This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/8nI5XphuKEFYn2qpBVoD2ClJd40.roa File: 8nI5XphuKEFYn2qpBVoD2ClJd40.roa (raw, json) Hash identifier: c3cddBuV2MILIsaSSUtkvwu3f9bCRyo6z910eiwVKSY= Subject key identifier: F2:72:39:5E:98:6E:28:41:58:9F:6A:A9:05:5A:03:D8:29:49:77:8D Certificate issuer: /CN=5695c54a09593ddc83face12db52bf6a22b976ed Certificate serial: 019B7C7FC1727B1D72EFAB0F43319D2FDFB4 Authority key identifier: 56:95:C5:4A:09:59:3D:DC:83:FA:CE:12:DB:52:BF:6A:22:B9:76:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/8nI5XphuKEFYn2qpBVoD2ClJd40.roa Signing time: Fri 02 Jan 2026 02:18:25 +0000 ROA not before: Fri 02 Jan 2026 02:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56964 IP address blocks: 77.95.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:c1:72:7b:1d:72:ef:ab:0f:43:31:9d:2f:df:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5695c54a09593ddc83face12db52bf6a22b976ed Validity Not Before: Jan 2 02:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f272395e986e2841589f6aa9055a03d82949778d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:62:12:09:ea:4e:d3:27:92:5e:79:32:2c:61: 7b:ab:4a:fa:3d:3b:99:66:ef:fa:70:1f:63:f8:14: 5e:a0:c5:02:7a:f4:3f:c5:6f:77:1a:74:de:e4:db: 70:53:c4:96:f7:67:cc:af:ff:f6:cd:22:14:72:30: f2:49:7a:7b:dc:69:a1:2b:1f:62:d7:70:46:73:04: 4d:03:38:b1:4e:4d:70:2c:fb:e2:ba:85:3b:be:b4: bf:56:b8:dc:1a:92:ec:97:d7:85:71:d0:6a:4c:88: 01:bf:55:38:7e:52:a0:15:6e:55:1b:99:e0:3c:d1: 4b:a7:50:7a:93:f8:77:3c:13:1e:25:58:27:1f:04: 57:cc:22:0a:e0:fe:58:26:78:55:3a:6a:5f:0f:60: d8:7c:c4:93:e5:52:ab:61:b2:64:67:c7:78:61:70: 70:8f:cb:19:ee:81:95:f5:83:e9:2d:aa:01:ab:2d: 86:9b:ef:63:6a:fb:88:e5:08:24:c7:9c:31:a3:62: bd:6d:12:48:3d:87:65:f5:79:12:bb:b9:8e:6c:e8: b8:7d:dd:c4:01:b2:46:c6:46:e3:c1:3f:6a:a9:22: 57:d7:78:c1:8c:89:69:4d:1e:05:06:67:5a:02:10: 3f:94:7f:b3:60:06:25:c1:2a:42:5a:32:03:c1:22: b0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:72:39:5E:98:6E:28:41:58:9F:6A:A9:05:5A:03:D8:29:49:77:8D X509v3 Authority Key Identifier: keyid:56:95:C5:4A:09:59:3D:DC:83:FA:CE:12:DB:52:BF:6A:22:B9:76:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/8nI5XphuKEFYn2qpBVoD2ClJd40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.95.170.0/24 Signature Algorithm: sha256WithRSAEncryption 99:e6:10:b9:ce:b0:22:ca:14:08:33:12:83:43:c5:ab:8f:da: 50:b1:55:fb:27:4e:fe:67:35:5c:48:a0:09:84:0b:8d:0a:b1: 