This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/8Zfz2__LOu7ePxal8cv-bKS2h6U.roa File: 8Zfz2__LOu7ePxal8cv-bKS2h6U.roa (raw, json) Hash identifier: +2tAS/WTUahrAWaXWLGbsm0bJFPNFA2k1sshJOthojY= Subject key identifier: F1:97:F3:DB:FF:CB:3A:EE:DE:3F:16:A5:F1:CB:FE:6C:A4:B6:87:A5 Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Certificate serial: 019B9A51DAFAF215B794303F43B46AB20D51 Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/8Zfz2__LOu7ePxal8cv-bKS2h6U.roa Signing time: Wed 07 Jan 2026 21:16:54 +0000 ROA not before: Wed 07 Jan 2026 21:16:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20115 IP address blocks: 138.226.214.0/23 maxlen: 23 151.145.128.0/20 maxlen: 20 151.145.128.0/24 maxlen: 24 151.145.144.0/20 maxlen: 20 158.120.48.0/24 maxlen: 24 158.120.50.0/24 maxlen: 24 158.120.52.0/24 maxlen: 24 158.120.54.0/24 maxlen: 24 158.120.56.0/24 maxlen: 24 158.120.58.0/24 maxlen: 24 158.120.60.0/24 maxlen: 24 158.120.62.0/24 maxlen: 24 170.100.148.0/22 maxlen: 22 170.100.204.0/24 maxlen: 24 170.100.206.0/23 maxlen: 23 192.6.64.0/22 maxlen: 22 192.6.172.0/22 maxlen: 22 192.6.252.0/22 maxlen: 22 192.25.180.0/22 maxlen: 22 192.25.200.0/22 maxlen: 22 192.25.208.0/22 maxlen: 22 192.25.232.0/22 maxlen: 22 192.25.244.0/22 maxlen: 22 192.137.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9a:51:da:fa:f2:15:b7:94:30:3f:43:b4:6a:b2:0d:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Validity Not Before: Jan 7 21:16:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f197f3dbffcb3aeede3f16a5f1cbfe6ca4b687a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:01:c6:9c:90:bb:68:cd:c0:24:d6:3c:0c:51: d2:12:c0:e2:80:1e:b3:51:64:0a:26:71:d6:25:35: 09:76:9a:c8:bc:93:92:9d:64:62:b2:08:0b:b0:7d: 91:80:82:b9:bf:dc:eb:17:8a:8e:4c:af:b8:bc:9c: 24:c6:3e:eb:8b:af:2b:9e:94:46:c7:6e:69:18:46: cc:42:e1:7d:45:a2:54:0d:b5:53:11:23:3d:cb:b1: cc:4c:a8:ef:d7:3b:8f:98:34:93:7d:0c:fd:23:e9: 5b:1a:0b:06:e7:64:79:55:4a:41:5c:5d:99:3c:89: 77:97:1e:56:8f:63:47:04:00:46:5f:0a:c1:32:42: 62:9e:2e:3f:8d:8c:f8:45:dc:f2:7d:22:2f:f8:ed: c1:71:eb:10:ca:0f:59:49:c6:73:46:8c:1d:d3:f6: 42:bd:8e:c5:5a:4e:69:8f:07:74:e7:ef:03:1d:ec: 91:c7:2b:a1:b0:19:f5:a2:3a:6c:34:80:89:ca:1b: c9:a8:ca:49:dd:ac:93:af:08:f1:8a:c9:c8:64:ad: 6c:d3:2b:e4:f4:d2:7a:68:3c:44:28:63:ad:ff:a7: bc:9f:46:8d:80:19:80:23:c9:d8:b4:8c:a4:ef:36: 9d:07:50:ed:4b:64:79:68:e5:92:f2:04:19:84:16: b8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:97:F3:DB:FF:CB:3A:EE:DE:3F:16:A5:F1:CB:FE:6C:A4:B6:87:A5 X509v3 Authority Key Identifier: keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/8Zfz2__LOu7ePxal8cv-bKS2h6U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.226.214.0/23 151.145.128.0/19 158.120.48.0/24 158.120.50.0/24 158.120.52.0/24 158.120.54.0/24 158.120.56.0/24 158.120.58.0/24 158.120.60.0/24 158.120.62.0/24 170.100.148.0/22 170.100.204.0/24 170.100.206.0/23 192.6.64.0/22 192.6.172.0/22 192.6.252.0/22 192.25.180.0/22 192.25.200.0/22 192.25.208.0/22 192.25.232.0/22 192.25.244.0/22 192.137.24.