This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8NjDDihKGmZCPCjFtgpdDvevNQA.roa File: 8NjDDihKGmZCPCjFtgpdDvevNQA.roa (raw, json) Hash identifier: tN6bWPEs70l4DnSsYwyVXuoygd3RJLAjka/GmVqjPcY= Subject key identifier: F0:D8:C3:0E:28:4A:1A:66:42:3C:28:C5:B6:0A:5D:0E:F7:AF:35:00 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80969EAAFEFBAF51F0E8CC7F74991E Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8NjDDihKGmZCPCjFtgpdDvevNQA.roa Signing time: Fri 02 Jan 2026 02:19:20 +0000 ROA not before: Fri 02 Jan 2026 02:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 88.216.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 02:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:96:9e:aa:fe:fb:af:51:f0:e8:cc:7f:74:99:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0d8c30e284a1a66423c28c5b60a5d0ef7af3500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:22:f5:cf:37:e9:1b:70:51:34:0c:f1:11:bb: d9:fd:1f:05:dd:ca:78:9d:c2:02:08:b8:f8:a4:b5: e9:42:b7:67:86:fd:9e:14:7c:bd:89:a6:c3:4a:0f: c8:ac:63:96:d4:c4:a4:c6:20:b8:d8:bb:de:a8:5a: ef:b9:4e:72:86:47:fa:1c:b5:c6:cc:09:41:33:69: e4:4b:4b:e7:ec:c0:f2:e0:33:69:ec:79:5e:75:cd: 5d:23:b5:7f:ee:d5:d3:75:6b:b7:cd:c2:e3:8b:56: b1:89:4f:b5:6c:54:ea:c9:ec:20:4a:93:6e:50:a4: 1f:bf:2c:8d:1f:e5:dd:21:40:af:9f:33:c1:81:fd: 87:b2:1d:9a:e0:c0:b7:42:bd:c7:6f:99:ce:b2:d2: c5:d2:fd:53:ba:95:80:43:5f:7a:6a:e1:90:c4:8c: 56:e7:8b:96:1c:69:e7:20:35:65:15:e0:1b:a3:e7: 09:47:a5:d6:0e:02:05:6a:4c:7e:89:7a:3b:2c:61: 80:f2:a3:69:8d:2b:a1:5a:6b:83:6d:66:2a:24:a5: 06:1b:c9:62:07:46:c4:c5:b7:46:18:11:fd:e0:54: 89:a0:ce:99:29:a3:f0:f6:2a:65:6b:76:98:9d:f2: 18:6c:7f:d2:d1:ee:f6:b7:02:28:86:da:c7:5d:49: cf:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D8:C3:0E:28:4A:1A:66:42:3C:28:C5:B6:0A:5D:0E:F7:AF:35:00 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8NjDDihKGmZCPCjFtgpdDvevNQA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.216.224.0/22 Signature Algorithm: sha256WithRSAEncryption 80:00:2c:4b:b0:b1:3c:06:68:d6:20:05:e7:c5:eb:5b:be:03: ab:8d:0a:0c:cb:cf:04:7d:5b:f2:aa:09:de:59:ae:35:79:d3: e5:bf:ef:15:e2:fa:23:03:85:c0:1b:20:a0:7d:8c:55:04:75: 80:ff:3d:5d:82:75:de:1b:34:03:87:8b:82:0c:9d:c1:30:a6: 46:7e:49:30:c1:ff:2a:de:3e:89:54:4a:c1:98:9c:e7:13:e2: 6f:67:fe:8e:ae:93:fd:d8:c1:b0:17:53:6e:2d:b8:20:22:d4: 0f:eb:6d:83:38:9a:1d:04:7c:3b:d7:79:6e:cf:30:98:e7:f9: a5:a9:73:57:21:57:b4:39:f2:b4:37:44:79:15:81:41:76:e7: 5f:2d:8b:79:8b:ce:4b:09:6b:f0:93:8c:87:a8:77:97:ea:6c: be:ca:e5:ea:67:cd:a4:62:99:91:dd:cf:e8:38:1a:ee:a1:32: ca:42:4d:d5:47:8d:77:28:e5:e9:57:70:11:a4:ab:d0:33:52: ed:f6:e3:c6:39:8e:a5:bb:76:3b:3b:b8:ec:7a:bb:43:7b:b6: 5c:4d:f1:07:0c:89:bd:c6:de:84:e6:91:a5:29:c6:e8:e3:b7: 34:fa:25:48:26:8d:bd:6f:38:64:d4:43:d7:d0:b0:91:c6:9d: ed:23:95:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gJaeqv77r1Hw6Mx/dJkeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGQ4YzMwZTI4NGExYTY2NDIzYzI4YzViNjBhNWQwZWY3YWYzNTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CL1zzfpG3BRNAzxEbvZ/R8F3cp4 ncICCLj4pLXpQrdnhv2eFHy9iabDSg/IrGOW1MSkxiC42LveqFrvuU5yhkf6HLXG zAlBM2nkS0vn7MDy4DNp7Hledc1dI7V/7tXTdWu3zcLji1axiU+1bFTqyewgSpNu UKQfvyyNH+XdIUCvnzPBgf2Hsh2a4MC3Qr3Hb5nOstLF0v1TupWAQ196auGQxIxW 54uWHGnnIDVlFeAbo+cJR6XWDgIFakx+iXo7LGGA8qNpjSuhWmuDbWYqJKUGG8li B0bExbdGGBH94FSJoM6ZKaPw9ipla3aYnfIYbH/S0e72twIohtrHXUnPMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPDYww4oShpmQjwoxbYKXQ73rzUAMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvOE5qRERpaEtHbVpDUENqRnRncGREdmV2TlFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWNjgMA0G CSqGSIb3DQEBCwUAA4IBAQCAACxLsLE8BmjWIAXnxetbvgOrjQoMy88EfVvyqgne Wa41edPlv+8V4vojA4XAGyCgfYxVBHWA/z1dgnXeGzQDh4uCDJ3BMKZGfkkwwf8q 3j6JVErBmJznE+JvZ/6OrpP92MGwF1NuLbggItQP622DOJodBHw713luzzCY5/ml qXNXIVe0OfK0N0R5FYFBdudfLYt5i85LCWvwk4yHqHeX6my+yuXqZ82kYpmR3c/o OBruoTLKQk3VR413KOXpV3ARpKvQM1Lt9uPGOY6lu3Y7O7jsertDe7ZcTfEHDIm9 xt6E5pGlKcbo47c0+iVIJo29bzhk1EPX0LCRxp3tI5X7 -----END CERTIFICATE-----Generated at Mon Jan 19 11:49:09 2026 by rpki-client