This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/8wgUQ75Sqdb_feNT6FKCZdFZvpc.roa File: 8wgUQ75Sqdb_feNT6FKCZdFZvpc.roa (raw, json) Hash identifier: o68Cj0XHDjDdBxBAZozu7KF1vAsEnCHUT+BQL685gAA= Subject key identifier: F3:08:14:43:BE:52:A9:D6:FF:7D:E3:53:E8:52:82:65:D1:59:BE:97 Certificate issuer: /CN=3841266f2c94ac422b96a68a7500bb82c1179191 Certificate serial: 019B7910DB9B03D6B222D2CAEFA9C6A2B355 Authority key identifier: 38:41:26:6F:2C:94:AC:42:2B:96:A6:8A:75:00:BB:82:C1:17:91:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/8wgUQ75Sqdb_feNT6FKCZdFZvpc.roa Signing time: Thu 01 Jan 2026 10:18:26 +0000 ROA not before: Thu 01 Jan 2026 10:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50999 IP address blocks: 109.171.128.0/17 maxlen: 24 2a05:3280::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:db:9b:03:d6:b2:22:d2:ca:ef:a9:c6:a2:b3:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3841266f2c94ac422b96a68a7500bb82c1179191 Validity Not Before: Jan 1 10:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3081443be52a9d6ff7de353e8528265d159be97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:96:c5:f7:6c:9b:37:a6:3e:5a:3c:d2:21:89: f8:d8:b9:1d:3a:05:4f:4a:ef:24:c3:be:76:31:1b: 82:bb:df:b3:bc:bf:17:42:1e:50:00:23:a5:fe:63: 10:4a:d5:b8:cb:ea:13:46:4c:2d:13:37:66:ab:70: 71:43:3b:0c:38:73:4b:5a:42:ef:59:fc:fa:70:77: af:3b:f5:36:39:86:ef:b5:10:9b:94:5f:f7:13:89: 68:6f:19:77:b6:a0:8e:57:e3:c2:e0:74:88:e4:92: 00:b4:4e:20:75:0a:e0:66:18:7c:51:f4:76:51:e8: 70:c3:7f:8c:6c:2c:ec:e8:a8:1c:b8:67:92:5d:e5: 43:23:fa:2b:fb:b1:45:fa:03:c2:53:96:23:cd:fd: d9:18:41:81:b9:46:e9:91:b6:38:23:03:80:19:e9: 4e:3f:9b:7d:fb:ec:c9:c6:32:29:ff:e7:4f:17:e9: d9:94:f7:f4:e2:fc:2f:89:62:37:d3:32:7f:a9:d1: d1:04:d3:cf:91:54:bd:cf:e9:da:36:d1:a6:e5:dd: 0b:78:57:0f:83:e8:96:15:b4:32:32:40:a5:71:4c: e3:b4:58:df:f6:b0:83:ed:75:4e:96:b3:97:aa:cc: ce:6a:43:cf:aa:46:6a:17:12:15:d1:14:61:0b:d6: e0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:08:14:43:BE:52:A9:D6:FF:7D:E3:53:E8:52:82:65:D1:59:BE:97 X509v3 Authority Key Identifier: keyid:38:41:26:6F:2C:94:AC:42:2B:96:A6:8A:75:00:BB:82:C1:17:91:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/8wgUQ75Sqdb_feNT6FKCZdFZvpc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.171.128.0/17 IPv6: 2a05:3280::/29 Signature Algorithm: sha256WithRSAEncryption 27:e5:95:df:14:b0:a8:ce:8b:04:17:d9:38:b5:90:62:db:c3: