This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/8InJm95Mi61k0QTHHB2HlAmtVMg.roa
File: 8InJm95Mi61k0QTHHB2HlAmtVMg.roa (raw, json)
Hash identifier: 2odNj3E7Z3QzMXWZ7rRREN25MF9JDV8cWqw57luNOH0=
Subject key identifier: F0:89:C9:9B:DE:4C:8B:AD:64:D1:04:C7:1C:1D:87:94:09:AD:54:C8
Certificate issuer: /CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Certificate serial: 019B79ECD4EF28B58751AE0574EF686971D0
Authority key identifier: B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/8InJm95Mi61k0QTHHB2HlAmtVMg.roa
Signing time: Thu 01 Jan 2026 14:18:42 +0000
ROA not before: Thu 01 Jan 2026 14:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202667
IP address blocks: 212.87.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:d4:ef:28:b5:87:51:ae:05:74:ef:68:69:71:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Validity
Not Before: Jan 1 14:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f089c99bde4c8bad64d104c71c1d879409ad54c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:05:d4:f7:40:1c:f0:e2:8d:5e:30:d6:5a:
17:62:7c:d3:58:05:de:47:8d:cc:f2:c9:d4:1c:9e:
1b:b0:ca:e7:4a:e9:82:0e:69:26:bc:7a:20:76:0b:
00:66:35:be:39:98:c6:e1:34:e5:4b:0e:9d:e3:54:
c8:2f:40:2d:dc:a1:ac:fc:15:88:bc:8b:66:1b:e2:
22:cf:64:4d:0f:2f:11:49:83:b4:d6:8b:ba:b6:99:
b2:d1:88:44:45:5c:04:d9:3b:7d:6e:22:47:86:e0:
d8:75:ac:5d:9e:8c:95:bd:5f:a8:5b:72:bb:9b:f2:
94:29:ae:07:03:33:4a:f0:7c:e9:0c:43:63:36:5f:
15:90:aa:fe:78:af:5d:df:20:58:9c:2e:7e:62:b5:
52:27:fd:d4:04:3d:a9:21:d6:e3:7e:df:cb:f2:7f:
7d:e7:6e:26:9b:1a:80:79:7f:7c:c1:ef:c4:07:4e:
e5:f6:08:36:da:b3:48:e6:81:25:3d:bf:a2:e0:9c:
89:71:0a:1f:23:f3:09:0d:1e:0d:00:1b:31:11:a4:
a9:2e:8a:a7:95:51:32:f8:2a:d2:44:4e:8f:8d:81:
55:d8:74:1f:fa:01:18:3d:f3:5c:7d:13:01:20:f3:
20:05:11:d1:c3:17:08:eb:1d:e2:66:42:8b:b9:71:
49:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:89:C9:9B:DE:4C:8B:AD:64:D1:04:C7:1C:1D:87:94:09:AD:54:C8
X509v3 Authority Key Identifier:
keyid:B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/8InJm95Mi61k0QTHHB2HlAmtVMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.252.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:32:a7:15:a9:80:9c:38:c6:56:93:35:aa:8a:0a:25:4a:54:
ca:02:c4:ac:e2:18:3f:26:0d:b3:9a:4a:e7:87:c0:73:26:63:
80:9c:b9:73:90:d6:a4:1c:3b:f3:9f:f8:b3:30:54:bf:5f:31:
24:dc:b8:b5:27:e6:a2:53:2a:8f:c1:86:0a:01:4e:49:a0:32:
9d:6d:2d:d9:e4:da:73:6e:fa:4d:13:55:4d:2e:40:fd:88:ac:
33:ae:43:69:c2:a9:b1:0c:53:e4:40:2d:9d:1b:6f:b9:ec:fd:
ff:6d:ee:48:6b:74:05:48:a3:8b:61:d1:31:6f:1d:ba:9d:a3:
08:aa:25:1b:db:48:e1:fc:8d:e6:11:ac:78:98:4c:65:63:fb:
fc:89:24:2e:82:a0:21:a8:9d:c7:10:cc:ec:97:58:74:d0:1e:
db:ca:54:de:12:46:d4:b8:09:b9:8d:71:c3:b5:06:44:7d:f9:
16:8d:04:39:25:19:13:79:6b:7e:ba:ee:a8:37:a8:cf:02:79:
4c:62:41:e6:28:b0:39:14:50:b0:39:3b:21:a0:9d:0f:6c:c8:
3e:2b:b0:c9:06:82:13:2f:1e:41:c0:de:5f:2c:7b:cb:bd:c3:
c4:df:7a:06:82:e7:7f:cf:8a:0e:f6:0a:3e:5c:ba:ec:af:e4:
93:1d:b5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:39:21 2026 by rpki-client