This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/8jdkfMw7eUzn90DXI27WIq-FZH8.roa File: 8jdkfMw7eUzn90DXI27WIq-FZH8.roa (raw, json) Hash identifier: nRC7DUWbyW69tXtXLJURQIyZvQTvanlFhNPctN2yNWw= Subject key identifier: F2:37:64:7C:CC:3B:79:4C:E7:F7:40:D7:23:6E:D6:22:AF:85:64:7F Certificate issuer: /CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13 Certificate serial: 019B7F1377CAC800670B3B542F64B3DD76CF Authority key identifier: 0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/8jdkfMw7eUzn90DXI27WIq-FZH8.roa Signing time: Fri 02 Jan 2026 14:19:00 +0000 ROA not before: Fri 02 Jan 2026 14:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42699 IP address blocks: 92.43.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:77:ca:c8:00:67:0b:3b:54:2f:64:b3:dd:76:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13 Validity Not Before: Jan 2 14:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f237647ccc3b794ce7f740d7236ed622af85647f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:83:c3:b9:4a:81:69:86:8c:ca:6c:a6:87:66: 3c:38:3e:0d:3f:e4:c0:b2:03:0c:e6:98:af:cf:84: b4:8f:7e:f0:b8:f2:c9:df:4e:a2:bc:79:c1:4a:d4: 21:84:6b:d5:ac:4d:ac:c0:ce:68:79:20:09:2b:16: e6:61:a2:2e:87:29:e0:0d:e0:2a:8f:bc:0d:49:98: 0f:24:bd:28:af:99:a1:00:4a:82:c5:08:ef:90:3d: 16:11:7c:0b:d2:ab:1a:b2:f5:3b:54:75:e7:c2:7d: 05:78:ac:ee:f2:06:68:b6:95:a3:37:d8:95:2e:4e: 3d:7b:99:aa:50:f6:e4:29:b4:bf:82:93:95:83:30: af:01:33:74:dd:ad:32:42:40:ca:4e:6c:30:0a:bf: 5b:e9:ff:c8:d5:ea:d4:06:8c:27:c1:e4:52:84:da: 5b:74:3c:0c:35:6b:33:87:81:01:28:7b:5d:86:57: ba:9b:02:a4:3c:5d:8b:f0:bf:a0:92:1c:8f:00:0c: 99:58:4d:e4:4a:aa:37:0b:6a:5c:fe:15:36:17:55: d7:df:36:a3:fe:f1:76:12:8c:ef:e0:fa:0a:1d:86: f8:75:99:cb:25:8b:29:10:1f:b7:5e:d1:ee:d7:f2: 53:5f:33:5d:db:41:f5:95:64:46:53:26:2e:dd:c9: 26:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:37:64:7C:CC:3B:79:4C:E7:F7:40:D7:23:6E:D6:22:AF:85:64:7F X509v3 Authority Key Identifier: keyid:0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/8jdkfMw7eUzn90DXI27WIq-FZH8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.43.48.0/21 Signature Algorithm: sha256WithRSAEncryption 28:d2:cd:98:17:97:fd:2a:33:c0:3e:29:bf:24:c3:ac:d3:73: 17:b7:50:57:9d:3e:a5:03:61:13:8e:ce:0e:ec:54:e7:cf:e5: 23:0a:49:d5:ee:f2:03:a0:c8:21:fa:fd:fa:26:7a:09:d7:e3: cc:0f:50:2c:2d:f6:1b:65:94:3c:77:b3:11:1b:9d:c1:ac:6b: 9b:ea:35:89:2b:75:a6:24:e8:c7:83:bd:43:fa:f7:6a:20:d7: 3a:24:e3:34:86:08:26:27:34:11:da:e8:ec:84:b4:d6:7b:4f: ee:4a:31:64:f9:b2:f9:69:bb:b4:8c:13:a2:0b:b5:d1:86:d9: 76:f7:71:c0:31:40:ff:e6:84:24:46:66:61:5b:b9:87:ee:9e: a4:50:16:5f:16:89:2f:73:85:1d:f2:33:e7:6b:01:07:9d:02: ab:da:44:03:81:32:c0:f2:6f:e1:e5:97:a1:0c:0d:c8:46:56: 9c:09:c1:2a:ab:2c:b8:cc:73:b4:46:26:3a:f7:a5:ca:2e:0c: 86:81:10:32:8c:d8:b8:fa:62:6b:d8:38:a6:d6:e8:51:e8:3a: 1b:cb:59:01:29:a4:65:1f:e2:3c:75:4f:55:97:b9:d1:7e:cd: c3:30:e1:8b:74:23:29:9e:d6:6e:6a:ae:37:b9:a5:c2:a7:df: 6d:d0:89:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E3fKyABnCztUL2Sz3XbPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkOGNiZWU1MTk5MGYxZTA1YTlkMWRjMGMyZjJmM2E4YTM0 NzBjMTMwHhcNMjYwMTAyMTQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjM3NjQ3Y2NjM2I3OTRjZTdmNzQwZDcyMzZlZDYyMmFmODU2NDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4PDuUqBaYaMymymh2Y8OD4NP+TA sgMM5pivz4S0j37wuPLJ306ivHnBStQhhGvVrE2swM5oeSAJKxbmYaIuhyngDeAq j7wNSZgPJL0or5mhAEqCxQjvkD0WEXwL0qsasvU7VHXnwn0FeKzu8gZotpWjN9iV Lk49e5mqUPbkKbS/gpOVgzCvATN03a0yQkDKTmwwCr9b6f/I1erUBownweRShNpb dDwMNWszh4EBKHtdhle6mwKkPF2L8L+gkhyPAAyZWE3kSqo3C2pc/hU2F1XX3zaj /vF2Eozv4PoKHYb4dZnLJYspEB+3XtHu1/JTXzNd20H1lWRGUyYu3ckmaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPI3ZHzMO3lM5/dA1yNu1iKvhWR/MB8GA1UdIwQY MBaAFA2MvuUZkPHgWp0dwMLy86ijRwwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFl5LTVSbVE4ZUJhblIzQXd2THpxS05IREJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83NjNkOGUtMjA4MS00Y2Y4LWI2NWIt MWIxZTc4Y2JiYjA5LzEvOGpka2ZNdzdlVXpuOTBEWEkyN1dJcS1GWkg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83NjNkOGUtMjA4MS00Y2Y4LWI2NWItMWIxZTc4Y2JiYjA5 LzEvRFl5LTVSbVE4ZUJhblIzQXd2THpxS05IREJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXCswMA0G CSqGSIb3DQEBCwUAA4IBAQAo0s2YF5f9KjPAPim/JMOs03MXt1BXnT6lA2ETjs4O 7FTnz+UjCknV7vIDoMgh+v36JnoJ1+PMD1AsLfYbZZQ8d7MRG53BrGub6jWJK3Wm JOjHg71D+vdqINc6JOM0hggmJzQR2ujshLTWe0/uSjFk+bL5abu0jBOiC7XRhtl2 93HAMUD/5oQkRmZhW7mH7p6kUBZfFokvc4Ud8jPnawEHnQKr2kQDgTLA8m/h5Zeh DA3IRlacCcEqqyy4zHO0RiY696XKLgyGgRAyjNi4+mJr2Dim1uhR6Doby1kBKaRl H+I8dU9Vl7nRfs3DMOGLdCMpntZuaq43uaXCp99t0InJ -----END CERTIFICATE-----Generated at Mon Jan 19 20:57:05 2026 by rpki-client