This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/8g4DJqA7EmfqO5FU27IJgYiwBPQ.roa File: 8g4DJqA7EmfqO5FU27IJgYiwBPQ.roa (raw, json) Hash identifier: Z7aisMaBlEpC+Box7db/aG2eyltwAxWv0Dd2ZI7sSqU= Subject key identifier: F2:0E:03:26:A0:3B:12:67:EA:3B:91:54:DB:B2:09:81:88:B0:04:F4 Certificate issuer: /CN=b869cc42415eac65c4baa1a3926302e88b5e1629 Certificate serial: 019B7FF05523CBDDEE473DA79D797BB7A59C Authority key identifier: B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/8g4DJqA7EmfqO5FU27IJgYiwBPQ.roa Signing time: Fri 02 Jan 2026 18:20:15 +0000 ROA not before: Fri 02 Jan 2026 18:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13126 IP address blocks: 62.145.64.0/18 maxlen: 32 2a0b:7f80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f0:55:23:cb:dd:ee:47:3d:a7:9d:79:7b:b7:a5:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b869cc42415eac65c4baa1a3926302e88b5e1629 Validity Not Before: Jan 2 18:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f20e0326a03b1267ea3b9154dbb2098188b004f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cd:9d:b5:3f:f1:bb:e8:35:f0:b4:7b:c5:7a: 1e:b8:58:47:c4:cc:5c:d6:64:89:4f:1b:74:86:bd: df:17:0e:17:0d:44:0e:6e:18:65:15:8d:de:71:3d: 9b:6c:40:75:3a:40:1b:1a:ab:a7:af:3b:57:6f:99: 2a:3c:b6:37:b8:6e:27:3a:fa:bf:70:5b:83:1d:a5: a7:2e:f9:69:20:9e:3c:00:d3:9d:9c:25:e5:c5:55: 01:47:36:50:b6:7a:ee:b6:83:76:65:6a:43:b7:ce: 3a:d4:f5:d8:a5:e5:ad:bf:c1:19:6b:02:71:c2:d1: e8:cc:21:b5:f3:2f:4e:73:b3:8b:e7:90:29:93:a4: 8e:78:e8:db:5b:70:34:c2:70:70:c2:99:6d:c5:61: f7:14:30:77:89:8f:e6:db:1d:d6:2e:d9:b8:ad:62: 3c:9c:81:73:1e:42:fa:b8:cb:aa:fd:dc:9e:ae:23: 3a:58:3e:87:f0:a5:0e:48:5c:0d:ae:70:19:f7:a1: 22:50:6a:52:42:4b:bb:2b:61:f2:97:71:62:67:90: ac:ad:0c:9f:29:9d:a0:43:0a:cd:74:d5:0e:0a:31: 78:22:01:af:4f:bd:d6:ce:9d:85:50:c4:be:b8:9d: 1b:cd:4f:10:f8:c0:f2:48:57:26:10:c9:83:fe:ee: c5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0E:03:26:A0:3B:12:67:EA:3B:91:54:DB:B2:09:81:88:B0:04:F4 X509v3 Authority Key Identifier: keyid:B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/8g4DJqA7EmfqO5FU27IJgYiwBPQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.145.64.0/18 IPv6: 2a0b:7f80::/29 Signature Algorithm: sha256WithRSAEncryption 34:fb:2e:f3:12:57:2c:b5:dd:29:0a:7a:06:c3:e1:94:2f:71: e0:6d:bb:6d:4d:a7:db:ff:1a:6c:c7:a1:62:dc:b7:4f:4c:7f: fd:68:ce:a3:db:5e:7a:ab:82:d6:ff:dd:55:7d:b3:4e:1a:6e: 