This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/8RsHlBc8_9duE_Lf5DgC64M1etk.roa File: 8RsHlBc8_9duE_Lf5DgC64M1etk.roa (raw, json) Hash identifier: DF5FyMDKMXu+fonfG+Ti+G0ljFoqfX8DD1a5FiSZO0E= Subject key identifier: F1:1B:07:94:17:3C:FF:D7:6E:13:F2:DF:E4:38:02:EB:83:35:7A:D9 Certificate issuer: /CN=4bce083400caf616f35020329c8d76f3c4b839a5 Certificate serial: 019B7C129A3F8275002BCBA546B0116D8696 Authority key identifier: 4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/8RsHlBc8_9duE_Lf5DgC64M1etk.roa Signing time: Fri 02 Jan 2026 00:19:12 +0000 ROA not before: Fri 02 Jan 2026 00:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12779 IP address blocks: 89.31.200.0/21 maxlen: 24 185.59.80.0/22 maxlen: 24 212.110.32.0/19 maxlen: 24 213.212.128.0/18 maxlen: 24 213.254.0.0/19 maxlen: 24 2001:1418::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:9a:3f:82:75:00:2b:cb:a5:46:b0:11:6d:86:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bce083400caf616f35020329c8d76f3c4b839a5 Validity Not Before: Jan 2 00:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f11b0794173cffd76e13f2dfe43802eb83357ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:79:83:b5:ab:a3:38:a5:fb:a2:ca:21:e1:31: e8:91:eb:01:fe:d3:bd:3b:b7:8c:40:8e:4e:b4:5f: 95:6f:39:35:e3:73:70:b1:93:8b:a7:88:9c:c0:1c: 2b:42:a0:ed:8f:7a:e0:f9:fc:7c:0d:df:fd:13:ee: cd:83:b2:74:ad:12:e8:de:fc:2a:cb:01:9a:44:40: 76:d2:2d:3e:23:b5:2e:50:8c:06:42:55:64:37:ea: cb:80:51:e6:b0:50:df:e9:9b:a1:82:3b:1e:8b:84: b8:77:6b:cf:37:6f:97:2f:1d:df:72:c9:9a:a5:50: c0:5b:75:a9:7d:8e:83:cd:72:2b:ea:37:df:ee:87: 2a:31:2b:41:2c:9e:d9:72:ca:10:ad:d3:86:d7:11: 26:b0:91:99:d0:15:0d:20:62:f1:69:42:64:fc:06: 91:69:3c:74:08:ec:ef:88:99:ce:92:b1:bd:aa:31: 67:00:86:d7:b1:91:4b:d6:ac:b9:d2:2b:d9:b9:42: 6a:e4:a2:34:ce:ac:64:82:53:2d:86:09:91:ac:d7: 8d:22:bc:df:0f:1b:1e:75:60:d1:c9:f6:80:11:11: 96:73:c9:25:4d:4a:54:16:9e:69:84:ca:5f:e5:83: de:90:03:7c:ec:32:3a:df:26:06:96:1f:b9:fb:9d: 48:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:1B:07:94:17:3C:FF:D7:6E:13:F2:DF:E4:38:02:EB:83:35:7A:D9 X509v3 Authority Key Identifier: keyid:4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/8RsHlBc8_9duE_Lf5DgC64M1etk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.31.200.0/21 185.59.80.0/22 212.110.32.0/19 213.212.128.0/18 213.254.0.0/19 IPv6: 2001:1418::/29 Signature Algorithm: sha256WithRSAEncryption 52:03:63:22:8b:9f:d2:3c:b5:ff:38:3f:b6:98:34:43:68:06: