff: 06:56:a6:60:c8:7b:d7:07:9c:79:7b:b8:54:dc:18: 73:86:aa:a0:16:49:86:42:e4:63:8f:65:75:37:d4: 9e:b7:b1:66:29:1c:b0:65:60:56:e6:ad:7c:d9:06: 0c:79:d2:f3:50:47:91:fc:99:f4:ad:6f:62:58:3c: 17:db:a6:64:7d:9d:5a:76:84:65:c8:80:90:a0:aa: 5a:4e:3e:40:2a:cd:82:1e:a3:56:6b:46:a5:86:74: 11:54:d6:b9:1b:3e:5a:2e:86:78:e9:62:1b:93:12: 69:73:50:af:e1:0c:61:28:df:bc:ad:6b:15:cf:64: 71:98:fa:7d:75:ac:fd:53:99:ef:95:f9:b0:c1:10: 3a:ae:e7:13:0d:f3:98:09:08:a1:b6:fd:da:76:3f: a4:d4:c3:37:79:95:0d:4a:d1:48:5f:e0:60:78:a1: 87:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C8:80:2F:A9:22:01:40:93:F1:00:81:AB:DC:B1:A9:CE:66:2C:5A X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/u8iAL6kiAUCT8QCBq9yxqc5mLFo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.254.88.0/22 Signature Algorithm: sha256WithRSAEncryption 25:a4:d6:45:ad:ad:ff:d8:b9:93:3a:03:07:a2:35:fd:00:4b: 7a:b8:d6:14:93:20:fa:3b:a2:10:e1:0b:d4:39:f3:06:a5:47: ee:56:58:f5:23:62:4e:81:a8:e8:f4:8d:7b:48:2a:53:65:d5: 29:62:f1:0c:00:a1:e7:d6:3c:52:a8:ad:e6:7b:f7:9f:3e:9b: 4f:b0:0d:60:31:01:a0:9d:a8:a7:8f:54:64:24:8c:35:f0:00: 05:9e:97:e4:0e:1d:c4:ed:72:ba:20:b9:c3:9a:ca:99:d1:69: 5b:56:f0:b9:a8:1b:f1:7d:9c:f0:6f:f9:89:a9:39:67:0a:17: 46:79:3c:40:2a:20:31:fc:fa:a2:9f:90:ed:d1:27:3c:a3:38: ed:4e:e9:d5:6e:f3:c0:15:63:8f:9b:6d:60:93:29:69:1b:49: e8:d8:ae:85:5a:92:58:aa:ad:de:87:73:50:26:1f:3f:52:b8: 82:6e:e4:e8:e1:7c:7e:26:9d:f9:57:e4:18:30:88:09:60:6c: 98:2c:14:48:92:42:ff:a6:d4:68:f5:d9:c0:07:94:b2:3f:01: 5f:30:1c:e2:18:80:d9:06:42:07:b0:bf:5a:35:ef:b1:b1:b8: 45:21:f5:31:ef:9d:53:9e:2a:55:a5:a5:9b:f0:f1:b9:7c:dd: 36:79:27:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x8kNeiAeVwqzPg6ZYXcwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmM4ODAyZmE5MjIwMTQwOTNmMTAwODFhYmRjYjFhOWNlNjYyYzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02mZQFgblyVvfVR3dAHxTE+z5P6V gRlRGliECDqX91245y9XCLLXgBIf4dU4Qj5SqcDZ9IidbD+VV22PPA+9ij+nEDQJ wGFNaJe2aExaIxEEMwbOVwteWP8GVqZgyHvXB5x5e7hU3BhzhqqgFkmGQuRjj2V1 N9Set7FmKRywZWBW5q182QYMedLzUEeR/Jn0rW9iWDwX26ZkfZ1adoRlyICQoKpa Tj5AKs2CHqNWa0alhnQRVNa5Gz5aLoZ46WIbkxJpc1Cv4QxhKN+8rWsVz2RxmPp9 daz9U5nvlfmwwRA6rucTDfOYCQihtv3adj+k1MM3eZUNStFIX+BgeKGHmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLvIgC+pIgFAk/EAgavcsanOZixaMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvdThpQUw2a2lBVUNUOFFDQnE5eXhxYzVtTEZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVf5YMA0G CSqGSIb3DQEBCwUAA4IBAQAlpNZFra3/2LmTOgMHojX9AEt6uNYUkyD6O6IQ4QvU OfMGpUfuVlj1I2JOgajo9I17SCpTZdUpYvEMAKHn1jxSqK3me/efPptPsA1gMQGg nainj1RkJIw18AAFnpfkDh3E7XK6ILnDmsqZ0WlbVvC5qBvxfZzwb/mJqTlnChdG eTxAKiAx/Pqin5Dt0Sc8ozjtTunVbvPAFWOPm21gkylpG0no2K6FWpJYqq3eh3NQ Jh8/UriCbuTo4Xx+Jp35V+QYMIgJYGyYLBRIkkL/ptRo9dnAB5SyPwFfMBziGIDZ BkIHsL9aNe+xsbhFIfUx751TnipVpaWb8PG5fN02eSe7 -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:07 2026 by rpki-client