This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/8OYdUjrlp_CiIecRp3Rh15sihI4.roa File: 8OYdUjrlp_CiIecRp3Rh15sihI4.roa (raw, json) Hash identifier: u8J8QYG/m1scGBBJx74Dh3l5h4W60dwIobWX8cGTUE4= Subject key identifier: F0:E6:1D:52:3A:E5:A7:F0:A2:21:E7:11:A7:74:61:D7:9B:22:84:8E Certificate issuer: /CN=e1d7e9ff1278a14dc26ef33f9ff531d86eff5d03 Certificate serial: 019B7F8427B514B17F1F132E824455B8D572 Authority key identifier: E1:D7:E9:FF:12:78:A1:4D:C2:6E:F3:3F:9F:F5:31:D8:6E:FF:5D:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/8OYdUjrlp_CiIecRp3Rh15sihI4.roa Signing time: Fri 02 Jan 2026 16:22:05 +0000 ROA not before: Fri 02 Jan 2026 16:22:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43521 IP address blocks: 78.41.176.0/21 maxlen: 21 87.117.152.0/21 maxlen: 21 185.52.56.0/22 maxlen: 22 185.52.56.0/23 maxlen: 23 185.52.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.crl rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:27:b5:14:b1:7f:1f:13:2e:82:44:55:b8:d5:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1d7e9ff1278a14dc26ef33f9ff531d86eff5d03 Validity Not Before: Jan 2 16:22:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0e61d523ae5a7f0a221e711a77461d79b22848e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:81:9a:d4:63:35:2f:28:dc:3f:ed:a5:84:a3: 0b:40:b4:4b:f1:1e:90:de:8b:a4:30:50:7b:2f:dd: 51:32:df:cf:53:65:3c:75:58:8b:a5:9a:19:49:a1: 33:d7:31:c8:31:f5:fd:da:74:70:8e:24:e5:af:b9: 3a:9a:57:4d:c0:8f:06:c1:8f:10:ee:c2:07:7f:3f: 26:9d:83:85:10:b6:af:7b:bb:ac:d9:1b:1d:94:08: 48:94:15:3a:8c:ac:95:42:2b:30:66:98:96:9e:7b: 55:09:64:2c:77:93:f8:b8:45:e0:fd:0d:bc:5b:cd: 44:24:07:41:d8:8a:ef:9a:88:ec:ea:47:9f:a0:20: cb:6d:40:23:be:60:aa:c7:07:0b:76:e0:3a:eb:eb: c5:3a:a4:45:9a:cf:1c:55:ac:2c:77:b4:75:2f:cf: db:a7:fe:a4:b2:ae:4a:17:06:28:e0:e7:a6:31:fe: ec:2a:11:15:b0:a1:80:37:c9:75:8c:65:d6:0d:ee: e7:77:63:bb:12:a4:8f:a8:d6:6e:b5:21:e8:e3:11: 31:19:cd:88:e7:4e:79:26:00:df:92:e4:d1:95:5b: 10:43:0f:39:6e:7b:d0:bd:70:c9:9d:a2:b4:3d:17: a9:c2:07:fe:03:90:73:42:2a:67:4d:5f:0f:fe:81: 26:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E6:1D:52:3A:E5:A7:F0:A2:21:E7:11:A7:74:61:D7:9B:22:84:8E X509v3 Authority Key Identifier: keyid:E1:D7:E9:FF:12:78:A1:4D:C2:6E:F3:3F:9F:F5:31:D8:6E:FF:5D:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/8OYdUjrlp_CiIecRp3Rh15sihI4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.41.176.0/21 87.117.152.0/21 185.52.56.