This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/8ogFWyeBf0vuQT5jhBzXspAf2rE.roa File: 8ogFWyeBf0vuQT5jhBzXspAf2rE.roa (raw, json) Hash identifier: 8SLnbSVICCGBBETX/lH2EVbhNVK83HBy2quzoB78n6s= Subject key identifier: F2:88:05:5B:27:81:7F:4B:EE:41:3E:63:84:1C:D7:B2:90:1F:DA:B1 Certificate issuer: /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533 Certificate serial: 019B78A2E1CC12FF4A76BF1C26704BBD95B1 Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/8ogFWyeBf0vuQT5jhBzXspAf2rE.roa Signing time: Thu 01 Jan 2026 08:18:19 +0000 ROA not before: Thu 01 Jan 2026 08:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21100 IP address blocks: 46.21.250.0/24 maxlen: 24 212.8.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:e1:cc:12:ff:4a:76:bf:1c:26:70:4b:bd:95:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533 Validity Not Before: Jan 1 08:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f288055b27817f4bee413e63841cd7b2901fdab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c8:5d:e4:db:ac:59:82:3a:8e:2f:1b:b1:76: 10:03:44:f0:a3:e2:b4:b5:34:4b:4c:5e:c1:a5:74: bb:88:97:da:d9:ff:a5:bb:da:ee:be:6e:fb:4e:7a: 8d:64:08:d8:01:09:a9:89:30:88:b5:10:57:3d:f4: 65:bd:a9:57:64:72:46:b9:bb:2d:ea:0f:e7:12:4c: ba:59:4b:65:63:79:c9:16:7e:a9:6f:3c:09:c6:bd: a6:d0:ef:70:74:2d:b2:b4:5b:1b:b2:5c:b1:21:ce: dd:c0:20:e4:2a:d0:89:b1:1b:df:2e:ae:94:fb:a7: f9:0e:13:d3:ef:d7:fe:48:59:de:d2:ac:a2:de:1b: ad:b7:1a:44:ff:ce:cb:e0:05:14:0b:4b:ca:75:17: cf:7a:5a:e7:d0:c0:69:e4:33:a8:dc:32:89:62:c8: ab:a9:cf:4b:a8:1c:47:c1:08:2f:59:25:7f:7a:a0: 24:ce:d7:e0:8f:52:da:5e:25:10:7a:d9:7a:8a:a7: 66:73:02:40:4a:ef:d2:44:b1:0f:87:95:7e:36:c5: e7:14:b8:af:51:db:75:98:16:3c:19:ae:9b:cf:d0: 35:28:bc:26:f1:6a:9d:1d:77:01:55:29:30:b9:b9: 7b:c2:76:1f:57:02:82:a3:47:71:c9:a0:15:da:1a: 91:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:88:05:5B:27:81:7F:4B:EE:41:3E:63:84:1C:D7:B2:90:1F:DA:B1 X509v3 Authority Key Identifier: keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/8ogFWyeBf0vuQT5jhBzXspAf2rE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.21.250.0/24 212.8.245.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:40:60:2b:27:8a:97:57:79:e4:c0:31:36:69:a7:2c:c8:09: 6a:8c:86:cc:13:a9:0c:45:a6:4d:80:57:8e:49:b5:28:8b:99: 4a:3d:30:67:11:67:30:02:51:78:b5:45:07:a6:f2:32:d5:e1: 11:65:62:64:f2:7a:8d:84:32:2e:38:93:c0:9e:a9:3d:dc:86: 82:de:1a:b3:1f:66:54:1d:0c:c7:00:26:de:68:36:78:7f:67: df:30:0b:e0:73:20:06:c7:ec:6a:e9:0a:e6:ce:66:78:bc:c9: 9a:00:9a:42:64:7b:45:36:cf:84:39:39:58:e8:f3:3c:8b:8a: 9e:6d:6a:47:b8:e4:4c:eb:d6:8f:50:93:5b:a8:ef:04:03:06: 74:6a:2e:f7:c8:c0:2c:cc:ba:76:0f:d7:50:64:0d:de:29:df: 1c:be:cb:68:37:20:51:18:cb:ed:87:ac:b1:ae:8b:f7:a8:21: 49:57:ba:64:92:27:b1:01:24:dc:30:56:c3:2c:1d:da:0b:c7: 68:22:f2:13:e6:43:fb:75:94:4f:4d:e2:b7:0d:67:90:93:68: 4d:7b:e1:1d:d8:42:d3:cf:3c:51:ca:6e:ba:d4:56:d7:8a:2e: 12:b0:37:3d:32:bf:96:d7:66:26:a3:5a:81:f8:98:80:25:58: 48:0e:19:b3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ouHMEv9Kdr8cJnBLvZWxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmY2FkODlkZjFiZjk5YTM2ZjI5MGNjM2VmMGYxZTdiNGQw Mjc1MzMwHhcNMjYwMTAxMDgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjg4MDU1YjI3ODE3ZjRiZWU0MTNlNjM4NDFjZDdiMjkwMWZkYWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnshd5NusWYI6ji8bsXYQA0Two+K0 tTRLTF7BpXS7iJfa2f+lu9ruvm77TnqNZAjYAQmpiTCItRBXPfRlvalXZHJGubst 6g/nEky6WUtlY3nJFn6pbzwJxr2m0O9wdC2ytFsbslyxIc7dwCDkKtCJsRvfLq6U +6f5DhPT79f+SFne0qyi3huttxpE/87L4AUUC0vKdRfPelrn0MBp5DOo3DKJYsir qc9LqBxHwQgvWSV/eqAkztfgj1LaXiUQetl6iqdmcwJASu/SRLEPh5V+NsXnFLiv Udt1mBY8Ga6bz9A1KLwm8WqdHXcBVSkwubl7wnYfVwKCo0dxyaAV2hqRZwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPKIBVsngX9L7kE+Y4Qc17KQH9qxMB8GA1UdIwQY MBaAFH/K2J3xv5mjbykMw+8PHntNAnUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjhyWW5mR19tYU52S1F6RDd3OGVlMDBDZFRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85ZjhiMTYtMjg0Zi00NTEyLWIzZGMt MDE1ZDlmMWI0YjUwLzEvOG9nRld5ZUJmMHZ1UVQ1amhCelhzcEFmMnJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85ZjhiMTYtMjg0Zi00NTEyLWIzZGMtMDE1ZDlmMWI0YjUw LzEvZjhyWW5mR19tYU52S1F6RDd3OGVlMDBDZFRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALhX6AwQA 1Aj1MA0GCSqGSIb3DQEBCwUAA4IBAQBbQGArJ4qXV3nkwDE2aacsyAlqjIbME6kM RaZNgFeOSbUoi5lKPTBnEWcwAlF4tUUHpvIy1eERZWJk8nqNhDIuOJPAnqk93IaC 3hqzH2ZUHQzHACbeaDZ4f2ffMAvgcyAGx+xq6QrmzmZ4vMmaAJpCZHtFNs+EOTlY 6PM8i4qebWpHuORM69aPUJNbqO8EAwZ0ai73yMAszLp2D9dQZA3eKd8cvstoNyBR GMvth6yxrov3qCFJV7pkkiexASTcMFbDLB3aC8doIvIT5kP7dZRPTeK3DWeQk2hN e+Ed2ELTzzxRym661FbXii4SsDc9Mr+W12Ymo1qB+JiAJVhIDhmz -----END CERTIFICATE-----Generated at Mon Jan 26 13:27:56 2026 by rpki-client