This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/8OD863Xw5xfKsrtRboSq7gO6HWM.roa File: 8OD863Xw5xfKsrtRboSq7gO6HWM.roa (raw, json) Hash identifier: ZNHYgSylxFNJYjmFkpWTo01Ad9pEbRvcFvNqBdu7jmw= Subject key identifier: F0:E0:FC:EB:75:F0:E7:17:CA:B2:BB:51:6E:84:AA:EE:03:BA:1D:63 Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B76EAE738C96CF18C1E6A734B5F0A0027 Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/8OD863Xw5xfKsrtRboSq7gO6HWM.roa Signing time: Thu 01 Jan 2026 00:17:44 +0000 ROA not before: Thu 01 Jan 2026 00:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9123 IP address blocks: 82.97.240.0/24 maxlen: 24 82.97.241.0/24 maxlen: 24 82.97.242.0/24 maxlen: 24 82.97.243.0/24 maxlen: 24 82.97.244.0/24 maxlen: 24 82.97.245.0/24 maxlen: 24 82.97.247.0/24 maxlen: 24 82.97.248.0/24 maxlen: 24 82.97.249.0/24 maxlen: 24 82.97.250.0/24 maxlen: 24 82.97.251.0/24 maxlen: 24 82.97.252.0/24 maxlen: 24 82.97.253.0/24 maxlen: 24 82.97.254.0/24 maxlen: 24 82.97.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:e7:38:c9:6c:f1:8c:1e:6a:73:4b:5f:0a:00:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 1 00:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0e0fceb75f0e717cab2bb516e84aaee03ba1d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:15:a9:e7:ce:e1:68:5b:61:a7:a3:4f:ce:f4: 20:c1:64:2f:d1:fa:b0:ef:53:53:41:6f:23:78:97: 03:93:63:1a:2a:6c:af:67:a0:c4:b9:77:9e:e1:1c: 0f:a9:5a:0d:7e:3d:20:cc:e0:e6:9e:50:1e:09:b9: 1e:16:1e:98:ac:5c:6b:68:7a:0e:d1:5f:b9:c0:b1: aa:17:a4:85:87:b1:3a:fd:03:2a:66:a0:2b:fa:f2: 3c:c5:dc:9f:ed:24:27:07:8f:d9:8e:12:89:01:a1: b6:b1:bc:24:d5:dc:85:11:2f:24:23:51:d9:22:1f: 27:b7:f2:4a:d7:bb:60:a9:45:82:e5:93:c0:b6:99: f6:26:a8:d9:52:87:70:8b:bb:73:72:e3:38:e8:ab: 47:a8:84:4a:cc:f6:9c:7b:e5:c3:e5:d3:81:cb:39: fe:71:a8:bc:75:e3:8b:7f:72:08:85:6c:c4:38:9f: 3d:76:cf:ab:00:1b:34:2f:6b:a6:ad:14:76:8b:ce: 68:2a:0f:0f:5a:cb:52:81:b3:83:07:61:17:3c:85: 20:5c:df:cb:20:5d:c9:6b:4a:f4:12:14:ec:8b:93: 94:77:53:a2:5a:c9:0a:df:49:7b:51:b3:47:a6:36: 30:58:11:6a:21:40:aa:c1:d8:74:3e:7b:35:83:0e: 87:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E0:FC:EB:75:F0:E7:17:CA:B2:BB:51:6E:84:AA:EE:03:BA:1D:63 X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/8OD863Xw5xfKsrtRboSq7gO6HWM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.97.240.0-82.97.245.255 82.97.247.0-82.97.255.255 Signature Algorithm: sha256WithRSAEncryption 01:42:27:43:4e:c3:52:dc:e8:00:17:8b:35:84:af:c0:d1:01: ff:c0:84:22:0c:b4:7d:ad:d3:05:47:5d:ba:b8:d6:1f:f1:ce: 7f:80:bb:cc:15:56:0c:37:aa:e7:9c:57:52:33:7c:1b:6b:37: 64:28:27:02:d4:e3:b8:cf:42:d5:35:1b:44:38:2a:58:b5:d3: c9:7c:2d:61:5d:7b:0c:0f:1f:a1:73:14:db:4e:c0:bd:a2:fe: fd:2c:24:eb:b4:7c:d1:c2:f3:51:78:df:d2:57:16:d3:55:39: cb:15:d7:4f:31:31:2d:74:f6:26:78:a3:0c:f0:f7:27:a0:c0: 70:f8:4d:76:a2:13:af:8b:84:94:39:1e:d4:ef:08:c1:e7:fd: ed:ef:2c:56:26:bf:b1:85:87:9c:c6:20:eb:9e:09:0b:35:13: 16:2e:f8:7f:22:b5:04:3b:cc:a0:d9:4e:24:aa:b8:98:46:4d: 30:e8:f4:a7:e9:17:5a:1a:e9:51:eb:78:ef:01:78:52:89:a3: 96:3b:86:5f:74:b1:44:9e:e1:91:53:8e:55:ef:df:ad:aa:74: 70:75:40:86:b3:02:8a:5a:ec:f8:b1:22:91:c0:c2:5d:04:2b: dc:a9:dc:69:c9:41:05:14:1a:5e:60:5c:cc:e7:fb:98:94:ab: ec:ae:30:c8 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt26uc4yWzxjB5qc0tfCgAnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTAxMDAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGUwZmNlYjc1ZjBlNzE3Y2FiMmJiNTE2ZTg0YWFlZTAzYmExZDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxWp587haFthp6NPzvQgwWQv0fqw 71NTQW8jeJcDk2MaKmyvZ6DEuXee4RwPqVoNfj0gzODmnlAeCbkeFh6YrFxraHoO 0V+5wLGqF6SFh7E6/QMqZqAr+vI8xdyf7SQnB4/ZjhKJAaG2sbwk1dyFES8kI1HZ Ih8nt/JK17tgqUWC5ZPAtpn2JqjZUodwi7tzcuM46KtHqIRKzPace+XD5dOByzn+ cai8deOLf3IIhWzEOJ89ds+rABs0L2umrRR2i85oKg8PWstSgbODB2EXPIUgXN/L IF3Ja0r0EhTsi5OUd1OiWskK30l7UbNHpjYwWBFqIUCqwdh0Pns1gw6HIQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPDg/Ot18OcXyrK7UW6Equ4Duh1jMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvOE9EODYzWHc1eGZLc3J0UmJvU3E3Z082SFdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAATAbMAwDBARSYfAD BAFSYfQwCwMEAFJh9wMDAVJgMA0GCSqGSIb3DQEBCwUAA4IBAQABQidDTsNS3OgA F4s1hK/A0QH/wIQiDLR9rdMFR126uNYf8c5/gLvMFVYMN6rnnFdSM3wbazdkKCcC 1OO4z0LVNRtEOCpYtdPJfC1hXXsMDx+hcxTbTsC9ov79LCTrtHzRwvNReN/SVxbT VTnLFddPMTEtdPYmeKMM8PcnoMBw+E12ohOvi4SUOR7U7wjB5/3t7yxWJr+xhYec xiDrngkLNRMWLvh/IrUEO8yg2U4kqriYRk0w6PSn6RdaGulR63jvAXhSiaOWO4Zf dLFEnuGRU45V79+tqnRwdUCGswKKWuz4sSKRwMJdBCvcqdxpyUEFFBpeYFzM5/uY lKvsrjDI -----END CERTIFICATE-----Generated at Wed Jan 21 11:13:35 2026 by rpki-client