This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/8cfj4AnF2yhGPptSyF2jUpxr_S0.roa File: 8cfj4AnF2yhGPptSyF2jUpxr_S0.roa (raw, json) Hash identifier: DzmUzilMBBgQsPSM2fLdsvW1h+o9QZQZ1zF5bMN9CFM= Subject key identifier: F1:C7:E3:E0:09:C5:DB:28:46:3E:9B:52:C8:5D:A3:52:9C:6B:FD:2D Certificate issuer: /CN=dc5facca14de08174ef5c96c91f1e7825f42d07b Certificate serial: 019B797EC67D37C6419DFFB384B2752ED67F Authority key identifier: DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/8cfj4AnF2yhGPptSyF2jUpxr_S0.roa Signing time: Thu 01 Jan 2026 12:18:29 +0000 ROA not before: Thu 01 Jan 2026 12:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205330 IP address blocks: 37.130.216.0/21 maxlen: 24 185.109.56.0/22 maxlen: 24 2a0f:cec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c6:7d:37:c6:41:9d:ff:b3:84:b2:75:2e:d6:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5facca14de08174ef5c96c91f1e7825f42d07b Validity Not Before: Jan 1 12:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1c7e3e009c5db28463e9b52c85da3529c6bfd2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:93:92:37:6c:b3:18:fb:c7:87:c2:97:3d:87: e8:0e:eb:5d:60:f6:7b:3f:57:e1:56:70:37:41:a0: b6:b5:24:f9:1d:4a:98:94:38:3b:22:d3:29:77:98: c9:d3:e0:24:04:14:6a:a4:14:2b:6b:37:95:a4:bc: 3b:42:ec:2c:43:ba:ca:e5:fc:ad:c5:54:7c:a8:8c: ed:4f:a2:d5:d9:1b:ab:46:c3:90:c9:dc:c4:e7:1a: 9b:dc:76:6f:34:f0:b1:14:94:f0:7d:45:76:0c:d3: 9e:cc:b7:73:05:e3:db:fc:fc:b6:21:7b:78:5d:8b: 61:5d:9a:ae:01:53:6d:3f:6a:8f:42:ca:62:ae:75: 37:89:9a:b4:26:48:01:c8:d6:ce:6b:57:dc:95:eb: cb:52:2c:52:fb:a3:8e:25:be:56:ac:2a:90:9b:6d: c4:be:d0:33:fb:22:21:c4:8f:4d:79:93:59:52:e6: 99:23:d2:8c:71:2f:06:90:28:1c:96:98:cd:f4:31: 17:91:b1:aa:d7:ef:b5:c3:66:b4:1c:43:e0:8c:d1: 33:6f:3b:7c:5d:d3:7a:da:6f:6d:72:9e:58:ed:28: f2:ef:7b:1c:04:2e:c5:d1:ba:27:97:d2:9b:46:68: 1e:25:f1:ab:cb:20:8e:3f:14:04:fe:08:8c:9c:d4: e4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C7:E3:E0:09:C5:DB:28:46:3E:9B:52:C8:5D:A3:52:9C:6B:FD:2D X509v3 Authority Key Identifier: keyid:DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/8cfj4AnF2yhGPptSyF2jUpxr_S0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.130.216.0/21 185.109.56.0/22 IPv6: 2a0f:cec0::/32 Signature Algorithm: sha256WithRSAEncryption 54:6b:b2:b9:98:78:2c:70:b1:f6:99:54:c7:be:37:40:ac:25: a5:56:00:13:3c:a2:65:e2:80:f7:f6:d8:97:09:34:b4:91:f9: 