This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/8MJgeEZ9ob8Mm2oa84MBpm5cuGE.roa File: 8MJgeEZ9ob8Mm2oa84MBpm5cuGE.roa (raw, json) Hash identifier: JbR+3k06YYqghtb2enkWekJbKkysC8m2YdpnpjjF3YU= Subject key identifier: F0:C2:60:78:46:7D:A1:BF:0C:9B:6A:1A:F3:83:01:A6:6E:5C:B8:61 Certificate issuer: /CN=e9e415ed5c0c7759981001b8db262da779a04b3d Certificate serial: 019B77C6D111709DB25E685072888542CE59 Authority key identifier: E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/8MJgeEZ9ob8Mm2oa84MBpm5cuGE.roa Signing time: Thu 01 Jan 2026 04:17:56 +0000 ROA not before: Thu 01 Jan 2026 04:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4755 IP address blocks: 213.132.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/6eQV7VwMd1mYEAG42yYtp3mgSz0.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/6eQV7VwMd1mYEAG42yYtp3mgSz0.mft rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d1:11:70:9d:b2:5e:68:50:72:88:85:42:ce:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9e415ed5c0c7759981001b8db262da779a04b3d Validity Not Before: Jan 1 04:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0c26078467da1bf0c9b6a1af38301a66e5cb861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a0:2f:2e:79:c2:73:72:64:2c:ae:ff:9c:f1: f8:ed:6b:07:56:fa:70:1e:f3:c0:99:64:4f:5f:89: 06:07:93:99:f4:7c:08:b7:b3:10:f8:24:4f:1a:d6: ed:21:20:58:a0:e4:2b:12:91:6f:46:d7:b4:d3:70: c0:d7:31:4d:3f:ff:c6:34:52:06:17:b9:dc:09:88: e7:78:94:d5:c6:cb:a2:b5:90:59:1b:69:98:b5:d6: 94:6e:bb:bd:9e:b8:86:34:c1:0a:bb:fe:00:3d:d9: 46:cf:88:5f:3d:9a:c9:72:52:78:52:56:7c:53:7b: 27:99:49:5c:59:32:93:93:52:33:80:f6:50:48:83: 3c:95:fb:3e:4f:10:c8:64:c1:7d:72:94:78:bb:50: d9:72:be:a6:51:74:ee:4a:42:8e:cd:ec:72:0e:3d: b9:04:0f:d3:ba:f0:f9:6e:2a:fd:5d:9b:10:d7:68: a6:a5:aa:b5:c1:ca:cb:99:1b:01:a1:39:93:a9:e4: 30:dc:e8:18:3d:18:2b:41:e6:81:87:cd:31:ca:af: a5:48:ec:c7:90:c2:fd:86:31:22:8f:7d:be:89:49: 4e:07:53:ca:6a:37:90:81:a1:82:92:d3:b6:af:08: 2d:b9:6a:9f:b5:18:a2:71:7d:83:ff:3e:d6:31:12: b8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C2:60:78:46:7D:A1:BF:0C:9B:6A:1A:F3:83:01:A6:6E:5C:B8:61 X509v3 Authority Key Identifier: keyid:E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/8MJgeEZ9ob8Mm2oa84MBpm5cuGE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/6eQV7VwMd1mYEAG42yYtp3mgSz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.132.251.0/24 Signature Algorithm: sha256WithRSAEncryption ac:9a:59:77:8d:12:85:2a:e8:02:a0:3d:dc:ba:9c:f9:2f:12: 