This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/F8z5IfsSBvS9knWKapS4nrflr7Y.roa File: F8z5IfsSBvS9knWKapS4nrflr7Y.roa (raw, json) Hash identifier: 7dVCoDjibp0AI4i1pFVaK0bVZF+7UY8kUH8u0AOQC2A= Subject key identifier: 17:CC:F9:21:FB:12:06:F4:BD:92:75:8A:6A:94:B8:9E:B7:E5:AF:B6 Certificate issuer: /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742 Certificate serial: 019B7DCB563BE6CB5A57AF25451674FA68C4 Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/F8z5IfsSBvS9knWKapS4nrflr7Y.roa Signing time: Fri 02 Jan 2026 08:20:36 +0000 ROA not before: Fri 02 Jan 2026 08:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200810 IP address blocks: 89.36.80.0/21 maxlen: 24 185.77.176.0/22 maxlen: 24 185.245.188.0/22 maxlen: 24 185.246.248.0/22 maxlen: 24 2a05:6580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:56:3b:e6:cb:5a:57:af:25:45:16:74:fa:68:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742 Validity Not Before: Jan 2 08:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17ccf921fb1206f4bd92758a6a94b89eb7e5afb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:55:ba:25:6b:be:88:25:e6:81:11:69:4c:c5: 0c:a4:3a:68:8d:59:09:17:87:ad:6b:04:34:83:bc: 65:22:a3:f5:04:9d:00:44:9c:68:f7:ab:ee:a6:cc: 87:d1:71:c6:35:48:b6:5a:f4:c4:27:7d:35:5e:20: dc:f1:93:31:e1:56:4f:66:c0:f5:e2:2a:a0:bd:ea: 23:c8:33:30:11:fe:fa:0c:27:0b:e6:23:39:ee:46: f1:ef:29:84:5f:d7:03:88:15:63:4e:bc:f2:33:ff: 42:de:b8:30:16:9c:80:21:82:40:87:5f:56:f9:fc: 13:18:56:3f:2c:41:ad:0d:15:f8:36:2d:09:5a:2f: a3:69:44:ff:bb:32:f8:c6:e3:d5:10:4a:3c:27:c8: ed:bd:16:56:3f:e5:33:a6:d2:af:39:ac:c2:83:ac: a4:be:d6:81:ac:7c:cc:0b:1d:4a:ad:80:27:8a:a4: 15:54:1f:12:ba:c0:d5:74:8f:c3:6e:08:74:ba:16: 5e:57:58:d8:45:68:7c:cc:23:c3:05:e4:dd:16:21: fa:a2:b9:9c:e5:a6:a7:c7:ed:32:f5:3c:3e:f3:b4: ef:0c:7a:ea:b6:ed:ca:44:11:89:da:05:77:d5:d9: e0:60:cc:e2:33:e0:2b:3d:68:cd:7e:46:92:75:6a: 9b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:CC:F9:21:FB:12:06:F4:BD:92:75:8A:6A:94:B8:9E:B7:E5:AF:B6 X509v3 Authority Key Identifier: keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/F8z5IfsSBvS9knWKapS4nrflr7Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.36.80.0/21 185.77.176.0/22 185.245.188.0/22 185.246.248.0/22 IPv6: 2a05:6580::/32 Signature Algorithm: sha256WithRSAEncryption 4c:fc:49:6f:6d:92:34:23:34:e5:c2:74:d6:56:c6:b8:0e:87: