This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/8OnV91N_zqcbSEf40E1ouE7GeJs.roa File: 8OnV91N_zqcbSEf40E1ouE7GeJs.roa (raw, json) Hash identifier: m6ppgYlMTCPYh8z67jY4eoshyn8bp37m9v5Ohrm1dI0= Subject key identifier: F0:E9:D5:F7:53:7F:CE:A7:1B:48:47:F8:D0:4D:68:B8:4E:C6:78:9B Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 019B7CEE3D70E82406E2ADBA1876E6C65513 Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/8OnV91N_zqcbSEf40E1ouE7GeJs.roa Signing time: Fri 02 Jan 2026 04:19:06 +0000 ROA not before: Fri 02 Jan 2026 04:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152179 IP address blocks: 149.126.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:3d:70:e8:24:06:e2:ad:ba:18:76:e6:c6:55:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: Jan 2 04:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0e9d5f7537fcea71b4847f8d04d68b84ec6789b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:89:a0:d6:75:fd:04:20:8d:91:78:74:71:56: 4b:0c:80:7f:80:07:cf:06:f4:e7:be:db:f9:b5:08: c7:38:29:95:75:70:fb:80:9d:ae:6a:62:f7:9b:40: 53:1e:10:f1:e6:0f:07:68:ec:f2:fa:04:08:fc:19: 50:75:c8:b5:4d:27:60:3d:20:7b:90:62:89:d6:b9: 84:3c:7a:ad:2f:17:85:03:a6:a8:84:10:cb:85:3b: d6:77:6c:2d:5d:1a:31:3c:67:2b:c8:3a:44:07:3e: 34:30:44:e2:f5:2a:93:03:b8:bd:96:5c:ab:02:f2: b4:c2:a5:a5:5e:5b:b3:43:8e:14:97:f2:00:ec:4e: fc:81:d0:10:ef:73:9b:04:54:28:80:45:5b:48:7a: 8d:b2:85:26:37:70:60:bb:8b:0e:fd:4a:62:d5:dd: f5:37:1b:cb:a9:15:6a:de:3c:8f:6a:e4:6d:1c:42: 5e:14:15:98:d4:ae:a7:4f:c9:60:d4:08:49:b8:18: f7:90:83:44:0d:3e:66:5c:44:7a:6f:82:09:a6:d7: e7:70:e3:56:d4:be:aa:a5:48:7f:77:07:2d:b7:b4: f1:ca:f5:ea:da:c1:fd:a9:cd:fe:42:42:5a:55:65: 51:20:f4:56:05:07:49:4b:f6:d8:19:6f:d9:9e:00: 8e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E9:D5:F7:53:7F:CE:A7:1B:48:47:F8:D0:4D:68:B8:4E:C6:78:9B X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/8OnV91N_zqcbSEf40E1ouE7GeJs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.126.92.0/22 Signature Algorithm: sha256WithRSAEncryption 76:ed:e3:44:3f:94:95:ba:5c:79:d9:64:ce:c5:9d:7c:b3:c5: 86:58:ce:34:64:c1:2a:dd:4f:ed:53:53:81:ff:77:32:77:24: 22:34:04:70:9f:e7:af:5e:fe:70:7f:29:5a:46:a1:bf:bb:d3: eb:cb:77:e6:0b:37:2f:69:1c:2f:e0:cd:6c:6e:88:fb:5c:e0: 91:1e:d5:74:49:1b:e0:9d:e0:51:03:70:ef:ae:37:f9:3d:f6: 0f:68:e0:cf:17:a4:7c:c2:b5:b8:cc:c8:e2:f9:52:93:56:18: 80:63:07:58:7b:73:8c:e8:ac:66:38:53:b0:64:f1:54:1c:31: ab:2b:1d:aa:a6:d0:77:30:2e:b4:27:13:d9:f4:0a:b2:f0:99: c6:6e:3b:43:30:6b:de:06:ac:7d:89:bd:07:35:56:8d:2c:f6: 10:50:42:09:33:2d:ee:69:ce:b7:60:20:c6:88:f8:c8:ea:d4: ee:1d:94:ba:99:46:4d:f6:ec:81:d2:ec:b3:15:4d:ad:de:c3: 43:ba:58:81:00:cd:83:34:40:31:75:4f:e1:b3:1b:d2:4f:a7: 2e:8d:70:22:ea:fa:59:67:dc:d5:b8:95:64:d2:36:b8:02:af: a9:22:c5:cd:3d:29:cf:25:cf:c2:11:a9:c3:e1:e7:a6:12:dc: 06:d1:1c:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87j1w6CQG4q26GHbmxlUTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjYwMTAyMDQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGU5ZDVmNzUzN2ZjZWE3MWI0ODQ3ZjhkMDRkNjhiODRlYzY3ODliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAromg1nX9BCCNkXh0cVZLDIB/gAfP BvTnvtv5tQjHOCmVdXD7gJ2uamL3m0BTHhDx5g8HaOzy+gQI/BlQdci1TSdgPSB7 kGKJ1rmEPHqtLxeFA6aohBDLhTvWd2wtXRoxPGcryDpEBz40METi9SqTA7i9llyr AvK0wqWlXluzQ44Ul/IA7E78gdAQ73ObBFQogEVbSHqNsoUmN3Bgu4sO/Upi1d31 NxvLqRVq3jyPauRtHEJeFBWY1K6nT8lg1AhJuBj3kINEDT5mXER6b4IJptfncONW 1L6qpUh/dwctt7TxyvXq2sH9qc3+QkJaVWVRIPRWBQdJS/bYGW/ZngCOcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPDp1fdTf86nG0hH+NBNaLhOxnibMB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEvOE9uVjkxTl96cWNiU0VmNDBFMW91RTdHZUpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClX5cMA0G CSqGSIb3DQEBCwUAA4IBAQB27eNEP5SVulx52WTOxZ18s8WGWM40ZMEq3U/tU1OB /3cydyQiNARwn+evXv5wfylaRqG/u9Pry3fmCzcvaRwv4M1sboj7XOCRHtV0SRvg neBRA3Dvrjf5PfYPaODPF6R8wrW4zMji+VKTVhiAYwdYe3OM6KxmOFOwZPFUHDGr Kx2qptB3MC60JxPZ9Aqy8JnGbjtDMGveBqx9ib0HNVaNLPYQUEIJMy3uac63YCDG iPjI6tTuHZS6mUZN9uyB0uyzFU2t3sNDuliBAM2DNEAxdU/hsxvST6cujXAi6vpZ Z9zVuJVk0ja4Aq+pIsXNPSnPJc/CEanD4eemEtwG0RwZ -----END CERTIFICATE-----Generated at Mon Jan 19 11:17:15 2026 by rpki-client