This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/8HLfSggRfCQKqxfP5-UeXb00I7g.roa File: 8HLfSggRfCQKqxfP5-UeXb00I7g.roa (raw, json) Hash identifier: Z2nghP6xwioSl3jH3QUVmpIFKFZILHts7G8PmuEqq+Y= Subject key identifier: F0:72:DF:4A:08:11:7C:24:0A:AB:17:CF:E7:E5:1E:5D:BD:34:23:B8 Certificate issuer: /CN=a77720c7dc1dc3edd1d0d47f923bcd833f06af36 Certificate serial: 019B7FF15730C6EE94D25A27EC0FB028BF97 Authority key identifier: A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/8HLfSggRfCQKqxfP5-UeXb00I7g.roa Signing time: Fri 02 Jan 2026 18:21:21 +0000 ROA not before: Fri 02 Jan 2026 18:21:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44655 IP address blocks: 91.202.124.0/22 maxlen: 22 91.202.124.0/24 maxlen: 24 91.202.125.0/24 maxlen: 24 91.202.126.0/24 maxlen: 24 91.202.127.0/24 maxlen: 24 2001:67c:740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:57:30:c6:ee:94:d2:5a:27:ec:0f:b0:28:bf:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77720c7dc1dc3edd1d0d47f923bcd833f06af36 Validity Not Before: Jan 2 18:21:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f072df4a08117c240aab17cfe7e51e5dbd3423b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e9:73:df:47:7b:ae:9d:b0:b5:fb:b8:82:7d: 31:fe:6d:a9:05:db:8c:8f:01:9f:9d:c8:b2:65:cd: 6a:3d:60:0d:de:46:67:28:3c:49:61:49:08:5e:8d: 67:e1:0b:97:0f:24:e8:94:c8:44:25:05:8b:31:32: 23:98:85:2a:e9:7a:b5:58:af:9c:db:51:cb:9f:f3: 48:42:81:4a:f3:17:2c:8e:9b:8b:85:9b:97:f9:2e: c3:59:16:0e:c6:33:84:34:63:be:9f:88:a6:8f:66: c2:6b:1f:f5:6e:9f:54:f7:2a:ea:27:74:93:56:c2: 71:af:be:17:08:80:c1:38:86:81:50:d7:db:43:08: be:81:6d:d8:e3:74:d8:0a:b3:b4:16:ff:96:af:c1: cf:02:43:e3:5c:c2:59:46:73:11:f5:90:75:88:46: 06:c3:04:bd:be:ff:08:24:22:88:b3:07:65:16:a0: 75:4b:ae:2a:dc:20:1c:f4:03:21:9e:e9:3c:26:b1: 93:ae:ab:25:a3:95:9a:ea:ee:37:a3:f0:73:e4:b4: 16:76:d0:37:b7:b9:e6:33:cb:e5:1d:8e:bf:95:92: 8a:74:9a:d0:0b:fa:38:3e:50:27:fe:89:be:5d:d2: a6:47:28:6a:0b:ce:cf:48:6a:a5:f5:c5:b6:9e:d5: ef:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:72:DF:4A:08:11:7C:24:0A:AB:17:CF:E7:E5:1E:5D:BD:34:23:B8 X509v3 Authority Key Identifier: keyid:A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/8HLfSggRfCQKqxfP5-UeXb00I7g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.202.124.0/22 IPv6: 2001:67c:740::/48 Signature Algorithm: sha256WithRSAEncryption 0b:ae:5d:ab:47:9b:96:ad:24:fb:76:2c:ae:94:92:86:ce:ce: bf:5a:ad:62:d0:73:bf:c7:80:43:51:9d:de:c6:e7:fd:2d:6a: