This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/8O4Y6gqi_V-4_Dp70sUoajALQUc.roa File: 8O4Y6gqi_V-4_Dp70sUoajALQUc.roa (raw, json) Hash identifier: w9UZFYJ/tT99RCEpaAiyOJPfFVOSK8U3STDxczdaYFs= Subject key identifier: F0:EE:18:EA:0A:A2:FD:5F:B8:FC:3A:7B:D2:C5:28:6A:30:0B:41:47 Certificate issuer: /CN=588394e3910d94a7bf0a78a0f302d02ae9907273 Certificate serial: 019B7EA4FE8DD95C79553770D0F716425B3F Authority key identifier: 58:83:94:E3:91:0D:94:A7:BF:0A:78:A0:F3:02:D0:2A:E9:90:72:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/8O4Y6gqi_V-4_Dp70sUoajALQUc.roa Signing time: Fri 02 Jan 2026 12:18:20 +0000 ROA not before: Fri 02 Jan 2026 12:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56851 IP address blocks: 31.131.16.0/20 maxlen: 24 193.111.60.0/22 maxlen: 24 2001:67c:15e4::/48 maxlen: 48 2001:67c:15f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.crl rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 21:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:fe:8d:d9:5c:79:55:37:70:d0:f7:16:42:5b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=588394e3910d94a7bf0a78a0f302d02ae9907273 Validity Not Before: Jan 2 12:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0ee18ea0aa2fd5fb8fc3a7bd2c5286a300b4147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:63:80:2e:21:3c:0c:ba:3b:c4:2a:4a:50:a8: 31:41:d6:bf:3c:bd:8f:38:ec:34:bd:c5:5b:b7:ff: 8e:61:70:48:f6:3a:50:32:1e:8e:b3:f5:b7:5b:30: ad:32:fe:e4:26:fe:3f:30:8d:5d:f0:f1:4d:66:d1: 3b:f6:e9:cd:96:b2:f1:8e:fd:5a:a5:b1:08:66:6e: 49:50:84:5f:a8:05:1b:e4:cc:1b:5a:1b:3b:be:36: 94:46:22:ca:93:8f:de:81:4a:19:7e:0e:75:75:b0: 42:99:7e:06:fb:ab:33:80:ca:60:cc:0c:f9:0b:5b: 76:a2:d3:c8:d6:cf:c9:3e:1e:43:13:b4:f9:ca:20: 83:d8:54:ad:5f:26:71:b1:7e:1f:36:1d:0c:a7:58: f5:fd:6e:e5:2a:06:3b:86:7a:37:a2:ae:ca:53:83: d3:63:12:54:60:0a:40:2b:92:0c:05:c7:32:f8:cd: 2f:be:28:5f:66:40:e1:7f:a2:04:69:fc:7a:79:5e: 5a:41:70:e0:1f:97:65:89:bb:c7:eb:ea:42:8a:68: 59:38:eb:f9:55:84:07:73:24:5e:5b:42:78:24:85: 29:2f:c7:ef:03:69:7c:31:6c:86:58:28:bf:c1:99: 60:19:8e:ad:0a:fb:80:d2:93:82:bf:8d:99:d7:9e: 5b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:EE:18:EA:0A:A2:FD:5F:B8:FC:3A:7B:D2:C5:28:6A:30:0B:41:47 X509v3 Authority Key Identifier: keyid:58:83:94:E3:91:0D:94:A7:BF:0A:78:A0:F3:02:D0:2A:E9:90:72:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/8O4Y6gqi_V-4_Dp70sUoajALQUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.131.16.0/20 193.111.60.0/22 IPv6: 2001:67c:15e4::/48 2001:67c:15f0::/48 Signature Algorithm: sha256WithRSAEncryption