This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/1-V8x_3FzosbTSoBrUqHkMLV-44Q.roa File: 1-V8x_3FzosbTSoBrUqHkMLV-44Q.roa (raw, json) Hash identifier: RPgG1SJlqfEsV732+LedUmH+jks8p7lo8I/jwtQGL9I= Subject key identifier: F9:5F:31:FF:71:73:A2:C6:D3:4A:80:6B:52:A1:E4:30:B5:7E:E3:84 Certificate issuer: /CN=34077b41e98873e7f06fb1df3f5d39c721b1343f Certificate serial: 019B7A5B6D961333CF3E08EBB25D18CDCFEA Authority key identifier: 34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/1-V8x_3FzosbTSoBrUqHkMLV-44Q.roa Signing time: Thu 01 Jan 2026 16:19:30 +0000 ROA not before: Thu 01 Jan 2026 16:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8449 IP address blocks: 5.57.8.0/21 maxlen: 24 31.192.248.0/21 maxlen: 24 31.192.249.0/24 maxlen: 24 77.95.56.0/21 maxlen: 24 94.143.192.0/21 maxlen: 24 185.54.252.0/22 maxlen: 24 212.42.96.0/19 maxlen: 24 2a00:7160::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:6d:96:13:33:cf:3e:08:eb:b2:5d:18:cd:cf:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34077b41e98873e7f06fb1df3f5d39c721b1343f Validity Not Before: Jan 1 16:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f95f31ff7173a2c6d34a806b52a1e430b57ee384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dc:8d:d4:b2:86:ba:b8:d2:78:07:97:79:65: fb:d5:03:28:a0:36:0b:67:50:00:e2:2a:ab:72:84: 6f:c2:38:a7:e5:a8:d4:b5:79:bc:2d:a0:d4:25:4b: e1:2b:91:6f:43:e8:56:a7:d0:53:36:7c:11:88:2a: 69:f3:70:88:f8:d5:49:dc:1b:97:b3:ec:d8:e4:5c: ba:6a:65:ee:e6:c7:16:c4:3f:46:95:ce:86:ac:96: d3:a4:a5:78:c5:41:8c:cd:8a:83:fc:11:bb:ad:f5: b7:b5:e2:b0:b6:0f:99:d5:90:3b:f2:74:a4:36:92: c6:2a:be:dc:33:51:65:11:ab:f7:4b:d3:e3:94:10: 6c:e3:e1:0f:20:bd:3c:2f:7e:5e:73:13:59:fb:41: 25:2d:48:46:cb:5b:7d:40:57:72:5b:7f:ba:69:b8: f7:62:cd:75:67:eb:d6:77:aa:a1:8d:30:7e:90:fd: 73:59:8b:79:36:1a:4d:1e:0e:86:31:3f:35:8e:cd: f9:1d:7b:c7:0e:86:a6:00:38:1d:bb:18:5a:f7:d0: 37:da:e1:b7:90:79:0a:25:aa:55:d6:3a:32:b6:05: b1:e7:1a:43:b7:59:e2:bc:3e:53:8d:19:4b:43:83: 65:9e:1c:9f:2e:fa:25:15:26:ca:3c:da:41:4e:df: 2e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:5F:31:FF:71:73:A2:C6:D3:4A:80:6B:52:A1:E4:30:B5:7E:E3:84 X509v3 Authority Key Identifier: keyid:34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/1-V8x_3FzosbTSoBrUqHkMLV-44Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.57.8.0/21 31.192.248.0/21 77.95.56.0/21 94.143.192.0/21 185.54.252.0/22 212.42.96.0/19 IPv6: 2a00:7160::/32 Signature Algorithm: sha256WithRSAEncryption 0c:ac:88:96:02:98:c4:18:92:c4:81:14:ab:a8:fd:bf:33:92: 