This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/nm8cLmmA3o4L2xPgTshW5L8vxeM.roa File: nm8cLmmA3o4L2xPgTshW5L8vxeM.roa (raw, json) Hash identifier: t+WoYax1GfjrQoojzMAiUt/9BDl447IgGJsQGcGrMlo= Subject key identifier: 9E:6F:1C:2E:69:80:DE:8E:0B:DB:13:E0:4E:C8:56:E4:BF:2F:C5:E3 Certificate issuer: /CN=987b6812cf7a074580f5942be762f477f67c9500 Certificate serial: 019B7B3677E384526543BF24CF4BEEFC006E Authority key identifier: 98:7B:68:12:CF:7A:07:45:80:F5:94:2B:E7:62:F4:77:F6:7C:95:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/nm8cLmmA3o4L2xPgTshW5L8vxeM.roa Signing time: Thu 01 Jan 2026 20:18:45 +0000 ROA not before: Thu 01 Jan 2026 20:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8365 IP address blocks: 82.195.64.0/19 maxlen: 24 91.243.70.0/24 maxlen: 24 185.55.124.0/22 maxlen: 24 2001:41b8::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.crl rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:77:e3:84:52:65:43:bf:24:cf:4b:ee:fc:00:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=987b6812cf7a074580f5942be762f477f67c9500 Validity Not Before: Jan 1 20:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e6f1c2e6980de8e0bdb13e04ec856e4bf2fc5e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d1:9d:58:03:26:ff:ac:f4:3f:f8:bf:c7:03: d1:f1:14:8f:32:1c:e4:24:c6:a3:f0:1a:1b:96:6d: 1e:fc:e6:24:4d:04:a7:bb:57:61:0a:18:ac:99:45: b9:e0:e7:a2:fc:86:f2:0d:f1:41:a0:77:40:f8:0b: 15:af:5d:9b:34:f3:b4:80:b4:a0:17:93:05:46:01: 49:34:03:13:79:f7:34:16:fe:9a:0e:b3:3a:ae:7b: 0e:ac:e2:e3:5f:ff:e4:86:61:c2:23:fe:9a:51:fe: 5b:28:96:20:5b:3b:d6:62:68:17:d6:8d:72:ed:79: 0f:40:97:99:18:df:bc:99:9e:f9:68:12:b2:7e:2e: 6a:9e:97:6b:3c:5d:d1:c5:ea:21:78:b6:77:ad:7e: 9d:22:3d:8c:16:aa:68:d0:f4:f9:a1:3f:79:b6:6f: 32:09:16:6c:38:d2:1d:2a:d7:bd:b6:e9:9b:96:a9: fb:b0:1f:8d:25:16:57:dd:1f:82:2a:d2:c4:a8:f4: e4:b7:51:0d:59:cd:09:22:91:23:1c:14:10:28:19: 79:0f:48:1c:18:ca:65:95:ef:4b:91:12:1d:1c:ee: 3e:3d:58:a0:b1:56:b4:2a:a7:8d:11:a0:22:4a:58: e9:b2:ad:52:17:53:bd:e5:77:d3:82:8d:89:33:79: 6f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6F:1C:2E:69:80:DE:8E:0B:DB:13:E0:4E:C8:56:E4:BF:2F:C5:E3 X509v3 Authority Key Identifier: keyid:98:7B:68:12:CF:7A:07:45:80:F5:94:2B:E7:62:F4:77:F6:7C:95:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/nm8cLmmA3o4L2xPgTshW5L8vxeM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.195.64.0/19 91.243.70.0/24 185.55.124.0/22 IPv6: 2001:41b8::/29 Signature Algorithm: sha256WithRSAEncryption 