This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/8SSKTH9s3HU_rS-TPm-_-xBMgPE.roa File: 8SSKTH9s3HU_rS-TPm-_-xBMgPE.roa (raw, json) Hash identifier: dT0653K9AV0eXk/TvV3UtuvNeuEkUytkEKjWnMa0YLs= Subject key identifier: F1:24:8A:4C:7F:6C:DC:75:3F:AD:2F:93:3E:6F:BF:FB:10:4C:80:F1 Certificate issuer: /CN=8303a4cb2384c207dd3737f0924fa08e93282d06 Certificate serial: 019B7C1177114C77786480BDFA9EFEEE6163 Authority key identifier: 83:03:A4:CB:23:84:C2:07:DD:37:37:F0:92:4F:A0:8E:93:28:2D:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwOkyyOEwgfdNzfwkk-gjpMoLQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/8SSKTH9s3HU_rS-TPm-_-xBMgPE.roa Signing time: Fri 02 Jan 2026 00:17:57 +0000 ROA not before: Fri 02 Jan 2026 00:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208553 IP address blocks: 89.39.80.0/24 maxlen: 24 89.39.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.crl rsync://rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.mft rsync://rpki.ripe.net/repository/DEFAULT/gwOkyyOEwgfdNzfwkk-gjpMoLQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:77:11:4c:77:78:64:80:bd:fa:9e:fe:ee:61:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8303a4cb2384c207dd3737f0924fa08e93282d06 Validity Not Before: Jan 2 00:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1248a4c7f6cdc753fad2f933e6fbffb104c80f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4e:80:e5:cf:51:03:3e:dc:ad:41:b4:80:19: 03:e4:f7:74:54:3c:f7:85:62:89:b1:cc:d4:29:b9: 76:50:ea:75:7e:04:55:66:99:21:a0:25:65:68:11: ae:63:2f:1f:0c:a9:99:d3:f2:1f:a7:40:fe:ee:2e: 19:5b:ed:e3:e8:d9:35:b3:d6:80:65:3a:e9:8c:4d: 1c:e7:50:fd:a4:00:a9:27:5b:72:90:b1:db:82:eb: 6b:c7:1e:cd:81:aa:9b:16:c6:97:08:32:5c:54:e7: 7b:ae:f1:8d:d1:23:66:a9:64:99:28:99:34:e7:b1: 44:e7:4b:da:70:e8:43:a8:7f:38:34:69:49:45:c1: 22:24:07:ac:65:34:01:95:a1:d6:e9:a5:85:5a:4a: 9a:13:b5:83:37:8f:5e:f1:18:61:f4:71:1c:dd:36: 21:d5:ed:ba:61:c3:6c:38:1d:fc:93:8a:da:72:45: 50:ff:bb:0c:7d:31:af:72:9b:56:c2:b8:b8:c8:97: fb:84:c1:a3:69:5f:0e:c7:09:34:d4:e6:d9:dc:95: 7d:a0:de:a5:06:33:3d:1f:39:a9:84:c8:7c:2a:01: d3:16:5c:2a:14:64:3d:e2:78:b4:62:0f:18:49:fe: df:ad:fe:b8:b0:f4:3f:b3:a9:97:21:a1:f7:02:fc: 6d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:24:8A:4C:7F:6C:DC:75:3F:AD:2F:93:3E:6F:BF:FB:10:4C:80:F1 X509v3 Authority Key Identifier: keyid:83:03:A4:CB:23:84:C2:07:DD:37:37:F0:92:4F:A0:8E:93:28:2D:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwOkyyOEwgfdNzfwkk-gjpMoLQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/8SSKTH9s3HU_rS-TPm-_-xBMgPE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.39.80.0/24 89.39.90.