This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/8IvUmXDsIvIZsY88WglINp3k0Lg.roa File: 8IvUmXDsIvIZsY88WglINp3k0Lg.roa (raw, json) Hash identifier: 9pdQxEroH3o1IleFf85fUQafxQ/1jkbXylKXHzmqVkE= Subject key identifier: F0:8B:D4:99:70:EC:22:F2:19:B1:8F:3C:5A:09:48:36:9D:E4:D0:B8 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019B7DC8A90C5B1BBC5978F71B645CD4F7E9 Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/8IvUmXDsIvIZsY88WglINp3k0Lg.roa Signing time: Fri 02 Jan 2026 08:17:41 +0000 ROA not before: Fri 02 Jan 2026 08:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54339 IP address blocks: 141.226.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:a9:0c:5b:1b:bc:59:78:f7:1b:64:5c:d4:f7:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Jan 2 08:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f08bd49970ec22f219b18f3c5a0948369de4d0b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:25:7e:a3:7b:02:1e:bf:9f:d5:60:49:9f:ac: 94:00:fa:5f:b3:1c:e6:bd:bd:aa:dd:77:68:02:6e: cd:28:bf:3b:11:3e:33:c0:33:98:00:b7:86:e0:d3: 51:fa:6b:dd:4e:cf:dd:d5:ad:ed:fb:6f:67:05:7d: 07:0d:25:ac:c3:d2:9f:f1:26:e1:53:1a:15:a4:a9: 68:20:0e:59:44:c1:c9:eb:54:a5:1f:6c:f7:50:67: 88:ca:4a:07:a3:60:b0:86:8b:65:f2:6a:a7:b5:84: 15:e9:24:70:61:a3:a8:d5:c5:45:3f:ba:dd:36:2c: 5c:b1:d6:10:4f:a5:29:08:57:30:e5:31:f9:12:28: 4a:82:27:c7:5d:b1:97:48:4e:37:92:e9:81:93:bf: 22:6c:0c:45:04:8d:a3:9e:3b:3a:e6:43:21:fe:82: f8:d1:c9:84:18:e7:7b:9c:43:32:da:10:a2:5a:79: a1:e7:5f:33:ac:57:78:8a:9d:dd:e5:5b:7b:5d:c9: a3:2c:d3:50:6c:6a:21:14:b9:51:a1:11:26:fd:32: 86:c9:bb:81:19:d3:a6:a7:e7:a4:e8:a1:7a:85:76: 76:db:d3:c7:31:8d:b6:b3:d2:07:9a:6b:f7:22:8a: fb:06:bd:b8:ee:56:ef:89:ad:de:23:85:ef:dd:2c: 2b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:8B:D4:99:70:EC:22:F2:19:B1:8F:3C:5A:09:48:36:9D:E4:D0:B8 X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/8IvUmXDsIvIZsY88WglINp3k0Lg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.226.243.0/24 Signature Algorithm: sha256WithRSAEncryption 73:bd:93:d6:94:c1:25:35:41:a9:a2:5e:47:67:28:b3:86:d9: d1:de:13:a9:f3:c1:8c:5d:f9:cf:f3:f9:53:c6:d2:62:6a:84: 7c:c4:92:e1:1e:29:6e:3b:78:f0:5c:6e:a3:43:79:46:2c:c3: ca:59:e9:06:ea:47:52:4b:62:e2:52:94:41:1b:62:e7:8f:a5: 41:0c:45:8d:4c:f5:0f:51:44:24:cf:69:7d:be:fb:ae:fd:ac: cd:e3:13:c8:05:0f:60:42:f3:aa:e9:a4:e2:58:48:0e:90:a4: e7:ab:68:96:7d:26:0e:24:4c:8f:31:98:d2:61:a1:3c:fe:ff: 39:62:88:4e:e8:ae:e0:81:36:3c:65:79:a1:10:a3:a0:aa:5e: a1:e9:a6:2e:af:f4:e8:18:a8:2a:20:31:38:b8:6e:9c:b5:fe: fa:98:2e:7b:e1:fc:3e:10:ad:55:99:90:b8:f7:e6:46:aa:41: 0d:7a:fc:86:fc:9a:74:b7:34:3a:9f:da:91:ed:aa:1c:12:34: d1:23:fd:bd:ba:6c:ba:b2:03:bd:25:7d:26:e0:20:7a:91:62: 7e:60:8e:43:3b:f6:51:db:60:f9:83:a6:78:d8:cc:59:67:69: 3a:62:49:ce:b6:7b:f3:c4:91:94:a0:c6:57:52:bb:34:bd:8a: dc:8b:c1:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yKkMWxu8WXj3G2Rc1PfpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjYwMTAyMDgxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDhiZDQ5OTcwZWMyMmYyMTliMThmM2M1YTA5NDgzNjlkZTRkMGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SV+o3sCHr+f1WBJn6yUAPpfsxzm vb2q3XdoAm7NKL87ET4zwDOYALeG4NNR+mvdTs/d1a3t+29nBX0HDSWsw9Kf8Sbh UxoVpKloIA5ZRMHJ61SlH2z3UGeIykoHo2Cwhotl8mqntYQV6SRwYaOo1cVFP7rd NixcsdYQT6UpCFcw5TH5EihKgifHXbGXSE43kumBk78ibAxFBI2jnjs65kMh/oL4 0cmEGOd7nEMy2hCiWnmh518zrFd4ip3d5Vt7XcmjLNNQbGohFLlRoREm/TKGybuB GdOmp+ek6KF6hXZ229PHMY22s9IHmmv3Ior7Br247lbvia3eI4Xv3SwraQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPCL1Jlw7CLyGbGPPFoJSDad5NC4MB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvOEl2VW1YRHNJdklac1k4OFdnbElOcDNrMExnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjeLzMA0G CSqGSIb3DQEBCwUAA4IBAQBzvZPWlMElNUGpol5HZyizhtnR3hOp88GMXfnP8/lT xtJiaoR8xJLhHiluO3jwXG6jQ3lGLMPKWekG6kdSS2LiUpRBG2Lnj6VBDEWNTPUP UUQkz2l9vvuu/azN4xPIBQ9gQvOq6aTiWEgOkKTnq2iWfSYOJEyPMZjSYaE8/v85 YohO6K7ggTY8ZXmhEKOgql6h6aYur/ToGKgqIDE4uG6ctf76mC574fw+EK1VmZC4 9+ZGqkENevyG/Jp0tzQ6n9qR7aocEjTRI/29umy6sgO9JX0m4CB6kWJ+YI5DO/ZR 22D5g6Z42MxZZ2k6YknOtnvzxJGUoMZXUrs0vYrci8Gi -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:51 2026 by rpki-client