This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/8L86EXisfMWARlTLlv2bxbPUN_E.roa File: 8L86EXisfMWARlTLlv2bxbPUN_E.roa (raw, json) Hash identifier: 5jC5ZKIGyizvr6GbHsW0/xJUuk1S0ZkI1AjiMly1A0Y= Subject key identifier: F0:BF:3A:11:78:AC:7C:C5:80:46:54:CB:96:FD:9B:C5:B3:D4:37:F1 Certificate issuer: /CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649 Certificate serial: 019B7F15798356FCC8CBDC78A7605F260C4F Authority key identifier: 04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/8L86EXisfMWARlTLlv2bxbPUN_E.roa Signing time: Fri 02 Jan 2026 14:21:12 +0000 ROA not before: Fri 02 Jan 2026 14:21:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43022 IP address blocks: 77.93.32.0/19 maxlen: 24 2a04:7dc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:79:83:56:fc:c8:cb:dc:78:a7:60:5f:26:0c:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649 Validity Not Before: Jan 2 14:21:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0bf3a1178ac7cc5804654cb96fd9bc5b3d437f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:26:ee:9f:47:c8:3d:a2:cb:c7:13:e3:55:50: a8:0c:2e:20:6c:fb:eb:a6:cb:f9:be:58:7e:7b:92: f0:91:15:82:ad:af:70:dd:c6:e0:26:07:90:5d:51: 8c:4f:59:d5:db:1b:e0:bb:f7:f0:47:42:1f:b1:0d: bb:71:26:1f:cf:5b:7f:26:c5:76:83:a8:6c:f2:51: d9:40:39:ec:66:40:c1:ff:87:1e:2e:7f:7d:79:c6: 52:3b:67:5e:33:3d:6c:bd:54:cc:9c:32:a8:0e:0f: 95:8a:5e:86:eb:09:13:64:10:3f:88:e5:0b:fd:44: a6:ce:bd:94:49:7c:e2:d1:09:72:85:40:a2:e2:b9: 43:7b:36:3b:4b:27:11:30:5d:eb:0a:26:5e:f3:2c: cd:89:b9:27:ba:dc:c7:58:f1:c5:4f:57:62:a4:2e: cc:03:9e:e3:33:f6:b3:60:cd:57:ff:9e:be:8f:b6: 72:7f:7e:a4:32:73:47:90:07:d4:6a:11:00:b2:ae: 4c:90:5e:52:53:41:34:1c:5d:5c:e7:ea:2f:ff:12: 9e:ae:d5:0b:d0:66:2f:93:04:cd:be:43:27:4b:ce: 5a:00:c9:ea:f2:ed:b1:92:8a:f8:5f:1c:cb:97:fa: a7:4b:92:75:27:21:72:8f:aa:a2:b9:47:9b:38:79: 10:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BF:3A:11:78:AC:7C:C5:80:46:54:CB:96:FD:9B:C5:B3:D4:37:F1 X509v3 Authority Key Identifier: keyid:04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/8L86EXisfMWARlTLlv2bxbPUN_E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.93.32.0/19 IPv6: 2a04:7dc0::/29 Signature Algorithm: sha256WithRSAEncryption 28:64:78:72:13:2d:a9:5c:36:cf:61:82:f0:47:bd:eb:14:41: 01:58:73:35:46:48:21:56:0d:97:d0:55:b2:e2:f7:0a:ad:5c: 47:a3:1e:35:33:a8:7f:6c:56:9f:4c:7f:81:90:31:fc:60:46: 