This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/i0hQjwFxkPTpHyYoOACTdobPX0o.roa File: i0hQjwFxkPTpHyYoOACTdobPX0o.roa (raw, json) Hash identifier: HiHi/d6iXFAJLfNAev9V2WJ5yQo8ek1Ir8HrzJbtcQc= Subject key identifier: 8B:48:50:8F:01:71:90:F4:E9:1F:26:28:38:00:93:76:86:CF:5F:4A Certificate issuer: /CN=3f0a287bea92588fc5dae4f93fb25628f32d196d Certificate serial: 019B77C6E13887A826F5A23B042DE3191590 Authority key identifier: 3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/i0hQjwFxkPTpHyYoOACTdobPX0o.roa Signing time: Thu 01 Jan 2026 04:18:01 +0000 ROA not before: Thu 01 Jan 2026 04:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35320 IP address blocks: 78.154.160.0/19 maxlen: 19 80.93.112.0/20 maxlen: 20 185.12.140.0/23 maxlen: 23 2a02:5f0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e1:38:87:a8:26:f5:a2:3b:04:2d:e3:19:15:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f0a287bea92588fc5dae4f93fb25628f32d196d Validity Not Before: Jan 1 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b48508f017190f4e91f26283800937686cf5f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8b:a2:b2:f0:23:eb:f2:e6:f6:53:02:9a:38: 21:4b:e0:6f:24:5d:90:de:a6:8a:a5:00:7c:36:ec: 5a:32:df:a5:44:17:ec:37:8f:84:2c:10:3d:f6:62: 90:a2:e1:2e:08:7c:cd:d3:03:9a:8a:eb:d6:17:72: f1:64:07:be:6d:23:b4:2c:f1:e2:e0:43:cd:49:87: b7:fa:1e:08:25:f7:9b:bf:37:fb:c6:c1:a6:de:92: cf:fd:62:64:6c:80:c6:81:e4:fd:82:7b:80:bc:be: 5b:f3:8b:27:f7:32:0b:b5:05:96:25:f7:b8:15:0b: 1c:6b:7c:ba:ff:b2:1b:45:7c:47:d3:3b:cf:de:e2: 88:cb:c4:72:6f:43:1c:a7:a4:c4:91:28:74:00:ed: d3:0f:a0:f6:1a:f5:7c:a4:24:cd:17:d4:aa:f6:37: f4:31:59:39:95:c7:99:b2:3b:b2:eb:ae:3d:b4:bb: ad:9a:e3:a4:96:90:56:5f:c8:e6:37:06:23:ce:38: df:7f:8c:4a:47:b3:c9:03:73:f0:5e:57:9d:46:44: 8b:d8:fa:13:62:24:5b:c3:06:21:35:0b:5d:4d:24: 8e:c5:57:75:9b:76:7f:f3:cb:8c:be:d2:20:d1:b7: 62:88:e9:8e:ee:d4:e6:8c:37:e0:70:8e:c2:c8:f1: 6d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:48:50:8F:01:71:90:F4:E9:1F:26:28:38:00:93:76:86:CF:5F:4A X509v3 Authority Key Identifier: keyid:3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/i0hQjwFxkPTpHyYoOACTdobPX0o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.154.160.0/19 80.93.112.0/20 185.12.140.0/23 IPv6: 2a02:5f0::/32 Signature Algorithm: sha256WithRSAEncryption c2:2f:f6:37:80:03:52:d0:0b:89:f1:07:af:f0:1d:05:ac:8b: 2b:f2:04:26:d4:ac:cd:9a:c3:75:e2:3d:06:4e:fa:cb:77:1e: e2:e5:16:a1:6e:89:bd:2c:6e:db:31:21:d8:40:e7:7e:e5:77: 03:d8:42:91:b9:96:b0:38:bf:a8:40:ba:33:89:dd:fe:e8:4d: 9e:33:b5:06:6c:30:1c:e3:3f:cf:b6:f7:84:13:34:9f:65:76: d5:dc:de:96:8b:aa:2a:81:11:66:b9:4b:b9:a5:9a:a6:5b:ae: c3:6d:64:f3:e3:9a:76:55:c3:e8:09:b5:8a:5e:76:2a:c6:12: 1a:19:08:d8:c6:e4:5f:e5:9e:2d:01:d7:cf:e5:3a:9b:f7:c4: bf:73:da:d4:4c:2d:97:a5:bb:11:00:32:e1:ef:98:8b:bb:d9: fd:37:d7:93:01:38:2f:77:f1:b3:c8:dd:75:c0:8d:10:b0:2a: 39:79:08:51:ef:b6:e0:77:73:08:c2:9a:09:77:ec:37:e3:4f: 64:e7:4f:dd:a3:28:8a:71:35:02:82:d0:f2:18:68:1f:84:e9: d6:1d:7f:46:4c:dd:1c:58:a0:2a:59:f9:71:57:36:26:b5:b3: 01:2f:f0:39:ea:34:1c:2f:cf:31:8b:69:57:63:f7:c3:99:93: ff:2c:aa:2f -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt3xuE4h6gm9aI7BC3jGRWQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMGEyODdiZWE5MjU4OGZjNWRhZTRmOTNmYjI1NjI4ZjMy ZDE5NmQwHhcNMjYwMTAxMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjQ4NTA4ZjAxNzE5MGY0ZTkxZjI2MjgzODAwOTM3Njg2Y2Y1ZjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4uisvAj6/Lm9lMCmjghS+BvJF2Q 3qaKpQB8NuxaMt+lRBfsN4+ELBA99mKQouEuCHzN0wOaiuvWF3LxZAe+bSO0LPHi 4EPNSYe3+h4IJfebvzf7xsGm3pLP/WJkbIDGgeT9gnuAvL5b84sn9zILtQWWJfe4 FQsca3y6/7IbRXxH0zvP3uKIy8Ryb0Mcp6TEkSh0AO3TD6D2GvV8pCTNF9Sq9jf0 MVk5lceZsjuy6649tLutmuOklpBWX8jmNwYjzjjff4xKR7PJA3PwXledRkSL2PoT YiRbwwYhNQtdTSSOxVd1m3Z/88uMvtIg0bdiiOmO7tTmjDfgcI7CyPFtCwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFItIUI8BcZD06R8mKDgAk3aGz19KMB8GA1UdIwQY MBaAFD8KKHvqkliPxdrk+T+yVijzLRltMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHdvb2UtcVNXSV9GMnVUNVA3SldLUE10R1cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85MDE0YzMtMWE0OS00ZTYyLTkyNDMt MjEzMzVkMTA2M2FmLzEvaTBoUWp3RnhrUFRwSHlZb09BQ1Rkb2JQWDBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy85MDE0YzMtMWE0OS00ZTYyLTkyNDMtMjEzMzVkMTA2M2Fm LzEvUHdvb2UtcVNXSV9GMnVUNVA3SldLUE10R1cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFTpqgAwQE UF1wAwQBuQyMMA0EAgACMAcDBQAqAgXwMA0GCSqGSIb3DQEBCwUAA4IBAQDCL/Y3 gANS0AuJ8Qev8B0FrIsr8gQm1KzNmsN14j0GTvrLdx7i5Rahbom9LG7bMSHYQOd+ 5XcD2EKRuZawOL+oQLozid3+6E2eM7UGbDAc4z/PtveEEzSfZXbV3N6Wi6oqgRFm uUu5pZqmW67DbWTz45p2VcPoCbWKXnYqxhIaGQjYxuRf5Z4tAdfP5Tqb98S/c9rU TC2XpbsRADLh75iLu9n9N9eTATgvd/GzyN11wI0QsCo5eQhR77bgd3MIwpoJd+w3 409k50/doyiKcTUCgtDyGGgfhOnWHX9GTN0cWKAqWflxVzYmtbMBL/A56jQcL88x i2lXY/fDmZP/LKov -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:17 2026 by rpki-client