This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/8otHkib5_3i41JyAw70LeXUh0QU.roa File: 8otHkib5_3i41JyAw70LeXUh0QU.roa (raw, json) Hash identifier: 0qAK41CxT/RWAwJIryforayLl8dembnwnfhhCABuNu8= Subject key identifier: F2:8B:47:92:26:F9:FF:78:B8:D4:9C:80:C3:BD:0B:79:75:21:D1:05 Certificate issuer: /CN=53a125890a4af092455abc7bb5abfe48cd852c06 Certificate serial: 019BE0703BEAFBBCB2575DFD5E24EC1C1F42 Authority key identifier: 53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/8otHkib5_3i41JyAw70LeXUh0QU.roa Signing time: Wed 21 Jan 2026 12:03:30 +0000 ROA not before: Wed 21 Jan 2026 12:03:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201869 IP address blocks: 156.51.150.0/23 maxlen: 23 156.51.152.0/21 maxlen: 21 156.51.160.0/19 maxlen: 19 156.51.192.0/21 maxlen: 21 156.51.200.0/24 maxlen: 24 2001:67c:2cfc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:70:3b:ea:fb:bc:b2:57:5d:fd:5e:24:ec:1c:1f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53a125890a4af092455abc7bb5abfe48cd852c06 Validity Not Before: Jan 21 12:03:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f28b479226f9ff78b8d49c80c3bd0b797521d105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:cc:69:3e:2a:67:d0:91:74:3a:f3:08:56:76: 87:fd:c1:b6:8f:5b:0b:79:45:7b:d5:41:31:85:e2: 55:3a:88:92:f4:30:a8:76:35:06:0e:f6:2b:e1:78: 47:da:6f:f4:40:bf:9a:f7:26:3f:00:4f:9e:f9:e5: 25:9b:b6:fd:6e:b7:b7:30:35:fb:49:37:87:e6:2f: 79:ef:8e:35:fc:7e:d4:43:ae:3d:01:96:47:bd:e6: a6:8a:3d:fa:6a:1e:86:cd:98:c7:22:45:31:bd:44: f1:d0:56:b3:a2:47:d0:0a:37:7b:96:4a:1a:42:4b: 79:47:20:5c:84:5a:94:a2:e7:e0:0c:ee:7d:a0:de: 73:ad:22:15:f4:c9:2c:5a:87:4c:55:1e:fc:10:9c: 77:94:1c:88:fa:9b:8d:8b:e0:50:78:9d:4e:e0:6d: ea:d7:14:0a:36:0b:f4:f1:be:62:fd:06:02:87:4f: 87:5b:b5:71:11:50:52:a4:66:39:95:0c:21:e1:e1: 1c:8a:14:e3:53:1b:31:67:af:0f:e4:9d:03:a3:0e: 25:fd:c9:bd:12:df:b6:d2:82:74:d6:f5:7f:57:57: c2:26:e9:d2:41:9c:7a:62:76:7a:47:8a:db:8c:ed: 44:ef:a8:91:c0:ba:28:a5:d6:01:f2:f9:b9:e2:12: c7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8B:47:92:26:F9:FF:78:B8:D4:9C:80:C3:BD:0B:79:75:21:D1:05 X509v3 Authority Key Identifier: keyid:53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/8otHkib5_3i41JyAw70LeXUh0QU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 156.51.150.0-156.51.200.255 IPv6: 2001:67c:2cfc::/48 Signature Algorithm: sha256WithRSAEncryption 94:40:ed:57:de:ff:c9:ee:58:05:c6:61:d3:47:71:19:80:ee: 