13:b2:65:cc:19:43:9f:e3:ed:62:69:6a:04:3d:54:93:fd:d3: 2b:cc:f5:35:0e:24:7e:f6:cf:ff:23:c3:ff:7c:77:75:cf:c5: d5:98:c2:8b:be:61:47:21:9a:9e:4c:f2:65:9b:bd:f6:ef:07: 60:0c:b5:37:f2:89:92:b3:25:81:68:d7:a8:4e:1e:ff:a9:61: 0e:7b:bc:76:3d:c9:5a:1a:ed:b4:84:56:0d:04:05:58:6c:95: ca:8d:c1:d5:3a:10:e4:a4:18:0a:bb:8c:d6:7a:5d:fc:01:f7: 49:57:51:1d:2c:a9:06:3e:4e:8d:2e:e4:b9:78:4b:dd:90:cc: 00:b0:f6:5b:d6:d6:01:4f:e3:cc:d7:be:b3:21:9c:f9:8c:5a: a3:9c:de:cd:e5:58:0b:e5:bc:4e:48:7c:15:92:59:6e:7b:11: ef:b8:1a:27:db:6b:9d:ce:3c:3f:a9:64:8e:e3:e8:8f:52:93: c6:ab:8a:47:99:5d:82:c8:ab:6d:15:55:07:b5:ee:9f:d4:35: 23:ad:81:f4:2e:2c:e2:df:e2:2c:1a:4b:35:c6:aa:67:a5:22: 96:61:b5:d0:2a:23:75:a3:0b:02:ad:6b:38:c1:1c:72:65:f9: 2b:7c:b0:80 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZt6W22WEzPPPgjrsl0Yzc/qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MDc3YjQxZTk4ODczZTdmMDZmYjFkZjNmNWQzOWM3MjFi MTM0M2YwHhcNMjYwMTAxMTYxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTVmMzFmZjcxNzNhMmM2ZDM0YTgwNmI1MmExZTQzMGI1N2VlMzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudyN1LKGurjSeAeXeWX71QMooDYL Z1AA4iqrcoRvwjin5ajUtXm8LaDUJUvhK5FvQ+hWp9BTNnwRiCpp83CI+NVJ3BuX s+zY5Fy6amXu5scWxD9Glc6GrJbTpKV4xUGMzYqD/BG7rfW3teKwtg+Z1ZA78nSk NpLGKr7cM1FlEav3S9PjlBBs4+EPIL08L35ecxNZ+0ElLUhGy1t9QFdyW3+6abj3 Ys11Z+vWd6qhjTB+kP1zWYt5NhpNHg6GMT81js35HXvHDoamADgduxha99A32uG3 kHkKJapV1joytgWx5xpDt1nivD5TjRlLQ4NlnhyfLvolFSbKPNpBTt8uVQIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFPlfMf9xc6LG00qAa1Kh5DC1fuOEMB8GA1UdIwQY MBaAFDQHe0HpiHPn8G+x3z9dOcchsTQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkFkN1FlbUljLWZ3YjdIZlAxMDV4eUd4TkQ4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC80NDg4MDAtODI5ZS00YjdhLTkyYzQt Y2I3Y2JjYTdjMWUwLzEvMS1WOHhfM0Z6b3NiVFNvQnJVcUhrTUxWLTQ0US5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvM2QvNDQ4ODAwLTgyOWUtNGI3YS05MmM0LWNiN2NiY2E3YzFl MC8xL05BZDdRZW1JYy1md2I3SGZQMTA1eHlHeE5EOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBMBggrBgEFBQcBBwEB/wQ9MDswKgQCAAEwJAMEAwU5CAME Ax/A+AMEA01fOAMEA16PwAMEArk2/AMEBdQqYDANBAIAAjAHAwUAKgBxYDANBgkq hkiG9w0BAQsFAAOCAQEADKyIlgKYxBiSxIEUq6j9vzOSE7JlzBlDn+PtYmlqBD1U k/3TK8z1NQ4kfvbP/yPD/3x3dc/F1ZjCi75hRyGankzyZZu99u8HYAy1N/KJkrMl gWjXqE4e/6lhDnu8dj3JWhrttIRWDQQFWGyVyo3B1ToQ5KQYCruM1npd/AH3SVdR HSypBj5OjS7kuXhL3ZDMALD2W9bWAU/jzNe+syGc+Yxao5zezeVYC+W8Tkh8FZJZ bnsR77gaJ9trnc48P6lkjuPoj1KTxquKR5ldgsirbRVVB7Xun9Q1I62B9C4s4t/i LBpLNcaqZ6UilmG10CojdaMLAq1rOMEccmX5K3ywgA== -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:58 2026 by rpki-client