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:73:d6:e2:3b:a2:68:e3:d3:74:ab:46:27:1d:69:24:07:21: 8d:6a:40:1f:27:ae:60:ff:77:b8:7d:8f:3d:81:ef:56:64:97: 5f:70:c0:26:59:7f:34:6a:5b:61:90:03:b2:d8:bd:ae:8a:44: 55:00:2f:e0:92:69:9f:03:b4:7a:33:87:f8:1a:63:9a:10:d3: bc:c3:ea:e3:ac:f9:4d:23:ed:fd:85:03:24:6c:dd:0f:2c:47: 1c:e0:e7:04:80:b3:d5:48:8b:3f:e9:65:41:20:5a:8a:bd:fa: cb:94:b9:85:05:4b:21:e6:4f:9b:7e:15:f3:cc:59:41:17:31: 91:92:e6:4c:3f:a0:78:f1:6b:a1:46:dc:a0:5f:3d:64:4a:bd: ce:f6:d9:04:91:a0:88:df:af:bd:6f:52:f1:d3:e9:b0:64:b3: 42:b8:aa:1f:e9:cf:7c:96:36:1d:76:90:41:ea:74:69:fa:e8: c2:98:28:f7:ac:9e:35:87:ac:ce:03:a0:82:fb:52:21:21:db: 51:b5:ed:17:12:66:c0:d6:fa:3c:c3:9c:54:9a:51:e4:70:96: 63:6e:b2:64:06:42:a6:c5:2b:07:22:c2:91:99:8b:9b:c5:e4: 4d:c4:62:43:f1:52:75:bc:7f:5e:81:0e:f7:93:bb:10:3d:b8: 84:da:ce:30 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISAZuaUdr68hW3lDA/Q7Rqsg1RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1 ZmIwYjUwHhcNMjYwMTA3MjExNjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTk3ZjNkYmZmY2IzYWVlZGUzZjE2YTVmMWNiZmU2Y2E0YjY4N2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQHGnJC7aM3AJNY8DFHSEsDigB6z UWQKJnHWJTUJdprIvJOSnWRisggLsH2RgIK5v9zrF4qOTK+4vJwkxj7ri68rnpRG x25pGEbMQuF9RaJUDbVTESM9y7HMTKjv1zuPmDSTfQz9I+lbGgsG52R5VUpBXF2Z PIl3lx5Wj2NHBABGXwrBMkJini4/jYz4RdzyfSIv+O3BcesQyg9ZScZzRowd0/ZC vY7FWk5pjwd05+8DHeyRxyuhsBn1ojpsNICJyhvJqMpJ3ayTrwjxisnIZK1s0yvk 9NJ6aDxEKGOt/6e8n0aNgBmAI8nYtIyk7zadB1DtS2R5aOWS8gQZhBa4+QIDAQAB o4ICjDCCAogwHQYDVR0OBBYEFPGX89v/yzru3j8WpfHL/myktoelMB8GA1UdIwQY MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct NWUwZjRhYjgwOWJiLzEvOFpmejJfX0xPdTdlUHhhbDhjdi1iS1MyaDZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGhBggrBgEFBQcBBwEB/wSBkTCBjjCBiwQCAAEwgYQDBAGK 4tYDBAWXkYADBACeeDADBACeeDIDBACeeDQDBACeeDYDBACeeDgDBACeeDoDBACe eDwDBACeeD4DBAKqZJQDBACqZMwDBAGqZM4DBALABkADBALABqwDBALABvwDBALA GbQDBALAGcgDBALAGdADBALAGegDBALAGfQDBALAiRgwDQYJKoZIhvcNAQELBQAD ggEBAA5z1uI7omjj03SrRicdaSQHIY1qQB8nrmD/d7h9jz2B71Zkl19wwCZZfzRq W2GQA7LYva6KRFUAL+CSaZ8DtHozh/gaY5oQ07zD6uOs+U0j7f2FAyRs3Q8sRxzg 5wSAs9VIiz/pZUEgWoq9+suUuYUFSyHmT5t+FfPMWUEXMZGS5kw/oHjxa6FG3KBf PWRKvc722QSRoIjfr71vUvHT6bBks0K4qh/pz3yWNh12kEHqdGn66MKYKPesnjWH rM4DoIL7UiEh21G17RcSZsDW+jzDnFSaUeRwlmNusmQGQqbFKwciwpGZi5vF5E3E YkPxUnW8f16BDveTuxA9uITazjA= -----END CERTIFICATE-----Generated at Tue Jan 20 12:27:27 2026 by rpki-client