27:d1:30:ae:a2:83:ac:00:ab:b6:be:e2:4e:fb:6b:a6:a3:d2: ee:ba:08:a2:13:a2:47:54:df:d2:2a:c8:4f:8c:5d:f4:d8:9b: 69:6a:11:d9:6f:ae:1c:78:ac:6c:d6:a7:b1:14:ba:e5:3b:7b: 5b:32:45:8f:f4:c4:84:ce:5c:80:31:83:b5:9a:a8:56:d0:eb: f9:fc:85:0c:e6:d2:c9:a2:c3:ef:72:fe:d4:79:b5:9a:ef:e0: f2:68:bb:c0:42:3e:28:da:1d:a2:d0:49:cf:f0:10:b1:85:00: 3b:f3:a5:a3:63:4f:b6:3b:5d:c4:a5:6d:99:b5:3c:f3:1b:df: 92:9a:9a:9a:46:df:f5:29:8e:d2:49:36:34:61:7f:cb:c2:c4: 6a:f7:84:d6:01:d9:b8:91:bc:c1:c7:33:00:4e:f3:f4:63:03: a7:c9:35:68:eb:46:68:e2:27:16:01:70:db:b9:08:97:c4:8d: 96:b3:13:b3:d7:6b:dd:61:c1:45:a1:5d:31:5c:f1:3c:36:95: 6e:fa:bf:39:1b:5c:19:ff:e8:00:8f:31:fd:b7:08:50:30:47: 78:e1:fe:e9:4e:69:c7:48:62:93:7b:c1:cc:a6:a9:05:04:57: f9:92:14:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvgcDvq+7yyV139XiTsHB9CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYTEyNTg5MGE0YWYwOTI0NTVhYmM3YmI1YWJmZTQ4Y2Q4 NTJjMDYwHhcNMjYwMTIxMTIwMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjhiNDc5MjI2ZjlmZjc4YjhkNDljODBjM2JkMGI3OTc1MjFkMTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68xpPipn0JF0OvMIVnaH/cG2j1sL eUV71UExheJVOoiS9DCodjUGDvYr4XhH2m/0QL+a9yY/AE+e+eUlm7b9bre3MDX7 STeH5i957441/H7UQ649AZZHveamij36ah6GzZjHIkUxvUTx0FazokfQCjd7lkoa Qkt5RyBchFqUoufgDO59oN5zrSIV9MksWodMVR78EJx3lByI+puNi+BQeJ1O4G3q 1xQKNgv08b5i/QYCh0+HW7VxEVBSpGY5lQwh4eEcihTjUxsxZ68P5J0Dow4l/cm9 Et+20oJ01vV/V1fCJunSQZx6YnZ6R4rbjO1E76iRwLoopdYB8vm54hLHgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKLR5Im+f94uNScgMO9C3l1IdEFMB8GA1UdIwQY MBaAFFOhJYkKSvCSRVq8e7Wr/kjNhSwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTZFbGlRcEs4SkpGV3J4N3Rhdi1TTTJGTEFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi82MmZmNzEtYzRmMi00OTI5LTg4OTkt YzM4MzMwY2JkOTY1LzEvOG90SGtpYjVfM2k0MUp5QXc3MExlWFVoMFFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi82MmZmNzEtYzRmMi00OTI5LTg4OTktYzM4MzMwY2JkOTY1 LzEvVTZFbGlRcEs4SkpGV3J4N3Rhdi1TTTJGTEFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAGcM5YD BACcM8gwDwQCAAIwCQMHACABBnws/DANBgkqhkiG9w0BAQsFAAOCAQEAlEDtV97/ ye5YBcZh00dxGYDuJ9EwrqKDrACrtr7iTvtrpqPS7roIohOiR1Tf0irIT4xd9Nib aWoR2W+uHHisbNansRS65Tt7WzJFj/TEhM5cgDGDtZqoVtDr+fyFDObSyaLD73L+ 1Hm1mu/g8mi7wEI+KNodotBJz/AQsYUAO/Olo2NPtjtdxKVtmbU88xvfkpqamkbf 9SmO0kk2NGF/y8LEaveE1gHZuJG8wcczAE7z9GMDp8k1aOtGaOInFgFw27kIl8SN lrMTs9dr3WHBRaFdMVzxPDaVbvq/ORtcGf/oAI8x/bcIUDBHeOH+6U5px0hik3vB zKapBQRX+ZIUhQ== -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:38 2026 by rpki-client