This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/8zzsJfKjMo5t7MRuHy5cbQF9RrI.roa File: 8zzsJfKjMo5t7MRuHy5cbQF9RrI.roa (raw, json) Hash identifier: PzmscW36pnChjuVOf1n9bGZmZNBLFgsBk9HPpeRO1jk= Subject key identifier: F3:3C:EC:25:F2:A3:32:8E:6D:EC:C4:6E:1F:2E:5C:6D:01:7D:46:B2 Certificate issuer: /CN=3c9219dac3584986e78b41dc9ffb622623b4ac61 Certificate serial: 019B7834C4FCBCACBA78F1BEC199A53BE1ED Authority key identifier: 3C:92:19:DA:C3:58:49:86:E7:8B:41:DC:9F:FB:62:26:23:B4:AC:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/8zzsJfKjMo5t7MRuHy5cbQF9RrI.roa Signing time: Thu 01 Jan 2026 06:18:02 +0000 ROA not before: Thu 01 Jan 2026 06:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199888 IP address blocks: 192.83.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.crl rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft rsync://rpki.ripe.net/repository/DEFAULT/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:c4:fc:bc:ac:ba:78:f1:be:c1:99:a5:3b:e1:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c9219dac3584986e78b41dc9ffb622623b4ac61 Validity Not Before: Jan 1 06:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f33cec25f2a3328e6decc46e1f2e5c6d017d46b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c1:a1:8a:69:a9:89:9b:51:6c:cb:e9:15:72: a3:e8:f6:00:ea:81:fe:7e:d2:31:0f:8e:f4:92:27: 5d:0f:05:c2:f2:13:54:93:84:10:66:33:b8:4c:d7: ab:56:2c:57:07:18:bf:a8:ba:26:d7:6c:c0:a5:02: 30:9d:60:98:d3:5f:88:18:89:48:ef:ee:5d:6d:c6: ba:be:37:2a:7a:12:6b:42:6d:3d:c2:49:91:be:16: a9:6c:b6:0d:52:97:36:64:0a:d7:d6:40:21:0d:5f: ee:68:5a:db:19:e7:a0:0a:39:70:33:d3:bc:20:4e: 2a:49:b4:89:d5:e1:3a:a5:f0:2a:5d:13:fb:b9:fc: ac:7d:b5:40:8b:b7:0e:93:9c:8a:c3:2f:75:54:e4: e1:cc:a7:02:5d:81:2e:12:fc:c0:23:a4:ae:1c:5d: 0c:be:d5:73:c1:38:9b:74:62:d3:2a:9f:a3:36:24: 89:8f:8b:ce:bb:37:83:8e:90:2e:84:a3:d0:b8:54: 68:ac:46:e7:8e:38:5f:e8:14:1c:8c:7e:3f:0c:38: cc:f7:a9:93:ae:3e:5c:5e:c5:96:0f:f8:0c:89:55: d8:ae:4c:c8:a7:76:22:a4:7b:b5:34:bc:57:cd:8c: be:d5:46:8d:14:68:59:d3:14:02:d6:3d:6a:96:43: b3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3C:EC:25:F2:A3:32:8E:6D:EC:C4:6E:1F:2E:5C:6D:01:7D:46:B2 X509v3 Authority Key Identifier: keyid:3C:92:19:DA:C3:58:49:86:E7:8B:41:DC:9F:FB:62:26:23:B4:AC:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/8zzsJfKjMo5t7MRuHy5cbQF9RrI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.83.165.0/24 Signature Algorithm: sha256WithRSAEncryption 