This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/n8PnHmCwzgn6eidtrMYT9W9uiDg.roa File: n8PnHmCwzgn6eidtrMYT9W9uiDg.roa (raw, json) Hash identifier: dF3BGFPmyqPtI2B8bvqeTEPzNVlA2M9oqYLGZ2qLNSM= Subject key identifier: 9F:C3:E7:1E:60:B0:CE:09:FA:7A:27:6D:AC:C6:13:F5:6F:6E:88:38 Certificate issuer: /CN=7de98f48e988790d0e0793537941b413d2e60306 Certificate serial: 019B79112C9B3FEDFB19992E8779A36F1040 Authority key identifier: 7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/n8PnHmCwzgn6eidtrMYT9W9uiDg.roa Signing time: Thu 01 Jan 2026 10:18:47 +0000 ROA not before: Thu 01 Jan 2026 10:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41071 IP address blocks: 5.252.44.0/22 maxlen: 22 91.102.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2c:9b:3f:ed:fb:19:99:2e:87:79:a3:6f:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7de98f48e988790d0e0793537941b413d2e60306 Validity Not Before: Jan 1 10:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fc3e71e60b0ce09fa7a276dacc613f56f6e8838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:68:02:4b:6a:97:3e:49:da:f0:2a:88:c4:fb: a3:3f:f5:93:d6:8a:94:29:32:fc:5b:7f:e4:36:6e: 14:ba:d4:a9:e0:c9:c8:77:24:c3:c3:e5:1c:a5:02: 1d:93:1b:16:e1:9c:b2:de:06:ab:35:9e:57:d0:eb: fa:da:ee:6c:3c:21:44:14:2b:bf:de:72:dc:d2:7a: 20:fb:7e:11:ee:59:80:49:27:c8:c8:e7:f2:68:f2: 84:9d:4c:13:a2:af:de:0a:49:f9:3e:0a:88:48:b1: c0:81:7e:57:1c:9e:59:89:d3:ba:8b:49:43:9f:65: e4:67:95:53:87:74:a1:d5:35:bc:62:a8:1f:8c:ab: bb:81:42:db:c8:69:7d:b0:5f:59:17:81:d7:cb:e7: 70:dc:37:39:78:61:3e:b5:51:13:6b:b5:32:3d:0a: 54:76:c7:61:f4:33:8f:cd:9f:41:65:f1:a9:d6:f3: ff:f9:b9:08:8e:84:7d:cd:08:15:36:7c:5a:49:8b: a2:9f:17:c8:96:32:8f:f4:f6:a5:c9:f4:7b:f6:64: 3a:fe:91:95:e3:4d:ff:e9:6c:47:ab:2c:23:39:5b: 3c:a8:f4:2f:70:77:5c:28:8d:e8:aa:41:6b:27:27: 0d:0b:64:2d:a3:d4:a0:61:bb:2e:69:10:6a:79:7a: ed:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C3:E7:1E:60:B0:CE:09:FA:7A:27:6D:AC:C6:13:F5:6F:6E:88:38 X509v3 Authority Key Identifier: keyid:7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/n8PnHmCwzgn6eidtrMYT9W9uiDg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.44.0/22 91.102.128.0/21 Signature Algorithm: sha256WithRSAEncryption 18:ea:13:16:9d:0d:e7:1e:15:80:bd:26:da:c4:fb:0e:81:ec: a1:66:be:74:22:e3:6b:30:7a:71:3a:02:d3:ce:7b:4e:f9:aa: 7c:d1:16:e2:82:b9:b6:8e:e1:9d:94:2a:ec:1c:47:9e:da:9c: 