This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/8V38VHEkwBfuD3hKlUMAwAWf0gY.roa File: 8V38VHEkwBfuD3hKlUMAwAWf0gY.roa (raw, json) Hash identifier: imN6z7AkUfOmEGnz8pAEu90fdda1mOaxJQPyio4Pb3I= Subject key identifier: F1:5D:FC:54:71:24:C0:17:EE:0F:78:4A:95:43:00:C0:05:9F:D2:06 Certificate issuer: /CN=67af9014b0dedd2c04840ae385b5339f6c6790f5 Certificate serial: 019B7758A7AD3094185B8C93A3C853CB0226 Authority key identifier: 67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/8V38VHEkwBfuD3hKlUMAwAWf0gY.roa Signing time: Thu 01 Jan 2026 02:17:37 +0000 ROA not before: Thu 01 Jan 2026 02:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44491 IP address blocks: 62.182.8.0/21 maxlen: 24 2a00:5180:1::/48 maxlen: 48 2a00:5180:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a7:ad:30:94:18:5b:8c:93:a3:c8:53:cb:02:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67af9014b0dedd2c04840ae385b5339f6c6790f5 Validity Not Before: Jan 1 02:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f15dfc547124c017ee0f784a954300c0059fd206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c1:9e:bf:01:48:d2:c4:dc:20:b0:ec:1d:fd: 7d:b6:2e:44:2d:da:01:61:21:89:95:62:11:43:b3: 73:97:60:2e:ce:d4:80:9b:a8:00:c7:55:10:4f:c0: 61:e8:4a:e8:36:ae:1b:9a:bc:28:e2:cc:56:55:3b: fa:f4:b4:06:b9:16:ef:b7:c6:84:14:b8:72:df:a5: fa:3a:06:a5:16:df:c8:3f:31:fd:82:cd:55:56:15: 61:45:94:70:56:c8:4a:85:07:70:c5:c0:b6:e6:3f: 77:08:48:97:a2:42:71:df:da:b9:a1:75:bb:e0:03: 84:a3:1d:9d:04:33:c8:9a:d7:3e:38:43:d0:29:55: 9c:78:87:e7:89:c5:d5:4f:d8:89:6e:ae:49:78:9c: f2:69:76:ef:9b:20:80:ce:bf:20:f9:fe:da:ec:3b: d9:25:08:91:08:ed:52:28:a6:be:7f:5a:b3:b7:c3: cc:01:e8:e0:49:94:f0:be:dd:c3:93:58:bb:5c:9b: eb:c0:e1:65:a7:bb:c7:14:92:99:03:8e:f6:27:a7: 03:41:0d:16:a1:37:f3:a5:4e:c9:05:c9:54:22:1b: bf:2b:64:39:ab:7c:b8:0b:42:47:00:d2:d3:5f:91: fe:0c:11:0a:d9:56:07:85:1c:e4:33:ba:1b:7e:e6: c0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:5D:FC:54:71:24:C0:17:EE:0F:78:4A:95:43:00:C0:05:9F:D2:06 X509v3 Authority Key Identifier: keyid:67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/8V38VHEkwBfuD3hKlUMAwAWf0gY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.182.8.0/21 IPv6: 2a00:5180:1::-2a00:5180:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption a2:3e:fd:32:b5:c1:d5:0b:4f:8f:81:c0:f5:5e:1c:9a:33:e6: eb:5b:56:f5:84:71:26:2c:1e:b1:6b:f8:2d:65:3c:80:b1:0b: