This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/fhE6sPigjHqQymOx_07DpW-kE1A.roa File: fhE6sPigjHqQymOx_07DpW-kE1A.roa (raw, json) Hash identifier: nhb6C1pl90rN5e/RFq9dkJcLPr8IuI/iDY7Kr68b/2U= Subject key identifier: 7E:11:3A:B0:F8:A0:8C:7A:90:CA:63:B1:FF:4E:C3:A5:6F:A4:13:50 Certificate issuer: /CN=c8f2345a3fea4b3dbf25cb120f1b7842536268cd Certificate serial: 019B7BA54368BB82618FDE5776FAEE1DC737 Authority key identifier: C8:F2:34:5A:3F:EA:4B:3D:BF:25:CB:12:0F:1B:78:42:53:62:68:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/fhE6sPigjHqQymOx_07DpW-kE1A.roa Signing time: Thu 01 Jan 2026 22:19:46 +0000 ROA not before: Thu 01 Jan 2026 22:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47809 IP address blocks: 91.241.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:43:68:bb:82:61:8f:de:57:76:fa:ee:1d:c7:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8f2345a3fea4b3dbf25cb120f1b7842536268cd Validity Not Before: Jan 1 22:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e113ab0f8a08c7a90ca63b1ff4ec3a56fa41350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1e:9d:e2:86:d2:50:53:45:58:26:99:3c:f2: 28:b8:5c:4d:3a:fe:a4:49:18:84:61:45:03:9a:12: fb:a9:e9:c9:5e:44:a6:62:8a:99:4e:80:96:db:ce: c6:8c:5d:9f:48:00:fe:03:f1:07:42:a0:cb:9f:85: ca:c0:a9:c6:93:51:70:f1:a2:63:3b:02:91:c6:1e: 27:74:ec:6f:d3:4d:9b:2d:0f:ac:01:5f:e8:ab:3e: 36:0e:75:fa:b2:7a:5b:c9:b9:3f:3f:b3:a4:81:f5: 12:bc:84:94:a1:b2:aa:fc:6c:1b:29:7f:c5:10:04: 97:9f:27:b6:85:57:46:60:1d:b9:e9:06:a4:e6:c9: ce:7e:5e:41:6d:4a:0d:dc:85:02:19:69:b1:1d:8c: 40:33:f6:34:52:3c:95:8a:95:9f:0d:16:aa:e7:91: 9a:62:ff:d8:b8:b6:07:9f:16:63:2c:2e:81:39:0a: e9:4c:73:3d:8a:09:15:63:49:17:f1:2a:a4:9a:5f: 68:77:de:74:14:4d:22:ad:d4:6a:68:b5:2e:46:28: af:27:a2:84:9c:fb:7b:26:06:69:32:e8:95:88:32: c4:dc:ec:1c:f1:d8:e2:7e:6e:ec:e2:1e:e7:c3:1f: 24:e1:2f:38:b4:fa:73:4f:d1:81:05:4d:94:65:1b: b3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:11:3A:B0:F8:A0:8C:7A:90:CA:63:B1:FF:4E:C3:A5:6F:A4:13:50 X509v3 Authority Key Identifier: keyid:C8:F2:34:5A:3F:EA:4B:3D:BF:25:CB:12:0F:1B:78:42:53:62:68:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/fhE6sPigjHqQymOx_07DpW-kE1A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.241.198.0/24 Signature Algorithm: sha256WithRSAEncryption 15:39:15:1e:56:fb:e7:0d:9e:3e:58:f6:7d:c1:3c:ce:e2:a6: bc:38:dd:7c:8f:8f:0d:dc:8d:b5:b3:d8:86:b2:bc:6e:d9:83: fb:80:2f:b7:67:10:a8:18:bd:52:bf:3a:46:10:92:39:24:c7: c8:70:ec:c2:2c:76:aa:47:de:b0:35:a1:b4:a4:f7:06:e1:14: d6:96:2d:87:c8:02:5b:ca:56:98:c8:e2:bb:ea:fe:2e:a1:a3: f6:f7:f0:a2:87:c1:78:61:cd:b4:26:d8:1c:ce:00:f8:da:fa: e0:bf:a8:1b:c3:1b:9f:61:c0:a6:95:39:3e:12:35:6b:d2:7c: 40:49:a4:77:e4:e3:ac:f8:75:84:6a:64:35:15:db:d4:cc:5c: 6d:90:ca:25:7c:7b:f4:97:b0:a7:2c:12:93:5c:4c:0d:0a:ed: c5:44:d2:5f:6b:de:3b:fa:51:1a:34:1b:c5:0c:51:d4:9a:80: 3a:07:5c:29:42:74:d2:c2:b5:41:70:71:65:b8:65:ec:65:90: a2:67:a0:dd:6c:fb:0d:59:1b:7e:5a:9e:cb:e7:2e:9c:e8:07: bf:87:5d:10:74:7f:75:3d:29:3f:c1:58:36:68:34:90:33:d4: d2:ff:bc:ed:18:19:34:c1:8c:29:64:6b:bc:a8:50:b2:a4:f3: 7b:68:7a:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pUNou4Jhj95XdvruHcc3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZjIzNDVhM2ZlYTRiM2RiZjI1Y2IxMjBmMWI3ODQyNTM2 MjY4Y2QwHhcNMjYwMTAxMjIxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTExM2FiMGY4YTA4YzdhOTBjYTYzYjFmZjRlYzNhNTZmYTQxMzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR6d4obSUFNFWCaZPPIouFxNOv6k SRiEYUUDmhL7qenJXkSmYoqZToCW287GjF2fSAD+A/EHQqDLn4XKwKnGk1Fw8aJj OwKRxh4ndOxv002bLQ+sAV/oqz42DnX6snpbybk/P7OkgfUSvISUobKq/GwbKX/F EASXnye2hVdGYB256Qak5snOfl5BbUoN3IUCGWmxHYxAM/Y0UjyVipWfDRaq55Ga Yv/YuLYHnxZjLC6BOQrpTHM9igkVY0kX8Sqkml9od950FE0irdRqaLUuRiivJ6KE nPt7JgZpMuiViDLE3Owc8djifm7s4h7nwx8k4S84tPpzT9GBBU2UZRuzywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH4ROrD4oIx6kMpjsf9Ow6VvpBNQMB8GA1UdIwQY MBaAFMjyNFo/6ks9vyXLEg8beEJTYmjNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVBJMFdqX3FTejJfSmNzU0R4dDRRbE5pYU0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC80OGMyOGEtMDg0OC00YjBiLTkxNGEt MGVhMWUxMjM0MTdhLzEvZmhFNnNQaWdqSHFReW1PeF8wN0RwVy1rRTFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC80OGMyOGEtMDg0OC00YjBiLTkxNGEtMGVhMWUxMjM0MTdh LzEveVBJMFdqX3FTejJfSmNzU0R4dDRRbE5pYU0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/HGMA0G CSqGSIb3DQEBCwUAA4IBAQAVORUeVvvnDZ4+WPZ9wTzO4qa8ON18j48N3I21s9iG srxu2YP7gC+3ZxCoGL1SvzpGEJI5JMfIcOzCLHaqR96wNaG0pPcG4RTWli2HyAJb ylaYyOK76v4uoaP29/Cih8F4Yc20JtgczgD42vrgv6gbwxufYcCmlTk+EjVr0nxA SaR35OOs+HWEamQ1FdvUzFxtkMolfHv0l7CnLBKTXEwNCu3FRNJfa947+lEaNBvF DFHUmoA6B1wpQnTSwrVBcHFluGXsZZCiZ6DdbPsNWRt+Wp7L5y6c6Ae/h10QdH91 PSk/wVg2aDSQM9TS/7ztGBk0wYwpZGu8qFCypPN7aHoI -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:29 2026 by rpki-client