This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/8g6pJ0vSz-Gr9KYzHRj-gu4yzBo.roa File: 8g6pJ0vSz-Gr9KYzHRj-gu4yzBo.roa (raw, json) Hash identifier: /+J1pfrP5MU9iGsrr3AgBpdswQXanW8mlxs8/dhTOJU= Subject key identifier: F2:0E:A9:27:4B:D2:CF:E1:AB:F4:A6:33:1D:18:FE:82:EE:32:CC:1A Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E38336E7E8EBD43EE307D441DF07F05 Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/8g6pJ0vSz-Gr9KYzHRj-gu4yzBo.roa Signing time: Fri 02 Jan 2026 10:19:31 +0000 ROA not before: Fri 02 Jan 2026 10:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214790 IP address blocks: 5.8.44.0/24 maxlen: 24 5.188.51.0/24 maxlen: 24 5.188.200.0/24 maxlen: 24 5.189.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:33:6e:7e:8e:bd:43:ee:30:7d:44:1d:f0:7f:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f20ea9274bd2cfe1abf4a6331d18fe82ee32cc1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:02:f2:4d:26:4e:27:d6:c0:ab:30:b1:1b:c3: b9:a7:2e:4d:e7:50:ce:a8:a1:af:17:67:18:63:6a: 56:c8:7c:3a:9f:93:2c:b1:fa:3c:62:c2:a3:98:76: 70:dd:0d:0f:cb:40:95:ac:a4:28:7b:43:58:d1:13: df:ea:94:23:ca:b9:68:24:fb:43:01:87:68:68:fe: 81:02:7a:ae:db:22:b7:1b:7e:41:8a:18:d0:08:1d: b8:8a:7b:14:32:1b:2c:bb:33:4d:09:c6:ec:e8:82: 78:28:05:da:6e:5c:50:95:c9:ac:ea:c7:e4:98:4d: be:fc:e7:6d:23:15:62:b0:39:d1:6a:46:69:9b:66: 66:77:fa:24:45:8f:8b:2a:1a:40:b2:45:68:c8:b6: a2:92:c5:52:ee:43:a4:4e:df:de:14:ee:f3:8b:98: 0c:1e:2d:fa:ec:7c:1e:36:82:9d:58:a2:75:a4:c1: a3:73:eb:48:87:71:54:29:9a:75:1a:00:ae:af:71: 2c:15:d2:d0:32:71:55:96:17:b7:27:a8:9c:3f:13: 95:64:08:c4:9e:27:20:cf:87:99:89:8c:5e:33:96: 09:b0:0a:ca:bc:79:35:8b:cd:c6:cc:37:d3:8d:c0: 41:c5:d7:17:be:99:90:d0:1e:19:5d:de:3c:dd:d4: 9a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0E:A9:27:4B:D2:CF:E1:AB:F4:A6:33:1D:18:FE:82:EE:32:CC:1A X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/8g6pJ0vSz-Gr9KYzHRj-gu4yzBo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.8.44.0/24 5.188.51.0/24 5.188.200.0/24 5.189.254.0/24 Signature Algorithm: sha256WithRSAEncryption c7:4a:a3:8e:54:eb:f1:f0:f2:18:25:7f:70:8b:2d:89:f7:28: b3:27:bc:9a:a8:cf:9c:00:f2:eb:5f:ee:ae:95:dd:bc:52:9c: a6:37:f4:46:5d:22:ef:a5:1d:ae:68:c6:87:7d:f3:36:e2:28: 6d:d8:00:7a:81:5b:50:3e:49:3d:4d:9c:f5:b6:e3:5f:ae:6c: 58:db:8b:55:bb:c7:92:e7:67:d8:91:ca:ed:b1:00:43:2e:fb: 85:cc:a3:7a:d5:9f:4c:fb:9d:93:39:c0:af:84:0f:63:3b:4a: da:fe:f0:ed:e1:fc:1b:c8:7f:2d:fb:5a:f4:af:0c:b3:b9:a9: b9:70:a5:29:f2:61:92:cb:e4:48:6a:91:cb:d5:b6:eb:a7:44: 1c:c5:9d:08:bb:10:f7:5f:7e:85:38:2d:56:3b:f4:52:23:9e: ab:ba:2f:d4:09:29:a9:7c:1e:67:63:3a:b3:ff:00:4a:9a:fd: 7b:6e:ed:e8:3d:45:05:0a:ed:71:8d:61:c2:6b:78:87:c9:9f: ec:f7:35:b3:b6:fe:02:b2:52:4a:8e:7b:54:25:da:d6:a6:30: 9c:7e:84:e8:3d:4a:31:78:5b:92:e1:cb:1d:ae:2f:9b:a1:b6: b3:08:58:b7:d3:23:67:91:26:3e:07:bf:b4:39:65:8e:9b:ef: d2:d8:87:ca -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+ODNufo69Q+4wfUQd8H8FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjBlYTkyNzRiZDJjZmUxYWJmNGE2MzMxZDE4ZmU4MmVlMzJjYzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgLyTSZOJ9bAqzCxG8O5py5N51DO qKGvF2cYY2pWyHw6n5Mssfo8YsKjmHZw3Q0Py0CVrKQoe0NY0RPf6pQjyrloJPtD AYdoaP6BAnqu2yK3G35BihjQCB24insUMhssuzNNCcbs6IJ4KAXablxQlcms6sfk mE2+/OdtIxVisDnRakZpm2Zmd/okRY+LKhpAskVoyLaiksVS7kOkTt/eFO7zi5gM Hi367HweNoKdWKJ1pMGjc+tIh3FUKZp1GgCur3EsFdLQMnFVlhe3J6icPxOVZAjE nicgz4eZiYxeM5YJsArKvHk1i83GzDfTjcBBxdcXvpmQ0B4ZXd483dSaCwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPIOqSdL0s/hq/SmMx0Y/oLuMswaMB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvOGc2cEowdlN6LUdyOUtZekhSai1ndTR5ekJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABQgsAwQA BbwzAwQABbzIAwQABb3+MA0GCSqGSIb3DQEBCwUAA4IBAQDHSqOOVOvx8PIYJX9w iy2J9yizJ7yaqM+cAPLrX+6uld28UpymN/RGXSLvpR2uaMaHffM24iht2AB6gVtQ Pkk9TZz1tuNfrmxY24tVu8eS52fYkcrtsQBDLvuFzKN61Z9M+52TOcCvhA9jO0ra /vDt4fwbyH8t+1r0rwyzuam5cKUp8mGSy+RIapHL1bbrp0QcxZ0IuxD3X36FOC1W O/RSI56rui/UCSmpfB5nYzqz/wBKmv17bu3oPUUFCu1xjWHCa3iHyZ/s9zWztv4C slJKjntUJdrWpjCcfoToPUoxeFuS4csdri+bobazCFi30yNnkSY+B7+0OWWOm+/S 2IfK -----END CERTIFICATE-----Generated at Tue Jan 20 09:25:09 2026 by rpki-client