This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/f8_GIAm3EWN0ORRIzeDYJdUFY1M.roa File: f8_GIAm3EWN0ORRIzeDYJdUFY1M.roa (raw, json) Hash identifier: zVcR9MNoQHTb+oV5/AwYk0U0f8I9YZgy5dnCAHN404g= Subject key identifier: 7F:CF:C6:20:09:B7:11:63:74:39:14:48:CD:E0:D8:25:D5:05:63:53 Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c Certificate serial: 019B78A2B479DD19B9527421F2299E3C007A Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/f8_GIAm3EWN0ORRIzeDYJdUFY1M.roa Signing time: Thu 01 Jan 2026 08:18:07 +0000 ROA not before: Thu 01 Jan 2026 08:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39855 IP address blocks: 45.86.84.0/24 maxlen: 24 45.132.112.0/24 maxlen: 24 45.152.34.0/23 maxlen: 24 62.68.81.0/24 maxlen: 24 79.143.128.0/24 maxlen: 24 79.143.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:b4:79:dd:19:b9:52:74:21:f2:29:9e:3c:00:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c Validity Not Before: Jan 1 08:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fcfc62009b7116374391448cde0d825d5056353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:27:10:5e:5e:69:e1:fe:b0:3b:8a:5e:70:fb: a5:34:1e:c0:8a:54:92:3e:ba:7c:bf:b0:f8:44:44: 58:60:52:15:6d:bd:72:15:ed:97:06:92:f4:38:d2: 35:19:af:8e:0c:11:3a:59:01:0a:f1:e8:4c:59:7f: 90:34:aa:63:b2:6d:2b:90:60:f6:5a:f2:4e:a2:3d: 9e:e4:94:88:ea:a4:62:c3:91:4a:fb:6a:3c:e1:b7: 3c:a4:e4:eb:03:10:fa:0f:5d:7e:65:cd:77:85:e5: 59:be:1a:32:31:4a:ae:07:4b:0d:fc:e0:9b:f9:53: ae:04:1c:a9:04:40:16:a3:b1:9a:6c:c9:98:9a:9d: ff:2a:36:61:57:e9:c1:8d:94:9d:0e:08:75:4a:3a: 94:f4:62:0b:b3:77:05:bd:1f:61:59:8a:05:e2:6d: e8:36:f1:93:c4:6b:dd:de:22:36:71:e6:a6:c4:0a: a2:60:89:ff:fb:a2:0c:1f:ac:ff:aa:d4:30:4a:72: 51:a1:8b:78:e0:de:67:71:10:6b:bc:67:bf:c6:24: 39:01:ae:fa:a5:ca:28:0d:07:e6:60:09:55:57:e7: 4d:88:b5:39:1c:b5:82:99:51:e9:14:42:1b:e5:4e: 12:88:39:0f:25:31:7d:dd:45:9d:d3:95:ea:f4:60: 71:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:CF:C6:20:09:B7:11:63:74:39:14:48:CD:E0:D8:25:D5:05:63:53 X509v3 Authority Key Identifier: keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/f8_GIAm3EWN0ORRIzeDYJdUFY1M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.84.0/24 45.132.112.0/24 45.152.34.0/23 62.68.81.0/24 79.143.128.0/24 79.143.130.0/24 Signature Algorithm: sha256WithRSAEncryption 27:ee:5f:65:7f:60:3d:b4:57:1f:c5:1e:a3:f6:93:7a:5b:78: 93:3e:92:c9:fa:07:ec:f1:34:f2:c2:00:24:4f:20:b6:b0:6b: 0b:29:21:54:91:1b:2e:ac:fe:b3:64:e9:8b:5a:ce:2a:57:7b: 5d:18:47:5c:f2:e9:c1:cf:ae:be:f6:8c:7b:97:60:87:09:a0: 5c:09:9c:24:ab:b7:d2:eb:ec:c7:ac:7a:fa:df:ac:1b:af:c6: ac:c4:4e:15:e6:ff:58:8b:90:9b:45:78:ad:56:00:8e:fd:b9: ec:f4:a6:ee:98:69:d9:da:17:be:42:7f:a9:df:96:0b:47:b1: ba:1b:e3:01:59:e2:78:f6:be:d6:7a:a9:b5:51:51:f9:39:22: aa:3b:90:1a:66:8f:a4:0e:c2:82:2b:ff:b2:fa:ee:03:06:a0: b6:61:49:4e:e7:96:68:7c:ce:0f:88:15:c2:06:1e:53:06:0f: dd:42:c7:8e:ec:4d:42:77:3a:e1:54:1c:9a:c1:71:58:49:f8: 79:ac:48:a6:36:7c:8b:5e:38:f2:26:03:28:0a:8c:7f:72:c0: 80:9d:4a:d6:a3:c2:60:28:56:09:a9:6f:35:0d:43:b7:18:ab: 31:cb:3e:9c:19:ba:a0:0d:95:78:15:a4:5c:65:cf:4d:8d:91: bb:61:a6:55 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt4orR53Rm5UnQh8imePAB6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz MTk4M2MwHhcNMjYwMTAxMDgxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmNmYzYyMDA5YjcxMTYzNzQzOTE0NDhjZGUwZDgyNWQ1MDU2MzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlycQXl5p4f6wO4pecPulNB7AilSS Prp8v7D4RERYYFIVbb1yFe2XBpL0ONI1Ga+ODBE6WQEK8ehMWX+QNKpjsm0rkGD2 WvJOoj2e5JSI6qRiw5FK+2o84bc8pOTrAxD6D11+Zc13heVZvhoyMUquB0sN/OCb +VOuBBypBEAWo7GabMmYmp3/KjZhV+nBjZSdDgh1SjqU9GILs3cFvR9hWYoF4m3o NvGTxGvd3iI2ceamxAqiYIn/+6IMH6z/qtQwSnJRoYt44N5ncRBrvGe/xiQ5Aa76 pcooDQfmYAlVV+dNiLU5HLWCmVHpFEIb5U4SiDkPJTF93UWd05Xq9GBxLQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFH/PxiAJtxFjdDkUSM3g2CXVBWNTMB8GA1UdIwQY MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt NTlhZTA5ZWRiZWI5LzEvZjhfR0lBbTNFV04wT1JSSXplRFlKZFVGWTFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5 LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALVZUAwQA LYRwAwQBLZgiAwQAPkRRAwQAT4+AAwQAT4+CMA0GCSqGSIb3DQEBCwUAA4IBAQAn 7l9lf2A9tFcfxR6j9pN6W3iTPpLJ+gfs8TTywgAkTyC2sGsLKSFUkRsurP6zZOmL Ws4qV3tdGEdc8unBz66+9ox7l2CHCaBcCZwkq7fS6+zHrHr636wbr8asxE4V5v9Y i5CbRXitVgCO/bns9KbumGnZ2he+Qn+p35YLR7G6G+MBWeJ49r7Weqm1UVH5OSKq O5AaZo+kDsKCK/+y+u4DBqC2YUlO55ZofM4PiBXCBh5TBg/dQseO7E1CdzrhVBya wXFYSfh5rEimNnyLXjjyJgMoCox/csCAnUrWo8JgKFYJqW81DUO3GKsxyz6cGbqg DZV4FaRcZc9NjZG7YaZV -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:43 2026 by rpki-client