This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/8QjpINWPHZDJ5rBXOU-f7xhIEjw.roa File: 8QjpINWPHZDJ5rBXOU-f7xhIEjw.roa (raw, json) Hash identifier: 4srsR9VRePR9yB/iD/hHMwN8fvofDELlgIaatI76q6Y= Subject key identifier: F1:08:E9:20:D5:8F:1D:90:C9:E6:B0:57:39:4F:9F:EF:18:48:12:3C Certificate issuer: /CN=9eeac1cfbec494ae9457c866e6361865c4f30048 Certificate serial: 019B79ECBA826C1A534C9EF0ADE284334418 Authority key identifier: 9E:EA:C1:CF:BE:C4:94:AE:94:57:C8:66:E6:36:18:65:C4:F3:00:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/8QjpINWPHZDJ5rBXOU-f7xhIEjw.roa Signing time: Thu 01 Jan 2026 14:18:35 +0000 ROA not before: Thu 01 Jan 2026 14:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199951 IP address blocks: 185.41.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ba:82:6c:1a:53:4c:9e:f0:ad:e2:84:33:44:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eeac1cfbec494ae9457c866e6361865c4f30048 Validity Not Before: Jan 1 14:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f108e920d58f1d90c9e6b057394f9fef1848123c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:79:59:c1:99:0c:b4:d3:77:7f:bd:c6:a2:37: f1:ab:40:c6:91:af:23:dc:2d:9b:96:3a:41:14:8e: e9:3f:7a:8f:01:41:55:49:b6:69:ad:f2:30:23:99: a5:75:1f:a0:bd:f6:f5:33:79:03:8f:25:18:cf:71: 7c:b3:d0:a2:cc:8c:1e:78:c1:aa:3b:b1:c3:30:72: 1e:c5:a3:3f:c3:94:c8:66:f4:8d:6d:53:25:ad:e2: 29:61:b8:33:f3:b9:ce:30:68:24:32:77:9b:54:01: 6e:d3:dc:cf:c7:aa:af:7e:da:57:10:fc:fa:44:d4: e1:91:22:00:5b:68:df:0d:ab:77:77:1e:90:e9:c4: a3:c3:5f:ed:11:e9:a3:12:c6:36:aa:19:57:59:f3: 12:de:ed:4c:e9:b5:dd:22:c2:df:99:72:6b:75:22: d5:8c:a9:74:60:18:a0:ab:6d:69:85:9b:89:3d:33: 9a:bd:9e:86:16:91:ce:c6:24:3e:80:f4:a4:2c:21: e8:b1:c1:96:b1:9e:dd:8e:fb:b8:c9:ec:7f:24:67: ef:bf:77:62:a6:ca:b0:84:82:7e:87:0f:d2:58:ee: 5d:18:b8:c7:68:17:e4:20:6a:16:5b:4d:1e:f4:d5: 8a:1b:68:00:01:2e:a8:99:37:62:22:82:7c:ca:03: 85:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:08:E9:20:D5:8F:1D:90:C9:E6:B0:57:39:4F:9F:EF:18:48:12:3C X509v3 Authority Key Identifier: keyid:9E:EA:C1:CF:BE:C4:94:AE:94:57:C8:66:E6:36:18:65:C4:F3:00:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/8QjpINWPHZDJ5rBXOU-f7xhIEjw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.41.176.