This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8669d3-76cd-4cb0-8278-82c67c69e923/1/8QeOnl1jSGn4_0NxM6NuGpN-0Jo.roa File: 8QeOnl1jSGn4_0NxM6NuGpN-0Jo.roa (raw, json) Hash identifier: J4omMw3D0N9tMXhiPZ3E3pOd7uQCU3TjcYrnPrhAQ04= Subject key identifier: F1:07:8E:9E:5D:63:48:69:F8:FF:43:71:33:A3:6E:1A:93:7E:D0:9A Certificate issuer: /CN=9c67ea34a011a4773871583ec3954e791d8c028d Certificate serial: 019B7C1139BE41EF84FB8A9AC5D0CE6E298E Authority key identifier: 9C:67:EA:34:A0:11:A4:77:38:71:58:3E:C3:95:4E:79:1D:8C:02:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGfqNKARpHc4cVg-w5VOeR2MAo0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/8669d3-76cd-4cb0-8278-82c67c69e923/1/8QeOnl1jSGn4_0NxM6NuGpN-0Jo.roa Signing time: Fri 02 Jan 2026 00:17:42 +0000 ROA not before: Fri 02 Jan 2026 00:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205314 IP address blocks: 91.224.164.0/24 maxlen: 24 185.138.20.0/22 maxlen: 22 2a12:ddc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/8669d3-76cd-4cb0-8278-82c67c69e923/1/nGfqNKARpHc4cVg-w5VOeR2MAo0.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/8669d3-76cd-4cb0-8278-82c67c69e923/1/nGfqNKARpHc4cVg-w5VOeR2MAo0.mft rsync://rpki.ripe.net/repository/DEFAULT/nGfqNKARpHc4cVg-w5VOeR2MAo0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:39:be:41:ef:84:fb:8a:9a:c5:d0:ce:6e:29:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c67ea34a011a4773871583ec3954e791d8c028d Validity Not Before: Jan 2 00:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1078e9e5d634869f8ff437133a36e1a937ed09a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ba:d4:ba:35:64:95:63:84:d1:d2:5d:e5:05: 1a:72:4c:0e:10:e2:a2:d7:9e:36:e2:9a:81:cc:67: e9:f6:e2:1d:72:51:70:88:6b:bf:1d:df:b8:38:f6: 99:f4:2b:38:ef:54:58:32:8a:1c:cf:0e:ce:19:61: f6:cc:6f:e9:e1:0b:a0:53:3a:46:97:9a:19:88:2f: bc:50:6a:87:4c:58:9c:fa:47:99:97:af:68:f2:5f: 56:12:ec:fa:8b:2c:79:ca:3a:7e:f0:d1:de:c8:97: b6:96:8e:e3:86:4a:37:7b:d4:94:a3:ab:c6:64:52: 3c:a4:2f:28:92:7d:16:11:1c:d2:a3:25:1a:0b:7f: d2:a5:46:38:e4:be:a0:c3:e1:4c:d2:b6:2c:e1:8d: b3:8a:1b:89:44:6c:54:07:61:da:7e:c0:1b:8e:6f: 37:f5:1a:60:08:cd:91:e9:1a:31:89:ec:8b:00:42: e2:46:7c:08:c2:c8:fe:08:6b:21:7d:4a:4e:86:7a: 46:05:da:73:b3:6a:ac:e9:f4:05:f7:ee:35:10:7d: c3:dc:91:fd:d2:69:31:98:0d:a4:35:7b:e1:ff:ca: b5:fe:fe:ed:4c:21:00:82:ca:88:fe:5e:11:5b:eb: 08:4e:0b:e7:9f:2c:cf:23:38:ac:39:24:5b:50:39: b7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:07:8E:9E:5D:63:48:69:F8:FF:43:71:33:A3:6E:1A:93:7E:D0:9A X509v3 Authority Key Identifier: keyid:9C:67:EA:34:A0:11:A4:77:38:71:58:3E:C3:95:4E:79:1D:8C:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGfqNKARpHc4cVg-w5VOeR2MAo0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8669d3-76cd-4cb0-8278-82c67c69e923/1/8QeOnl1jSGn4_0NxM6NuGpN-0Jo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8669d3-76cd-4cb0-8278-82c67c69e923/1/nGfqNKARpHc4cVg-w5VOeR2MAo0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.164.0/24 