43:70:dd:21:f6:00:76:c6:09:9c:ed:6d:80:d1:f7:a9:10:b8: 07:e4:0a:06:30:64:8c:84:3e:45:ef:a0:6c:b5:ba:2d:00:8a: 7b:de:6d:7a:a1:91:3d:25:ef:5c:d2:a6:97:77:56:83:ff:f6: 2f:fa:e0:8d:05:ab:99:4d:5f:2c:82:64:d4:bd:3a:fe:d3:40: fc:8e:fc:5e:fd:e0:4c:64:f1:d9:f6:49:41:c4:b5:1f:ba:e2: 4a:5e:5d:34:4e:0e:b0:fc:36:98:12:72:6f:83:e6:02:51:e7: 49:a0:b7:39:27:5e:b9:42:9e:61:5a:6a:7e:ca:36:2f:1d:d8: 38:f4:34:80:74:94:f6:12:3e:66:33:df:af:65:22:6a:29:8f: 61:a7:ca:c9:91:54:2b:af:24:f8:b2:8f:b7:5e:b5:e0:8e:00: fa:ef:bc:50:b6:65:79:63:32:44:9a:9f:bc:50:64:d2:96:71: a2:5b:56:03:39:82:a0:0c:fc:1b:50:4c:c5:4c:85:1e:93:d0: cf:9f:77:f8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ESybP+37GZkuh3mjbxBAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZTk4ZjQ4ZTk4ODc5MGQwZTA3OTM1Mzc5NDFiNDEzZDJl NjAzMDYwHhcNMjYwMTAxMTAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmMzZTcxZTYwYjBjZTA5ZmE3YTI3NmRhY2M2MTNmNTZmNmU4ODM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GgCS2qXPkna8CqIxPujP/WT1oqU KTL8W3/kNm4UutSp4MnIdyTDw+UcpQIdkxsW4Zyy3garNZ5X0Ov62u5sPCFEFCu/ 3nLc0nog+34R7lmASSfIyOfyaPKEnUwToq/eCkn5PgqISLHAgX5XHJ5ZidO6i0lD n2XkZ5VTh3Sh1TW8YqgfjKu7gULbyGl9sF9ZF4HXy+dw3Dc5eGE+tVETa7UyPQpU dsdh9DOPzZ9BZfGp1vP/+bkIjoR9zQgVNnxaSYuinxfIljKP9PalyfR79mQ6/pGV 403/6WxHqywjOVs8qPQvcHdcKI3oqkFrJycNC2Qto9SgYbsuaRBqeXrtbwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJ/D5x5gsM4J+nonbazGE/Vvbog4MB8GA1UdIwQY MBaAFH3pj0jpiHkNDgeTU3lBtBPS5gMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmVtUFNPbUllUTBPQjVOVGVVRzBFOUxtQXdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jMGZjMGEtMTVkNC00NmNjLWE4Yjkt NDc2MzJjYjViODU0LzEvbjhQbkhtQ3d6Z242ZWlkdHJNWVQ5Vzl1aURnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jMGZjMGEtMTVkNC00NmNjLWE4YjktNDc2MzJjYjViODU0 LzEvZmVtUFNPbUllUTBPQjVOVGVVRzBFOUxtQXdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCBfwsAwQD W2aAMA0GCSqGSIb3DQEBCwUAA4IBAQAY6hMWnQ3nHhWAvSbaxPsOgeyhZr50IuNr MHpxOgLTzntO+ap80Rbigrm2juGdlCrsHEee2pxDcN0h9gB2xgmc7W2A0fepELgH 5AoGMGSMhD5F76BstbotAIp73m16oZE9Je9c0qaXd1aD//Yv+uCNBauZTV8sgmTU vTr+00D8jvxe/eBMZPHZ9klBxLUfuuJKXl00Tg6w/DaYEnJvg+YCUedJoLc5J165 Qp5hWmp+yjYvHdg49DSAdJT2Ej5mM9+vZSJqKY9hp8rJkVQrryT4so+3XrXgjgD6 77xQtmV5YzJEmp+8UGTSlnGiW1YDOYKgDPwbUEzFTIUek9DPn3f4 -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:32 2026 by rpki-client