This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/B8RqG2Xxq5WGdSf7iNky-uGz4Vg.roa File: B8RqG2Xxq5WGdSf7iNky-uGz4Vg.roa (raw, json) Hash identifier: 9xOR3g7oJ2XNkjebEjWOcXDQwkDYeYBj7pv03VZ8aS8= Subject key identifier: 07:C4:6A:1B:65:F1:AB:95:86:75:27:FB:88:D9:32:FA:E1:B3:E1:58 Certificate issuer: /CN=614f5665059abc7be3475ef9e77a9797b716fc87 Certificate serial: 019B7DCAD69B3959623F9D77EB38DB446631 Authority key identifier: 61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/B8RqG2Xxq5WGdSf7iNky-uGz4Vg.roa Signing time: Fri 02 Jan 2026 08:20:03 +0000 ROA not before: Fri 02 Jan 2026 08:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42493 IP address blocks: 2.59.124.0/22 maxlen: 24 5.35.216.0/21 maxlen: 24 77.73.40.0/21 maxlen: 24 185.40.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:d6:9b:39:59:62:3f:9d:77:eb:38:db:44:66:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614f5665059abc7be3475ef9e77a9797b716fc87 Validity Not Before: Jan 2 08:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07c46a1b65f1ab95867527fb88d932fae1b3e158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d3:b7:e0:67:78:e4:0e:95:2a:a3:9c:e2:46: b2:b0:66:99:84:81:d7:1d:a8:60:9a:af:c8:7f:c3: f5:5f:c1:21:9c:3d:85:5c:03:6b:ac:73:7d:09:68: 70:f5:22:bf:d6:07:ff:af:af:e8:a0:d7:97:eb:b9: 6f:57:18:0e:a2:f1:6f:5b:ce:7a:9a:6d:84:70:58: ef:17:31:0e:a8:a9:c3:f4:2a:aa:73:ab:e6:63:0a: 63:5b:5f:76:6d:b6:3e:d6:09:ec:50:10:b2:9a:29: db:5b:26:42:c6:d1:fe:8f:30:d1:30:bf:f0:67:e8: 08:d0:63:d5:53:b4:77:09:a5:f4:41:45:1d:cb:b6: 6a:b0:e0:90:69:6e:89:68:e8:bc:cb:aa:1b:0c:6b: 53:26:50:1b:1e:74:0c:15:32:15:ad:7d:22:b6:45: 6d:4d:75:e9:4e:da:30:bb:f6:70:21:c7:9c:36:00: 56:ca:c4:cb:64:14:68:f6:15:ce:84:b7:14:bc:66: 18:7c:ad:73:8c:9a:d4:b9:98:78:3a:b9:92:39:f0: 17:fc:78:af:43:95:58:f4:3a:f8:e2:51:d7:0c:d4: 1e:92:f0:17:75:9e:eb:05:64:38:87:11:15:a0:8d: 17:72:62:7f:91:1e:9b:65:00:50:59:c7:db:5f:99: 47:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C4:6A:1B:65:F1:AB:95:86:75:27:FB:88:D9:32:FA:E1:B3:E1:58 X509v3 Authority Key Identifier: keyid:61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/B8RqG2Xxq5WGdSf7iNky-uGz4Vg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.124.0/22 5.35.216.0/21 77.73.40.0/21 185.40.148.0/22 Signature Algorithm: sha256WithRSAEncryption a6:0f:7e:f3:60:7f:a1:db:e4:e8:ba:9b:68:ec:7f:34:6a:c0: af:9b:68:15:eb:3c:22:4c:8e:66:12:6c:86:04:f8:cf:b0:b1: ad:64:d9:10:c0:5d:25:b4:f9:1b:6b:5a:0c:35:75:9a:56:87: d3:7f:f2:71:4a:ae:20:52:52:9b:f4:57:59:e1:3e:a6:1d:56: ec:90:87:b7:b3:f6:e5:65:a9:e7:e6:de:10:43:8b:06:05:2a: e0:2b:a4:9d:d3:3f:88:75:bc:74:39:e0:af:8e:d8:00:02:cf: 29:84:53:86:89:12:9a:29:27:8b:3a:7a:dd:83:6e:f4:ef:3a: cb:61:30:2d:3b:1a:dd:19:df:ee:55:d9:81:ab:6d:fd:0f:01: 7e:b3:b2:99:6c:e1:67:84:19:49:b6:d1:70:e3:8e:07:30:96: 17:a8:7b:46:94:df:5f:e9:5a:92:2e:a0:dc:fc:fb:7f:1d:c7: 55:ec:8b:bf:8f:c1:fd:e1:cc:70:dd:9c:b1:9d:91:eb:5d:59: 6b:97:cd:7c:5b:a0:88:58:49:70:17:15:b8:c5:bb:53:18:93: 69:59:95:11:ee:39:92:59:4f:bd:f5:f9:ec:a7:2b:b7:d8:b3: 2c:f8:43:9e:aa:76:e6:41:0e:48:64:26:81:d6:6b:25:3a:dc: 5e:fe:10:a6 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9ytabOVliP5136zjbRGYxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNGY1NjY1MDU5YWJjN2JlMzQ3NWVmOWU3N2E5Nzk3Yjcx NmZjODcwHhcNMjYwMTAyMDgyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2M0NmExYjY1ZjFhYjk1ODY3NTI3ZmI4OGQ5MzJmYWUxYjNlMTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9O34Gd45A6VKqOc4kaysGaZhIHX Hahgmq/If8P1X8EhnD2FXANrrHN9CWhw9SK/1gf/r6/ooNeX67lvVxgOovFvW856 mm2EcFjvFzEOqKnD9Cqqc6vmYwpjW192bbY+1gnsUBCyminbWyZCxtH+jzDRML/w Z+gI0GPVU7R3CaX0QUUdy7ZqsOCQaW6JaOi8y6obDGtTJlAbHnQMFTIVrX0itkVt TXXpTtowu/ZwIcecNgBWysTLZBRo9hXOhLcUvGYYfK1zjJrUuZh4OrmSOfAX/Hiv Q5VY9Dr44lHXDNQekvAXdZ7rBWQ4hxEVoI0XcmJ/kR6bZQBQWcfbX5lHewIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFAfEahtl8auVhnUn+4jZMvrhs+FYMB8GA1UdIwQY MBaAFGFPVmUFmrx740de+ed6l5e3FvyHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVU5V1pRV2F2SHZqUjE3NTUzcVhsN2NXX0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS84ODhhMDQtNzdmNC00MTU5LTk4NmMt M2NlZjU5M2QxNmI0LzEvQjhScUcyWHhxNVdHZFNmN2lOa3ktdUd6NFZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS84ODhhMDQtNzdmNC00MTU5LTk4NmMtM2NlZjU5M2QxNmI0 LzEvWVU5V1pRV2F2SHZqUjE3NTUzcVhsN2NXX0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCAjt8AwQD BSPYAwQDTUkoAwQCuSiUMA0GCSqGSIb3DQEBCwUAA4IBAQCmD37zYH+h2+Toupto 7H80asCvm2gV6zwiTI5mEmyGBPjPsLGtZNkQwF0ltPkba1oMNXWaVofTf/JxSq4g UlKb9FdZ4T6mHVbskIe3s/blZann5t4QQ4sGBSrgK6Sd0z+Idbx0OeCvjtgAAs8p hFOGiRKaKSeLOnrdg2707zrLYTAtOxrdGd/uVdmBq239DwF+s7KZbOFnhBlJttFw 444HMJYXqHtGlN9f6VqSLqDc/Pt/HcdV7Iu/j8H94cxw3ZyxnZHrXVlrl818W6CI WElwFxW4xbtTGJNpWZUR7jmSWU+99fnspyu32LMs+EOeqnbmQQ5IZCaB1mslOtxe /hCm -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:20 2026 by rpki-client