This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/8Ib0pU8UTjRMczLCqmldiNs-zHs.roa File: 8Ib0pU8UTjRMczLCqmldiNs-zHs.roa (raw, json) Hash identifier: YeSnfyctx+qiq7Ji4BgsCIDQMSELaBj9cF1Ydg+/nHU= Subject key identifier: F0:86:F4:A5:4F:14:4E:34:4C:73:32:C2:AA:69:5D:88:DB:3E:CC:7B Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 019B7D5A9AE7352BC95DA02D87B5CF3559B8 Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/8Ib0pU8UTjRMczLCqmldiNs-zHs.roa Signing time: Fri 02 Jan 2026 06:17:28 +0000 ROA not before: Fri 02 Jan 2026 06:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60148 IP address blocks: 213.176.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:9a:e7:35:2b:c9:5d:a0:2d:87:b5:cf:35:59:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Jan 2 06:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f086f4a54f144e344c7332c2aa695d88db3ecc7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:51:4c:38:ad:7a:0d:c3:5d:54:60:f2:a7:ba: 27:35:73:0a:6f:60:be:1a:96:de:ab:2e:4b:48:3a: 4d:02:1e:a9:c9:4d:ff:6e:cb:45:54:11:57:ac:88: c0:0e:83:15:5f:46:84:a2:85:df:3e:27:a3:a5:6c: be:de:95:2a:c5:b7:18:b1:b0:9a:f3:06:12:d8:89: 79:e3:5b:bc:3f:88:6e:98:ec:a8:7c:3e:93:cb:4d: 8f:15:74:7f:88:0d:9e:91:d6:ad:39:23:d2:19:ed: e0:48:42:ed:9f:40:46:07:81:a1:8e:22:e7:21:7f: 5b:0a:65:d0:45:fe:f4:b2:bb:2c:4b:37:9c:77:99: b0:be:3d:0f:17:40:39:d2:d6:7d:6c:d8:02:b9:52: 64:f4:8e:8b:90:49:09:0d:9b:25:ff:ec:54:7e:bc: f5:ed:7a:48:25:0a:ce:9d:c7:6c:4b:e1:63:47:d7: 71:5d:bb:ac:9c:ec:ec:84:40:24:47:c1:9d:b6:31: b9:a6:f3:d9:09:d5:36:a6:9b:d8:d6:23:07:31:79: df:86:24:e9:88:51:52:c0:b2:6e:01:42:ae:dc:21: f2:54:a4:e2:a2:c2:ba:80:fa:be:2d:33:fe:f1:9e: 74:01:2b:f3:7b:00:40:26:ab:54:2f:43:f9:8f:25: 1a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:86:F4:A5:4F:14:4E:34:4C:73:32:C2:AA:69:5D:88:DB:3E:CC:7B X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/8Ib0pU8UTjRMczLCqmldiNs-zHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.176.5.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:cb:57:6c:60:07:77:72:83:3d:e7:67:c4:29:c2:b4:5a:37: ae:a4:56:6e:c7:c2:fc:41:76:fe:4a:a3:67:69:65:91:9d:2f: 46:cf:ac:e0:ed:8c:5f:6b:4b:02:ba:8d:fa:dc:12:a4:69:1a: 46:a3:6c:95:36:58:4d:e0:be:b5:85:63:a5:59:3b:6b:f2:4f: 77:a4:ae:6e:74:77:c6:f8:90:37:bb:81:f0:e9:82:19:a2:47: e5:e9:8d:31:0d:fc:a0:44:91:c4:e7:82:2a:09:5c:a6:37:db: 9d:23:b1:8e:05:5c:3a:44:c3:73:34:ed:07:19:82:5e:81:a4: 27:5a:fa:45:67:43:6c:40:1a:85:12:81:b1:6b:19:3a:30:ce: f0:78:10:d0:ac:3c:a4:6a:40:67:57:4a:98:fc:03:27:cc:5f: 51:8f:64:c1:24:d2:31:c8:c9:aa:78:b6:6a:f7:e8:2c:19:47: a4:3c:8b:68:78:32:59:57:9d:17:0c:25:bb:8d:c5:73:1a:d4: 04:18:eb:70:a7:95:ad:0d:f8:0a:cf:dd:f8:08:2e:bf:44:1f: 6c:59:f4:d5:7c:ff:a3:5d:e9:24:12:9a:fd:19:e9:5a:52:52: c2:04:3f:9e:6e:32:59:7a:a8:38:96:fa:99:3b:f0:c0:72:17: ca:8c:f1:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WprnNSvJXaAth7XPNVm4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjYwMTAyMDYxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDg2ZjRhNTRmMTQ0ZTM0NGM3MzMyYzJhYTY5NWQ4OGRiM2VjYzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFFMOK16DcNdVGDyp7onNXMKb2C+ Gpbeqy5LSDpNAh6pyU3/bstFVBFXrIjADoMVX0aEooXfPiejpWy+3pUqxbcYsbCa 8wYS2Il541u8P4humOyofD6Ty02PFXR/iA2ekdatOSPSGe3gSELtn0BGB4GhjiLn IX9bCmXQRf70srssSzecd5mwvj0PF0A50tZ9bNgCuVJk9I6LkEkJDZsl/+xUfrz1 7XpIJQrOncdsS+FjR9dxXbusnOzshEAkR8GdtjG5pvPZCdU2ppvY1iMHMXnfhiTp iFFSwLJuAUKu3CHyVKTiosK6gPq+LTP+8Z50ASvzewBAJqtUL0P5jyUa/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPCG9KVPFE40THMywqppXYjbPsx7MB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvOEliMHBVOFVUalJNY3pMQ3FtbGRpTnMtekhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1bAFMA0G CSqGSIb3DQEBCwUAA4IBAQA/y1dsYAd3coM952fEKcK0WjeupFZux8L8QXb+SqNn aWWRnS9Gz6zg7Yxfa0sCuo363BKkaRpGo2yVNlhN4L61hWOlWTtr8k93pK5udHfG +JA3u4Hw6YIZokfl6Y0xDfygRJHE54IqCVymN9udI7GOBVw6RMNzNO0HGYJegaQn WvpFZ0NsQBqFEoGxaxk6MM7weBDQrDykakBnV0qY/AMnzF9Rj2TBJNIxyMmqeLZq 9+gsGUekPItoeDJZV50XDCW7jcVzGtQEGOtwp5WtDfgKz934CC6/RB9sWfTVfP+j XekkEpr9GelaUlLCBD+ebjJZeqg4lvqZO/DAchfKjPGD -----END CERTIFICATE-----Generated at Wed Jan 21 10:49:29 2026 by rpki-client