This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/8F-O76TUkmlsiOgCnmM_6nJTd4g.roa File: 8F-O76TUkmlsiOgCnmM_6nJTd4g.roa (raw, json) Hash identifier: Jg+vMGJ/IvxZ8SnVP3JTyVdc1ply2v1uAg9EFIKmJK4= Subject key identifier: F0:5F:8E:EF:A4:D4:92:69:6C:88:E8:02:9E:63:3F:EA:72:53:77:88 Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d Certificate serial: 019B7F1603B8AEBF3F39D2126B2437116CE8 Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/8F-O76TUkmlsiOgCnmM_6nJTd4g.roa Signing time: Fri 02 Jan 2026 14:21:47 +0000 ROA not before: Fri 02 Jan 2026 14:21:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50115 IP address blocks: 195.64.232.0/22 maxlen: 22 195.64.240.0/22 maxlen: 23 195.64.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:16:03:b8:ae:bf:3f:39:d2:12:6b:24:37:11:6c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d Validity Not Before: Jan 2 14:21:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f05f8eefa4d492696c88e8029e633fea72537788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:68:4c:d0:c5:ea:dc:ce:8d:c5:bc:a0:25:9f: 3e:9d:69:26:ff:fd:07:3a:0a:10:bc:b6:2f:39:6e: 16:02:39:35:c0:c6:ba:a0:d7:f4:44:7b:30:15:51: 62:3e:30:ca:6c:47:c7:76:58:7a:64:f0:0b:92:72: 05:22:68:e6:d7:b7:ba:21:f6:f5:04:6f:59:06:ca: 10:06:b2:10:8c:5c:8c:2f:6c:56:da:d5:ec:ea:e7: a9:e1:55:6b:98:ad:8e:a9:63:d9:d0:f9:39:42:85: 77:cf:84:53:3e:df:ae:97:c0:3f:80:a6:be:1b:36: aa:ff:37:2a:5e:4f:18:e7:4a:b0:cd:19:ec:da:13: 85:f2:44:5e:e4:58:15:15:44:d0:67:2c:9a:bd:37: 31:21:62:5a:5e:0f:c5:48:94:41:00:ab:f5:31:e1: 7f:68:f7:2e:c7:aa:db:16:b3:95:f4:71:4c:02:e0: 8c:33:13:4c:04:60:34:ea:fc:31:66:55:75:d8:e0: 5b:45:72:83:f7:b5:92:34:02:5d:c0:a7:6f:f5:28: b5:5f:d2:f2:fb:c5:6c:37:4f:3c:de:da:82:8c:6d: b3:03:c3:5d:7e:c9:59:08:66:5d:ff:44:7f:9b:36: 96:ac:5b:ca:ad:e5:c5:f5:df:64:50:4c:75:2f:57: fd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:5F:8E:EF:A4:D4:92:69:6C:88:E8:02:9E:63:3F:EA:72:53:77:88 X509v3 Authority Key Identifier: keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/8F-O76TUkmlsiOgCnmM_6nJTd4g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.64.232.0/22 195.64.240.0/22 195.64.253.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:05:72:b8:ba:a9:2b:78:f5:29:0c:69:62:39:4b:ca:0e:1e: 67:a4:ce:a3:8b:b3:b2:c6:46:eb:94:ae:65:c8:2d:04:fd:0f: db:1b:5c:21:bd:9f:2e:4d:f4:d3:70:a7:bd:05:67:7c:6a:d6: 15:ab:9c:13:db:71:c0:8d:2f:c6:85:89:1e:e0:31:54:81:f1: 79:61:f6:6c:e7:0f:7d:0b:89:a5:d4:7f:0b:d5:53:e8:52:11: 6b:2a:9c:fd:5a:c7:0d:60:c3:07:e7:a3:65:d0:86:03:16:d5: 9d:e4:c1:1a:71:7d:bc:b0:3b:70:ec:b2:71:60:96:50:bb:fd: d1:2e:90:0c:4f:be:0c:ce:7e:11:6e:58:10:a1:60:d9:c1:65: 60:b6:33:16:98:f2:c2:0a:aa:dd:84:1c:f9:7f:e7:de:6d:af: 8f:40:49:3e:c4:5d:0a:91:9f:e2:f6:9c:7b:86:a4:4c:6c:94: 53:27:06:a2:e9:5a:55:7b:ef:ab:49:48:40:69:81:f4:5a:b3: 73:1e:be:34:3c:ba:f1:42:63:e0:65:2f:9a:2d:00:aa:9a:2e: 38:85:50:9c:dd:ca:39:59:f2:91:07:94:a7:c9:56:aa:88:ed: 73:5e:94:cb:dd:b1:a8:4b:62:ee:78:25:e2:5c:d5:cd:64:23: a7:13:30:57 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FgO4rr8/OdISayQ3EWzoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZmE0OGY0MGJjODQ1NDBjNDZiZDIzYmU5YjkwODk3YWEx ODRmNGQwHhcNMjYwMTAyMTQyMTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDVmOGVlZmE0ZDQ5MjY5NmM4OGU4MDI5ZTYzM2ZlYTcyNTM3Nzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2hM0MXq3M6NxbygJZ8+nWkm//0H OgoQvLYvOW4WAjk1wMa6oNf0RHswFVFiPjDKbEfHdlh6ZPALknIFImjm17e6Ifb1 BG9ZBsoQBrIQjFyML2xW2tXs6uep4VVrmK2OqWPZ0Pk5QoV3z4RTPt+ul8A/gKa+ Gzaq/zcqXk8Y50qwzRns2hOF8kRe5FgVFUTQZyyavTcxIWJaXg/FSJRBAKv1MeF/ aPcux6rbFrOV9HFMAuCMMxNMBGA06vwxZlV12OBbRXKD97WSNAJdwKdv9Si1X9Ly +8VsN0883tqCjG2zA8NdfslZCGZd/0R/mzaWrFvKreXF9d9kUEx1L1f9BQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPBfju+k1JJpbIjoAp5jP+pyU3eIMB8GA1UdIwQY MBaAFIH6SPQLyEVAxGvSO+m5CJeqGE9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEt OGU5M2NiNWM1MzU1LzEvOEYtTzc2VFVrbWxzaU9nQ25tTV82bkpUZDRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEtOGU5M2NiNWM1MzU1 LzEvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCw0DoAwQC w0DwAwQAw0D9MA0GCSqGSIb3DQEBCwUAA4IBAQANBXK4uqkrePUpDGliOUvKDh5n pM6ji7OyxkbrlK5lyC0E/Q/bG1whvZ8uTfTTcKe9BWd8atYVq5wT23HAjS/GhYke 4DFUgfF5YfZs5w99C4ml1H8L1VPoUhFrKpz9WscNYMMH56Nl0IYDFtWd5MEacX28 sDtw7LJxYJZQu/3RLpAMT74Mzn4RblgQoWDZwWVgtjMWmPLCCqrdhBz5f+feba+P QEk+xF0KkZ/i9px7hqRMbJRTJwai6VpVe++rSUhAaYH0WrNzHr40PLrxQmPgZS+a LQCqmi44hVCc3co5WfKRB5SnyVaqiO1zXpTL3bGoS2LueCXiXNXNZCOnEzBX -----END CERTIFICATE-----Generated at Tue Feb 10 04:16:02 2026 by rpki-client