This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/8fgtqwCkJq8DgaM9f569Bs0xaxc.roa File: 8fgtqwCkJq8DgaM9f569Bs0xaxc.roa (raw, json) Hash identifier: QEUkALn73LxSmFsf5evgpfdPqAtmFu8hMHpLqd8W8OA= Subject key identifier: F1:F8:2D:AB:00:A4:26:AF:03:81:A3:3D:7F:9E:BD:06:CD:31:6B:17 Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68 Certificate serial: 019B7DCABAF76AD231B7C643D5D4C5DBDD2E Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/8fgtqwCkJq8DgaM9f569Bs0xaxc.roa Signing time: Fri 02 Jan 2026 08:19:56 +0000 ROA not before: Fri 02 Jan 2026 08:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 87.238.140.0/22 maxlen: 24 87.238.140.0/24 maxlen: 24 2a06:56c1::/32 maxlen: 48 2a06:56c1::/40 maxlen: 48 2a06:56c2::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 14:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ba:f7:6a:d2:31:b7:c6:43:d5:d4:c5:db:dd:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68 Validity Not Before: Jan 2 08:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1f82dab00a426af0381a33d7f9ebd06cd316b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:56:e6:7c:cc:34:62:10:af:b5:76:aa:fb:29: 57:7d:ea:40:96:d2:1c:56:74:02:31:e7:db:22:f6: 37:39:f4:6f:27:41:b0:3d:b8:5a:69:ef:45:cf:55: 5f:d2:77:b0:8c:44:cc:8c:99:d5:ba:98:9e:d6:ef: 3f:59:ec:9c:0e:d2:a7:c6:29:50:b5:85:fe:39:91: 80:bd:93:26:ea:64:c8:02:e4:b4:ef:a8:81:19:ae: 60:1b:d3:08:6a:cb:30:fc:f9:43:03:e0:f6:db:87: b9:ac:ea:79:76:53:b8:21:c0:93:4e:6b:6e:b0:7c: d6:de:eb:0e:ae:2c:86:56:64:79:38:b2:c9:ad:b1: 11:21:60:32:27:87:fa:11:19:3f:cd:c0:a1:ab:1b: ba:e5:d8:4d:20:30:12:51:8a:ec:70:54:7d:9d:08: 17:7a:9f:64:fa:dd:30:44:e9:d5:df:5a:47:60:6e: 8e:95:da:49:64:52:5a:67:81:01:71:2b:d5:95:43: 74:26:d3:01:c1:e1:ed:a4:3f:18:d7:38:b6:29:9c: dd:9f:43:fb:43:a8:b3:52:ae:fc:a0:23:ee:cb:a4: 43:54:e5:82:6e:88:e4:df:68:93:d0:dd:d9:0f:25: ca:d2:bb:23:d9:58:78:ee:f3:19:8e:70:7a:2f:68: d6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F8:2D:AB:00:A4:26:AF:03:81:A3:3D:7F:9E:BD:06:CD:31:6B:17 X509v3 Authority Key Identifier: keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/8fgtqwCkJq8DgaM9f569Bs0xaxc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.238.140.0/22 IPv6: 2a06:56c1::-2a06:56c2:ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption cc:9c:c0:10:b4:03:cb:15:40:9b:67:4f:25:af:32:e8:4f:57: 54:25:48:d4:44:ab:15:e3:34:1a:24:eb:63:3f:f8:34:d7:73: f0:3e:ec:8a:e2:b2:7e:74:a2:2b:54:8b:d9:b9:00:d0:8a:41: 21:7a:39:17:98:50:60:5e:d2:58:1a:fe:5a:bd:de:90:44:b4: b1:26:98:94:60:6d:fe:01:8f:db:ab:b1:85:1d:34:13:a9:77: f9:de:5a:3d:bb:4f:ba:c8:8a:ef:40:99:6b:c1:18:1d:e5:49: 08:64:98:4e:ee:31:3e:36:e6:ac:0a:de:90:6b:ad:3b:7e:30: 1f:64:e8:3c:b6:d1:e6:91:18:5e:a7:17:ec:64:0f:a1:67:b3: 87:38:d4:6e:09:fd:dc:29:0b:79:57:83:b9:48:ac:9f:48:53: ee:9b:af:77:84:18:06:6d:5a:2a:ac:dd:9d:73:60:4b:79:97: fa:96:97:08:f4:19:66:b5:72:1a:b0:46:e5:e3:84:5e:94:01: 55:7a:0c:44:93:97:14:08:9d:a9:a9:c5:53:85:09:c8:b3:4b: 54:76:dc:b8:95:a2:b9:9c:e4:2f:c5:d7:c5:22:70:18:07:e0: 7a:02:2c:1b:b1:fe:84:59:ee:eb:6c:83:12:30:54:0d:40:81: bf:f8:39:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt9yrr3atIxt8ZD1dTF290uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MmYwZTQyYjA4YWE0NTFmYzU4M2EzNThlYzM3MGZmYmQy ZGFjNjgwHhcNMjYwMTAyMDgxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWY4MmRhYjAwYTQyNmFmMDM4MWEzM2Q3ZjllYmQwNmNkMzE2YjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlbmfMw0YhCvtXaq+ylXfepAltIc VnQCMefbIvY3OfRvJ0GwPbhaae9Fz1Vf0newjETMjJnVupie1u8/WeycDtKnxilQ tYX+OZGAvZMm6mTIAuS076iBGa5gG9MIassw/PlDA+D224e5rOp5dlO4IcCTTmtu sHzW3usOriyGVmR5OLLJrbERIWAyJ4f6ERk/zcChqxu65dhNIDASUYrscFR9nQgX ep9k+t0wROnV31pHYG6OldpJZFJaZ4EBcSvVlUN0JtMBweHtpD8Y1zi2KZzdn0P7 Q6izUq78oCPuy6RDVOWCbojk32iT0N3ZDyXK0rsj2Vh47vMZjnB6L2jWYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPH4LasApCavA4GjPX+evQbNMWsXMB8GA1UdIwQY MBaAFGcvDkKwiqRR/Fg6NY7DcP+9LaxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnk4T1FyQ0twRkg4V0RvMWpzTndfNzB0ckdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81OWE2YjktY2QyMC00Y2Q3LWI0YTct ZjBiOTYyZjUyNDE0LzEvOGZndHF3Q2tKcThEZ2FNOWY1NjlCczB4YXhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My81OWE2YjktY2QyMC00Y2Q3LWI0YTctZjBiOTYyZjUyNDE0 LzEvWnk4T1FyQ0twRkg4V0RvMWpzTndfNzB0ckdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAMBAIAATAGAwQCV+6MMBcE AgACMBEwDwMFACoGVsEDBgAqBlbCADANBgkqhkiG9w0BAQsFAAOCAQEAzJzAELQD yxVAm2dPJa8y6E9XVCVI1ESrFeM0GiTrYz/4NNdz8D7siuKyfnSiK1SL2bkA0IpB IXo5F5hQYF7SWBr+Wr3ekES0sSaYlGBt/gGP26uxhR00E6l3+d5aPbtPusiK70CZ a8EYHeVJCGSYTu4xPjbmrArekGutO34wH2ToPLbR5pEYXqcX7GQPoWezhzjUbgn9 3CkLeVeDuUisn0hT7puvd4QYBm1aKqzdnXNgS3mX+paXCPQZZrVyGrBG5eOEXpQB VXoMRJOXFAidqanFU4UJyLNLVHbcuJWiuZzkL8XXxSJwGAfgegIsG7H+hFnu62yD EjBUDUCBv/g5xA== -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:01 2026 by rpki-client