This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8Q-bTHTCctIr-yQQFQlfgAtxaiU.roa File: 8Q-bTHTCctIr-yQQFQlfgAtxaiU.roa (raw, json) Hash identifier: Gw59lM6uJssWL/dSQCD0utejSHLR+mBVXW6Q19BiVz4= Subject key identifier: F1:0F:9B:4C:74:C2:72:D2:2B:FB:24:10:15:09:5F:80:0B:71:6A:25 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019BBA150A84BA1AFE01CA95BE6E453F5BC8 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8Q-bTHTCctIr-yQQFQlfgAtxaiU.roa Signing time: Wed 14 Jan 2026 01:18:19 +0000 ROA not before: Wed 14 Jan 2026 01:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21859 IP address blocks: 212.135.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ba:15:0a:84:ba:1a:fe:01:ca:95:be:6e:45:3f:5b:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 14 01:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f10f9b4c74c272d22bfb241015095f800b716a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ae:86:61:ac:12:63:d4:bd:d4:5a:39:e0:15: 7e:0a:6b:c1:c2:42:30:c9:fb:99:6b:2d:0a:38:f8: ea:85:35:05:26:cf:c9:38:ec:54:6b:82:8a:da:45: d4:92:28:ed:c6:5c:38:89:8c:90:92:1e:2a:29:f5: 17:39:a1:84:46:d9:e4:9b:90:75:c3:02:59:10:2f: 03:18:bf:79:ca:29:73:ae:81:80:64:52:ac:d7:9b: 08:05:d5:a3:b0:72:97:9b:eb:05:87:cb:f8:98:15: d8:e2:98:ea:af:e7:fd:65:7c:9c:90:fe:03:94:7d: c3:d0:2a:b4:71:ae:82:17:05:51:0f:fc:92:41:31: 81:d3:3e:c9:73:7b:a5:3c:5c:fe:61:97:a4:9a:db: 0c:f9:0a:5f:df:46:36:86:4c:da:ff:da:2c:48:4c: 93:c0:9f:47:fa:3d:1e:c6:2b:d0:39:a1:66:7e:e6: 8a:69:2c:1c:65:2f:79:3f:c5:e8:bd:4f:87:c2:25: 90:50:88:3b:15:89:51:a8:ef:5a:d2:2e:1b:0a:b5: dd:ae:9f:fb:12:1e:3a:18:c5:49:e5:e0:d7:c4:4f: 91:ba:c5:9e:6f:40:37:cf:e7:be:0d:ea:72:f2:8d: d3:d1:41:e5:27:16:dc:e9:d1:c0:a5:a2:0d:76:40: 83:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0F:9B:4C:74:C2:72:D2:2B:FB:24:10:15:09:5F:80:0B:71:6A:25 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8Q-bTHTCctIr-yQQFQlfgAtxaiU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.135.30.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:76:40:ab:c3:cb:3f:33:f0:b0:35:c1:aa:87:11:b3:3f:c3: 2b:3c:50:bb:06:3c:90:d2:71:b3:8c:50:48:54:de:ca:31:21: 09:d5:5d:40:ab:5a:7c:12:70:92:0b:9b:6e:c5:33:42:4b:ad: 56:12:5b:6f:17:eb:68:f3:81:14:34:ee:ae:9a:f3:b0:50:23: 1a:39:fb:48:3d:4a:51:43:2e:a9:3c:5f:c0:ee:79:23:57:13: a3:dc:b7:1d:36:7a:aa:bd:09:e7:3d:78:73:0b:86:a8:e1:ef: 54:b0:b5:e9:58:f0:d8:36:31:5e:27:80:e1:15:28:9b:b2:4d: de:86:14:42:14:f2:f6:e6:08:80:b3:b0:97:44:5e:1f:51:25: 39:d0:0c:dd:d1:a7:e9:28:5c:e2:29:88:d0:b2:56:3c:3f:1e: 57:21:db:44:90:19:c9:82:35:06:5f:69:16:15:ed:4b:9a:a9: a9:0a:14:e7:40:54:81:0f:4e:58:76:7d:7d:6b:e4:48:d8:0c: b1:63:1a:3a:d1:e1:0c:60:f0:4a:4b:a1:c4:02:b3:5b:45:8a: 22:11:ba:89:5f:ff:56:39:76:25:af:a3:ab:e0:3e:66:ab:23: 06:d5:0b:e3:18:6f:e5:6d:44:56:98:ed:4d:49:93:ab:a7:7d: 71:00:c2:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu6FQqEuhr+AcqVvm5FP1vIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTE0MDExODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTBmOWI0Yzc0YzI3MmQyMmJmYjI0MTAxNTA5NWY4MDBiNzE2YTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq6GYawSY9S91Fo54BV+CmvBwkIw yfuZay0KOPjqhTUFJs/JOOxUa4KK2kXUkijtxlw4iYyQkh4qKfUXOaGERtnkm5B1 wwJZEC8DGL95yilzroGAZFKs15sIBdWjsHKXm+sFh8v4mBXY4pjqr+f9ZXyckP4D lH3D0Cq0ca6CFwVRD/ySQTGB0z7Jc3ulPFz+YZekmtsM+Qpf30Y2hkza/9osSEyT wJ9H+j0exivQOaFmfuaKaSwcZS95P8XovU+HwiWQUIg7FYlRqO9a0i4bCrXdrp/7 Eh46GMVJ5eDXxE+RusWeb0A3z+e+Depy8o3T0UHlJxbc6dHApaINdkCD/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPEPm0x0wnLSK/skEBUJX4ALcWolMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvOFEtYlRIVENjdElyLXlRUUZRbGZnQXR4YWlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IceMA0G CSqGSIb3DQEBCwUAA4IBAQA/dkCrw8s/M/CwNcGqhxGzP8MrPFC7BjyQ0nGzjFBI VN7KMSEJ1V1Aq1p8EnCSC5tuxTNCS61WEltvF+to84EUNO6umvOwUCMaOftIPUpR Qy6pPF/A7nkjVxOj3LcdNnqqvQnnPXhzC4ao4e9UsLXpWPDYNjFeJ4DhFSibsk3e hhRCFPL25giAs7CXRF4fUSU50Azd0afpKFziKYjQslY8Px5XIdtEkBnJgjUGX2kW Fe1LmqmpChTnQFSBD05Ydn19a+RI2AyxYxo60eEMYPBKS6HEArNbRYoiEbqJX/9W OXYlr6Or4D5mqyMG1QvjGG/lbURWmO1NSZOrp31xAMI0 -----END CERTIFICATE-----Generated at Mon Jan 19 08:14:50 2026 by rpki-client