This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/i8pt52CdHvj_Rp8Yque7c0hWLBg.roa File: i8pt52CdHvj_Rp8Yque7c0hWLBg.roa (raw, json) Hash identifier: 96wDehDBTPo8XlgtWaK4TTFXRGQcldGdCzKyFgH1HcQ= Subject key identifier: 8B:CA:6D:E7:60:9D:1E:F8:FF:46:9F:18:AA:E7:BB:73:48:56:2C:18 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AE061CDD119CE9A2D055152CA1349 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/i8pt52CdHvj_Rp8Yque7c0hWLBg.roa Signing time: Thu 01 Jan 2026 16:18:54 +0000 ROA not before: Thu 01 Jan 2026 16:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215269 IP address blocks: 109.176.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e0:61:cd:d1:19:ce:9a:2d:05:51:52:ca:13:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bca6de7609d1ef8ff469f18aae7bb7348562c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:79:29:fb:ff:27:cb:27:07:49:a9:06:1f:fd: c6:8e:08:1f:4f:f9:1a:59:fe:b1:de:f2:04:60:21: 5f:d8:a9:d9:87:64:62:02:bb:d9:05:b2:b9:58:f7: 77:77:2c:09:89:37:e8:84:eb:bc:ab:00:30:95:50: 37:a2:12:ef:42:74:f7:c7:09:06:2e:73:4f:3d:ff: 5e:45:79:06:2d:cc:80:a7:07:72:74:9a:1a:17:20: d9:30:aa:6f:de:d9:9e:43:4c:9d:dd:99:ad:ec:90: 9f:f0:14:68:ee:63:a3:ec:60:54:60:81:0c:23:92: b0:75:ee:2d:06:79:da:c1:9f:c6:1f:bf:ac:95:35: c5:c4:fb:53:5b:1b:1b:da:84:95:1c:a7:34:d1:31: 61:3c:27:b3:92:aa:2f:3b:52:e1:38:e1:e7:28:7a: f0:22:fa:60:b0:90:4a:5d:4b:ce:c7:8a:10:fd:a6: f3:98:e1:a7:4d:8e:ed:e4:43:17:ad:b1:45:c6:ed: 5a:f5:ab:80:ff:36:21:d0:35:c9:20:4e:96:82:24: 29:8e:15:bb:28:5a:9f:67:91:19:f6:c4:a5:21:14: f8:9e:c4:0f:e1:29:bd:a9:00:64:ba:27:48:89:ed: 54:bc:55:8f:64:8d:f7:81:82:c5:f7:7c:a7:71:ce: 97:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CA:6D:E7:60:9D:1E:F8:FF:46:9F:18:AA:E7:BB:73:48:56:2C:18 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/i8pt52CdHvj_Rp8Yque7c0hWLBg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.176.254.0/23 Signature Algorithm: sha256WithRSAEncryption 99:b7:0b:15:03:ae:6a:7a:2f:91:b2:03:7f:2d:18:35:ea:ce: 0b:22:2f:5d:01:8d:e0:9d:73:ae:e4:64:48:07:9b:61:02:e9: 15:08:25:8c:1a:53:82:0c:b1:ef:49:17:1b:19:3d:ec:6f:c8: cb:b4:99:0d:f1:41:f3:6b:bb:0a:8d:75:f9:88:e1:19:75:72: a6:e5:5a:f7:c7:fc:8a:74:86:82:e9:14:96:d9:a9:d8:02:bf: 67:f7:dc:a3:04:0d:39:56:57:29:af:19:aa:10:30:59:00:2c: d5:ce:1f:bd:3c:9c:1c:ce:53:de:22:90:6e:2e:de:e9:dc:b5: ad:a7:e5:c7:1c:69:08:dc:89:b6:e1:1b:dc:4b:51:af:db:9d: bc:bf:66:05:68:11:89:85:74:69:b3:1c:6c:1a:79:22:b5:d6: 54:15:2b:0e:dc:7d:bb:a1:02:f2:c5:95:4a:46:3c:4b:1e:82: c1:96:8a:81:13:53:4b:c1:1d:fc:45:a7:7d:47:2b:e7:19:59: 01:cb:fb:ea:9d:b5:3e:b7:88:71:af:25:be:0d:65:26:90:43: 2b:9d:ed:c0:da:22:ff:56:00:51:fb:55:25:d6:5c:76:96:7c: fa:1e:06:23:e3:dd:09:7a:3d:5d:6d:b6:44:55:1b:bc:d7:9a: 8f:36:5e:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WuBhzdEZzpotBVFSyhNJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmNhNmRlNzYwOWQxZWY4ZmY0NjlmMThhYWU3YmI3MzQ4NTYyYzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnkp+/8nyycHSakGH/3GjggfT/ka Wf6x3vIEYCFf2KnZh2RiArvZBbK5WPd3dywJiTfohOu8qwAwlVA3ohLvQnT3xwkG LnNPPf9eRXkGLcyApwdydJoaFyDZMKpv3tmeQ0yd3Zmt7JCf8BRo7mOj7GBUYIEM I5Kwde4tBnnawZ/GH7+slTXFxPtTWxsb2oSVHKc00TFhPCezkqovO1LhOOHnKHrw IvpgsJBKXUvOx4oQ/abzmOGnTY7t5EMXrbFFxu1a9auA/zYh0DXJIE6WgiQpjhW7 KFqfZ5EZ9sSlIRT4nsQP4Sm9qQBkuidIie1UvFWPZI33gYLF93yncc6XRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIvKbedgnR74/0afGKrnu3NIViwYMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvaThwdDUyQ2RIdmpfUnA4WXF1ZTdjMGhXTEJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbbD+MA0G CSqGSIb3DQEBCwUAA4IBAQCZtwsVA65qei+RsgN/LRg16s4LIi9dAY3gnXOu5GRI B5thAukVCCWMGlOCDLHvSRcbGT3sb8jLtJkN8UHza7sKjXX5iOEZdXKm5Vr3x/yK dIaC6RSW2anYAr9n99yjBA05VlcprxmqEDBZACzVzh+9PJwczlPeIpBuLt7p3LWt p+XHHGkI3Im24RvcS1Gv2528v2YFaBGJhXRpsxxsGnkitdZUFSsO3H27oQLyxZVK RjxLHoLBloqBE1NLwR38Rad9RyvnGVkBy/vqnbU+t4hxryW+DWUmkEMrne3A2iL/ VgBR+1Ul1lx2lnz6HgYj490Jej1dbbZEVRu815qPNl5D -----END CERTIFICATE-----Generated at Wed Jan 21 19:41:31 2026 by rpki-client