185.138.20.0/22 IPv6: 2a12:ddc0::/29 Signature Algorithm: sha256WithRSAEncryption 0b:d7:2f:ec:e0:4a:0b:d2:5b:7f:4c:b2:f6:80:d3:b4:88:b1: e9:24:a2:e8:ba:eb:b0:78:db:01:4b:92:88:d9:f6:26:5d:db: ca:d6:c7:d2:53:f9:70:e3:fb:64:14:fa:3e:19:06:2e:88:ad: cd:c3:8f:9d:b8:24:ad:34:60:df:c6:bb:b4:0d:91:a7:d4:7e: 54:f0:33:9b:a6:84:cd:68:c5:9c:93:12:9f:18:69:48:41:4e: 1b:c4:ff:1f:03:ec:96:8b:af:7e:b4:f3:49:35:97:1f:40:79: 71:06:28:11:be:cb:3b:6b:e4:df:73:3d:3d:41:6f:88:ce:2d: a7:67:4f:81:d2:bc:92:09:60:e2:35:b5:47:4a:8e:fc:94:d6: a9:68:b6:8a:6c:4a:be:da:bc:b8:97:90:01:77:ff:ce:72:7c: 6b:71:1f:4e:a8:ac:04:36:07:1b:47:e2:3f:97:a2:6d:80:b3: 97:3a:93:30:e6:06:85:a7:5d:30:4d:5c:ff:7c:a1:c3:66:13: c6:41:ee:c0:3c:2a:40:3a:1f:55:0d:eb:1a:ce:2e:07:8b:59: 08:1e:97:f7:d0:13:88:b1:d4:4f:7c:af:46:e1:46:29:22:4d: 4a:d1:f8:15:33:bc:01:bc:3f:0a:72:03:eb:7a:79:22:83:fc: 42:29:70:50 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8ETm+Qe+E+4qaxdDObimOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNjdlYTM0YTAxMWE0NzczODcxNTgzZWMzOTU0ZTc5MWQ4 YzAyOGQwHhcNMjYwMTAyMDAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTA3OGU5ZTVkNjM0ODY5ZjhmZjQzNzEzM2EzNmUxYTkzN2VkMDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1brUujVklWOE0dJd5QUackwOEOKi 15424pqBzGfp9uIdclFwiGu/Hd+4OPaZ9Cs471RYMooczw7OGWH2zG/p4QugUzpG l5oZiC+8UGqHTFic+keZl69o8l9WEuz6iyx5yjp+8NHeyJe2lo7jhko3e9SUo6vG ZFI8pC8okn0WERzSoyUaC3/SpUY45L6gw+FM0rYs4Y2zihuJRGxUB2HafsAbjm83 9RpgCM2R6RoxieyLAELiRnwIwsj+CGshfUpOhnpGBdpzs2qs6fQF9+41EH3D3JH9 0mkxmA2kNXvh/8q1/v7tTCEAgsqI/l4RW+sITgvnnyzPIzisOSRbUDm3iwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPEHjp5dY0hp+P9DcTOjbhqTftCaMB8GA1UdIwQY MBaAFJxn6jSgEaR3OHFYPsOVTnkdjAKNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkdmcU5LQVJwSGM0Y1ZnLXc1Vk9lUjJNQW8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS84NjY5ZDMtNzZjZC00Y2IwLTgyNzgt ODJjNjdjNjllOTIzLzEvOFFlT25sMWpTR240XzBOeE02TnVHcE4tMEpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS84NjY5ZDMtNzZjZC00Y2IwLTgyNzgtODJjNjdjNjllOTIz LzEvbkdmcU5LQVJwSGM0Y1ZnLXc1Vk9lUjJNQW8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW+CkAwQC uYoUMA0EAgACMAcDBQMqEt3AMA0GCSqGSIb3DQEBCwUAA4IBAQAL1y/s4EoL0lt/ TLL2gNO0iLHpJKLouuuweNsBS5KI2fYmXdvK1sfSU/lw4/tkFPo+GQYuiK3Nw4+d uCStNGDfxru0DZGn1H5U8DObpoTNaMWckxKfGGlIQU4bxP8fA+yWi69+tPNJNZcf QHlxBigRvss7a+Tfcz09QW+Izi2nZ0+B0rySCWDiNbVHSo78lNapaLaKbEq+2ry4 l5ABd//OcnxrcR9OqKwENgcbR+I/l6JtgLOXOpMw5gaFp10wTVz/fKHDZhPGQe7A PCpAOh9VDesazi4Hi1kIHpf30BOIsdRPfK9G4UYpIk1K0fgVM7wBvD8KcgPrenki g/xCKXBQ -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:44 2026 by rpki-client