47:02:81:42:f1:5e:08:58:1b:e1:1a:64:ec:ae:48:e7:f2:81: e6:ff:e7:76:fd:bd:11:05:18:0c:0d:a4:b6:bc:c5:31:55:01: b0:a8:40:f4:ed:ff:f6:5b:57:ba:25:0b:e7:09:fc:51:81:7c: 07:a1:ed:8e:1b:94:9a:e6:84:4d:89:ef:21:06:bf:1e:1b:19: ac:60:61:8d:88:f6:c5:0d:6f:2f:fb:05:fb:1d:ac:51:66:bc: b4:fb:3a:03:c8:24:da:8e:e7:79:a9:23:d2:89:43:45:b6:90: a1:2c:47:9a:26:69:88:08:57:58:a3:50:fd:96:a2:5e:83:33: 57:b3:ed:92:4f:9d:28:ac:87:27:67:31:bd:47:52:03:82:20: 96:cc:43:86:5e:2d:82:46:4f:e6:51:3e:90:8c:55:38:75:e2: 19:47:f1:6b:a4:85:96:58:f6:d5:5e:19:06:cc:0d:e9:ce:90: 82:2a:52:f5:01:f1:29:7c:13:e4:17:fa:90:1e:c8:9d:4b:10: 1c:47:ba:fe:2a:5c:68:66:01:f4:42:1b:62:e7:c2:ca:14:0d: ad:40:1a:f3:1d:5e:b5:5f:30:70:ea:8d:0c:7c:98:24:7d:b5: 0c:94:6d:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xtERcJ2yXmhQcoiFQs5ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5ZTQxNWVkNWMwYzc3NTk5ODEwMDFiOGRiMjYyZGE3Nzlh MDRiM2QwHhcNMjYwMTAxMDQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGMyNjA3ODQ2N2RhMWJmMGM5YjZhMWFmMzgzMDFhNjZlNWNiODYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06AvLnnCc3JkLK7/nPH47WsHVvpw HvPAmWRPX4kGB5OZ9HwIt7MQ+CRPGtbtISBYoOQrEpFvRte003DA1zFNP//GNFIG F7ncCYjneJTVxsuitZBZG2mYtdaUbru9nriGNMEKu/4APdlGz4hfPZrJclJ4UlZ8 U3snmUlcWTKTk1IzgPZQSIM8lfs+TxDIZMF9cpR4u1DZcr6mUXTuSkKOzexyDj25 BA/TuvD5bir9XZsQ12impaq1wcrLmRsBoTmTqeQw3OgYPRgrQeaBh80xyq+lSOzH kML9hjEij32+iUlOB1PKajeQgaGCktO2rwgtuWqftRiicX2D/z7WMRK4LQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPDCYHhGfaG/DJtqGvODAaZuXLhhMB8GA1UdIwQY MBaAFOnkFe1cDHdZmBABuNsmLad5oEs9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmVRVjdWd01kMW1ZRUFHNDJ5WXRwM21nU3owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS83ZWI2ODMtZTIxOC00MzgyLWJmZDkt MjhkYTZhMWJhMTI4LzEvOE1KZ2VFWjlvYjhNbTJvYTg0TUJwbTVjdUdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS83ZWI2ODMtZTIxOC00MzgyLWJmZDktMjhkYTZhMWJhMTI4 LzEvNmVRVjdWd01kMW1ZRUFHNDJ5WXRwM21nU3owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YT7MA0G CSqGSIb3DQEBCwUAA4IBAQCsmll3jRKFKugCoD3cupz5LxJHAoFC8V4IWBvhGmTs rkjn8oHm/+d2/b0RBRgMDaS2vMUxVQGwqED07f/2W1e6JQvnCfxRgXwHoe2OG5Sa 5oRNie8hBr8eGxmsYGGNiPbFDW8v+wX7HaxRZry0+zoDyCTajud5qSPSiUNFtpCh LEeaJmmICFdYo1D9lqJegzNXs+2ST50orIcnZzG9R1IDgiCWzEOGXi2CRk/mUT6Q jFU4deIZR/FrpIWWWPbVXhkGzA3pzpCCKlL1AfEpfBPkF/qQHsidSxAcR7r+Klxo ZgH0Qhti58LKFA2tQBrzHV61XzBw6o0MfJgkfbUMlG1a -----END CERTIFICATE-----Generated at Tue Jan 20 02:56:02 2026 by rpki-client