0c:44:e7:ed:16:53:9b:79:db:3a:21:a3:16:4f:81:16:08:92: b1:46:21:8c:fd:81:4f:45:c8:05:b7:d3:65:a9:94:6c:70:2c: cf:57:4b:89:df:4d:b5:d3:2d:14:9f:48:fb:39:e1:ca:77:94: c5:27:3d:74:67:5f:ed:35:0d:ac:7f:31:e6:50:a7:9d:02:ee: 2d:a3:17:65:d2:af:e7:b0:ee:1c:75:a4:92:6a:69:9e:82:64: a1:12:64:b1:a6:a1:4f:e0:a0:85:57:b6:f1:d8:06:39:37:42: 80:a4:4c:d8:74:7a:b2:17:0a:d4:d0:05:bc:3a:1b:42:67:bf: ef:cb:3e:14:ef:dc:89:e1:88:d3:e4:21:c1:57:32:a0:0f:b8: f6:4b:54:b6:fb:ee:de:1a:e7:e5:ad:0a:93:03:8d:3c:cb:f8: 67:04:e2:e5:ab:d6:93:7a:a6:d8:f1:8e:46:e5:02:53:f6:0d: 03:00:a3:c9:44:3d:9a:52:65:9f:ec:18:26:1a:2b:a2:5d:41: 95:4c:ee:ae:72:a0:20:5d:b4:ae:3c:72:05:0c:0f:f0:11:49: 58:bd:31:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f8Fyex1y76sPQzGdL9+0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OTVjNTRhMDk1OTNkZGM4M2ZhY2UxMmRiNTJiZjZhMjJi OTc2ZWQwHhcNMjYwMTAyMDIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjcyMzk1ZTk4NmUyODQxNTg5ZjZhYTkwNTVhMDNkODI5NDk3NzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WISCepO0yeSXnkyLGF7q0r6PTuZ Zu/6cB9j+BReoMUCevQ/xW93GnTe5NtwU8SW92fMr//2zSIUcjDySXp73GmhKx9i 13BGcwRNAzixTk1wLPviuoU7vrS/VrjcGpLsl9eFcdBqTIgBv1U4flKgFW5VG5ng PNFLp1B6k/h3PBMeJVgnHwRXzCIK4P5YJnhVOmpfD2DYfMST5VKrYbJkZ8d4YXBw j8sZ7oGV9YPpLaoBqy2Gm+9javuI5Qgkx5wxo2K9bRJIPYdl9XkSu7mObOi4fd3E AbJGxkbjwT9qqSJX13jBjIlpTR4FBmdaAhA/lH+zYAYlwSpCWjIDwSKwSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPJyOV6YbihBWJ9qqQVaA9gpSXeNMB8GA1UdIwQY MBaAFFaVxUoJWT3cg/rOEttSv2oiuXbtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnBYRlNnbFpQZHlELXM0UzIxS19haUs1ZHUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9lZWI1MTctYjM4Yi00MDczLWEyYWUt ZTNmYTllNjNiOWJjLzEvOG5JNVhwaHVLRUZZbjJxcEJWb0QyQ2xKZDQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9lZWI1MTctYjM4Yi00MDczLWEyYWUtZTNmYTllNjNiOWJj LzEvVnBYRlNnbFpQZHlELXM0UzIxS19haUs1ZHUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATV+qMA0G CSqGSIb3DQEBCwUAA4IBAQCZ5hC5zrAiyhQIMxKDQ8Wrj9pQsVX7J07+ZzVcSKAJ hAuNCrEMROftFlObeds6IaMWT4EWCJKxRiGM/YFPRcgFt9NlqZRscCzPV0uJ3021 0y0Un0j7OeHKd5TFJz10Z1/tNQ2sfzHmUKedAu4toxdl0q/nsO4cdaSSammegmSh EmSxpqFP4KCFV7bx2AY5N0KApEzYdHqyFwrU0AW8OhtCZ7/vyz4U79yJ4YjT5CHB VzKgD7j2S1S2++7eGuflrQqTA408y/hnBOLlq9aTeqbY8Y5G5QJT9g0DAKPJRD2a UmWf7BgmGiuiXUGVTO6ucqAgXbSuPHIFDA/wEUlYvTGN -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:44 2026 by rpki-client