This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/8tE1XoXALCHY82O8b8qmwszNbGs.roa File: 8tE1XoXALCHY82O8b8qmwszNbGs.roa (raw, json) Hash identifier: Wenx4p8ARt+i0JB3aRNXys0FukN+g6qNblR6qJZ7KAY= Subject key identifier: F2:D1:35:5E:85:C0:2C:21:D8:F3:63:BC:6F:CA:A6:C2:CC:CD:6C:6B Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Certificate serial: 019B7E38B9A7DFAB1BE74D0E03C482838B05 Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/8tE1XoXALCHY82O8b8qmwszNbGs.roa Signing time: Fri 02 Jan 2026 10:20:05 +0000 ROA not before: Fri 02 Jan 2026 10:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211192 IP address blocks: 62.171.249.0/24 maxlen: 24 62.171.250.0/24 maxlen: 24 217.180.39.0/24 maxlen: 24 217.180.56.0/24 maxlen: 24 217.180.62.0/24 maxlen: 24 217.180.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 16:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b9:a7:df:ab:1b:e7:4d:0e:03:c4:82:83:8b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Validity Not Before: Jan 2 10:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2d1355e85c02c21d8f363bc6fcaa6c2cccd6c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2d:c9:fc:b1:40:83:c5:37:65:88:f5:69:eb: cd:61:2a:63:27:cb:86:ed:58:29:46:c9:6b:c9:06: ec:bf:e2:7c:a0:ae:9a:d3:43:14:b1:74:5e:9a:0a: 61:6f:c0:ab:4d:e4:36:58:c4:20:76:e7:b1:df:dd: ae:e7:79:8c:65:10:51:79:77:00:70:47:3e:75:8d: e2:b4:ad:a9:b4:3d:58:56:7e:8f:37:30:47:1c:b2: a4:c8:d5:73:1a:3f:22:c9:2e:1a:b4:ef:e8:c0:9d: f3:ca:cd:e2:84:da:46:a6:44:45:cf:b0:45:61:6f: 6a:cd:47:d8:36:7b:3e:9d:35:94:eb:8e:25:90:b2: 59:02:c4:1d:7a:00:1f:51:6a:03:87:5f:a5:f9:73: 6f:94:0c:d2:10:27:ce:d9:d7:d8:d2:fd:50:b0:44: be:18:54:14:28:56:91:1d:2d:5c:31:11:af:80:78: 5b:99:64:3c:78:93:4f:b0:4d:a0:e1:5a:4b:7d:29: 72:5f:f8:7a:bb:c2:92:d4:cf:66:38:8d:d5:67:66: 25:e6:63:75:2a:a7:6b:ce:28:a1:4a:3c:d0:84:55: 74:72:4e:8b:e4:f1:41:2f:b9:66:fc:0c:6c:c8:da: 37:bd:97:3c:0f:dd:91:92:b3:40:2b:27:76:33:be: 80:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D1:35:5E:85:C0:2C:21:D8:F3:63:BC:6F:CA:A6:C2:CC:CD:6C:6B X509v3 Authority Key Identifier: keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/8tE1XoXALCHY82O8b8qmwszNbGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.171.249.0-62.171.250.255 217.180.39.0/24 217.180.56.0/24 217.180.62.0/23 Signature Algorithm: sha256WithRSAEncryption 04:c5:60:25:87:db:43:52:4f:68:8e:14:32:ba:46:5b:d5:92: a1:26:93:ef:49:46:c1:4a:da:0a:cc:da:fb:2a:2d:15:06:f1: fe:d9:a4:4b:a2:d0:95:84:35:4e:bd:a2:7d:a2:c3:f6:c9:6c: 26:7f:d3:43:59:d9:2e:3b:fd:6b:6b:15:24:20:8e:2e:47:5e: 1f:83:01:ab:80:44:52:21:21:b9:7f:17:9c:64:33:9e:fb:e9: 85:53:de:80:5c:c4:98:00:4a:2d:8a:52:57:1c:7d:0d:ab:89: e1:60:d8:af:a4:d3:92:16:12:05:0a:19:37:28:6e:df:fb:3f: 84:d4:e0:c7:70:72:4d:17:b2:4b:8b:18:d5:17:1d:83:17:b8: 9a:97:db:47:7e:86:4e:89:f8:0b:3e:d5:ca:71:69:75:af:ea: 22:ba:6c:d9:9f:ea:c6:0f:60:c3:58:92:99:a8:15:a7:07:5b: ad:2d:77:10:f1:5b:ee:38:34:08:48:aa:9e:5f:9f:de:85:78: d4:e3:ba:3f:55:2f:c6:90:8a:1c:8f:7e:1a:ed:4a:49:5a:47: 42:76:a9:0d:08:3b:10:94:40:d2:1f:c5:c9:d6:0f:0a:91:20: 85:ae:eb:15:1b:59:9c:6b:2f:6d:10:4c:2f:6a:94:3d:3c:88: 3a:f9:66:c0 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt+OLmn36sb500OA8SCg4sFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy ZGE3NGQwHhcNMjYwMTAyMTAyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmQxMzU1ZTg1YzAyYzIxZDhmMzYzYmM2ZmNhYTZjMmNjY2Q2YzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC3J/LFAg8U3ZYj1aevNYSpjJ8uG 7VgpRslryQbsv+J8oK6a00MUsXRemgphb8CrTeQ2WMQgduex392u53mMZRBReXcA cEc+dY3itK2ptD1YVn6PNzBHHLKkyNVzGj8iyS4atO/owJ3zys3ihNpGpkRFz7BF YW9qzUfYNns+nTWU644lkLJZAsQdegAfUWoDh1+l+XNvlAzSECfO2dfY0v1QsES+ GFQUKFaRHS1cMRGvgHhbmWQ8eJNPsE2g4VpLfSlyX/h6u8KS1M9mOI3VZ2Yl5mN1 KqdrziihSjzQhFV0ck6L5PFBL7lm/AxsyNo3vZc8D92RkrNAKyd2M76AEwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFPLRNV6FwCwh2PNjvG/KpsLMzWxrMB8GA1UdIwQY MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt YzE5OTQyNzM3ZTZkLzEvOHRFMVhvWEFMQ0hZODJPOGI4cW13c3pOYkdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAA+q/kD BAA+q/oDBADZtCcDBADZtDgDBAHZtD4wDQYJKoZIhvcNAQELBQADggEBAATFYCWH 20NST2iOFDK6RlvVkqEmk+9JRsFK2grM2vsqLRUG8f7ZpEui0JWENU69on2iw/bJ bCZ/00NZ2S47/WtrFSQgji5HXh+DAauARFIhIbl/F5xkM5776YVT3oBcxJgASi2K UlccfQ2rieFg2K+k05IWEgUKGTcobt/7P4TU4Mdwck0XskuLGNUXHYMXuJqX20d+ hk6J+As+1cpxaXWv6iK6bNmf6sYPYMNYkpmoFacHW60tdxDxW+44NAhIqp5fn96F eNTjuj9VL8aQihyPfhrtSklaR0J2qQ0IOxCUQNIfxcnWDwqRIIWu6xUbWZxrL20Q TC9qlD08iDr5ZsA= -----END CERTIFICATE-----Generated at Tue Jan 13 21:12:04 2026 by rpki-client