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:42:ea:d3:68:7c:37:ea:89:00:e2:c1:9a:1e:5a:b6:18:0b: 73:b4:35:02:86:72:ca:9b:4f:9f:47:cd:78:f3:5c:6b:e0:16: 45:58:6b:19:84:d3:c0:65:42:49:03:53:cf:29:3e:11:c9:3e: b2:f0:5b:4b:00:9b:f6:46:f4:95:f1:1d:14:86:b7:a8:21:2e: f0:b0:df:0e:a2:cb:ba:db:03:a6:d2:22:35:e3:87:fc:52:27: e1:ae:69:49:a6:76:a0:a9:db:6d:b1:1d:3f:cb:4a:16:4b:fa: dc:94:0a:f0:85:89:c3:54:cc:ce:67:e7:e8:61:ff:83:e7:06: 9d:15:72:2a:91:08:88:19:8f:42:db:44:ce:49:05:1d:62:a0: 42:43:7f:f8:59:33:ee:d7:73:b1:42:ee:f7:ba:e0:dc:9f:6f: 9e:2e:02:9e:d1:37:65:51:0f:60:6a:b1:22:bb:99:3f:5c:94: fe:df:f3:dc:ac:00:22:66:bc:e9:94:f3:53:6b:a7:55:30:d1: 7d:39:4a:75:3c:ac:f5:47:31:31:58:f4:5d:d3:b4:93:e5:55: 1d:b5:5b:e8:ed:ef:f9:76:ec:f9:3e:9f:16:24:4b:6b:92:80: c4:a1:a0:01:f0:d9:82:88:77:68:6e:ea:4e:2a:1c:94:48:86: b9:9e:a6:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57LqCbBpTTJ7wreKEM0QYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZWFjMWNmYmVjNDk0YWU5NDU3Yzg2NmU2MzYxODY1YzRm MzAwNDgwHhcNMjYwMTAxMTQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTA4ZTkyMGQ1OGYxZDkwYzllNmIwNTczOTRmOWZlZjE4NDgxMjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HlZwZkMtNN3f73Gojfxq0DGka8j 3C2bljpBFI7pP3qPAUFVSbZprfIwI5mldR+gvfb1M3kDjyUYz3F8s9CizIweeMGq O7HDMHIexaM/w5TIZvSNbVMlreIpYbgz87nOMGgkMnebVAFu09zPx6qvftpXEPz6 RNThkSIAW2jfDat3dx6Q6cSjw1/tEemjEsY2qhlXWfMS3u1M6bXdIsLfmXJrdSLV jKl0YBigq21phZuJPTOavZ6GFpHOxiQ+gPSkLCHoscGWsZ7djvu4yex/JGfvv3di psqwhIJ+hw/SWO5dGLjHaBfkIGoWW00e9NWKG2gAAS6omTdiIoJ8ygOFCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPEI6SDVjx2QyeawVzlPn+8YSBI8MB8GA1UdIwQY MBaAFJ7qwc++xJSulFfIZuY2GGXE8wBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnVyQno3N0VsSzZVVjhobTVqWVlaY1R6QUVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80N2U2MDktYjZiNy00NDNiLThhMDQt ZTI4NWNkOGNhZDEyLzEvOFFqcElOV1BIWkRKNXJCWE9VLWY3eGhJRWp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80N2U2MDktYjZiNy00NDNiLThhMDQtZTI4NWNkOGNhZDEy LzEvbnVyQno3N0VsSzZVVjhobTVqWVlaY1R6QUVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSmwMA0G CSqGSIb3DQEBCwUAA4IBAQAvQurTaHw36okA4sGaHlq2GAtztDUChnLKm0+fR814 81xr4BZFWGsZhNPAZUJJA1PPKT4RyT6y8FtLAJv2RvSV8R0UhreoIS7wsN8Oosu6 2wOm0iI144f8UifhrmlJpnagqdttsR0/y0oWS/rclArwhYnDVMzOZ+foYf+D5wad FXIqkQiIGY9C20TOSQUdYqBCQ3/4WTPu13OxQu73uuDcn2+eLgKe0TdlUQ9garEi u5k/XJT+3/PcrAAiZrzplPNTa6dVMNF9OUp1PKz1RzExWPRd07ST5VUdtVvo7e/5 duz5Pp8WJEtrkoDEoaAB8NmCiHdobupOKhyUSIa5nqZ5 -----END CERTIFICATE-----Generated at Tue Feb 10 04:49:10 2026 by rpki-client