This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/8rmDqmEsv3U_nLQ78eYKP67sL2I.roa File: 8rmDqmEsv3U_nLQ78eYKP67sL2I.roa (raw, json) Hash identifier: QZ5ZJadUwZH2YCH4im1WUkClReI4yp0qFMn1l3avxQE= Subject key identifier: F2:B9:83:AA:61:2C:BF:75:3F:9C:B4:3B:F1:E6:0A:3F:AE:EC:2F:62 Certificate issuer: /CN=c3b88be5513f1ae72493522fa6697eff33692ae0 Certificate serial: 019B7834EF15955DDCFDE3CA5A6550E91396 Authority key identifier: C3:B8:8B:E5:51:3F:1A:E7:24:93:52:2F:A6:69:7E:FF:33:69:2A:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/8rmDqmEsv3U_nLQ78eYKP67sL2I.roa Signing time: Thu 01 Jan 2026 06:18:13 +0000 ROA not before: Thu 01 Jan 2026 06:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51514 IP address blocks: 37.221.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ef:15:95:5d:dc:fd:e3:ca:5a:65:50:e9:13:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b88be5513f1ae72493522fa6697eff33692ae0 Validity Not Before: Jan 1 06:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2b983aa612cbf753f9cb43bf1e60a3faeec2f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f5:d9:ee:74:04:4e:c6:ba:ed:6b:fd:7f:25: 99:ed:f8:3a:93:b8:01:ae:cf:71:8a:dc:f7:ad:ae: 71:1f:7d:31:5c:89:81:76:05:05:a3:ae:76:50:b0: b0:4f:24:1b:59:0b:e2:6f:4c:6b:dc:0e:ae:d6:56: 0b:d5:66:8f:f3:8e:bf:6b:f3:c4:6b:24:17:be:cb: ac:f9:e6:8c:98:d1:c9:a6:86:7f:43:bb:65:e6:6c: f2:bd:83:6b:36:7e:1e:0f:39:be:d2:04:81:3d:47: 9b:f1:b5:80:ae:c5:d4:ee:f4:e0:de:91:59:d9:83: 09:4d:2d:0f:b5:ff:ab:9a:cc:74:c2:4b:71:7f:d7: 82:8f:2f:3f:69:64:6c:ce:56:eb:21:fe:3d:ad:7f: 44:b8:c5:36:f7:57:c0:04:35:d4:38:cf:67:d5:e7: 00:d2:8f:43:dc:1b:c6:25:27:14:3e:47:c5:7c:94: 3e:98:ac:77:a5:d9:f8:f4:8e:55:00:c3:bb:d2:11: 18:75:31:4e:6f:99:07:f2:1b:6b:f5:75:2d:c8:4e: eb:16:b9:ab:39:05:df:ec:4e:e6:f3:85:b3:77:52: 53:ba:49:4a:e7:b6:d6:b7:c0:1c:3e:a5:ae:a3:4b: 4c:5f:f8:4f:af:8b:b6:f9:f1:f3:a4:88:1a:6f:ec: db:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B9:83:AA:61:2C:BF:75:3F:9C:B4:3B:F1:E6:0A:3F:AE:EC:2F:62 X509v3 Authority Key Identifier: keyid:C3:B8:8B:E5:51:3F:1A:E7:24:93:52:2F:A6:69:7E:FF:33:69:2A:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/8rmDqmEsv3U_nLQ78eYKP67sL2I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.221.216.0/21 Signature Algorithm: sha256WithRSAEncryption a2:51:82:eb:d1:0b:c0:f3:72:e2:bc:81:43:c1:fb:ca:c0:9d: 25:9d:b6:a5:b2:00:65:60:8f:7c:c0:7b:93:32:4b:fe:61:0d: d2:93:cf:01:ed:5e:51:84:5d:85:2e:b2:7a:a1:26:3e:11:cc: 0b:f6:a7:3b:56:cb:41:3c:be:3e:d1:38:57:b3:a9:d9:00:dc: 9a:4a:8f:ae:ad:96:52:01:a8:af:c4:04:01:a9:f9:3b:eb:59: 48:a2:72:5c:aa:5c:bb:94:01:e8:af:59:24:4b:fb:97:19:0a: c5:f0:b9:dd:49:71:59:08:e0:96:72:62:d1:09:a0:b4:fb:ad: 61:e8:07:1a:4b:65:cf:35:2a:85:bd:7e:3c:ac:90:c1:52:db: 5e:2c:4d:71:fd:79:6f:6e:f4:12:a8:45:72:ed:5e:59:a6:bc: 4b:63:bf:d8:f7:9a:50:9a:d2:9f:fb:59:92:8a:00:3e:25:21: 51:ab:64:2d:b8:b7:ab:d9:90:31:21:2c:0d:b2:32:59:46:4e: a0:cc:da:67:30:b1:5a:1e:48:4c:7f:92:54:0b:63:15:19:b7: 3d:67:0c:12:3f:cf:3d:13:19:2f:fa:c6:29:3b:0d:9e:b1:2a: 42:fc:84:d0:5c:35:68:1a:a9:d0:6b:f6:bd:52:71:4e:a6:9e: e8:fe:09:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NO8VlV3c/ePKWmVQ6ROWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYjg4YmU1NTEzZjFhZTcyNDkzNTIyZmE2Njk3ZWZmMzM2 OTJhZTAwHhcNMjYwMTAxMDYxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmI5ODNhYTYxMmNiZjc1M2Y5Y2I0M2JmMWU2MGEzZmFlZWMyZjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfXZ7nQETsa67Wv9fyWZ7fg6k7gB rs9xitz3ra5xH30xXImBdgUFo652ULCwTyQbWQvib0xr3A6u1lYL1WaP846/a/PE ayQXvsus+eaMmNHJpoZ/Q7tl5mzyvYNrNn4eDzm+0gSBPUeb8bWArsXU7vTg3pFZ 2YMJTS0Ptf+rmsx0wktxf9eCjy8/aWRszlbrIf49rX9EuMU291fABDXUOM9n1ecA 0o9D3BvGJScUPkfFfJQ+mKx3pdn49I5VAMO70hEYdTFOb5kH8htr9XUtyE7rFrmr OQXf7E7m84Wzd1JTuklK57bWt8AcPqWuo0tMX/hPr4u2+fHzpIgab+zbpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPK5g6phLL91P5y0O/HmCj+u7C9iMB8GA1UdIwQY MBaAFMO4i+VRPxrnJJNSL6Zpfv8zaSrgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzdpTDVWRV9HdWNrazFJdnBtbC1fek5wS3VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82ZTZkZjgtZTcyYS00MTU1LTllMDgt MGU0N2VkZTMwNWIzLzEvOHJtRHFtRXN2M1VfbkxRNzhlWUtQNjdzTDJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy82ZTZkZjgtZTcyYS00MTU1LTllMDgtMGU0N2VkZTMwNWIz LzEvdzdpTDVWRV9HdWNrazFJdnBtbC1fek5wS3VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJd3YMA0G CSqGSIb3DQEBCwUAA4IBAQCiUYLr0QvA83LivIFDwfvKwJ0lnbalsgBlYI98wHuT Mkv+YQ3Sk88B7V5RhF2FLrJ6oSY+EcwL9qc7VstBPL4+0ThXs6nZANyaSo+urZZS AaivxAQBqfk761lIonJcqly7lAHor1kkS/uXGQrF8LndSXFZCOCWcmLRCaC0+61h 6AcaS2XPNSqFvX48rJDBUtteLE1x/XlvbvQSqEVy7V5ZprxLY7/Y95pQmtKf+1mS igA+JSFRq2QtuLer2ZAxISwNsjJZRk6gzNpnMLFaHkhMf5JUC2MVGbc9ZwwSP889 Exkv+sYpOw2esSpC/ITQXDVoGqnQa/a9UnFOpp7o/gnr -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:24 2026 by rpki-client