This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/8mJ_gjPNuA1v0E8kGgFSHtyuDE8.roa File: 8mJ_gjPNuA1v0E8kGgFSHtyuDE8.roa (raw, json) Hash identifier: iBeqVNXfdRFJ/xbLsD0hF/qTWwOBkcVA6E79gUwEHAE= Subject key identifier: F2:62:7F:82:33:CD:B8:0D:6F:D0:4F:24:1A:01:52:1E:DC:AE:0C:4F Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 019B7AC95C6F75944477D7D79A8A9D337CFF Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/8mJ_gjPNuA1v0E8kGgFSHtyuDE8.roa Signing time: Thu 01 Jan 2026 18:19:35 +0000 ROA not before: Thu 01 Jan 2026 18:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12679 IP address blocks: 37.49.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:5c:6f:75:94:44:77:d7:d7:9a:8a:9d:33:7c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Jan 1 18:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2627f8233cdb80d6fd04f241a01521edcae0c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b3:3e:16:98:41:5c:03:9a:88:2c:fa:1f:2d: a9:43:34:06:18:7c:a0:20:f8:70:65:39:88:ad:ec: 6a:80:c1:12:dd:c1:d9:d5:91:01:c3:0d:e3:95:90: b4:1b:4b:a9:a2:62:5d:81:19:bf:d5:8a:2f:24:08: a8:d8:20:e0:e7:54:53:e0:d1:93:f3:3e:b9:2c:ca: a4:7b:3e:6d:95:b8:75:3c:20:6c:29:57:05:03:32: 8b:29:57:68:80:5c:25:9d:c5:b7:9c:80:54:1f:ef: 9b:26:03:1c:10:bd:e0:60:6f:64:20:9e:87:18:2d: b9:05:06:f8:ff:c7:67:c9:8c:7e:c9:6c:fd:5b:18: eb:0a:d2:73:66:1f:93:d9:ab:93:01:28:3f:fa:a0: 50:29:df:1f:47:8f:ad:08:50:10:76:bc:4d:c0:fe: 59:bf:36:0d:23:bd:fb:b3:0f:1c:d3:d4:51:4c:0a: 9c:73:f3:0e:e9:9d:74:d8:ef:22:10:af:f3:84:a6: 8e:67:23:fd:6f:1d:2e:03:d8:40:5c:7e:b9:42:0b: 8e:71:e9:3c:f8:05:15:dc:e9:f9:e6:13:84:dc:2a: ca:0d:60:29:a1:d1:53:ec:af:4d:58:f0:2a:13:b6: 27:0a:51:5c:76:aa:21:51:e9:39:8c:c7:1b:4e:53: c5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:62:7F:82:33:CD:B8:0D:6F:D0:4F:24:1A:01:52:1E:DC:AE:0C:4F X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/8mJ_gjPNuA1v0E8kGgFSHtyuDE8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.49.151.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:6f:61:92:83:4a:c2:7e:d1:38:19:0d:7c:51:3d:03:39:df: eb:1b:07:3d:8b:76:7f:2f:ff:d8:63:f7:a4:97:4a:0f:63:df: aa:21:30:c4:12:32:fa:40:f6:a2:a4:26:a9:f4:92:96:23:9e: 5e:aa:ea:9c:e0:7d:4e:fd:ab:ef:58:c1:6a:b0:90:a6:ff:98: 9c:5d:4f:c7:b7:2c:af:02:73:ec:a8:b8:8b:c4:27:14:2c:c6: 2d:d5:67:8d:d1:2b:c4:73:6c:6c:75:ae:84:9b:1b:db:04:9d: ee:0e:b5:89:a3:cf:b3:5b:5b:f8:e1:16:db:fa:8e:b0:41:02: 22:61:ac:b6:50:98:d5:f8:40:bc:33:3c:1b:e4:ef:ef:0e:ec: 8f:12:2b:a5:8f:0f:9d:3d:90:cf:30:65:42:91:49:2b:f1:1d: 35:35:da:6a:08:32:6f:44:6a:55:18:05:1b:73:d6:ed:c7:2f: 78:e3:8d:79:ec:6c:b1:ff:d0:52:ae:78:60:93:28:12:07:78: 99:c4:f6:8f:a5:d3:cf:2c:92:97:db:bb:85:c7:1f:4a:6e:cc: e0:0d:98:93:eb:fd:e6:a1:2a:51:c6:4e:db:f0:99:81:e1:1a: 9c:5b:c6:55:e1:32:c0:ce:39:52:b8:24:41:8d:06:02:60:89: 53:1f:36:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yVxvdZREd9fXmoqdM3z/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjYwMTAxMTgxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjYyN2Y4MjMzY2RiODBkNmZkMDRmMjQxYTAxNTIxZWRjYWUwYzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrM+FphBXAOaiCz6Hy2pQzQGGHyg IPhwZTmIrexqgMES3cHZ1ZEBww3jlZC0G0upomJdgRm/1YovJAio2CDg51RT4NGT 8z65LMqkez5tlbh1PCBsKVcFAzKLKVdogFwlncW3nIBUH++bJgMcEL3gYG9kIJ6H GC25BQb4/8dnyYx+yWz9WxjrCtJzZh+T2auTASg/+qBQKd8fR4+tCFAQdrxNwP5Z vzYNI737sw8c09RRTAqcc/MO6Z102O8iEK/zhKaOZyP9bx0uA9hAXH65QguOcek8 +AUV3On55hOE3CrKDWApodFT7K9NWPAqE7YnClFcdqohUek5jMcbTlPFxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPJif4IzzbgNb9BPJBoBUh7crgxPMB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvOG1KX2dqUE51QTF2MEU4a0dnRlNIdHl1REU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJTGXMA0G CSqGSIb3DQEBCwUAA4IBAQCbb2GSg0rCftE4GQ18UT0DOd/rGwc9i3Z/L//YY/ek l0oPY9+qITDEEjL6QPaipCap9JKWI55equqc4H1O/avvWMFqsJCm/5icXU/Htyyv AnPsqLiLxCcULMYt1WeN0SvEc2xsda6EmxvbBJ3uDrWJo8+zW1v44Rbb+o6wQQIi Yay2UJjV+EC8Mzwb5O/vDuyPEiuljw+dPZDPMGVCkUkr8R01NdpqCDJvRGpVGAUb c9btxy9444157Gyx/9BSrnhgkygSB3iZxPaPpdPPLJKX27uFxx9KbszgDZiT6/3m oSpRxk7b8JmB4RqcW8ZV4TLAzjlSuCRBjQYCYIlTHzaW -----END CERTIFICATE-----Generated at Wed Jan 21 22:55:11 2026 by rpki-client