This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/Co8NoEEwyeuIwPmymA_HcaTKTPE.roa File: Co8NoEEwyeuIwPmymA_HcaTKTPE.roa (raw, json) Hash identifier: ALdpDTVjmvNde4CJTmFwYVhe7PvyZvoiVseaJIdwmh0= Subject key identifier: 0A:8F:0D:A0:41:30:C9:EB:88:C0:F9:B2:98:0F:C7:71:A4:CA:4C:F1 Certificate issuer: /CN=86fa564cf97577c07633ba4e640ea78c76fc17dd Certificate serial: 019B7F82A6628A2B57F49DBBCA224579DEAC Authority key identifier: 86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/Co8NoEEwyeuIwPmymA_HcaTKTPE.roa Signing time: Fri 02 Jan 2026 16:20:27 +0000 ROA not before: Fri 02 Jan 2026 16:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39294 IP address blocks: 45.82.216.0/24 maxlen: 24 45.82.218.0/24 maxlen: 24 45.82.219.0/24 maxlen: 24 195.88.134.0/24 maxlen: 24 195.88.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:a6:62:8a:2b:57:f4:9d:bb:ca:22:45:79:de:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fa564cf97577c07633ba4e640ea78c76fc17dd Validity Not Before: Jan 2 16:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a8f0da04130c9eb88c0f9b2980fc771a4ca4cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a0:fa:02:9a:34:b3:b0:c5:a1:e5:35:1a:24: 1c:98:c6:40:a1:e3:92:ad:5a:b2:ba:48:25:ba:31: 0d:60:7f:93:92:57:de:bb:82:56:32:df:67:79:82: d1:f2:ce:20:a8:e1:83:ec:bc:6f:81:ac:b5:50:73: de:92:fa:75:92:0b:27:fb:20:e5:21:fe:64:e8:c1: 13:45:ca:73:7a:86:d5:bd:da:f8:ac:f0:c0:fd:c2: 5b:a5:dd:f6:e4:76:f3:91:8c:29:8e:e0:e5:3e:48: 40:e9:60:a8:a4:6e:c7:aa:b7:ab:a3:30:1e:bc:09: 7d:18:9c:ec:24:65:70:86:c3:9c:19:f5:68:fe:b5: 35:c4:de:35:4a:8e:3b:6a:88:c3:48:66:58:f2:64: 1a:07:99:72:94:44:57:80:b1:9a:ca:3f:9f:86:e6: 93:fb:94:c6:a0:7e:7d:fe:fd:2f:1a:78:ce:44:08: 9d:ef:a1:51:f2:64:44:89:8f:f5:97:ff:fa:3b:5c: 00:b6:18:33:1a:58:1a:fe:b4:3e:11:35:c7:ae:63: d8:81:45:15:f8:30:4a:16:5e:10:a3:55:4d:73:ea: dc:9b:04:c1:93:0b:4d:05:ec:9a:40:ec:f0:b3:ca: 58:13:3a:70:aa:e9:a0:2e:91:cc:c5:20:06:4e:4d: ae:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8F:0D:A0:41:30:C9:EB:88:C0:F9:B2:98:0F:C7:71:A4:CA:4C:F1 X509v3 Authority Key Identifier: keyid:86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/Co8NoEEwyeuIwPmymA_HcaTKTPE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.216.0/24 45.82.218.0/23 195.88.134.0/23 Signature Algorithm: sha256WithRSAEncryption 23:79:68:e8:56:ad:87:93:29:30:b0:ba:92:6a:05:d1:aa:d1: df:79:0e:89:e7:7e:bd:2e:9a:6f:20:14:f0:a2:9e:36:fb:04: 