d4:e7:69:65:c6:ef:ba:97:60:fb:18:1f:59:22:20:7e:65:97: fe:2b:8c:34:5d:9d:84:57:73:93:cb:fa:b1:9d:44:3b:63:be: bf:23:75:f8:0e:b0:b8:7b:5a:6f:16:6e:f5:3e:57:f7:da:a0: 56:9b:ae:f6:b1:11:7d:1a:18:61:ec:dc:8b:ae:68:c6:fc:a7: 20:69:13:77:7b:77:10:c9:b5:e3:52:76:6c:0a:8b:ae:9f:f9: 59:b1:f9:97:c3:99:bd:5e:d6:42:07:1d:12:2f:85:d8:4e:76: 71:fe:c1:12:4d:13:f8:d5:37:f0:7c:9e:4d:fe:30:03:df:8a: 46:b5:0c:19:3e:a9:5b:bd:16:e7:53:5d:ad:c0:20:6f:37:4b: 6e:f9:47:ce:94:69:4e:bb:97:08:35:b5:db:2b:d1:be:cf:66: d6:11:cf:23:34:50:61:e2:27:c5:9e:2b:3e:cc:d3:ba:3b:36: f4:e7:d0:db:fa:b8:b0:ae:5d:0e:5f:80:c1:47:23:a1:89:55: 8f:a5:47:fa:f3:c1:64:aa:fa:ea:c2:57:2e:78:27:8c:af:90: 74:d2:44:cb -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/8Vcwxu6U0lon7A+wKL+XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NzcyMGM3ZGMxZGMzZWRkMWQwZDQ3ZjkyM2JjZDgzM2Yw NmFmMzYwHhcNMjYwMTAyMTgyMTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDcyZGY0YTA4MTE3YzI0MGFhYjE3Y2ZlN2U1MWU1ZGJkMzQyM2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+lz30d7rp2wtfu4gn0x/m2pBduM jwGfnciyZc1qPWAN3kZnKDxJYUkIXo1n4QuXDyTolMhEJQWLMTIjmIUq6Xq1WK+c 21HLn/NIQoFK8xcsjpuLhZuX+S7DWRYOxjOENGO+n4imj2bCax/1bp9U9yrqJ3ST VsJxr74XCIDBOIaBUNfbQwi+gW3Y43TYCrO0Fv+Wr8HPAkPjXMJZRnMR9ZB1iEYG wwS9vv8IJCKIswdlFqB1S64q3CAc9AMhnuk8JrGTrqslo5Wa6u43o/Bz5LQWdtA3 t7nmM8vlHY6/lZKKdJrQC/o4PlAn/om+XdKmRyhqC87PSGql9cW2ntXvQwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFPBy30oIEXwkCqsXz+flHl29NCO4MB8GA1UdIwQY MBaAFKd3IMfcHcPt0dDUf5I7zYM/Bq82MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDNjZ3g5d2R3LTNSME5SX2tqdk5nejhHcnpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iYTcyMTktYWQ3Yy00OGIwLTljOTYt MTcyMjhjZWYwMDQ5LzEvOEhMZlNnZ1JmQ1FLcXhmUDUtVWVYYjAwSTdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9iYTcyMTktYWQ3Yy00OGIwLTljOTYtMTcyMjhjZWYwMDQ5 LzEvcDNjZ3g5d2R3LTNSME5SX2tqdk5nejhHcnpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCW8p8MA8E AgACMAkDBwAgAQZ8B0AwDQYJKoZIhvcNAQELBQADggEBAAuuXatHm5atJPt2LK6U kobOzr9arWLQc7/HgENRnd7G5/0tatTnaWXG77qXYPsYH1kiIH5ll/4rjDRdnYRX c5PL+rGdRDtjvr8jdfgOsLh7Wm8WbvU+V/faoFabrvaxEX0aGGHs3IuuaMb8pyBp E3d7dxDJteNSdmwKi66f+Vmx+ZfDmb1e1kIHHRIvhdhOdnH+wRJNE/jVN/B8nk3+ MAPfika1DBk+qVu9FudTXa3AIG83S275R86UaU67lwg1tdsr0b7PZtYRzyM0UGHi J8WeKz7M07o7NvTn0Nv6uLCuXQ5fgMFHI6GJVY+lR/rzwWSq+urCVy54J4yvkHTS RMs= -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:58 2026 by rpki-client