This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/8stadcMmYX_uJKXg6ioVbxtS1zs.roa File: 8stadcMmYX_uJKXg6ioVbxtS1zs.roa (raw, json) Hash identifier: +JomyGo77NcQPnQVmtRN5w3Af/+5rwB5D7qCgVgnNBw= Subject key identifier: F2:CB:5A:75:C3:26:61:7F:EE:24:A5:E0:EA:2A:15:6F:1B:52:D7:3B Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B79105B489B8FE98FA75CBB1BD083E03F Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/8stadcMmYX_uJKXg6ioVbxtS1zs.roa Signing time: Thu 01 Jan 2026 10:17:53 +0000 ROA not before: Thu 01 Jan 2026 10:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202561 IP address blocks: 188.132.221.0/24 maxlen: 24 188.132.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:5b:48:9b:8f:e9:8f:a7:5c:bb:1b:d0:83:e0:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2cb5a75c326617fee24a5e0ea2a156f1b52d73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bf:02:52:aa:49:c5:40:ad:aa:f3:46:c6:e7: 49:47:5d:68:77:c1:c2:ed:ff:d7:1f:96:1c:3a:06: 08:d5:55:93:6f:aa:5e:18:e8:9a:fb:de:f8:dd:1c: 1f:78:2b:ef:4c:73:e8:c9:16:45:ee:5b:f1:24:03: e3:14:8d:c3:b4:03:61:52:06:d2:d2:37:97:bc:77: 27:89:65:cc:c2:8e:29:13:db:c3:5e:a3:ba:4c:98: 17:7d:5d:59:72:ae:bb:75:d2:0f:09:03:2c:48:b3: c7:c3:a9:1d:e2:79:21:b3:b2:84:7e:b8:89:3b:94: 76:74:7b:9d:b7:e0:88:f9:a7:26:81:f0:72:ed:47: 1b:d8:b4:c1:7f:a6:e7:85:12:4c:5b:e7:5f:7c:d7: 66:e5:a3:6e:76:60:51:25:2f:ec:1d:86:48:cb:89: 62:d4:02:21:52:1a:ac:3c:2d:1f:cb:ca:9b:0c:73: 9e:cc:e6:8f:7d:40:4c:c7:77:8c:ec:c8:16:53:77: 92:df:6e:8c:d0:a6:95:c8:e5:d4:df:f3:45:bf:bf: 37:f7:06:3b:20:f4:b7:ab:f8:75:6a:39:c2:74:7a: a8:a1:d9:49:32:33:e6:8a:e2:94:3c:1f:25:25:8a: d4:6e:64:ff:7b:9f:bb:81:03:f8:65:50:5f:de:48: c8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CB:5A:75:C3:26:61:7F:EE:24:A5:E0:EA:2A:15:6F:1B:52:D7:3B X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/8stadcMmYX_uJKXg6ioVbxtS1zs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.132.221.0-188.132.222.255 Signature Algorithm: sha256WithRSAEncryption 69:99:e3:c7:0f:29:95:65:01:fd:cd:5c:dc:6f:80:47:f7:24: f1:68:e1:22:fb:08:b8:16:bc:d3:f7:fe:37:79:d1:cc:6d:ec: 5f:12:14:ac:d4:69:6e:7d:3d:a9:22:e8:6c:b3:de:4c:0b:e7: 84:38:b2:19:45:0c:9a:46:b7:4e:77:f1:7d:d1:ee:8d:30:9b: b8:80:81:c0:fe:96:23:5b:61:50:08:f9:35:b6:b9:0e:6d:18: 12:17:1e:a6:64:97:33:19:fb:7a:7d:10:38:50:f4:a1:6f:eb: 79:47:57:c0:89:89:fe:a8:3a:28:49:5f:ce:a5:22:44:dc:cd: 09:d4:04:48:3b:4b:d6:8d:e1:d7:bc:32:f1:38:06:3b:f9:98: 21:41:49:5c:a4:83:9f:48:fa:fe:38:29:b4:e2:c1:e2:2e:57: ee:06:8d:98:a0:1e:82:79:88:a5:cd:01:7a:83:06:3e:46:18: 2b:30:c8:09:cd:b1:5f:11:3b:b7:14:3c:83:bc:3c:ad:c2:d2: 76:de:5c:8a:f5:e1:6c:c7:a0:29:69:65:fa:6d:38:19:20:29: cc:67:f4:db:8e:b5:92:48:2f:07:32:52:1a:db:2d:3a:35:e0: 19:ef:af:22:83:4a:f0:7f:9a:74:5f:1f:3c:13:d1:06:cb:af: 6f:45:90:7c -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5EFtIm4/pj6dcuxvQg+A/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmNiNWE3NWMzMjY2MTdmZWUyNGE1ZTBlYTJhMTU2ZjFiNTJkNzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL8CUqpJxUCtqvNGxudJR11od8HC 7f/XH5YcOgYI1VWTb6peGOia+9743RwfeCvvTHPoyRZF7lvxJAPjFI3DtANhUgbS 0jeXvHcniWXMwo4pE9vDXqO6TJgXfV1Zcq67ddIPCQMsSLPHw6kd4nkhs7KEfriJ O5R2dHudt+CI+acmgfBy7Ucb2LTBf6bnhRJMW+dffNdm5aNudmBRJS/sHYZIy4li 1AIhUhqsPC0fy8qbDHOezOaPfUBMx3eM7MgWU3eS326M0KaVyOXU3/NFv7839wY7 IPS3q/h1ajnCdHqoodlJMjPmiuKUPB8lJYrUbmT/e5+7gQP4ZVBf3kjIEQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFPLLWnXDJmF/7iSl4OoqFW8bUtc7MB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvOHN0YWRjTW1ZWF91SktYZzZpb1ZieHRTMXpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC8hN0D BAC8hN4wDQYJKoZIhvcNAQELBQADggEBAGmZ48cPKZVlAf3NXNxvgEf3JPFo4SL7 CLgWvNP3/jd50cxt7F8SFKzUaW59Paki6Gyz3kwL54Q4shlFDJpGt0538X3R7o0w m7iAgcD+liNbYVAI+TW2uQ5tGBIXHqZklzMZ+3p9EDhQ9KFv63lHV8CJif6oOihJ X86lIkTczQnUBEg7S9aN4de8MvE4Bjv5mCFBSVykg59I+v44KbTiweIuV+4GjZig HoJ5iKXNAXqDBj5GGCswyAnNsV8RO7cUPIO8PK3C0nbeXIr14WzHoClpZfptOBkg Kcxn9NuOtZJILwcyUhrbLTo14BnvryKDSvB/mnRfHzwT0QbLr29FkHw= -----END CERTIFICATE-----Generated at Wed Jan 21 13:32:42 2026 by rpki-client