43:55:99:ec:4d:67:06:27:48:6d:c0:3c:69:13:b5:5b:78:bd: 89:e9:71:ca:09:9c:b2:46:ba:8a:92:54:68:10:8b:12:a0:ac: 8e:70:0e:ab:0c:dc:1f:66:f1:54:12:b3:91:8a:2f:44:c9:de: bd:98:7f:1e:7f:7a:f4:bb:62:63:65:19:eb:07:6f:ea:6d:38: a3:1f:3d:ab:27:65:9a:d2:0f:a5:eb:fa:b8:76:c7:cd:d0:0a: 3e:50:c6:bf:73:68:03:72:03:ee:32:09:c0:73:fa:4a:fd:1e: dc:54:ff:8b:8c:64:84:cc:d8:94:7c:fd:36:ba:da:b7:16:5d: 75:6c:d3:e9:5e:be:fe:24:9e:68:2c:7d:80:f6:70:2c:a4:96: 52:6d:c0:53:2f:f2:ca:4e:9f:4a:18:20:f0:94:f1:df:ec:f4: a2:47:85:cd:80:0c:ba:99:00:87:a8:ee:22:22:29:bc:9b:3b: 4d:44:1d:6d:e0:61:20:d9:89:c1:ac:b4:a3:54:d7:65:d6:4d: 0e:1d:53:37 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/8FUjy93uRz2nnXl7t6WcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NjljYzQyNDE1ZWFjNjVjNGJhYTFhMzkyNjMwMmU4OGI1 ZTE2MjkwHhcNMjYwMTAyMTgyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjBlMDMyNmEwM2IxMjY3ZWEzYjkxNTRkYmIyMDk4MTg4YjAwNGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc2dtT/xu+g18LR7xXoeuFhHxMxc 1mSJTxt0hr3fFw4XDUQObhhlFY3ecT2bbEB1OkAbGqunrztXb5kqPLY3uG4nOvq/ cFuDHaWnLvlpIJ48ANOdnCXlxVUBRzZQtnrutoN2ZWpDt8461PXYpeWtv8EZawJx wtHozCG18y9Oc7OL55Apk6SOeOjbW3A0wnBwwpltxWH3FDB3iY/m2x3WLtm4rWI8 nIFzHkL6uMuq/dyeriM6WD6H8KUOSFwNrnAZ96EiUGpSQku7K2Hyl3FiZ5CsrQyf KZ2gQwrNdNUOCjF4IgGvT73Wzp2FUMS+uJ0bzU8Q+MDySFcmEMmD/u7FuQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPIOAyagOxJn6juRVNuyCYGIsAT0MB8GA1UdIwQY MBaAFLhpzEJBXqxlxLqho5JjAuiLXhYpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUduTVFrRmVyR1hFdXFHamttTUM2SXRlRmlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83MzJiMjYtMzE5My00NGE3LTkzOGUt YWY2ODQ2N2MzNzI3LzEvOGc0REpxQTdFbWZxTzVGVTI3SUpnWWl3QlBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83MzJiMjYtMzE5My00NGE3LTkzOGUtYWY2ODQ2N2MzNzI3 LzEvdUduTVFrRmVyR1hFdXFHamttTUM2SXRlRmlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQGPpFAMA0E AgACMAcDBQMqC3+AMA0GCSqGSIb3DQEBCwUAA4IBAQA0+y7zElcstd0pCnoGw+GU L3HgbbttTafb/xpsx6Fi3LdPTH/9aM6j2156q4LW/91VfbNOGm5DVZnsTWcGJ0ht wDxpE7VbeL2J6XHKCZyyRrqKklRoEIsSoKyOcA6rDNwfZvFUErORii9Eyd69mH8e f3r0u2JjZRnrB2/qbTijHz2rJ2Wa0g+l6/q4dsfN0Ao+UMa/c2gDcgPuMgnAc/pK /R7cVP+LjGSEzNiUfP02utq3Fl11bNPpXr7+JJ5oLH2A9nAspJZSbcBTL/LKTp9K GCDwlPHf7PSiR4XNgAy6mQCHqO4iIim8mztNRB1t4GEg2YnBrLSjVNdl1k0OHVM3 -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:56 2026 by rpki-client