This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/8b5Q1Ep96tHPZfrlguEX1Fphr7Y.roa File: 8b5Q1Ep96tHPZfrlguEX1Fphr7Y.roa (raw, json) Hash identifier: NSjlTmAwF3tYTL1sHlW6s/mlYkWitDTfZbrAsFJSNPQ= Subject key identifier: F1:BE:50:D4:4A:7D:EA:D1:CF:65:FA:E5:82:E1:17:D4:5A:61:AF:B6 Certificate issuer: /CN=6e8bf857ae07f0d5efd5775ad529ce4eed9b7d2f Certificate serial: 019B7B367A39FA96C15E2B684214CB612961 Authority key identifier: 6E:8B:F8:57:AE:07:F0:D5:EF:D5:77:5A:D5:29:CE:4E:ED:9B:7D:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bov4V64H8NXv1Xda1SnOTu2bfS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/8b5Q1Ep96tHPZfrlguEX1Fphr7Y.roa Signing time: Thu 01 Jan 2026 20:18:46 +0000 ROA not before: Thu 01 Jan 2026 20:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197678 IP address blocks: 91.230.24.0/24 maxlen: 24 2001:67c:2808::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.crl rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.mft rsync://rpki.ripe.net/repository/DEFAULT/bov4V64H8NXv1Xda1SnOTu2bfS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:7a:39:fa:96:c1:5e:2b:68:42:14:cb:61:29:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e8bf857ae07f0d5efd5775ad529ce4eed9b7d2f Validity Not Before: Jan 1 20:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1be50d44a7dead1cf65fae582e117d45a61afb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:95:26:78:21:38:3e:2b:8d:39:63:72:38:d7: 2b:84:ea:4d:1e:88:e8:0f:5f:5b:4f:af:bd:a4:b8: a7:53:41:26:77:4b:b5:00:a5:69:9a:07:57:75:68: 73:9f:19:3b:5e:13:04:e1:10:58:db:2e:30:9f:aa: c6:8d:b5:6a:47:d6:73:db:d2:50:86:1d:b4:18:00: 2e:1b:ab:45:bc:32:94:24:a8:32:73:fe:35:a0:ac: 84:17:da:25:36:4c:40:bc:64:81:09:cf:c5:97:96: 51:c9:6f:3a:af:be:ca:64:3c:f5:24:c8:f6:9f:cd: 1e:30:f1:a3:ec:5b:ea:5d:7c:3f:05:15:78:41:21: 0e:4a:b0:82:1d:c5:54:28:04:a1:0e:ca:9f:c6:12: 22:7a:43:76:42:23:f7:98:36:9b:d2:44:9d:3c:87: 43:b0:ca:3d:1c:a9:4e:d5:7f:51:e8:38:39:75:48: ee:4c:ff:bc:7e:9f:cb:69:d7:02:b4:cf:af:d5:71: 2e:4f:a1:5c:e8:05:2d:14:81:09:60:03:44:9e:3f: 76:98:cf:b3:64:d4:10:c9:62:be:21:d4:6c:80:5e: d8:85:f9:f7:c3:c3:86:f2:1b:ec:e9:62:95:e0:9d: ee:5a:4e:51:42:a9:2f:fe:ae:cf:2b:ff:dd:fc:db: d1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:BE:50:D4:4A:7D:EA:D1:CF:65:FA:E5:82:E1:17:D4:5A:61:AF:B6 X509v3 Authority Key Identifier: keyid:6E:8B:F8:57:AE:07:F0:D5:EF:D5:77:5A:D5:29:CE:4E:ED:9B:7D:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bov4V64H8NXv1Xda1SnOTu2bfS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/8b5Q1Ep96tHPZfrlguEX1Fphr7Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.24.0/24 