This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/8Hiv_eC0APVQEKf2kopNBEw_Jh4.roa File: 8Hiv_eC0APVQEKf2kopNBEw_Jh4.roa (raw, json) Hash identifier: 8xWiisROGzn2Rw0lQySu6bQOHnAvz1pXP5Yg69gHQrQ= Subject key identifier: F0:78:AF:FD:E0:B4:00:F5:50:10:A7:F6:92:8A:4D:04:4C:3F:26:1E Certificate issuer: /CN=bfe3971a32c0692c4e342e911790662470cf31b2 Certificate serial: 019B7BA3817898BDAA602725B6EA1E0D2578 Authority key identifier: BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/8Hiv_eC0APVQEKf2kopNBEw_Jh4.roa Signing time: Thu 01 Jan 2026 22:17:51 +0000 ROA not before: Thu 01 Jan 2026 22:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207208 IP address blocks: 5.181.191.0/24 maxlen: 24 185.1.217.0/24 maxlen: 24 2001:67c:2498::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:81:78:98:bd:aa:60:27:25:b6:ea:1e:0d:25:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfe3971a32c0692c4e342e911790662470cf31b2 Validity Not Before: Jan 1 22:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f078affde0b400f55010a7f6928a4d044c3f261e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:75:1f:c8:e3:18:00:e9:2d:78:2f:96:7a:7f: e9:db:60:b2:90:f2:fb:76:f5:bc:c5:9f:11:bd:61: 45:c7:dc:48:29:7e:eb:46:fb:2d:51:67:ea:a3:94: cc:6c:7d:25:52:cd:62:27:36:4e:a8:ae:f8:d6:93: 77:71:8f:68:5b:d5:2b:53:9e:9a:55:1d:29:74:8c: 38:5d:00:31:a5:13:b8:68:80:b7:4a:0e:6f:3e:00: d3:65:d7:de:cb:ae:71:e5:e6:6b:70:49:69:d2:95: 3d:df:56:91:9c:1c:6e:68:c5:bd:02:3e:c4:8f:32: 6f:b9:4e:73:0c:84:dc:7b:72:61:f7:c6:e3:3d:82: 01:9c:ce:30:ea:f8:cd:33:84:7e:2d:66:40:9d:0c: 3f:80:8c:b0:65:e2:b3:1f:5b:b6:e6:ce:e6:43:ec: fe:13:5d:b7:12:51:44:7c:92:88:82:c7:cd:f6:cd: d1:7b:0a:4b:ff:03:17:cf:a4:4c:73:30:ad:7e:a5: c3:f7:bb:59:44:dd:86:27:38:02:80:5f:14:6b:3d: 82:19:15:2a:ea:70:e7:7a:b8:6b:66:f2:34:2e:f8: 7a:b5:9e:9c:d7:7b:03:5a:ba:59:78:1a:23:a9:ec: 66:6f:a4:1e:c6:2f:0c:cc:77:9c:66:24:e0:04:e4: 22:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:78:AF:FD:E0:B4:00:F5:50:10:A7:F6:92:8A:4D:04:4C:3F:26:1E X509v3 Authority Key Identifier: keyid:BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/8Hiv_eC0APVQEKf2kopNBEw_Jh4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.191.0/24 185.1.217.0/24 IPv6: 2001:67c:2498::/48 Signature Algorithm: sha256WithRSAEncryption 48:b1:09:e8:7e:7f:f4:ba:f6:5b:93:c5:db:13:84:b0:0d:dd: 8b:ec:ce:1d:ec:c2:4f:b9:b5:2e:b7:06:62:28:3d:97:b7:35: 