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:1a:a0:6a:55:ad:57:38:1b:59:20:45:a9:a2:1c:7c:ba:6d: 7d:22:92:24:7a:c4:74:83:7e:df:4a:87:89:7a:cf:50:09:22: 95:f2:75:78:1c:36:ca:aa:91:06:c8:99:d7:f7:1f:01:4a:15: 89:e5:21:d7:64:38:d3:19:a2:7c:3b:fa:fd:84:34:8c:b9:77: dc:77:c6:c0:51:f6:3a:1a:ca:d1:30:9d:27:a0:1b:52:74:81: 87:23:2b:b9:3c:23:9a:71:79:20:52:d0:21:96:21:59:91:50: 75:d0:b3:c7:b1:e9:09:ca:10:dc:9f:e2:ca:b7:49:98:1a:cb: 8d:a4:30:d6:b5:01:f4:ab:09:1d:75:d1:78:c5:2c:03:b3:bf: 7f:45:28:b8:b2:0e:0b:77:3f:e4:3f:eb:96:55:cd:18:61:9d: af:28:ee:1e:5d:dd:dc:86:6b:3b:c8:25:8e:27:e4:4a:02:4c: d1:36:d5:c8:fa:1e:f9:ca:cd:6e:32:a5:2f:9b:5b:5d:0d:be: 69:db:70:99:c1:66:e0:ac:33:c0:12:d9:40:fe:cb:37:c5:72: 3e:00:16:fe:64:f5:7d:68:27:73:c1:da:b5:2d:12:a4:36:fa: d0:d9:ab:d4:a5:c9:d1:66:39:a5:43:b7:dc:34:89:ed:cd:c6: c8:7b:00:e6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hCe1FLF/HxMugkRVuNVyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZDdlOWZmMTI3OGExNGRjMjZlZjMzZjlmZjUzMWQ4NmVm ZjVkMDMwHhcNMjYwMTAyMTYyMjA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGU2MWQ1MjNhZTVhN2YwYTIyMWU3MTFhNzc0NjFkNzliMjI4NDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IGa1GM1LyjcP+2lhKMLQLRL8R6Q 3oukMFB7L91RMt/PU2U8dViLpZoZSaEz1zHIMfX92nRwjiTlr7k6mldNwI8GwY8Q 7sIHfz8mnYOFELave7us2RsdlAhIlBU6jKyVQiswZpiWnntVCWQsd5P4uEXg/Q28 W81EJAdB2Irvmojs6kefoCDLbUAjvmCqxwcLduA66+vFOqRFms8cVawsd7R1L8/b p/6ksq5KFwYo4OemMf7sKhEVsKGAN8l1jGXWDe7nd2O7EqSPqNZutSHo4xExGc2I 5055JgDfkuTRlVsQQw85bnvQvXDJnaK0PRepwgf+A5BzQipnTV8P/oEmDwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPDmHVI65afwoiHnEad0YdebIoSOMB8GA1UdIwQY MBaAFOHX6f8SeKFNwm7zP5/1Mdhu/10DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGRmcF94SjRvVTNDYnZNX25fVXgyRzdfWFFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hYTc5MjItYzJjMC00N2FlLTkxMDgt NjAzMGE5ZGEzYjg5LzEvOE9ZZFVqcmxwX0NpSWVjUnAzUmgxNXNpaEk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9hYTc5MjItYzJjMC00N2FlLTkxMDgtNjAzMGE5ZGEzYjg5 LzEvNGRmcF94SjRvVTNDYnZNX25fVXgyRzdfWFFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDTimwAwQD V3WYAwQCuTQ4MA0GCSqGSIb3DQEBCwUAA4IBAQA/GqBqVa1XOBtZIEWpohx8um19 IpIkesR0g37fSoeJes9QCSKV8nV4HDbKqpEGyJnX9x8BShWJ5SHXZDjTGaJ8O/r9 hDSMuXfcd8bAUfY6GsrRMJ0noBtSdIGHIyu5PCOacXkgUtAhliFZkVB10LPHsekJ yhDcn+LKt0mYGsuNpDDWtQH0qwkdddF4xSwDs79/RSi4sg4Ldz/kP+uWVc0YYZ2v KO4eXd3chms7yCWOJ+RKAkzRNtXI+h75ys1uMqUvm1tdDb5p23CZwWbgrDPAEtlA /ss3xXI+ABb+ZPV9aCdzwdq1LRKkNvrQ2avUpcnRZjmlQ7fcNIntzcbIewDm -----END CERTIFICATE-----Generated at Tue Feb 10 02:29:54 2026 by rpki-client