This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/8X-KoCS_CU8kURq_ZAZXVIOmK14.roa File: 8X-KoCS_CU8kURq_ZAZXVIOmK14.roa (raw, json) Hash identifier: SJRCGCTLI7qRzpMlBdPbpnoh4a93nmWJa23zttRgkJI= Subject key identifier: F1:7F:8A:A0:24:BF:09:4F:24:51:1A:BF:64:06:57:54:83:A6:2B:5E Certificate issuer: /CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41 Certificate serial: 019B7A5ABB481F9B019DC6E9E65919B49DFF Authority key identifier: 76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/8X-KoCS_CU8kURq_ZAZXVIOmK14.roa Signing time: Thu 01 Jan 2026 16:18:45 +0000 ROA not before: Thu 01 Jan 2026 16:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9123 IP address blocks: 77.95.201.0/24 maxlen: 24 77.95.203.0/24 maxlen: 24 77.95.206.0/24 maxlen: 24 109.71.243.0/24 maxlen: 24 109.71.245.0/24 maxlen: 24 109.71.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:bb:48:1f:9b:01:9d:c6:e9:e6:59:19:b4:9d:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41 Validity Not Before: Jan 1 16:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f17f8aa024bf094f24511abf6406575483a62b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:37:c3:84:9f:5b:9a:3b:fe:ed:94:59:fc:62: 86:bb:24:fe:3b:8a:fd:1a:c4:6d:0c:6f:66:8c:10: 6e:c2:f7:93:43:ea:84:47:af:b9:96:15:1c:07:c5: 7d:d9:05:8a:bb:af:14:23:79:72:0e:0c:49:5b:f1: f8:69:cb:3d:c0:53:7f:6b:44:24:8b:ac:e9:52:ba: 20:7c:9e:d8:25:c1:e1:71:f3:c2:71:83:8c:6b:6c: f7:e9:85:51:5a:55:93:70:d4:9d:02:56:ec:85:ce: 89:12:35:de:9a:53:3a:ae:a7:a5:33:d8:d5:64:56: ef:08:27:42:45:30:58:1c:cf:f4:95:e8:27:b8:88: d3:c0:90:4f:cb:1b:54:a7:e0:ea:cc:90:76:d1:8a: e9:76:17:f1:e1:35:89:93:ff:e5:e1:ac:68:8e:da: a8:81:f8:f6:00:37:16:1c:7f:ae:0e:5e:9d:4f:ed: 99:85:9b:39:cb:9b:5e:5a:db:64:02:89:c0:bf:f4: a5:53:60:03:12:02:77:67:13:1c:4e:97:4e:55:0e: 34:c5:9b:8b:5e:ca:01:ef:5d:23:83:05:a1:1c:1f: 6d:ee:2f:23:49:dd:32:39:fa:be:84:45:c5:26:19: 83:e5:f8:4e:62:ce:69:c2:c5:a2:64:de:a7:23:58: 62:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7F:8A:A0:24:BF:09:4F:24:51:1A:BF:64:06:57:54:83:A6:2B:5E X509v3 Authority Key Identifier: keyid:76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/8X-KoCS_CU8kURq_ZAZXVIOmK14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.95.201.0/24 77.95.203.0/24 77.95.206.0/24 109.71.243.0/24 109.71.245.0/24 109.71.247.