This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/8sy7RPYdN9OOw5GeBoNUqLHEJwg.roa File: 8sy7RPYdN9OOw5GeBoNUqLHEJwg.roa (raw, json) Hash identifier: Hl1lQvcDtC+ikOs/Ko0nJQFgSRezGLcK7o1ZONxr73k= Subject key identifier: F2:CC:BB:44:F6:1D:37:D3:8E:C3:91:9E:06:83:54:A8:B1:C4:27:08 Certificate issuer: /CN=5c5d86974a7b624192ec8d834cf2906e1302e431 Certificate serial: 019B7BA35048D2CBC19179F6865308B3EA7F Authority key identifier: 5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/8sy7RPYdN9OOw5GeBoNUqLHEJwg.roa Signing time: Thu 01 Jan 2026 22:17:39 +0000 ROA not before: Thu 01 Jan 2026 22:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24971 IP address blocks: 176.227.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 16:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:50:48:d2:cb:c1:91:79:f6:86:53:08:b3:ea:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5d86974a7b624192ec8d834cf2906e1302e431 Validity Not Before: Jan 1 22:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2ccbb44f61d37d38ec3919e068354a8b1c42708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3f:6b:ba:4c:d5:7c:cc:a7:6e:d9:35:e7:ee: 96:63:b9:65:54:88:f3:bc:c3:94:ef:2d:ed:0c:d0: 53:b9:37:1d:9e:b3:da:36:45:90:e4:3c:16:43:a8: a8:4e:8c:dd:b6:91:e9:5b:ad:c3:f7:e2:1f:15:8b: 8b:75:6c:f5:f5:22:f7:2e:39:0e:a3:b0:d0:99:0c: d4:cd:90:af:4c:de:1f:69:65:1a:cc:32:b0:12:2d: 42:8e:9b:a2:a1:37:0c:4b:a0:dd:98:d6:81:f1:87: 3c:52:dc:de:65:d2:60:45:76:47:a9:98:3d:1d:a3: f5:e6:53:63:95:8a:70:e5:d6:cd:05:45:1c:da:94: 2d:a6:82:9c:4d:e9:4d:6a:bc:49:1f:5a:ed:4c:d6: 55:a7:8a:24:da:1e:f3:4f:f8:e6:4a:1d:5c:18:66: e1:a4:6b:f8:24:64:4c:24:16:34:67:87:d3:9a:c8: e7:a3:5e:04:6d:51:73:44:1d:18:13:24:a2:f6:bd: 83:0f:d0:c7:01:ea:ba:2e:2e:7f:ef:ad:a8:bb:52: 27:9b:25:9b:60:96:fc:70:22:8c:f2:df:a6:69:e2: 65:97:7e:ef:08:9d:ac:80:fc:a9:26:13:d3:7c:da: c7:ab:54:16:b0:14:68:e4:92:91:c1:50:08:53:84: 2b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CC:BB:44:F6:1D:37:D3:8E:C3:91:9E:06:83:54:A8:B1:C4:27:08 X509v3 Authority Key Identifier: keyid:5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/8sy7RPYdN9OOw5GeBoNUqLHEJwg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.227.168.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:ff:54:2e:06:75:bd:61:7a:06:07:fc:06:b5:3b:33:bd:a2: 96:85:29:ac:71:84:ce:b5:1d:3a:19:59:56:6b:c2:50:e6:46: 8e:13:de:80:69:38:bc:1e:54:bd:df:f4:23:87:7c:b0:81:26: 2c:51:05:a7:a8:66:48:28:cb:de:d4:e9:c5:b7:78:60:fd:c9: 8c:7d:46:87:96:ab:1d:22:2a:84:3b:84:4c:50:d8:5b:d0:8d: 0e:58:66:86:e5:d5:6f:88:dc:9d:97:07:f7:25:ee:a5:8d:29: c5:c4:48:18:54:df:0e:a8:c1:a2:f8:c1:e3:3c:4e:e3:45:a2: db:94:d4:d9:6d:02:a3:a6:e8:f1:ab:22:92:07:49:39:37:c9: c3:62:e5:3a:85:f5:39:93:b0:08:c1:83:55:31:ff:6a:cd:83: b2:a6:e9:87:42:03:90:e4:1b:66:45:e4:49:f9:f5:eb:01:56: 21:bb:5f:91:91:27:2b:a4:fa:d6:71:d4:f6:01:f0:d9:5c:49: 96:11:22:cb:e0:f7:ab:0b:66:5c:a9:a3:b3:a0:a9:ab:b5:b7: f7:2d:91:c3:3f:90:0f:76:27:21:57:0c:49:e4:60:df:05:89: 65:12:19:75:f9:8d:58:05:88:27:fd:88:9d:c6:d0:0a:55:2c: ee:6b:7c:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o1BI0svBkXn2hlMIs+p/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNWQ4Njk3NGE3YjYyNDE5MmVjOGQ4MzRjZjI5MDZlMTMw MmU0MzEwHhcNMjYwMTAxMjIxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmNjYmI0NGY2MWQzN2QzOGVjMzkxOWUwNjgzNTRhOGIxYzQyNzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5D9rukzVfMynbtk15+6WY7llVIjz vMOU7y3tDNBTuTcdnrPaNkWQ5DwWQ6ioTozdtpHpW63D9+IfFYuLdWz19SL3LjkO o7DQmQzUzZCvTN4faWUazDKwEi1CjpuioTcMS6DdmNaB8Yc8UtzeZdJgRXZHqZg9 HaP15lNjlYpw5dbNBUUc2pQtpoKcTelNarxJH1rtTNZVp4ok2h7zT/jmSh1cGGbh pGv4JGRMJBY0Z4fTmsjno14EbVFzRB0YEySi9r2DD9DHAeq6Li5/762ou1InmyWb YJb8cCKM8t+maeJll37vCJ2sgPypJhPTfNrHq1QWsBRo5JKRwVAIU4Qr1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPLMu0T2HTfTjsORngaDVKixxCcIMB8GA1UdIwQY MBaAFFxdhpdKe2JBkuyNg0zykG4TAuQxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEYyR2wwcDdZa0dTN0kyRFRQS1FiaE1DNURFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mNTViNTctZWNiYS00ZDNkLTlhODEt YmQ4MDJmYzRhYTk0LzEvOHN5N1JQWWROOU9PdzVHZUJvTlVxTEhFSndnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9mNTViNTctZWNiYS00ZDNkLTlhODEtYmQ4MDJmYzRhYTk0 LzEvWEYyR2wwcDdZa0dTN0kyRFRQS1FiaE1DNURFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsOOoMA0G CSqGSIb3DQEBCwUAA4IBAQAf/1QuBnW9YXoGB/wGtTszvaKWhSmscYTOtR06GVlW a8JQ5kaOE96AaTi8HlS93/Qjh3ywgSYsUQWnqGZIKMve1OnFt3hg/cmMfUaHlqsd IiqEO4RMUNhb0I0OWGaG5dVviNydlwf3Je6ljSnFxEgYVN8OqMGi+MHjPE7jRaLb lNTZbQKjpujxqyKSB0k5N8nDYuU6hfU5k7AIwYNVMf9qzYOypumHQgOQ5BtmReRJ +fXrAVYhu1+RkScrpPrWcdT2AfDZXEmWESLL4PerC2ZcqaOzoKmrtbf3LZHDP5AP dichVwxJ5GDfBYllEhl1+Y1YBYgn/YidxtAKVSzua3ya -----END CERTIFICATE-----Generated at Tue Jan 27 02:07:07 2026 by rpki-client