This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/P8lLsIJFaz5OtjjsvyeSFKNA-G0.roa File: P8lLsIJFaz5OtjjsvyeSFKNA-G0.roa (raw, json) Hash identifier: pK1WHbm9edlGMAEyCeOYN0vXHVxBHzJs1SGDL7Mo6QQ= Subject key identifier: 3F:C9:4B:B0:82:45:6B:3E:4E:B6:38:EC:BF:27:92:14:A3:40:F8:6D Certificate issuer: /CN=038af86795417a3584d616375209a72efee2462b Certificate serial: 019B7BA50A9A8CFFB66D69E768C328D38587 Authority key identifier: 03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/P8lLsIJFaz5OtjjsvyeSFKNA-G0.roa Signing time: Thu 01 Jan 2026 22:19:32 +0000 ROA not before: Thu 01 Jan 2026 22:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2856 IP address blocks: 91.142.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 07:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:0a:9a:8c:ff:b6:6d:69:e7:68:c3:28:d3:85:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=038af86795417a3584d616375209a72efee2462b Validity Not Before: Jan 1 22:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fc94bb082456b3e4eb638ecbf279214a340f86d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ee:c6:e3:78:e4:9a:12:d6:b4:3b:90:98:53: 86:f1:03:62:f8:29:a1:26:64:19:0f:4f:93:25:4e: 61:0d:b7:70:58:e0:a9:b4:9a:5e:28:fc:81:ce:05: 8c:68:aa:2f:68:eb:18:f4:1e:2f:3f:3f:c1:cb:61: aa:9c:e0:ad:21:c7:27:3c:93:97:8b:dd:df:f3:2e: c9:9a:51:18:8f:41:33:a8:da:82:15:0b:ac:99:6f: b2:ad:18:a8:f3:68:25:48:f0:bc:ae:58:c0:74:74: 19:36:69:c8:91:a8:aa:6f:45:c0:7c:18:e2:f7:4d: 59:d8:05:2c:4c:de:79:f6:0e:fd:b2:58:39:fb:1c: be:50:36:0f:1f:7d:b2:25:c1:3e:3e:25:6a:b3:bd: bd:e9:73:6f:7d:33:cb:01:93:f1:31:7d:c0:a6:c1: 03:0d:b8:8b:47:51:37:7e:b1:52:af:95:67:b5:72: e6:10:96:16:37:ad:95:d2:a1:16:ba:e2:a4:4f:46: 33:2e:e7:ea:48:c7:c4:52:b5:2d:08:67:2f:75:57: 28:5e:5b:c3:64:c9:70:3f:8b:42:41:f4:4d:fc:a8: 35:f8:5f:c6:5f:dd:05:be:09:50:5a:d7:ae:da:48: bf:20:40:dc:31:b3:62:8a:1c:a9:7d:15:a5:f6:6f: b7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C9:4B:B0:82:45:6B:3E:4E:B6:38:EC:BF:27:92:14:A3:40:F8:6D X509v3 Authority Key Identifier: keyid:03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/P8lLsIJFaz5OtjjsvyeSFKNA-G0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.142.128.0/24 Signature Algorithm: sha256WithRSAEncryption 11:b2:46:a0:62:a6:ae:a9:bd:a6:24:29:03:23:2f:3f:aa:9b: 0e:a6:45:42:d9:11:26:73:b9:53:f1:29:1b:d9:ff:1b:d1:bf: d4:dc:6d:b8:5c:dc:f5:8e:76:7e:a5:ae:18:11:27:31:c5:e9: 07:0d:ec:a5:c0:ba:97:b8:8b:b9:00:22:07:a8:4a:ed:0d:2b: c9:ed:74:20:68:97:dc:57:20:43:59:63:df:ca:5d:50:cd:4a: e5:46:3c:fb:2e:d8:55:59:a9:9b:36:2f:6a:09:bf:80:f3:7e: ec:b8:a1:b7:03:b1:ad:2c:dd:81:6b:f9:e4:95:be:aa:3e:5d: de:a0:d4:dc:73:17:b0:7e:51:5e:ca:e3:51:3e:ba:fb:50:10: 7f:6d:1d:26:7b:c8:db:a1:ab:90:5a:25:47:4c:8f:77:33:2b: b7:9f:c1:36:8d:a9:76:d9:e7:38:59:f3:aa:9c:97:fd:1d:6c: 92:69:a3:3a:67:09:53:59:d0:48:0b:30:45:ba:fb:cc:44:e9: 2b:3d:35:84:79:15:c8:5c:8b:1e:95:7d:97:98:3f:2c:ba:04: 91:35:bb:26:70:4e:cc:3a:8c:34:7c:ed:cd:4c:90:98:30:a6: 1a:8c:55:a8:03:15:eb:df:84:93:9d:f7:65:77:63:fa:9b:c1: f2:7d:65:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pQqajP+2bWnnaMMo04WHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzOGFmODY3OTU0MTdhMzU4NGQ2MTYzNzUyMDlhNzJlZmVl MjQ2MmIwHhcNMjYwMTAxMjIxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmM5NGJiMDgyNDU2YjNlNGViNjM4ZWNiZjI3OTIxNGEzNDBmODZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6O7G43jkmhLWtDuQmFOG8QNi+Cmh JmQZD0+TJU5hDbdwWOCptJpeKPyBzgWMaKovaOsY9B4vPz/By2GqnOCtIccnPJOX i93f8y7JmlEYj0EzqNqCFQusmW+yrRio82glSPC8rljAdHQZNmnIkaiqb0XAfBji 901Z2AUsTN559g79slg5+xy+UDYPH32yJcE+PiVqs7296XNvfTPLAZPxMX3ApsED DbiLR1E3frFSr5VntXLmEJYWN62V0qEWuuKkT0YzLufqSMfEUrUtCGcvdVcoXlvD ZMlwP4tCQfRN/Kg1+F/GX90FvglQWteu2ki/IEDcMbNiihypfRWl9m+35QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD/JS7CCRWs+TrY47L8nkhSjQPhtMB8GA1UdIwQY MBaAFAOK+GeVQXo1hNYWN1IJpy7+4kYrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTRyNFo1VkJlaldFMWhZM1VnbW5MdjdpUmlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81N2U0MTktNDJmNC00ZDhjLWI2YjQt NDMxZjI3YTYyZWQ4LzEvUDhsTHNJSkZhejVPdGpqc3Z5ZVNGS05BLUcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi81N2U0MTktNDJmNC00ZDhjLWI2YjQtNDMxZjI3YTYyZWQ4 LzEvQTRyNFo1VkJlaldFMWhZM1VnbW5MdjdpUmlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW46AMA0G CSqGSIb3DQEBCwUAA4IBAQARskagYqauqb2mJCkDIy8/qpsOpkVC2REmc7lT8Skb 2f8b0b/U3G24XNz1jnZ+pa4YEScxxekHDeylwLqXuIu5ACIHqErtDSvJ7XQgaJfc VyBDWWPfyl1QzUrlRjz7LthVWambNi9qCb+A837suKG3A7GtLN2Ba/nklb6qPl3e oNTccxewflFeyuNRPrr7UBB/bR0me8jboauQWiVHTI93Myu3n8E2jal22ec4WfOq nJf9HWySaaM6ZwlTWdBICzBFuvvMROkrPTWEeRXIXIselX2XmD8sugSRNbsmcE7M Oow0fO3NTJCYMKYajFWoAxXr34STnfdld2P6m8HyfWWU -----END CERTIFICATE-----Generated at Thu Jan 8 17:35:01 2026 by rpki-client