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:b4:e5:96:21:b5:2d:13:4e:6c:de:66:3c:d7:9c:b2:e3:ce: 3d:68:2d:eb:9c:06:ae:4b:a0:93:5a:23:db:07:68:9b:49:b8: d2:89:00:15:3d:9d:d3:be:9f:33:7d:3b:89:5d:0c:7c:3a:30: 56:2d:4c:63:96:11:9b:67:87:84:a1:f1:a9:e5:6f:c4:c1:b8: d8:92:29:41:62:8e:5e:31:c6:b7:05:25:ab:00:d0:96:42:93: 7b:54:3b:71:2b:e4:25:63:b1:ea:57:ea:4b:76:92:39:d1:48: 83:c1:62:9a:41:3f:85:5f:f1:6d:1d:e4:7f:54:a9:33:39:ed: de:ad:7b:25:0f:94:78:54:0b:d0:d6:6d:60:bd:0f:46:b1:ba: c4:23:c5:c0:59:9c:6a:e7:ce:a7:18:98:2f:d3:25:32:e3:f9: 50:4c:39:d7:ca:ae:eb:8c:61:0d:31:6e:d4:65:6c:2f:52:ee: 31:5a:8e:28:85:a6:10:b3:c8:7e:a3:3f:e3:b6:6e:84:f7:fe: 60:6a:dd:9d:9d:e9:91:39:01:2a:7c:ed:fb:1c:77:4e:36:14: 48:af:f4:a0:94:88:9e:29:d7:ba:94:f2:a6:5d:f8:21:85:1b: 84:c1:3b:c5:01:80:75:94:07:bf:54:42:fa:2d:7d:a2:71:7b: 03:e3:79:cd -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt6WrtIH5sBncbp5lkZtJ3/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2ZWYwYTBlZThmYTE1NGQ3YWRhNDM4YWYxMjEyMjY5Y2Uw YWNjNDEwHhcNMjYwMTAxMTYxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTdmOGFhMDI0YmYwOTRmMjQ1MTFhYmY2NDA2NTc1NDgzYTYyYjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzfDhJ9bmjv+7ZRZ/GKGuyT+O4r9 GsRtDG9mjBBuwveTQ+qER6+5lhUcB8V92QWKu68UI3lyDgxJW/H4acs9wFN/a0Qk i6zpUrogfJ7YJcHhcfPCcYOMa2z36YVRWlWTcNSdAlbshc6JEjXemlM6rqelM9jV ZFbvCCdCRTBYHM/0legnuIjTwJBPyxtUp+DqzJB20Yrpdhfx4TWJk//l4axojtqo gfj2ADcWHH+uDl6dT+2ZhZs5y5teWttkAonAv/SlU2ADEgJ3ZxMcTpdOVQ40xZuL XsoB710jgwWhHB9t7i8jSd0yOfq+hEXFJhmD5fhOYs5pwsWiZN6nI1hiHwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFPF/iqAkvwlPJFEav2QGV1SDpiteMB8GA1UdIwQY MBaAFHbvCg7o+hVNetpDivEhImnOCsxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHU4S0R1ajZGVTE2MmtPSzhTRWlhYzRLekVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8xNjg2YzMtZGE3MC00YjU0LWFiMmIt M2JlOTk1ZDJiYmRhLzEvOFgtS29DU19DVThrVVJxX1pBWlhWSU9tSzE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8xNjg2YzMtZGE3MC00YjU0LWFiMmItM2JlOTk1ZDJiYmRh LzEvZHU4S0R1ajZGVTE2MmtPSzhTRWlhYzRLekVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQATV/JAwQA TV/LAwQATV/OAwQAbUfzAwQAbUf1AwQAbUf3MA0GCSqGSIb3DQEBCwUAA4IBAQA8 tOWWIbUtE05s3mY815yy4849aC3rnAauS6CTWiPbB2ibSbjSiQAVPZ3Tvp8zfTuJ XQx8OjBWLUxjlhGbZ4eEofGp5W/EwbjYkilBYo5eMca3BSWrANCWQpN7VDtxK+Ql Y7HqV+pLdpI50UiDwWKaQT+FX/FtHeR/VKkzOe3erXslD5R4VAvQ1m1gvQ9GsbrE I8XAWZxq586nGJgv0yUy4/lQTDnXyq7rjGENMW7UZWwvUu4xWo4ohaYQs8h+oz/j tm6E9/5gat2dnemROQEqfO37HHdONhRIr/SglIieKde6lPKmXfghhRuEwTvFAYB1 lAe/VEL6LX2icXsD43nN -----END CERTIFICATE-----Generated at Wed Jan 21 11:13:02 2026 by rpki-client