This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/8m9QB0xxAdt_pSiqIqhqIa4gs74.roa
File: 8m9QB0xxAdt_pSiqIqhqIa4gs74.roa (raw, json)
Hash identifier: v+nE2XaufnNZvnaDV9lRk6ql9G4VsMoO6PsRrFqD1OI=
Subject key identifier: F2:6F:50:07:4C:71:01:DB:7F:A5:28:AA:22:A8:6A:21:AE:20:B3:BE
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 019B7CEE44AE2D75ABB3B00169132687F911
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/8m9QB0xxAdt_pSiqIqhqIa4gs74.roa
Signing time: Fri 02 Jan 2026 04:19:08 +0000
ROA not before: Fri 02 Jan 2026 04:19:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400909
IP address blocks: 82.163.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:44:ae:2d:75:ab:b3:b0:01:69:13:26:87:f9:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 2 04:19:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f26f50074c7101db7fa528aa22a86a21ae20b3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:65:01:22:a8:ea:fa:f5:ed:1a:17:b6:76:06:
fb:62:d1:67:15:fd:51:49:2d:74:3b:4f:21:60:c8:
e5:74:87:02:5f:23:c1:99:5d:81:ee:1f:a4:7c:83:
f6:3e:b1:36:fc:b9:44:d6:fc:90:be:18:51:bb:ae:
ae:4f:d9:cf:83:1d:e1:60:f3:aa:de:28:f6:e9:a8:
06:65:dc:a0:5f:89:df:bb:b6:3d:b9:29:10:e2:1f:
6a:8b:eb:9c:20:81:df:24:a5:1c:d4:86:d0:81:7a:
79:87:7c:76:48:d2:a3:ae:43:02:89:ad:51:de:55:
03:76:23:e8:89:42:1a:29:4b:d8:62:97:64:8e:70:
08:ef:3b:8f:26:bc:f0:7c:57:d3:27:96:fa:40:08:
32:a5:66:26:78:18:0d:6e:0b:e9:57:8a:61:b5:9c:
9d:52:76:c5:6a:da:8f:93:4f:41:5f:c4:90:25:d2:
08:96:0c:ee:92:c9:1b:ce:95:c9:ce:dd:a0:fd:8b:
37:8e:2f:3f:28:5d:2f:9e:30:ea:d1:41:d6:e3:ca:
26:25:92:4f:18:8f:15:d6:51:04:d4:a2:c4:71:73:
1f:10:db:c1:6f:b3:c8:c5:77:fc:d9:86:65:ac:55:
f2:9a:c5:f9:12:82:dd:05:e3:1c:60:1d:e2:6b:07:
df:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6F:50:07:4C:71:01:DB:7F:A5:28:AA:22:A8:6A:21:AE:20:B3:BE
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/8m9QB0xxAdt_pSiqIqhqIa4gs74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.228.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:f1:87:6c:ec:61:83:15:5f:8e:65:8d:11:b4:ae:0d:aa:2e:
e1:9e:8b:0e:5b:a0:0f:56:28:a7:8e:69:c0:93:45:47:ca:dc:
6a:2d:18:dc:da:60:95:eb:5a:60:dc:f6:79:e3:71:6e:3c:19:
bf:07:a7:95:1b:f2:43:d4:b9:6c:e0:25:24:e8:ba:77:53:ee:
c3:20:0a:7d:ca:9b:1a:96:f3:97:a4:cd:6c:97:2a:8b:c7:7d:
ba:7b:07:a1:af:c9:6d:98:38:3f:ea:5f:f8:42:3f:22:40:6d:
cc:ec:4e:04:d0:81:d2:ee:e8:32:58:b9:50:df:41:51:84:54:
bd:15:89:46:a9:8c:c0:5b:db:8f:df:c1:b0:09:4b:6a:34:ca:
c8:f2:2a:6a:f3:b9:93:cc:60:77:cc:46:dd:42:48:99:50:5c:
9f:4e:24:50:10:fb:18:42:40:f3:aa:2d:09:ff:13:c8:b7:1c:
61:68:40:23:fb:77:03:fb:5c:85:4b:a4:bb:04:f0:dc:eb:61:
9c:88:92:8e:c5:4d:12:55:ad:ff:98:fd:a1:f8:c6:a7:6c:cc:
c1:bc:69:6b:18:4c:a5:17:8d:d6:9d:29:51:32:c4:fb:c5:be:
e5:5f:7d:5e:f6:6a:94:25:33:77:53:d2:85:c5:3f:a1:c1:13:
90:47:cb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:36:30 2026 by rpki-client