5f:1f:8c:d0:9e:ca:f3:ce:aa:8f:7a:30:83:22:a5:1f:bd:2d: 5a:b9:f8:9c:da:58:6f:a0:28:d6:c5:4d:82:30:33:b6:5c:3d: 06:6a:c6:eb:ad:63:2b:60:96:55:3c:97:06:74:41:f8:8c:60: ad:c6:3c:11:1c:78:22:c4:b3:81:4b:ab:51:d0:e9:dd:43:90: dd:74:32:ff:1e:20:d8:8c:06:51:7d:d0:8f:d6:73:96:83:c9: 01:c5:db:73:99:8f:07:38:3f:9a:d9:d5:90:ee:9a:08:e4:8b: 63:51:5c:ca:0a:f3:af:50:9a:47:25:56:bb:d4:74:cb:b9:8a: 2e:3a:f3:6a:fc:e9:e0:36:57:12:25:64:0a:ca:a4:72:b6:6c: c3:80:46:e9:a0:00:43:df:f2:60:1f:6c:5b:a1:d7:cd:09:62: a4:7d:2a:12:ce:88:de:6b:d2:57:a8:1e:94:50:43:43:58:fb: a6:ac:de:18:83:dc:73:98:5a:9d:7a:bc:0b:ba:fe:08:1e:54: fc:a9:62:d0:9d:80:37:1a:ae:d2:ef:3d:36:27:fa:71:60:8c: 64:21:d8:43 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt7o4F4mL2qYCcltuoeDSV4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZTM5NzFhMzJjMDY5MmM0ZTM0MmU5MTE3OTA2NjI0NzBj ZjMxYjIwHhcNMjYwMTAxMjIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDc4YWZmZGUwYjQwMGY1NTAxMGE3ZjY5MjhhNGQwNDRjM2YyNjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXUfyOMYAOkteC+Wen/p22CykPL7 dvW8xZ8RvWFFx9xIKX7rRvstUWfqo5TMbH0lUs1iJzZOqK741pN3cY9oW9UrU56a VR0pdIw4XQAxpRO4aIC3Sg5vPgDTZdfey65x5eZrcElp0pU931aRnBxuaMW9Aj7E jzJvuU5zDITce3Jh98bjPYIBnM4w6vjNM4R+LWZAnQw/gIywZeKzH1u25s7mQ+z+ E123ElFEfJKIgsfN9s3RewpL/wMXz6RMczCtfqXD97tZRN2GJzgCgF8Uaz2CGRUq 6nDnerhrZvI0Lvh6tZ6c13sDWrpZeBojqexmb6Qexi8MzHecZiTgBOQiSwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFPB4r/3gtAD1UBCn9pKKTQRMPyYeMB8GA1UdIwQY MBaAFL/jlxoywGksTjQukReQZiRwzzGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdi1PWEdqTEFhU3hPTkM2UkY1Qm1KSERQTWJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9kNzZiZjgtNTQxZi00ZWZjLTk4YzUt YzRkY2M3ZjZiN2RmLzEvOEhpdl9lQzBBUFZRRUtmMmtvcE5CRXdfSmg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9kNzZiZjgtNTQxZi00ZWZjLTk4YzUtYzRkY2M3ZjZiN2Rm LzEvdi1PWEdqTEFhU3hPTkM2UkY1Qm1KSERQTWJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQABbW/AwQA uQHZMA8EAgACMAkDBwAgAQZ8JJgwDQYJKoZIhvcNAQELBQADggEBAEixCeh+f/S6 9luTxdsThLAN3Yvszh3swk+5tS63BmIoPZe3NV8fjNCeyvPOqo96MIMipR+9LVq5 +JzaWG+gKNbFTYIwM7ZcPQZqxuutYytgllU8lwZ0QfiMYK3GPBEceCLEs4FLq1HQ 6d1DkN10Mv8eINiMBlF90I/Wc5aDyQHF23OZjwc4P5rZ1ZDumgjki2NRXMoK869Q mkclVrvUdMu5ii4682r86eA2VxIlZArKpHK2bMOARumgAEPf8mAfbFuh180JYqR9 KhLOiN5r0leoHpRQQ0NY+6as3hiD3HOYWp16vAu6/ggeVPypYtCdgDcartLvPTYn +nFgjGQh2EM= -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:05 2026 by rpki-client