This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/8OKd3CQc6i0WS5lvDDNOUjLhw3g.roa File: 8OKd3CQc6i0WS5lvDDNOUjLhw3g.roa (raw, json) Hash identifier: 2r6wcq8Rpn3z2tzFav+stYWE1p2kymIXK4N4fPkqcPo= Subject key identifier: F0:E2:9D:DC:24:1C:EA:2D:16:4B:99:6F:0C:33:4E:52:32:E1:C3:78 Certificate issuer: /CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20 Certificate serial: 019B7D5C99B9DDD61C74550E278F2679AEC7 Authority key identifier: 4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/8OKd3CQc6i0WS5lvDDNOUjLhw3g.roa Signing time: Fri 02 Jan 2026 06:19:39 +0000 ROA not before: Fri 02 Jan 2026 06:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59619 IP address blocks: 91.240.226.0/24 maxlen: 24 91.240.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:99:b9:dd:d6:1c:74:55:0e:27:8f:26:79:ae:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20 Validity Not Before: Jan 2 06:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0e29ddc241cea2d164b996f0c334e5232e1c378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dc:a0:92:6f:29:46:ae:31:11:ae:1f:f7:0c: f6:0e:87:d8:dc:be:a8:ea:32:d8:f3:f6:84:90:d3: 86:94:40:16:82:ac:f6:0e:36:a6:e6:8b:54:18:34: 68:a2:09:bb:c4:d6:e9:6b:42:81:e7:96:36:38:39: ca:3a:6d:fd:67:17:7a:81:3b:c1:7e:20:91:1c:05: e1:7d:92:59:14:2e:87:05:cf:74:99:6b:db:48:17: ad:ae:cc:9c:9b:55:40:c4:db:8b:ee:ab:a3:36:10: 86:dd:52:93:19:67:8e:4e:a8:a1:75:d5:53:a8:ad: 23:69:54:81:e1:96:17:b3:c8:9b:41:cc:fd:cc:bd: 21:90:f7:81:fc:2a:ab:7e:fb:f8:28:21:7b:45:eb: a8:9f:60:e4:e6:79:c7:fd:af:fd:38:47:49:ff:02: f7:31:86:a3:bf:5e:32:08:6a:d3:db:9e:c3:ca:4c: eb:b6:e8:92:77:ef:5d:ce:75:9c:a5:63:2f:62:9e: ba:0f:9f:7e:49:42:da:3a:aa:89:a1:17:97:56:1a: f8:49:d8:9d:3f:08:2c:75:36:f5:be:02:55:ee:34: a7:4b:78:91:09:ad:79:87:51:5c:70:97:77:21:f5: e6:37:bd:d5:f1:c8:4b:fe:f2:1f:0b:57:63:b4:d5: e0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E2:9D:DC:24:1C:EA:2D:16:4B:99:6F:0C:33:4E:52:32:E1:C3:78 X509v3 Authority Key Identifier: keyid:4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/8OKd3CQc6i0WS5lvDDNOUjLhw3g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.226.0/23 Signature Algorithm: sha256WithRSAEncryption 38:59:68:57:4d:18:d2:5c:2a:76:80:3e:3a:90:8a:af:fd:91: 26:a8:13:e7:1e:13:c6:09:f7:de:30:6e:d5:e1:01:43:2f:3f: d5:9b:03:e7:9a:49:0d:13:e4:2e:f1:40:0b:4b:1d:e3:32:04: b2:ce:08:37:da:88:b3:90:3f:3e:7f:09:1f:f9:85:1e:78:20: 3b:31:1d:62:18:62:a7:0f:eb:d8:7b:85:f7:18:78:f6:f5:4f: 7e:98:85:15:60:43:5d:65:6b:59:01:d3:dc:c9:01:80:69:86: fe:94:5b:6c:61:3d:93:79:ac:b1:2c:de:0d:76:59:69:c7:a5: df:5f:0c:ae:da:01:4c:7b:37:9b:21:a3:c9:92:56:1e:77:87: 53:a7:4b:54:b1:b0:98:17:8d:8d:17:10:7f:68:81:b7:75:e7: 23:6e:ee:9c:41:cf:8a:67:e1:43:40:4a:f1:83:87:fe:ef:68: d0:68:2f:0a:b5:21:f0:ea:19:1b:26:a5:ff:1e:38:a7:b3:b2: c0:7b:ba:20:dc:ec:86:7d:fc:9d:4f:44:24:9a:42:f6:28:30: 46:58:1b:1c:f7:5e:21:92:66:73:eb:60:a7:d7:ac:82:a8:db: 58:40:d3:5d:c7:7f:a5:a1:4a:12:ac:7b:fb:a7:25:39:e7:49: 88:10:83:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XJm53dYcdFUOJ48mea7HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNDFjNTZlYTA2OWVlN2IxYzFkZjY2ODZiZDM2ZTBlMTQ1 MjhhMjAwHhcNMjYwMTAyMDYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGUyOWRkYzI0MWNlYTJkMTY0Yjk5NmYwYzMzNGU1MjMyZTFjMzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdygkm8pRq4xEa4f9wz2DofY3L6o 6jLY8/aEkNOGlEAWgqz2Djam5otUGDRoogm7xNbpa0KB55Y2ODnKOm39Zxd6gTvB fiCRHAXhfZJZFC6HBc90mWvbSBetrsycm1VAxNuL7qujNhCG3VKTGWeOTqihddVT qK0jaVSB4ZYXs8ibQcz9zL0hkPeB/Cqrfvv4KCF7Reuon2Dk5nnH/a/9OEdJ/wL3 MYajv14yCGrT257DykzrtuiSd+9dznWcpWMvYp66D59+SULaOqqJoReXVhr4Sdid PwgsdTb1vgJV7jSnS3iRCa15h1FccJd3IfXmN73V8chL/vIfC1djtNXgOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPDindwkHOotFkuZbwwzTlIy4cN4MB8GA1UdIwQY MBaAFE9BxW6gae57HB32aGvTbg4UUoogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDBIRmJxQnA3bnNjSGZab2E5TnVEaFJTaWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84YTE0MGItMGU1MS00ZmM3LTljMDEt ZDY3YjlhY2E2NDE3LzEvOE9LZDNDUWM2aTBXUzVsdkRETk9VakxodzNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84YTE0MGItMGU1MS00ZmM3LTljMDEtZDY3YjlhY2E2NDE3 LzEvVDBIRmJxQnA3bnNjSGZab2E5TnVEaFJTaWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW/DiMA0G CSqGSIb3DQEBCwUAA4IBAQA4WWhXTRjSXCp2gD46kIqv/ZEmqBPnHhPGCffeMG7V 4QFDLz/VmwPnmkkNE+Qu8UALSx3jMgSyzgg32oizkD8+fwkf+YUeeCA7MR1iGGKn D+vYe4X3GHj29U9+mIUVYENdZWtZAdPcyQGAaYb+lFtsYT2TeayxLN4Ndllpx6Xf Xwyu2gFMezebIaPJklYed4dTp0tUsbCYF42NFxB/aIG3decjbu6cQc+KZ+FDQErx g4f+72jQaC8KtSHw6hkbJqX/Hjins7LAe7og3OyGffydT0QkmkL2KDBGWBsc914h kmZz62Cn16yCqNtYQNNdx3+loUoSrHv7pyU550mIEIND -----END CERTIFICATE-----Generated at Tue Feb 10 05:47:42 2026 by rpki-client