This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/8dtgaFANkeK8huuG3p8_JsPAwVY.roa File: 8dtgaFANkeK8huuG3p8_JsPAwVY.roa (raw, json) Hash identifier: hnOGO5yhOzCse60swZYvKqiyn0VjBoHkixTNWL2xNnI= Subject key identifier: F1:DB:60:68:50:0D:91:E2:BC:86:EB:86:DE:9F:3F:26:C3:C0:C1:56 Certificate issuer: /CN=682c842dfa2a1e714727bccb95f165347103f277 Certificate serial: 019B7E3853777D8E35EB5B4582FE85F9DA48 Authority key identifier: 68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/8dtgaFANkeK8huuG3p8_JsPAwVY.roa Signing time: Fri 02 Jan 2026 10:19:39 +0000 ROA not before: Fri 02 Jan 2026 10:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59835 IP address blocks: 77.80.128.0/17 maxlen: 17 77.80.253.0/24 maxlen: 24 77.80.254.0/24 maxlen: 24 77.80.255.0/24 maxlen: 24 185.69.168.0/24 maxlen: 24 2a05:2240::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:53:77:7d:8e:35:eb:5b:45:82:fe:85:f9:da:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=682c842dfa2a1e714727bccb95f165347103f277 Validity Not Before: Jan 2 10:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1db6068500d91e2bc86eb86de9f3f26c3c0c156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:16:82:24:25:fe:1a:0b:3d:99:0f:80:f2:ba: 27:52:7d:d9:b3:d9:0d:6c:0f:98:1d:9f:c3:93:5a: 9c:98:5a:9c:eb:2d:9c:6a:d7:20:f1:d9:2c:1d:17: 1c:ea:1d:7f:94:26:01:b5:f1:78:f8:92:ce:1a:4d: b4:39:8b:d9:87:df:b2:a2:25:32:5d:b5:59:a2:da: aa:04:82:2f:35:ac:58:10:4c:eb:c7:da:33:42:61: d5:e5:a3:5d:9c:2e:fb:3b:a9:68:38:6f:88:9c:ed: ab:62:63:58:ed:27:55:b5:66:6a:bc:20:d7:85:a3: 16:23:37:13:30:0e:5c:37:ff:f6:e6:39:eb:67:c7: 0e:0b:ae:be:84:93:57:41:ca:1a:db:2a:f9:13:20: 64:ea:24:39:74:56:51:69:2b:34:36:59:6c:bd:2b: 80:03:28:dd:da:7d:30:4e:d4:8d:6a:57:51:c2:e0: 81:52:78:80:4c:a3:d5:91:2a:73:59:33:7e:23:61: f3:d7:86:f0:33:8e:fb:9f:b8:bb:ea:d7:c9:d1:bb: 66:11:b1:00:fd:8a:6c:fd:a3:05:a0:33:4f:40:63: a6:b4:a6:7a:93:f1:2a:a2:54:ec:66:bb:6a:f1:02: ad:5e:20:7c:a2:63:68:a7:4d:72:69:0a:77:36:5e: 30:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DB:60:68:50:0D:91:E2:BC:86:EB:86:DE:9F:3F:26:C3:C0:C1:56 X509v3 Authority Key Identifier: keyid:68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/8dtgaFANkeK8huuG3p8_JsPAwVY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.80.128.0/17 185.69.168.0/24 IPv6: 2a05:2240::/32 Signature Algorithm: sha256WithRSAEncryption a7:a1:9c:2c:bf:70:c8:42:da:f8:61:49:96:8d:44:e5:1a:61: 