d7:7b:74:f3:17:f0:31:61:2b:88:44:71:3f:b0:ec:b3:d2:21: 1b:55:20:1e:f8:44:66:94:ce:e3:0a:1a:e6:88:4d:db:4f:50: 65:80:ba:64:e4:85:7a:ce:c3:ed:e1:71:08:9f:c5:76:a7:9c: 61:24:74:88:23:8c:0b:72:e0:7b:0b:43:02:3f:9e:a6:e5:5c: 8a:95:60:bd:62:50:ab:b6:3a:1a:6e:4c:88:b5:d4:59:1d:21: 69:52:dc:2c:cd:6f:41:81:9e:44:f0:71:17:d2:fb:73:2e:ab: 16:48:2a:9d:b2:87:ad:44:52:e5:74:07:ba:ae:a9:ad:a5:a1: 5d:f2:3d:14:8b:98:f0:d9:d8:30:a5:3c:90:f5:25:8d:8a:14: f9:d0:f0:18:2a:a7:02:bd:07:9e:76:73:ca:4b:aa:27:98:8c: e0:0f:8f:53:45:92:bb:85:0d:e4:11:c0:62:9d:fa:76:b5:9c: a8:f2:4b:8a:ae:2e:84:84:08:f7:71:af:9c:d7:01:96:de:91: 62:7b:ba:b3:1e:1a:be:15:26:d9:d2:60:de:68:88:41:6d:1e: 9f:26:3a:90:e7:89:cb:b9:1f:b9:48:09:24:a1:43:91:86:06: 8f:ea:e1:08 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt9y1Y75staV68lRRZ0+mjEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyN2M5M2RkYjFhMTcxNTFjNTZmMjJkY2FmMzFkZDgyMjk0 NjM3NDIwHhcNMjYwMTAyMDgyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2NjZjkyMWZiMTIwNmY0YmQ5Mjc1OGE2YTk0Yjg5ZWI3ZTVhZmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FW6JWu+iCXmgRFpTMUMpDpojVkJ F4etawQ0g7xlIqP1BJ0ARJxo96vupsyH0XHGNUi2WvTEJ301XiDc8ZMx4VZPZsD1 4iqgveojyDMwEf76DCcL5iM57kbx7ymEX9cDiBVjTrzyM/9C3rgwFpyAIYJAh19W +fwTGFY/LEGtDRX4Ni0JWi+jaUT/uzL4xuPVEEo8J8jtvRZWP+UzptKvOazCg6yk vtaBrHzMCx1KrYAniqQVVB8SusDVdI/Dbgh0uhZeV1jYRWh8zCPDBeTdFiH6ormc 5aanx+0y9Tw+87TvDHrqtu3KRBGJ2gV31dngYMziM+ArPWjNfkaSdWqbSwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFBfM+SH7Egb0vZJ1imqUuJ635a+2MB8GA1UdIwQY MBaAFPJ8k92xoXFRxW8i3K8x3YIpRjdCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85NDRmMDktNDA2ZS00OTg1LTk5Mjkt MzZlMGM4YWZlMjZhLzEvRjh6NUlmc1NCdlM5a25XS2FwUzRucmZscjdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS85NDRmMDktNDA2ZS00OTg1LTk5MjktMzZlMGM4YWZlMjZh LzEvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDWSRQAwQC uU2wAwQCufW8AwQCufb4MA0EAgACMAcDBQAqBWWAMA0GCSqGSIb3DQEBCwUAA4IB AQBM/ElvbZI0IzTlwnTWVsa4DofXe3TzF/AxYSuIRHE/sOyz0iEbVSAe+ERmlM7j ChrmiE3bT1BlgLpk5IV6zsPt4XEIn8V2p5xhJHSII4wLcuB7C0MCP56m5VyKlWC9 YlCrtjoabkyItdRZHSFpUtwszW9BgZ5E8HEX0vtzLqsWSCqdsoetRFLldAe6rqmt paFd8j0Ui5jw2dgwpTyQ9SWNihT50PAYKqcCvQeednPKS6onmIzgD49TRZK7hQ3k EcBinfp2tZyo8kuKri6EhAj3ca+c1wGW3pFie7qzHhq+FSbZ0mDeaIhBbR6fJjqQ 54nLuR+5SAkkoUORhgaP6uEI -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:23 2026 by rpki-client