9f:6c:69:2c:c0:6e:3b:db:7a:e4:ee:99:c8:df:e1:71:57:d3: c3:96:8a:d0:ea:23:d4:f1:1a:ec:e9:81:a7:13:d6:3a:91:53: c8:f4:fb:52:8e:6b:7c:47:54:fc:b8:10:6b:66:f1:f4:c9:c1: a8:6d:1f:06:a3:dd:90:fe:d7:6d:d4:3d:37:f8:ab:ca:0f:59: 96:0a:19:0b:40:df:bb:4d:ba:79:7e:9f:9f:a1:10:c5:31:8f: fa:dc:b6:c2:5c:ef:2b:0d:5b:57:74:c4:93:64:ec:a2:ee:4d: 3c:a5:f9:b4:02:df:e7:94:1e:e4:4a:07:1f:3a:f9:e1:5b:48: c7:64:3f:1a:42:76:4c:e3:dd:cb:d4:9a:7f:c2:5a:fb:af:05: 9f:3a:44:b9:fd:b4:a2:0e:dc:c0:2c:fe:58:5f:06:75:90:db: 20:24:b8:0b:30:b1:9d:ad:10:28:c4:81:16:f5:7d:4c:a4:d4: e7:11:88:c4:b2:2c:64:a8:dd:24:cd:a7:29:86:9e:ce:ba:4c: e9:45:1d:d7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FXmDVvzIy9x4p2BfJgxPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MGRkM2QzYzUyZDRjNmZhNTFiN2E4MzM1NzhjZWZiM2Fi MjY2NDkwHhcNMjYwMTAyMTQyMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGJmM2ExMTc4YWM3Y2M1ODA0NjU0Y2I5NmZkOWJjNWIzZDQzN2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlibun0fIPaLLxxPjVVCoDC4gbPvr psv5vlh+e5LwkRWCra9w3cbgJgeQXVGMT1nV2xvgu/fwR0IfsQ27cSYfz1t/JsV2 g6hs8lHZQDnsZkDB/4ceLn99ecZSO2deMz1svVTMnDKoDg+Vil6G6wkTZBA/iOUL /USmzr2USXzi0QlyhUCi4rlDezY7SycRMF3rCiZe8yzNibknutzHWPHFT1dipC7M A57jM/azYM1X/56+j7Zyf36kMnNHkAfUahEAsq5MkF5SU0E0HF1c5+ov/xKertUL 0GYvkwTNvkMnS85aAMnq8u2xkor4XxzLl/qnS5J1JyFyj6qiuUebOHkQCwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPC/OhF4rHzFgEZUy5b9m8Wz1DfxMB8GA1UdIwQY MBaAFAQN09PFLUxvpRt6gzV4zvs6smZJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkEzVDA4VXRURy1sRzNxRE5Yak8tenF5WmtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mZmMzNDktZjMyNi00MDk2LWJjYjMt YzJjMmFjYjkwOGJjLzEvOEw4NkVYaXNmTVdBUmxUTGx2MmJ4YlBVTl9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9mZmMzNDktZjMyNi00MDk2LWJjYjMtYzJjMmFjYjkwOGJj LzEvQkEzVDA4VXRURy1sRzNxRE5Yak8tenF5WmtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFTV0gMA0E AgACMAcDBQMqBH3AMA0GCSqGSIb3DQEBCwUAA4IBAQAoZHhyEy2pXDbPYYLwR73r FEEBWHM1RkghVg2X0FWy4vcKrVxHox41M6h/bFafTH+BkDH8YEafbGkswG4723rk 7pnI3+FxV9PDlorQ6iPU8Rrs6YGnE9Y6kVPI9PtSjmt8R1T8uBBrZvH0ycGobR8G o92Q/tdt1D03+KvKD1mWChkLQN+7Tbp5fp+foRDFMY/63LbCXO8rDVtXdMSTZOyi 7k08pfm0At/nlB7kSgcfOvnhW0jHZD8aQnZM493L1Jp/wlr7rwWfOkS5/bSiDtzA LP5YXwZ1kNsgJLgLMLGdrRAoxIEW9X1MpNTnEYjEsixkqN0kzacphp7OukzpRR3X -----END CERTIFICATE-----Generated at Mon Feb 9 22:59:30 2026 by rpki-client