This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/8gg12X3s1LPBf_d0sIf23T4p0tk.roa File: 8gg12X3s1LPBf_d0sIf23T4p0tk.roa (raw, json) Hash identifier: 319DbafJhZd2xmNMsWkQ3NZC3fYpVLzj/Zav+e/7chk= Subject key identifier: F2:08:35:D9:7D:EC:D4:B3:C1:7F:F7:74:B0:87:F6:DD:3E:29:D2:D9 Certificate issuer: /CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad Certificate serial: 019B7E3836DE4339566DC017C6B95526F3C6 Authority key identifier: C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/8gg12X3s1LPBf_d0sIf23T4p0tk.roa Signing time: Fri 02 Jan 2026 10:19:31 +0000 ROA not before: Fri 02 Jan 2026 10:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43926 IP address blocks: 46.253.32.0/21 maxlen: 21 185.58.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:36:de:43:39:56:6d:c0:17:c6:b9:55:26:f3:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad Validity Not Before: Jan 2 10:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f20835d97decd4b3c17ff774b087f6dd3e29d2d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a0:5e:03:3d:77:f3:a4:28:16:21:d6:d2:ee: 15:f5:51:d6:05:82:a5:1e:df:19:7d:f1:a0:84:9d: 38:93:39:fc:e5:05:54:e1:a2:36:74:b2:66:e9:41: 4c:4c:2e:28:52:a1:53:b4:ea:f7:c6:eb:f8:54:b5: 5b:d3:11:bc:4f:87:36:9d:cb:15:c3:42:96:f7:c3: a4:11:cf:0c:89:55:c4:39:69:97:58:e2:d1:1f:00: b0:18:6a:db:89:d7:0a:da:b7:e3:8e:2a:37:7c:f0: 79:70:29:46:46:de:1f:2a:00:43:91:2e:8f:0e:84: 9f:fb:72:2a:63:ed:84:3e:7b:ec:2f:89:ed:91:55: ca:a3:a0:e5:03:7e:f8:86:c5:c4:03:b2:ee:e8:3b: 69:84:2a:03:05:49:0a:01:e5:23:28:45:ac:9a:39: 3e:1b:2d:54:5c:72:b5:b5:8c:fd:fa:75:38:51:ba: e5:cd:91:94:45:4d:65:25:1e:69:65:43:f8:28:70: cf:52:fa:2f:39:64:2a:19:90:97:2b:bb:ac:d6:02: c6:51:4f:23:7b:d9:15:74:00:aa:ec:71:8d:dd:1f: 6e:78:2d:8c:fd:28:dc:b3:3a:92:d6:47:29:2b:62: a1:c1:86:9e:f0:65:eb:45:35:f5:d9:c5:b2:34:6c: 2b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:08:35:D9:7D:EC:D4:B3:C1:7F:F7:74:B0:87:F6:DD:3E:29:D2:D9 X509v3 Authority Key Identifier: keyid:C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/8gg12X3s1LPBf_d0sIf23T4p0tk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.253.32.0/21 185.58.172.0/22 Signature Algorithm: sha256WithRSAEncryption 61:00:02:8c:51:70:13:0f:79:f7:14:75:5d:e9:d7:cb:3c:2e: a9:75:4f:85:16:02:2b:ba:0f:68:eb:29:58:2d:57:7b:2b:35: ca:4d:d4:d5:e8:d6:e0:ce:e6:21:71:78:5c:b5:e9:1d:f4:f7: 30:c1:ab:ee:fb:47:97:39:b3:6d:91:d8:52:c2:bc:b0:b8:13: 83:b9:3b:b7:e7:79:7c:47:21:e4:fd:d4:59:16:30:06:37:eb: c0:a7:77:3e:65:bd:e6:44:37:7d:f8:94:63:51:ae:8a:2d:ed: da:ca:72:1d:0d:c7:da:9c:10:3b:78:7b:26:f4:05:46:5a:a3: 3e:eb:8a:3c:7f:a7:ee:f2:cc:25:26:24:b3:e2:2c:58:a9:84: 73:40:61:b3:dd:5e:aa:b4:76:f9:f6:0a:2e:0a:c7:30:17:d4: 9c:97:1a:ed:e6:57:74:cb:24:e5:0b:03:69:b0:52:6c:73:2c: 07:d8:af:27:3e:b5:37:c9:c0:9e:70:f7:61:c9:61:01:f5:3b: c2:1c:02:f9:ef:96:7c:49:e9:c8:39:a5:fb:1c:ca:ba:14:fa: 14:dc:63:85:89:c4:72:a2:fa:70:93:87:52:72:af:00:71:6b: b1:e8:53:f7:7b:15:64:b5:a2:0a:72:90:d2:d6:83:a4:6b:17: 05:c4:03:9a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+ODbeQzlWbcAXxrlVJvPGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZThlNTZiMThkNDVjNjQ2ZjAzY2I2ZjkwNjlkYTBjOGIz Yzc0YWQwHhcNMjYwMTAyMTAxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjA4MzVkOTdkZWNkNGIzYzE3ZmY3NzRiMDg3ZjZkZDNlMjlkMmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaBeAz1386QoFiHW0u4V9VHWBYKl Ht8ZffGghJ04kzn85QVU4aI2dLJm6UFMTC4oUqFTtOr3xuv4VLVb0xG8T4c2ncsV w0KW98OkEc8MiVXEOWmXWOLRHwCwGGrbidcK2rfjjio3fPB5cClGRt4fKgBDkS6P DoSf+3IqY+2EPnvsL4ntkVXKo6DlA374hsXEA7Lu6DtphCoDBUkKAeUjKEWsmjk+ Gy1UXHK1tYz9+nU4UbrlzZGURU1lJR5pZUP4KHDPUvovOWQqGZCXK7us1gLGUU8j e9kVdACq7HGN3R9ueC2M/SjcszqS1kcpK2KhwYae8GXrRTX12cWyNGwr8QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPIINdl97NSzwX/3dLCH9t0+KdLZMB8GA1UdIwQY MBaAFMDo5WsY1FxkbwPLb5Bp2gyLPHStMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd09qbGF4alVYR1J2QTh0dmtHbmFESXM4ZEswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yYWJlYTItMzBkMC00NjU0LWE4MzQt NzQ1YmNlMzA2MGM5LzEvOGdnMTJYM3MxTFBCZl9kMHNJZjIzVDRwMHRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8yYWJlYTItMzBkMC00NjU0LWE4MzQtNzQ1YmNlMzA2MGM5 LzEvd09qbGF4alVYR1J2QTh0dmtHbmFESXM4ZEswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLv0gAwQC uTqsMA0GCSqGSIb3DQEBCwUAA4IBAQBhAAKMUXATD3n3FHVd6dfLPC6pdU+FFgIr ug9o6ylYLVd7KzXKTdTV6NbgzuYhcXhctekd9Pcwwavu+0eXObNtkdhSwrywuBOD uTu353l8RyHk/dRZFjAGN+vAp3c+Zb3mRDd9+JRjUa6KLe3aynIdDcfanBA7eHsm 9AVGWqM+64o8f6fu8swlJiSz4ixYqYRzQGGz3V6qtHb59gouCscwF9Sclxrt5ld0 yyTlCwNpsFJscywH2K8nPrU3ycCecPdhyWEB9TvCHAL575Z8SenIOaX7HMq6FPoU 3GOFicRyovpwk4dScq8AcWux6FP3exVktaIKcpDS1oOkaxcFxAOa -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:39 2026 by rpki-client