This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/8tQM3Thot0c2wesRfaBCKmkaCcY.roa File: 8tQM3Thot0c2wesRfaBCKmkaCcY.roa (raw, json) Hash identifier: g2CL+5i9K4VhsA4Qd5ZYR1Hr4NN13dbnCGaEkOBPLv8= Subject key identifier: F2:D4:0C:DD:38:68:B7:47:36:C1:EB:11:7D:A0:42:2A:69:1A:09:C6 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B360D537617E308D89457A1E29BF0EE Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/8tQM3Thot0c2wesRfaBCKmkaCcY.roa Signing time: Thu 01 Jan 2026 20:18:18 +0000 ROA not before: Thu 01 Jan 2026 20:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 37.77.147.0/24 maxlen: 24 37.140.221.0/24 maxlen: 24 45.90.197.0/24 maxlen: 24 62.233.44.0/24 maxlen: 24 89.106.202.0/24 maxlen: 24 185.11.63.0/24 maxlen: 24 193.109.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:0d:53:76:17:e3:08:d8:94:57:a1:e2:9b:f0:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2d40cdd3868b74736c1eb117da0422a691a09c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e3:26:14:0b:d1:29:fe:ba:3c:dd:5a:2b:be: 4f:8e:c4:50:82:47:de:11:f9:c2:e0:ea:c3:dd:1f: 87:7c:55:7c:46:d3:4b:55:ec:d0:b6:4d:99:fc:d6: fa:f4:f6:eb:03:12:a9:8e:38:b8:af:36:33:07:15: a1:2d:1d:39:d0:a4:00:e5:5e:00:36:c7:a1:6a:2b: 95:ea:8e:5d:52:41:b6:9a:f9:2b:ec:2f:6a:64:2d: b8:97:b8:1d:e3:51:f7:61:9e:09:ff:da:41:40:62: 18:54:ac:5f:f8:38:62:2e:45:de:5a:42:51:ab:a3: e7:aa:7b:62:4b:76:3e:f5:a7:e7:74:f3:f8:1f:53: 3d:9f:a5:3b:78:66:a3:e4:74:7f:d5:0c:4c:80:f0: db:e5:f8:c5:82:cf:13:12:aa:d5:7d:8f:ce:7f:64: 3d:38:c5:a8:ef:8a:e8:a9:eb:d8:de:d3:8f:f0:47: be:e8:88:49:5f:2c:12:8c:44:ef:d1:db:f5:ce:2f: f2:3b:e5:94:08:95:c9:d2:60:1a:ff:35:8d:6a:cc: 56:79:33:13:04:c9:3b:81:77:0b:23:7e:c0:70:48: 32:e8:05:25:34:fa:ed:f9:09:1d:c9:5f:3b:d9:25: 1d:38:35:02:e4:47:b4:42:a0:6e:f5:b6:b1:8a:29: 11:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D4:0C:DD:38:68:B7:47:36:C1:EB:11:7D:A0:42:2A:69:1A:09:C6 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/8tQM3Thot0c2wesRfaBCKmkaCcY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.77.147.0/24 37.140.221.0/24 45.90.197.0/24 62.233.44.0/24 89.106.202.0/24 185.11.63.0/24 193.109.213.0/24 Signature Algorithm: sha256WithRSAEncryption 78:47:b4:cf:a9:10:34:58:51:95:84:cf:d0:6f:56:2a:2a:dc: ff:51:84:cd:06:11:7e:e1:21:52:a0:f7:64:b4:bf:9d:dc:3e: b4:ba:7e:56:cf:12:ea:01:b5:18:b7:1b:f5:92:c8:68:4a:e3: 7d:49:9e:56:b6:4f:b8:7d:d0:dc:cc:51:32:d3:b1:81:c7:59: c9:0f:f5:46:8f:1f:5f:1a:5b:a5:cc:68:d8:21:c7:3f:4a:76: ac:92:8c:94:4b:d0:60:bf:17:2a:01:98:f2:36:19:8c:6d:68: b5:a4:88:72:49:8e:25:a9:36:bf:49:50:2c:d3:1b:66:b5:bf: 57:b7:7f:28:cc:ac:59:e1:76:8d:db:53:03:50:b6:89:5f:92: e2:9c:35:9c:e1:20:f9:76:f3:ea:59:ff:a4:a4:b9:1a:e3:dc: 97:34:ef:c6:f5:db:c2:af:de:38:60:3b:80:4c:a6:f5:f3:3d: 59:48:f9:b2:f4:d1:dc:6e:09:6e:fa:b4:a6:f5:1c:c8:bc:ad: 96:08:3f:24:6c:0b:35:6d:44:a1:3d:bd:33:b6:b4:c4:f1:5a: 57:71:b8:c0:7e:6d:53:54:f0:5a:65:d9:88:0b:d0:b6:d8:25: 03:ec:d6:a6:8c:e5:f3:86:fc:e0:bc:e7:4f:37:c7:b7:4a:de: be:95:ff:75 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt7Ng1TdhfjCNiUV6Him/DuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmQ0MGNkZDM4NjhiNzQ3MzZjMWViMTE3ZGEwNDIyYTY5MWEwOWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuMmFAvRKf66PN1aK75PjsRQgkfe EfnC4OrD3R+HfFV8RtNLVezQtk2Z/Nb69PbrAxKpjji4rzYzBxWhLR050KQA5V4A NsehaiuV6o5dUkG2mvkr7C9qZC24l7gd41H3YZ4J/9pBQGIYVKxf+DhiLkXeWkJR q6PnqntiS3Y+9afndPP4H1M9n6U7eGaj5HR/1QxMgPDb5fjFgs8TEqrVfY/Of2Q9 OMWo74roqevY3tOP8Ee+6IhJXywSjETv0dv1zi/yO+WUCJXJ0mAa/zWNasxWeTMT BMk7gXcLI37AcEgy6AUlNPrt+QkdyV872SUdODUC5Ee0QqBu9baxiikRZwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFPLUDN04aLdHNsHrEX2gQippGgnGMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvOHRRTTNUaG90MGMyd2VzUmZhQkNLbWthQ2NZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAJU2TAwQA JYzdAwQALVrFAwQAPuksAwQAWWrKAwQAuQs/AwQAwW3VMA0GCSqGSIb3DQEBCwUA A4IBAQB4R7TPqRA0WFGVhM/Qb1YqKtz/UYTNBhF+4SFSoPdktL+d3D60un5WzxLq AbUYtxv1kshoSuN9SZ5Wtk+4fdDczFEy07GBx1nJD/VGjx9fGlulzGjYIcc/Snas koyUS9BgvxcqAZjyNhmMbWi1pIhySY4lqTa/SVAs0xtmtb9Xt38ozKxZ4XaN21MD ULaJX5LinDWc4SD5dvPqWf+kpLka49yXNO/G9dvCr944YDuATKb18z1ZSPmy9NHc bglu+rSm9RzIvK2WCD8kbAs1bUShPb0ztrTE8VpXcbjAfm1TVPBaZdmIC9C22CUD 7NamjOXzhvzgvOdPN8e3St6+lf91 -----END CERTIFICATE-----Generated at Thu Jan 8 12:59:33 2026 by rpki-client