ae:5e:4f:f8:b7:ee:93:66:76:69:84:7c:b9:b2:47:ac:e7:72: b5:b1:0b:76:c5:ca:78:84:3a:3b:3d:40:c1:37:46:75:f5:b0: ce:f4:b5:f4:13:2b:b2:8c:06:13:d3:14:33:84:bd:8b:db:e7: 18:55:b9:1c:cf:d7:c2:f4:02:4b:58:85:df:0e:48:76:af:17: dc:a1:17:09:7d:d8:38:9b:ea:2c:0b:c2:7f:e6:73:6a:6d:10: d2:1b:14:43:88:d4:34:17:0f:cf:ba:27:24:b4:3b:7c:ae:cf: b8:6b:71:55:8d:ac:62:a3:56:72:7f:00:7d:b3:e8:60:ef:46: 5e:ac:8b:74:ba:74:40:c1:fe:1b:d8:6e:1a:58:6a:16:40:57: 54:2c:ac:eb:c9:93:d7:a4:ee:6d:17:06:2a:1f:13:b5:41:ef: 1d:74:cf:37:ac:e4:c7:32:ac:1b:a6:5c:e0:36:92:65:e0:c6: 2e:bd:e5:46:c5:dd:93:df:5c:6a:eb:48:5b:47:94:e8:e1:99: 38:28:31:ea:91:f4:87:11:8b:45:81:69:88:fa:31:84:13:dc: 91:ab:eb:54:a3:01:4e:68:9a:bd:e2:15:4f:68:4f:97:fe:42: 11:ef:e7:24:bc:ed:7d:ff:f3:ac:f2:d1:b7:4d:2f:25:93:10: 4a:95:d5:35 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt+pP6N2Vx5VTdw0PcWQls/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODM5NGUzOTEwZDk0YTdiZjBhNzhhMGYzMDJkMDJhZTk5 MDcyNzMwHhcNMjYwMTAyMTIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGVlMThlYTBhYTJmZDVmYjhmYzNhN2JkMmM1Mjg2YTMwMGI0MTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWOALiE8DLo7xCpKUKgxQda/PL2P OOw0vcVbt/+OYXBI9jpQMh6Os/W3WzCtMv7kJv4/MI1d8PFNZtE79unNlrLxjv1a pbEIZm5JUIRfqAUb5MwbWhs7vjaURiLKk4/egUoZfg51dbBCmX4G+6szgMpgzAz5 C1t2otPI1s/JPh5DE7T5yiCD2FStXyZxsX4fNh0Mp1j1/W7lKgY7hno3oq7KU4PT YxJUYApAK5IMBccy+M0vvihfZkDhf6IEafx6eV5aQXDgH5dlibvH6+pCimhZOOv5 VYQHcyReW0J4JIUpL8fvA2l8MWyGWCi/wZlgGY6tCvuA0pOCv42Z155btQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFPDuGOoKov1fuPw6e9LFKGowC0FHMB8GA1UdIwQY MBaAFFiDlOORDZSnvwp4oPMC0CrpkHJzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lPVTQ1RU5sS2VfQ25pZzh3TFFLdW1RY25NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS83OGIxYTctOWZiZC00ZjZmLThlYjQt N2I2MjJkZGY4NGY0LzEvOE80WTZncWlfVi00X0RwNzBzVW9hakFMUVVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS83OGIxYTctOWZiZC00ZjZmLThlYjQtN2I2MjJkZGY4NGY0 LzEvV0lPVTQ1RU5sS2VfQ25pZzh3TFFLdW1RY25NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQEH4MQAwQC wW88MBgEAgACMBIDBwAgAQZ8FeQDBwAgAQZ8FfAwDQYJKoZIhvcNAQELBQADggEB AK5eT/i37pNmdmmEfLmyR6zncrWxC3bFyniEOjs9QME3RnX1sM70tfQTK7KMBhPT FDOEvYvb5xhVuRzP18L0AktYhd8OSHavF9yhFwl92Dib6iwLwn/mc2ptENIbFEOI 1DQXD8+6JyS0O3yuz7hrcVWNrGKjVnJ/AH2z6GDvRl6si3S6dEDB/hvYbhpYahZA V1QsrOvJk9ek7m0XBiofE7VB7x10zzes5McyrBumXOA2kmXgxi695UbF3ZPfXGrr SFtHlOjhmTgoMeqR9IcRi0WBaYj6MYQT3JGr61SjAU5omr3iFU9oT5f+QhHv5yS8 7X3/86zy0bdNLyWTEEqV1TU= -----END CERTIFICATE-----Generated at Tue Feb 3 03:31:19 2026 by rpki-client