33:c9:9d:e7:ca:a8:ee:93:b4:be:bf:be:d1:37:f1:ff:32:ac: c7:d9:13:60:9b:7d:f8:74:1e:d3:42:7a:87:2a:38:8b:cf:99: 4e:d2:cb:5e:10:3c:24:26:70:e4:69:35:b8:6e:3e:c3:1d:47: 84:a0:65:40:93:e4:bf:3e:a1:6b:79:f6:60:20:27:38:ed:8c: 93:ce:d8:8d:e6:50:ca:c7:e7:37:98:ed:3a:28:63:e4:5c:98: 47:82:ec:0e:73:6b:ee:b3:db:ca:a3:ca:ad:5b:8f:3e:6d:f6: 26:d5:cb:30:87:f4:ec:a6:01:01:b9:d9:c2:46:63:c4:6f:55: 26:e1:37:06:7e:9a:f4:e4:6c:63:d1:6a:f0:fa:e3:1c:92:24: 6d:de:16:19:40:41:b8:83:11:a8:d5:e8:85:11:42:bc:22:86: 91:4b:21:b4:88:9b:38:9a:2e:80:8b:04:23:31:40:81:de:c9: 00:56:8e:3b:9b:64:5f:c1:9f:08:43:1d:45:59:98:47:5f:cd: c0:d9:95:a2:37:28:08:8f:b8:f9:03:67:cb:10:09:e9:f1:1f: a2:98:8e:01 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5fsZ9N8ZBnf+zhLJ1LtZ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWZhY2NhMTRkZTA4MTc0ZWY1Yzk2YzkxZjFlNzgyNWY0 MmQwN2IwHhcNMjYwMTAxMTIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWM3ZTNlMDA5YzVkYjI4NDYzZTliNTJjODVkYTM1MjljNmJmZDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJOSN2yzGPvHh8KXPYfoDutdYPZ7 P1fhVnA3QaC2tST5HUqYlDg7ItMpd5jJ0+AkBBRqpBQrazeVpLw7QuwsQ7rK5fyt xVR8qIztT6LV2RurRsOQydzE5xqb3HZvNPCxFJTwfUV2DNOezLdzBePb/Py2IXt4 XYthXZquAVNtP2qPQspirnU3iZq0JkgByNbOa1fclevLUixS+6OOJb5WrCqQm23E vtAz+yIhxI9NeZNZUuaZI9KMcS8GkCgclpjN9DEXkbGq1++1w2a0HEPgjNEzbzt8 XdN62m9tcp5Y7Sjy73scBC7F0bonl9KbRmgeJfGryyCOPxQE/giMnNTkbwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPHH4+AJxdsoRj6bUshdo1Kca/0tMB8GA1UdIwQY MBaAFNxfrMoU3ggXTvXJbJHx54JfQtB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Ytc3loVGVDQmRPOWNsc2tmSG5nbDlDMEhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wODkzZjEtZmZiNC00NmIzLWJmMjct YTcwMTY5ODBjODZmLzEvOGNmajRBbkYyeWhHUHB0U3lGMmpVcHhyX1MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8wODkzZjEtZmZiNC00NmIzLWJmMjctYTcwMTY5ODBjODZm LzEvM0Ytc3loVGVDQmRPOWNsc2tmSG5nbDlDMEhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDJYLYAwQC uW04MA0EAgACMAcDBQAqD87AMA0GCSqGSIb3DQEBCwUAA4IBAQBUa7K5mHgscLH2 mVTHvjdArCWlVgATPKJl4oD39tiXCTS0kfkzyZ3nyqjuk7S+v77RN/H/MqzH2RNg m334dB7TQnqHKjiLz5lO0steEDwkJnDkaTW4bj7DHUeEoGVAk+S/PqFrefZgICc4 7YyTztiN5lDKx+c3mO06KGPkXJhHguwOc2vus9vKo8qtW48+bfYm1cswh/TspgEB udnCRmPEb1Um4TcGfpr05Gxj0Wrw+uMckiRt3hYZQEG4gxGo1eiFEUK8IoaRSyG0 iJs4mi6AiwQjMUCB3skAVo47m2RfwZ8IQx1FWZhHX83A2ZWiNygIj7j5A2fLEAnp 8R+imI4B -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:08 2026 by rpki-client