This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/8IFZhPFDK_ICfs-Bss8V6ypzgxU.roa File: 8IFZhPFDK_ICfs-Bss8V6ypzgxU.roa (raw, json) Hash identifier: LGHiXbfm4O0tpabC9BS4DJjconG89IO01n+qnYcR118= Subject key identifier: F0:81:59:84:F1:43:2B:F2:02:7E:CF:81:B2:CF:15:EB:2A:73:83:15 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B791058BB5E1DF644A52705789590A1CB Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/8IFZhPFDK_ICfs-Bss8V6ypzgxU.roa Signing time: Thu 01 Jan 2026 10:17:52 +0000 ROA not before: Thu 01 Jan 2026 10:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200673 IP address blocks: 78.135.64.0/24 maxlen: 24 188.132.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:58:bb:5e:1d:f6:44:a5:27:05:78:95:90:a1:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0815984f1432bf2027ecf81b2cf15eb2a738315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ef:a3:42:c7:95:95:99:d5:a8:a1:db:38:71: 92:ed:ac:ad:99:05:e6:e3:65:93:8e:9c:97:98:9b: b9:00:18:05:f1:e8:e8:26:08:71:1a:d5:6e:0f:90: 1f:2b:42:c8:83:6e:25:e9:70:24:a9:69:1d:a1:63: 42:33:ad:aa:dd:52:be:27:c2:e6:4c:9c:b1:70:78: 27:7c:40:ca:80:17:aa:7c:d5:3d:f2:f0:f1:7f:3f: 22:b2:94:dc:39:ef:ce:f1:78:6b:36:e3:c3:ea:ae: 0c:73:15:b7:a5:e5:5e:d7:96:4a:a5:3e:26:91:3e: fb:20:0c:95:5a:94:6a:68:4c:1a:3f:b9:29:87:2e: 42:01:99:1a:3a:42:f0:e0:49:00:d4:42:d1:6c:88: 50:81:a7:5b:c0:5f:4e:0a:ec:dd:e1:1f:c1:15:a2: 15:a6:a6:b5:0d:f4:e4:4e:a2:9d:17:d1:4b:71:a1: 1a:11:7a:fe:7c:4c:cf:4e:38:a4:d9:29:fc:4b:e2: 40:ec:4e:5c:ab:a1:95:34:80:da:db:b9:85:be:78: b6:0f:6e:d9:ff:05:1c:5a:0e:3a:7a:de:ce:82:3e: ad:68:f9:50:68:6f:50:d6:7b:39:bd:cf:b7:e6:c0: 06:01:c6:ce:82:ec:f9:4b:8f:23:34:2e:b3:7c:8d: 92:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:81:59:84:F1:43:2B:F2:02:7E:CF:81:B2:CF:15:EB:2A:73:83:15 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/8IFZhPFDK_ICfs-Bss8V6ypzgxU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.135.64.0/24 188.132.219.0/24 Signature Algorithm: sha256WithRSAEncryption 60:6c:0a:d9:be:93:55:71:8c:0e:86:37:b7:e2:8f:e3:62:b4: a9:e4:02:27:d2:dc:66:af:5a:7a:73:33:41:3e:ad:94:ec:51: 21:06:c2:53:ce:18:cd:7b:4a:62:96:b5:69:a9:66:f1:29:64: b9:04:87:1b:67:1a:bd:f4:bb:cd:df:6b:c1:b4:ee:21:ab:12: d7:05:b1:e7:1e:cd:d3:dd:7e:96:1c:30:41:eb:57:a5:58:3a: 04:35:14:3b:d0:35:0e:4c:42:5f:23:20:fd:5d:5a:01:15:69: 22:3e:ad:a8:2a:2f:58:65:b3:50:26:d2:26:b4:de:c8:e7:2f: 65:52:b4:33:8c:8b:27:a9:85:0d:ef:c9:1c:b0:63:85:9f:03: 56:e6:ad:f3:5f:69:07:4f:e9:c9:ad:3d:43:58:bf:c2:1d:1c: 28:a1:41:27:7d:22:6e:78:f8:3c:8e:fa:bc:86:98:f2:37:d4: 9c:7d:52:75:b1:45:c8:fb:ea:66:1a:5e:5c:58:a5:4e:bf:8f: 3e:9d:4d:e4:59:1e:79:6b:72:7e:de:0c:02:6e:ac:4b:07:73: 81:e4:a5:ce:d6:f1:54:10:40:74:c4:ab:74:71:df:b8:0c:b1: d8:92:c0:da:87:23:cd:50:4f:84:37:96:7c:17:5c:3d:d7:3b: 8e:de:dc:20 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EFi7Xh32RKUnBXiVkKHLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDgxNTk4NGYxNDMyYmYyMDI3ZWNmODFiMmNmMTVlYjJhNzM4MzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse+jQseVlZnVqKHbOHGS7aytmQXm 42WTjpyXmJu5ABgF8ejoJghxGtVuD5AfK0LIg24l6XAkqWkdoWNCM62q3VK+J8Lm TJyxcHgnfEDKgBeqfNU98vDxfz8ispTcOe/O8XhrNuPD6q4McxW3peVe15ZKpT4m kT77IAyVWpRqaEwaP7kphy5CAZkaOkLw4EkA1ELRbIhQgadbwF9OCuzd4R/BFaIV pqa1DfTkTqKdF9FLcaEaEXr+fEzPTjik2Sn8S+JA7E5cq6GVNIDa27mFvni2D27Z /wUcWg46et7Ogj6taPlQaG9Q1ns5vc+35sAGAcbOguz5S48jNC6zfI2SEwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPCBWYTxQyvyAn7PgbLPFesqc4MVMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvOElGWmhQRkRLX0lDZnMtQnNzOFY2eXB6Z3hVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATodAAwQA vITbMA0GCSqGSIb3DQEBCwUAA4IBAQBgbArZvpNVcYwOhje34o/jYrSp5AIn0txm r1p6czNBPq2U7FEhBsJTzhjNe0pilrVpqWbxKWS5BIcbZxq99LvN32vBtO4hqxLX BbHnHs3T3X6WHDBB61elWDoENRQ70DUOTEJfIyD9XVoBFWkiPq2oKi9YZbNQJtIm tN7I5y9lUrQzjIsnqYUN78kcsGOFnwNW5q3zX2kHT+nJrT1DWL/CHRwooUEnfSJu ePg8jvq8hpjyN9ScfVJ1sUXI++pmGl5cWKVOv48+nU3kWR55a3J+3gwCbqxLB3OB 5KXO1vFUEEB0xKt0cd+4DLHYksDahyPNUE+EN5Z8F1w91zuO3twg -----END CERTIFICATE-----Generated at Wed Jan 21 13:32:43 2026 by rpki-client