a8:5a:ea:be:29:72:1c:16:9e:4d:fe:ec:89:1f:82:52:e5:96: b2:a5:40:13:35:50:f0:5b:d7:b9:5b:be:92:72:0f:d6:8b:42: 5b:68:d1:10:55:78:df:40:75:42:db:4c:b1:24:ea:64:74:54: 08:1b:f1:6d:30:3a:54:71:ce:ac:e3:ea:01:08:c6:53:dc:01: fd:04:1d:5a:91:63:b8:4d:19:b8:dc:71:86:64:89:c6:0b:25: 69:f0:cf:c2:a7:dd:02:bc:f8:b5:cc:42:de:69:f3:e3:dc:cd: b7:09:3d:2a:b5:91:91:b9:13:f4:dc:b6:de:8c:39:25:7d:2f: e8:7d:21:64:67:83:a4:01:f7:de:78:e6:3f:b0:24:83:2b:3d: 9a:24:07:ec:99:ff:2d:9a:3f:83:98:f7:04:d9:45:8f:39:5a: c9:4e:36:05:72:ff:bd:f2:5d:97:ce:e2:17:1c:c5:b4:df:59: 7a:c9:12:cc:28:90:f1:33:3a:68:8b:b8:da:42:40:7d:db:08: 8c:b3:65:11:d2:47:07:78:65:b5:59:76:c9:4b:eb:68:a9:b3: 75:27:bc:ad:6d:15:ec:06:7f:8a:b2:c4:d4:1a:cd:71:b0:4a: 5c:89:da:94 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5ENubA9ayItLK76nGorNVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NDEyNjZmMmM5NGFjNDIyYjk2YTY4YTc1MDBiYjgyYzEx NzkxOTEwHhcNMjYwMTAxMTAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzA4MTQ0M2JlNTJhOWQ2ZmY3ZGUzNTNlODUyODI2NWQxNTliZTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZbF92ybN6Y+WjzSIYn42LkdOgVP Su8kw752MRuCu9+zvL8XQh5QACOl/mMQStW4y+oTRkwtEzdmq3BxQzsMOHNLWkLv Wfz6cHevO/U2OYbvtRCblF/3E4lobxl3tqCOV+PC4HSI5JIAtE4gdQrgZhh8UfR2 Uehww3+MbCzs6KgcuGeSXeVDI/or+7FF+gPCU5Yjzf3ZGEGBuUbpkbY4IwOAGelO P5t9++zJxjIp/+dPF+nZlPf04vwviWI30zJ/qdHRBNPPkVS9z+naNtGm5d0LeFcP g+iWFbQyMkClcUzjtFjf9rCD7XVOlrOXqszOakPPqkZqFxIV0RRhC9bg3QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPMIFEO+UqnW/33jU+hSgmXRWb6XMB8GA1UdIwQY MBaAFDhBJm8slKxCK5aminUAu4LBF5GRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0VFbWJ5eVVyRUlybHFhS2RRQzdnc0VYa1pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8xMGE0NDQtM2UzMC00NDIxLWI0Mzkt ODZlNWE5ZWY4NjJhLzEvOHdnVVE3NVNxZGJfZmVOVDZGS0NaZEZadnBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8xMGE0NDQtM2UzMC00NDIxLWI0MzktODZlNWE5ZWY4NjJh LzEvT0VFbWJ5eVVyRUlybHFhS2RRQzdnc0VYa1pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQHbauAMA0E AgACMAcDBQMqBTKAMA0GCSqGSIb3DQEBCwUAA4IBAQAn5ZXfFLCozosEF9k4tZBi 28OoWuq+KXIcFp5N/uyJH4JS5ZaypUATNVDwW9e5W76Scg/Wi0JbaNEQVXjfQHVC 20yxJOpkdFQIG/FtMDpUcc6s4+oBCMZT3AH9BB1akWO4TRm43HGGZInGCyVp8M/C p90CvPi1zELeafPj3M23CT0qtZGRuRP03LbejDklfS/ofSFkZ4OkAffeeOY/sCSD Kz2aJAfsmf8tmj+DmPcE2UWPOVrJTjYFcv+98l2XzuIXHMW031l6yRLMKJDxMzpo i7jaQkB92wiMs2UR0kcHeGW1WXbJS+toqbN1J7ytbRXsBn+KssTUGs1xsEpcidqU -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:57 2026 by rpki-client