7a:08:29:e9:48:21:66:d8:a6:30:ff:b5:f5:84:f8:eb:96:66: 0d:2c:e0:e5:0f:38:18:3f:0b:42:77:21:84:39:f6:ac:a0:b8: 11:0a:f4:e5:1a:eb:da:2b:23:ac:f4:35:7e:06:a5:4a:78:fc: d7:39:3f:06:6a:c1:4b:f5:5c:3e:23:16:32:3e:b6:e0:c1:db: 05:21:b0:94:1b:80:73:06:58:21:9c:5f:67:27:52:49:77:1a: cc:f9:2a:66:e0:55:f4:c0:a9:6b:71:49:c5:d3:63:25:3f:10: 97:b5:70:27:f6:bd:ee:43:aa:e7:e3:fd:21:37:b5:9f:41:30: 06:2b:b3:0e:32:49:5d:8e:ec:8f:ff:ef:1b:77:94:a7:1c:90: 9f:d3:a1:aa:59:ae:38:02:1b:ef:62:59:a8:18:23:5f:3d:8c: 97:ef:7e:d5:6a:0b:7c:5c:0b:f5:af:3d:2f:0e:d6:46:a3:15: 73:8a:7d:bb:d2:33:ca:77:be:59:6e:3a:bd:2c:b1:4e:35:3f: 48:17:ba:21:8b:cb:d2:7b:d6:91:4e:ee:1b:5e:1c:ef:a0:cc: 42:9d:74:9e:9f:9b:a6:c6:26:a4:b4:d3:eb:10:f6:ab:63:c7: 0e:0e:21:3f:8b:c9:8c:24:d6:be:7e:c1:19:1a:5c:11:7e:11: 3b:f9:af:5f -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt7NnfjhFJlQ78kz0vu/ABuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4N2I2ODEyY2Y3YTA3NDU4MGY1OTQyYmU3NjJmNDc3ZjY3 Yzk1MDAwHhcNMjYwMTAxMjAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTZmMWMyZTY5ODBkZThlMGJkYjEzZTA0ZWM4NTZlNGJmMmZjNWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtGdWAMm/6z0P/i/xwPR8RSPMhzk JMaj8Boblm0e/OYkTQSnu1dhChismUW54Oei/IbyDfFBoHdA+AsVr12bNPO0gLSg F5MFRgFJNAMTefc0Fv6aDrM6rnsOrOLjX//khmHCI/6aUf5bKJYgWzvWYmgX1o1y 7XkPQJeZGN+8mZ75aBKyfi5qnpdrPF3RxeoheLZ3rX6dIj2MFqpo0PT5oT95tm8y CRZsONIdKte9tumblqn7sB+NJRZX3R+CKtLEqPTkt1ENWc0JIpEjHBQQKBl5D0gc GMplle9LkRIdHO4+PVigsVa0KqeNEaAiSljpsq1SF1O95XfTgo2JM3lvKwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFJ5vHC5pgN6OC9sT4E7IVuS/L8XjMB8GA1UdIwQY MBaAFJh7aBLPegdFgPWUK+di9Hf2fJUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUh0b0VzOTZCMFdBOVpRcjUyTDBkX1o4bFFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kOGU2OGUtYWQzOC00NGUxLTlhMmMt NzRhYTNjMGZhZWUwLzEvbm04Y0xtbUEzbzRMMnhQZ1RzaFc1TDh2eGVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9kOGU2OGUtYWQzOC00NGUxLTlhMmMtNzRhYTNjMGZhZWUw LzEvbUh0b0VzOTZCMFdBOVpRcjUyTDBkX1o4bFFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFUsNAAwQA W/NGAwQCuTd8MA0EAgACMAcDBQMgAUG4MA0GCSqGSIb3DQEBCwUAA4IBAQB6CCnp SCFm2KYw/7X1hPjrlmYNLODlDzgYPwtCdyGEOfasoLgRCvTlGuvaKyOs9DV+BqVK ePzXOT8GasFL9Vw+IxYyPrbgwdsFIbCUG4BzBlghnF9nJ1JJdxrM+Spm4FX0wKlr cUnF02MlPxCXtXAn9r3uQ6rn4/0hN7WfQTAGK7MOMkldjuyP/+8bd5SnHJCf06Gq Wa44AhvvYlmoGCNfPYyX737Vagt8XAv1rz0vDtZGoxVzin270jPKd75Zbjq9LLFO NT9IF7ohi8vSe9aRTu4bXhzvoMxCnXSen5umxiaktNPrEParY8cODiE/i8mMJNa+ fsEZGlwRfhE7+a9f -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:46 2026 by rpki-client