b5:c9:b6:69:f5:92:e6:8a:1e:ef:9d:e9:36:95:10:11:bc:93: 5c:f1:5a:94:e4:93:ea:d8:b2:72:1b:3f:e1:0c:74:27:5a:94: 81:80:0c:6a:8a:46:69:7e:29:4b:19:57:fa:af:7a:c5:82:69: ab:3e:b5:e6:e9:b5:cc:a9:be:d7:fe:33:01:91:f9:52:5d:32: a4:b5:9f:7f:13:22:56:1e:2a:2e:b6:c5:09:79:8a:9c:ac:88: 6a:f2:58:df:19:05:ea:96:79:2d:56:3c:a5:5c:2b:7c:3d:00: 8d:74:65:a6:47:ac:45:ed:c9:8b:40:39:92:2e:85:83:bc:9d: 2a:f9:9b:15:77:a7:c8:6e:77:2c:53:22:eb:e1:99:3e:0b:c3: c0:1e:ea:7c:05:6e:c0:33:2b:36:30:b7:8f:6b:8b:35:ad:ba: 1d:9e:17:a5:a8:e7:f3:08:42:94:0f:e6:36:27:da:a3:95:dc: 1e:d4:5b:e5:0f:5e:8b:6a:b9:ba:3e:cf:9b:0f:1c:43:ae:13: e6:19:d2:28:38:87:5e:6e:7f:a0:2d:1a:08:f3:15:96:71:6e: 56:bc:02:e2:62:a1:b2:74:fa:84:92:be:a2:21:77:5a:93:80: 7c:2b:e7:36 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt8Epo/gnUAK8ulRrARbYaWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiY2UwODM0MDBjYWY2MTZmMzUwMjAzMjljOGQ3NmYzYzRi ODM5YTUwHhcNMjYwMTAyMDAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTFiMDc5NDE3M2NmZmQ3NmUxM2YyZGZlNDM4MDJlYjgzMzU3YWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXmDtaujOKX7osoh4THokesB/tO9 O7eMQI5OtF+Vbzk143NwsZOLp4icwBwrQqDtj3rg+fx8Dd/9E+7Ng7J0rRLo3vwq ywGaREB20i0+I7UuUIwGQlVkN+rLgFHmsFDf6Zuhgjsei4S4d2vPN2+XLx3fcsma pVDAW3WpfY6DzXIr6jff7ocqMStBLJ7ZcsoQrdOG1xEmsJGZ0BUNIGLxaUJk/AaR aTx0COzviJnOkrG9qjFnAIbXsZFL1qy50ivZuUJq5KI0zqxkglMthgmRrNeNIrzf DxsedWDRyfaAERGWc8klTUpUFp5phMpf5YPekAN87DI63yYGlh+5+51IDwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFPEbB5QXPP/XbhPy3+Q4AuuDNXrZMB8GA1UdIwQY MBaAFEvOCDQAyvYW81AgMpyNdvPEuDmlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzg0SU5BREs5aGJ6VUNBeW5JMTI4OFM0T2FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83N2ZmMmEtZGQ2Yi00MGNhLTk5N2Mt ODBhN2ViYTZmOGU5LzEvOFJzSGxCYzhfOWR1RV9MZjVEZ0M2NE0xZXRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83N2ZmMmEtZGQ2Yi00MGNhLTk5N2MtODBhN2ViYTZmOGU5 LzEvUzg0SU5BREs5aGJ6VUNBeW5JMTI4OFM0T2FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDWR/IAwQC uTtQAwQF1G4gAwQG1dSAAwQF1f4AMA0EAgACMAcDBQMgARQYMA0GCSqGSIb3DQEB CwUAA4IBAQBSA2Mii5/SPLX/OD+2mDRDaAa1ybZp9ZLmih7vnek2lRARvJNc8VqU 5JPq2LJyGz/hDHQnWpSBgAxqikZpfilLGVf6r3rFgmmrPrXm6bXMqb7X/jMBkflS XTKktZ9/EyJWHioutsUJeYqcrIhq8ljfGQXqlnktVjylXCt8PQCNdGWmR6xF7cmL QDmSLoWDvJ0q+ZsVd6fIbncsUyLr4Zk+C8PAHup8BW7AMys2MLePa4s1rbodnhel qOfzCEKUD+Y2J9qjldwe1FvlD16Larm6Ps+bDxxDrhPmGdIoOIdebn+gLRoI8xWW cW5WvALiYqGydPqEkr6iIXdak4B8K+c2 -----END CERTIFICATE-----Generated at Mon Jan 26 23:22:46 2026 by rpki-client