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:66:cb:19:35:2d:50:f9:20:b4:0e:5a:6e:c4:e8:ab:c7:31: a6:56:8f:4f:22:43:3d:7c:8e:84:43:af:a6:ce:35:b5:61:c5: 80:4b:35:b3:89:51:28:e1:3f:7c:b5:37:c2:d1:65:ae:c4:c0: a5:2f:00:53:8f:6f:ac:29:0c:68:26:dd:1c:cd:60:9d:8a:de: 59:d4:33:9f:70:93:26:74:da:b5:3b:8d:a3:ab:79:24:79:e1: a1:34:0d:4f:41:fc:af:87:10:98:b6:aa:cf:9a:c1:dd:76:cd: 18:a7:0f:55:85:13:6b:a2:3b:ce:0b:2b:04:5a:9f:7f:4a:a5: bb:fe:d5:72:2d:4c:71:02:d8:15:78:05:24:bc:6d:4e:de:22: db:09:93:1e:d5:6e:fe:cb:06:5c:65:1f:55:1e:3c:be:64:0d: ac:84:cf:48:5e:c2:ee:83:af:c9:41:30:98:14:27:6e:26:a0: 2e:94:3f:24:28:b7:76:c3:7d:1f:98:f1:b5:3d:51:40:4c:42: 5a:a6:85:f7:ed:41:c2:59:94:4b:6c:29:61:24:a2:bc:a6:03: 9d:a4:e6:b5:e1:16:75:c7:f5:93:ba:97:45:5f:27:3c:f5:f1: cc:88:d9:44:30:25:95:df:38:a2:d3:a7:9a:9d:73:e4:38:59: 69:09:04:20 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EXcRTHd4ZIC9+p7+7mFjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMDNhNGNiMjM4NGMyMDdkZDM3MzdmMDkyNGZhMDhlOTMy ODJkMDYwHhcNMjYwMTAyMDAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTI0OGE0YzdmNmNkYzc1M2ZhZDJmOTMzZTZmYmZmYjEwNGM4MGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok6A5c9RAz7crUG0gBkD5Pd0VDz3 hWKJsczUKbl2UOp1fgRVZpkhoCVlaBGuYy8fDKmZ0/Ifp0D+7i4ZW+3j6Nk1s9aA ZTrpjE0c51D9pACpJ1tykLHbgutrxx7NgaqbFsaXCDJcVOd7rvGN0SNmqWSZKJk0 57FE50vacOhDqH84NGlJRcEiJAesZTQBlaHW6aWFWkqaE7WDN49e8Rhh9HEc3TYh 1e26YcNsOB38k4rackVQ/7sMfTGvcptWwri4yJf7hMGjaV8Oxwk01ObZ3JV9oN6l BjM9HzmphMh8KgHTFlwqFGQ94ni0Yg8YSf7frf64sPQ/s6mXIaH3AvxtswIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPEkikx/bNx1P60vkz5vv/sQTIDxMB8GA1UdIwQY MBaAFIMDpMsjhMIH3Tc38JJPoI6TKC0GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3dPa3l5T0V3Z2ZkTnpmd2trLWdqcE1vTFFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy81NzdlYWUtM2YzZC00ZDNmLTljMDct ZjAxOWRiMmFjY2E4LzEvOFNTS1RIOXMzSFVfclMtVFBtLV8teEJNZ1BFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy81NzdlYWUtM2YzZC00ZDNmLTljMDctZjAxOWRiMmFjY2E4 LzEvZ3dPa3l5T0V3Z2ZkTnpmd2trLWdqcE1vTFFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSdQAwQA WSdaMA0GCSqGSIb3DQEBCwUAA4IBAQArZssZNS1Q+SC0DlpuxOirxzGmVo9PIkM9 fI6EQ6+mzjW1YcWASzWziVEo4T98tTfC0WWuxMClLwBTj2+sKQxoJt0czWCdit5Z 1DOfcJMmdNq1O42jq3kkeeGhNA1PQfyvhxCYtqrPmsHdds0Ypw9VhRNrojvOCysE Wp9/SqW7/tVyLUxxAtgVeAUkvG1O3iLbCZMe1W7+ywZcZR9VHjy+ZA2shM9IXsLu g6/JQTCYFCduJqAulD8kKLd2w30fmPG1PVFATEJapoX37UHCWZRLbClhJKK8pgOd pOa14RZ1x/WTupdFXyc89fHMiNlEMCWV3zii06eanXPkOFlpCQQg -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:31 2026 by rpki-client