1b:2a:e9:84:c0:3b:65:28:10:ae:b7:a2:e3:a5:1c:f3:03:79: cd:a2:e4:3c:3e:2c:01:da:72:16:1d:ce:67:77:49:32:8c:88: 9b:06:97:14:d0:6d:03:74:66:db:f3:74:30:5a:fe:6d:e5:29: eb:92:79:57:54:08:2b:37:70:5d:cf:48:88:1a:09:83:2d:47: de:17:b5:ff:ab:39:93:9b:66:0c:aa:66:e6:07:22:c9:cf:f2: 0f:d3:ef:1e:bf:10:3b:38:3c:1f:34:a9:47:47:7c:f5:b7:97: 98:4e:07:5d:75:ee:da:87:e1:ed:f6:02:43:6e:34:5e:73:22: 44:6b:83:f4:be:dd:1f:55:fd:45:5e:fe:70:73:25:c8:26:25: 37:fe:ed:30:88:29:0b:86:c6:8f:5a:46:c8:ea:8f:03:0f:3b: 63:b5:8e:47:a7:31:b6:94:d2:8d:57:97:c0:56:17:46:34:e9: 33:59:1e:62:da:4c:be:c2:8c:81:9b:30:85:0e:b8:8a:09:8d: 05:d1:fe:a4:5a:00:dd:7e:ad:06:22:5c:ec:ab:d8:ac:fc:08: c5:3e:ff:8f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/gqZiiitX9J27yiJFed6sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZmE1NjRjZjk3NTc3YzA3NjMzYmE0ZTY0MGVhNzhjNzZm YzE3ZGQwHhcNMjYwMTAyMTYyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYThmMGRhMDQxMzBjOWViODhjMGY5YjI5ODBmYzc3MWE0Y2E0Y2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qD6Apo0s7DFoeU1GiQcmMZAoeOS rVqyukglujENYH+Tklfeu4JWMt9neYLR8s4gqOGD7Lxvgay1UHPekvp1kgsn+yDl If5k6METRcpzeobVvdr4rPDA/cJbpd325HbzkYwpjuDlPkhA6WCopG7HqrerozAe vAl9GJzsJGVwhsOcGfVo/rU1xN41So47aojDSGZY8mQaB5lylERXgLGayj+fhuaT +5TGoH59/v0vGnjORAid76FR8mREiY/1l//6O1wAthgzGlga/rQ+ETXHrmPYgUUV +DBKFl4Qo1VNc+rcmwTBkwtNBeyaQOzws8pYEzpwqumgLpHMxSAGTk2uowIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAqPDaBBMMnriMD5spgPx3GkykzxMB8GA1UdIwQY MBaAFIb6Vkz5dXfAdjO6TmQOp4x2/BfdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHZwV1RQbDFkOEIyTTdwT1pBNm5qSGI4RjkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zOWNiNGYtY2E4OC00ODBlLTk3ZDkt MDczZDBkMTRkZGRlLzEvQ284Tm9FRXd5ZXVJd1BteW1BX0hjYVRLVFBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8zOWNiNGYtY2E4OC00ODBlLTk3ZDktMDczZDBkMTRkZGRl LzEvaHZwV1RQbDFkOEIyTTdwT1pBNm5qSGI4RjkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVLYAwQB LVLaAwQBw1iGMA0GCSqGSIb3DQEBCwUAA4IBAQAjeWjoVq2HkykwsLqSagXRqtHf eQ6J5369LppvIBTwop42+wQbKumEwDtlKBCut6LjpRzzA3nNouQ8PiwB2nIWHc5n d0kyjIibBpcU0G0DdGbb83QwWv5t5SnrknlXVAgrN3Bdz0iIGgmDLUfeF7X/qzmT m2YMqmbmByLJz/IP0+8evxA7ODwfNKlHR3z1t5eYTgddde7ah+Ht9gJDbjRecyJE a4P0vt0fVf1FXv5wcyXIJiU3/u0wiCkLhsaPWkbI6o8DDztjtY5HpzG2lNKNV5fA VhdGNOkzWR5i2ky+woyBmzCFDriKCY0F0f6kWgDdfq0GIlzsq9is/AjFPv+P -----END CERTIFICATE-----Generated at Tue Feb 10 03:57:17 2026 by rpki-client