74:70:dc:d6:bb:f2:d1:e6:2f:42:6e:b9:3c:b9:17:a0:57:1f: f2:19:f1:41:d7:54:fa:dc:96:ed:52:5a:e5:88:8b:9f:4a:f4: d0:6e:0c:e6:93:4c:37:59:f8:4f:77:29:8e:f2:5b:19:7a:48: 22:bb:fa:30:a7:87:0a:fa:3d:6a:99:d6:69:ef:8a:14:24:f0: c9:d7:8a:d3:59:3d:ef:11:3f:39:06:8a:e9:c4:46:eb:c1:15: 66:ef:63:50:71:26:c3:42:ef:cc:7b:49:e1:e9:9d:1d:89:83: 8f:76:b6:f5:0f:8d:be:f8:08:b4:81:d0:72:73:cf:fa:3c:9f: 26:5f:d9:5f:91:97:84:f5:c1:14:94:17:39:a2:3b:6a:67:12: 1d:f6:5f:9e:f4:aa:64:7e:7d:99:43:ea:40:a4:8e:97:4c:12: 8b:f9:68:41:ae:bc:29:b4:23:16:7b:a3:fc:27:86:66:2a:87: a9:7d:bc:ef:e1:c7:8d:2a:65:90:3d:8a:c6:14:8b:72:dc:a5: df:54:d5:7f:9a:bd:71:58:21:4f:60:77:1e:15:8f:2b:fe:f2: 43:c4:1e:62:7d:43:79:bc:6d:a7:72:77:3d:26:a9:23:35:47: ea:d5:b7:a5 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+OFN3fY4161tFgv6F+dpIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MmM4NDJkZmEyYTFlNzE0NzI3YmNjYjk1ZjE2NTM0NzEw M2YyNzcwHhcNMjYwMTAyMTAxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWRiNjA2ODUwMGQ5MWUyYmM4NmViODZkZTlmM2YyNmMzYzBjMTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBaCJCX+Ggs9mQ+A8ronUn3Zs9kN bA+YHZ/Dk1qcmFqc6y2catcg8dksHRcc6h1/lCYBtfF4+JLOGk20OYvZh9+yoiUy XbVZotqqBIIvNaxYEEzrx9ozQmHV5aNdnC77O6loOG+InO2rYmNY7SdVtWZqvCDX haMWIzcTMA5cN//25jnrZ8cOC66+hJNXQcoa2yr5EyBk6iQ5dFZRaSs0NllsvSuA Ayjd2n0wTtSNaldRwuCBUniATKPVkSpzWTN+I2Hz14bwM477n7i76tfJ0btmEbEA /Yps/aMFoDNPQGOmtKZ6k/EqolTsZrtq8QKtXiB8omNop01yaQp3Nl4wYwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPHbYGhQDZHivIbrht6fPybDwMFWMB8GA1UdIwQY MBaAFGgshC36Kh5xRye8y5XxZTRxA/J3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUN5RUxmb3FIbkZISjd6TGxmRmxOSEVEOG5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wMDA0NjUtODNjYi00MWI0LThlNjAt MDhkNjViMzg2MzlkLzEvOGR0Z2FGQU5rZUs4aHV1RzNwOF9Kc1BBd1ZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8wMDA0NjUtODNjYi00MWI0LThlNjAtMDhkNjViMzg2Mzlk LzEvYUN5RUxmb3FIbkZISjd6TGxmRmxOSEVEOG5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQHTVCAAwQA uUWoMA0EAgACMAcDBQAqBSJAMA0GCSqGSIb3DQEBCwUAA4IBAQCnoZwsv3DIQtr4 YUmWjUTlGmF0cNzWu/LR5i9Cbrk8uRegVx/yGfFB11T63JbtUlrliIufSvTQbgzm k0w3WfhPdymO8lsZekgiu/owp4cK+j1qmdZp74oUJPDJ14rTWT3vET85BorpxEbr wRVm72NQcSbDQu/Me0nh6Z0diYOPdrb1D42++Ai0gdByc8/6PJ8mX9lfkZeE9cEU lBc5ojtqZxId9l+e9Kpkfn2ZQ+pApI6XTBKL+WhBrrwptCMWe6P8J4ZmKoepfbzv 4ceNKmWQPYrGFIty3KXfVNV/mr1xWCFPYHceFY8r/vJDxB5ifUN5vG2ncnc9Jqkj NUfq1bel -----END CERTIFICATE-----Generated at Mon Feb 9 22:26:52 2026 by rpki-client