IPv6: 2001:67c:2808::/48 Signature Algorithm: sha256WithRSAEncryption 7d:7e:66:8c:55:ed:4a:62:7e:e1:80:df:92:74:26:68:d9:7d: c7:c7:f6:48:a9:2f:58:1a:9b:e0:ab:bc:46:08:8a:13:bc:7f: 30:13:6a:9f:fa:e9:52:a9:50:67:9b:a3:7f:52:78:df:2f:b5: 38:8e:36:5a:b5:fc:e3:a2:27:f5:3d:8d:07:7b:67:ca:b0:eb: be:22:97:c3:c8:61:07:02:1c:07:73:90:3f:77:b9:09:04:b1: 9b:8e:f5:0f:98:b2:41:62:2b:da:78:0f:99:a8:04:08:c2:5e: 5e:1f:e8:6e:10:b6:36:5b:7e:51:66:5c:f3:10:10:02:f4:1e: 12:03:60:50:53:ca:37:32:6d:9c:fd:ae:b0:ab:69:09:12:43: 34:fe:99:eb:57:73:94:4e:7f:c9:85:63:89:69:d3:02:24:d8: cf:83:00:86:2b:b2:cb:65:e0:f9:66:9e:ec:31:5a:68:9a:bc: 27:00:58:e3:1d:e7:f7:f3:ca:95:b4:aa:3c:4b:cb:1a:30:1b: 98:ec:25:94:61:e6:02:57:b9:02:99:8e:b9:25:86:d6:b1:4c: ec:04:d9:71:f2:17:65:2e:f7:8f:86:a2:1f:d9:dd:f5:0f:4f: 2b:1b:1e:c9:1f:27:d8:a5:e2:59:0b:08:e8:15:f2:f0:d7:f1: 9c:3c:be:43 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7Nno5+pbBXitoQhTLYSlhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlOGJmODU3YWUwN2YwZDVlZmQ1Nzc1YWQ1MjljZTRlZWQ5 YjdkMmYwHhcNMjYwMTAxMjAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWJlNTBkNDRhN2RlYWQxY2Y2NWZhZTU4MmUxMTdkNDVhNjFhZmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZUmeCE4PiuNOWNyONcrhOpNHojo D19bT6+9pLinU0Emd0u1AKVpmgdXdWhznxk7XhME4RBY2y4wn6rGjbVqR9Zz29JQ hh20GAAuG6tFvDKUJKgyc/41oKyEF9olNkxAvGSBCc/Fl5ZRyW86r77KZDz1JMj2 n80eMPGj7FvqXXw/BRV4QSEOSrCCHcVUKAShDsqfxhIiekN2QiP3mDab0kSdPIdD sMo9HKlO1X9R6Dg5dUjuTP+8fp/LadcCtM+v1XEuT6Fc6AUtFIEJYANEnj92mM+z ZNQQyWK+IdRsgF7Yhfn3w8OG8hvs6WKV4J3uWk5RQqkv/q7PK//d/NvRhQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFPG+UNRKferRz2X65YLhF9RaYa+2MB8GA1UdIwQY MBaAFG6L+FeuB/DV79V3WtUpzk7tm30vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm92NFY2NEg4Tlh2MVhkYTFTbk9UdTJiZlM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8wNDUxNDctMzZiZS00OTgxLTg3YTMt YTZkY2I5ZmI4ZTZmLzEvOGI1UTFFcDk2dEhQWmZybGd1RVgxRnBocjdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8wNDUxNDctMzZiZS00OTgxLTg3YTMtYTZkY2I5ZmI4ZTZm LzEvYm92NFY2NEg4Tlh2MVhkYTFTbk9UdTJiZlM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW+YYMA8E AgACMAkDBwAgAQZ8KAgwDQYJKoZIhvcNAQELBQADggEBAH1+ZoxV7UpifuGA35J0 JmjZfcfH9kipL1gam+CrvEYIihO8fzATap/66VKpUGebo39SeN8vtTiONlq1/OOi J/U9jQd7Z8qw674il8PIYQcCHAdzkD93uQkEsZuO9Q+YskFiK9p4D5moBAjCXl4f 6G4QtjZbflFmXPMQEAL0HhIDYFBTyjcybZz9rrCraQkSQzT+metXc5ROf8mFY4lp 0wIk2M+DAIYrsstl4PlmnuwxWmiavCcAWOMd5/fzypW0qjxLyxowG5jsJZRh5gJX uQKZjrklhtaxTOwE2XHyF2Uu94+Goh/Z3fUPTysbHskfJ9il4lkLCOgV8vDX8Zw8 vkM= -----END CERTIFICATE-----Generated at Tue Feb 10 02:33:34 2026 by rpki-client