e7:39:60:b1:99:80:a5:9a:20:13:13:1b:fe:21:e0:e6:bb:93: d7:09:0f:1e:c2:eb:4a:c1:8d:4b:ae:90:96:6c:ff:de:35:a6: cb:27:f9:cf:45:8a:27:f4:c2:a9:47:ab:03:a9:77:dc:84:c4: 94:e3:e0:e2:0f:3e:bb:e9:31:bd:90:99:89:75:dc:bd:84:c0: f3:b4:ef:9c:4f:88:40:95:a1:4c:03:31:9b:2a:5c:7c:75:8c: c6:2e:0a:46:3f:cd:8e:47:cc:e6:79:6c:7b:67:4b:8d:b6:dc: 36:06:d1:04:da:ac:23:3d:a3:09:ba:c0:b9:43:81:cb:26:a6: 5b:30:f9:ae:8e:93:9c:bf:55:e5:8f:bc:0f:f5:c4:ad:85:4a: 4a:47:90:ea:92:32:dd:00:f6:a1:0b:3e:0a:d7:95:8f:c7:2a: 87:28:2f:ff:26:70:6a:0b:76:d4:bb:50:c6:6c:29:b4:20:26: 94:4f:71:4e:b5:51:12:e9:d5:f4:6f:08:1b:af:80:2d:a1:d8: 44:1a:0d:7b:2d:c5:12:6a:ef:fb:aa:67:e5:70:84:4a:65:ea: 38:a9:40:0f -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt3WKetMJQYW4yTo8hTywImMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YWY5MDE0YjBkZWRkMmMwNDg0MGFlMzg1YjUzMzlmNmM2 NzkwZjUwHhcNMjYwMTAxMDIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTVkZmM1NDcxMjRjMDE3ZWUwZjc4NGE5NTQzMDBjMDA1OWZkMjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksGevwFI0sTcILDsHf19ti5ELdoB YSGJlWIRQ7Nzl2AuztSAm6gAx1UQT8Bh6EroNq4bmrwo4sxWVTv69LQGuRbvt8aE FLhy36X6OgalFt/IPzH9gs1VVhVhRZRwVshKhQdwxcC25j93CEiXokJx39q5oXW7 4AOEox2dBDPImtc+OEPQKVWceIfnicXVT9iJbq5JeJzyaXbvmyCAzr8g+f7a7DvZ JQiRCO1SKKa+f1qzt8PMAejgSZTwvt3Dk1i7XJvrwOFlp7vHFJKZA472J6cDQQ0W oTfzpU7JBclUIhu/K2Q5q3y4C0JHANLTX5H+DBEK2VYHhRzkM7obfubAswIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPFd/FRxJMAX7g94SpVDAMAFn9IGMB8GA1UdIwQY MBaAFGevkBSw3t0sBIQK44W1M59sZ5D1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjYtUUZMRGUzU3dFaEFyamhiVXpuMnhua1BVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC83YzY2YjAtYzgwOC00NWExLTliNTAt NWU3NThlODFlZmY2LzEvOFYzOFZIRWt3QmZ1RDNoS2xVTUF3QVdmMGdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC83YzY2YjAtYzgwOC00NWExLTliNTAtNWU3NThlODFlZmY2 LzEvWjYtUUZMRGUzU3dFaEFyamhiVXpuMnhua1BVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQDPrYIMBoE AgACMBQwEgMHACoAUYAAAQMHACoAUYAAAjANBgkqhkiG9w0BAQsFAAOCAQEAoj79 MrXB1QtPj4HA9V4cmjPm61tW9YRxJiwesWv4LWU8gLEL5zlgsZmApZogExMb/iHg 5ruT1wkPHsLrSsGNS66Qlmz/3jWmyyf5z0WKJ/TCqUerA6l33ITElOPg4g8+u+kx vZCZiXXcvYTA87TvnE+IQJWhTAMxmypcfHWMxi4KRj/NjkfM5nlse2dLjbbcNgbR BNqsIz2jCbrAuUOByyamWzD5ro6TnL9V5Y+8D/XErYVKSkeQ6pIy3QD2oQs+CteV j8cqhygv/yZwagt21LtQxmwptCAmlE9xTrVREunV9G8IG6+ALaHYRBoNey3FEmrv +6pn5XCESmXqOKlADw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:46 2026 by rpki-client