44:d2:29:bb:d4:65:80:36:cb:22:26:37:fd:5c:b8:59:55:48: e3:80:ea:8b:76:2c:3c:eb:04:f0:70:4c:af:60:85:fb:55:1f: 37:5b:37:cf:01:9b:f9:29:7c:0a:40:59:e6:50:a1:e6:bb:6d: 47:bd:1d:49:78:cc:44:9b:3f:1f:b2:bb:85:a2:3a:21:97:cc: 93:c8:21:35:cb:0e:bb:0a:0f:53:06:44:5a:71:ad:94:33:9a: e1:7b:c0:d9:c5:b6:37:bc:5b:46:fe:a5:9b:d9:c6:2c:bd:e1: 99:25:d0:13:c6:2f:2c:9b:07:eb:e4:b0:c9:e8:7a:b5:37:e1: 9a:e6:3d:34:c7:6e:5b:2f:77:03:01:ac:f3:cc:ac:b4:ad:ff: 44:29:98:e0:88:54:02:7a:f8:03:6a:e3:36:fe:25:96:bf:78: 50:67:9a:52:7a:79:0a:cf:7f:4e:7f:5b:e8:a7:43:68:21:5d: cd:84:52:31:62:07:47:09:19:0a:12:db:73:85:44:57:ee:03: 77:4d:e8:2f:40:49:bd:2b:ed:38:9b:53:da:b2:39:6d:9d:ac: ab:42:3e:65:c7:d9:2a:1b:e3:83:11:bc:fc:5c:2a:58:b1:80: d8:36:74:c6:7f:fc:2c:a3:b4:a8:a8:1c:27:09:98:ca:06:be: 82:f7:f2:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NMT8vKy6ePG+wZmlO+HtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjOTIxOWRhYzM1ODQ5ODZlNzhiNDFkYzlmZmI2MjI2MjNi NGFjNjEwHhcNMjYwMTAxMDYxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzNjZWMyNWYyYTMzMjhlNmRlY2M0NmUxZjJlNWM2ZDAxN2Q0NmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcGhimmpiZtRbMvpFXKj6PYA6oH+ ftIxD470kiddDwXC8hNUk4QQZjO4TNerVixXBxi/qLom12zApQIwnWCY01+IGIlI 7+5dbca6vjcqehJrQm09wkmRvhapbLYNUpc2ZArX1kAhDV/uaFrbGeegCjlwM9O8 IE4qSbSJ1eE6pfAqXRP7ufysfbVAi7cOk5yKwy91VOThzKcCXYEuEvzAI6SuHF0M vtVzwTibdGLTKp+jNiSJj4vOuzeDjpAuhKPQuFRorEbnjjhf6BQcjH4/DDjM96mT rj5cXsWWD/gMiVXYrkzIp3YipHu1NLxXzYy+1UaNFGhZ0xQC1j1qlkOzHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPM87CXyozKObezEbh8uXG0BfUayMB8GA1UdIwQY MBaAFDySGdrDWEmG54tB3J/7YiYjtKxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEpJWjJzTllTWWJuaTBIY25fdGlKaU8wckdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iMGQxZDItODQyYy00ZDA1LWE2MjMt YjUwYzJmMmU0NzA0LzEvOHp6c0pmS2pNbzV0N01SdUh5NWNiUUY5UnJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9iMGQxZDItODQyYy00ZDA1LWE2MjMtYjUwYzJmMmU0NzA0 LzEvUEpJWjJzTllTWWJuaTBIY25fdGlKaU8wckdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFOlMA0G CSqGSIb3DQEBCwUAA4IBAQBE0im71GWANssiJjf9XLhZVUjjgOqLdiw86wTwcEyv YIX7VR83WzfPAZv5KXwKQFnmUKHmu21HvR1JeMxEmz8fsruFojohl8yTyCE1yw67 Cg9TBkRaca2UM5rhe8DZxbY3vFtG/qWb2cYsveGZJdATxi8smwfr5LDJ6Hq1N+Ga 5j00x25bL3cDAazzzKy0rf9EKZjgiFQCevgDauM2/iWWv3hQZ5pSenkKz39Of1vo p0NoIV3NhFIxYgdHCRkKEttzhURX7gN3TegvQEm9K+04m1PasjltnayrQj5lx9kq G+ODEbz8XCpYsYDYNnTGf/wso7SoqBwnCZjKBr6C9/If -----END CERTIFICATE-----Generated at Tue Feb 10 07:29:11 2026 by rpki-client