This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1-L8tDfEG-3pgIU7kfSKnf9ffLk0.roa File: 1-L8tDfEG-3pgIU7kfSKnf9ffLk0.roa (raw, json) Hash identifier: iZJZZ6IHUsAM2x3U2uVQeumOeN1QKM3CgmxIrUe3hSU= Subject key identifier: F8:BF:2D:0D:F1:06:FB:7A:60:21:4E:E4:7D:22:A7:7F:D7:DF:2E:4D Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019B77C752F96B809DF4DD678587B1F0A427 Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1-L8tDfEG-3pgIU7kfSKnf9ffLk0.roa Signing time: Thu 01 Jan 2026 04:18:30 +0000 ROA not before: Thu 01 Jan 2026 04:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400040 IP address blocks: 86.104.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:52:f9:6b:80:9d:f4:dd:67:85:87:b1:f0:a4:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Jan 1 04:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8bf2d0df106fb7a60214ee47d22a77fd7df2e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ea:a8:a6:48:2a:fe:bf:18:c6:f7:2d:2a:15: b5:97:ef:f8:53:fd:e1:ae:cd:23:c4:ac:89:22:20: 86:94:6c:f0:dd:a4:39:23:08:9a:99:ac:4c:8a:82: a7:36:3d:8b:ba:63:85:96:c5:b2:43:83:05:41:67: 68:a2:c0:e7:5f:0c:07:a1:21:d2:dd:82:9e:f9:15: f8:b8:41:c0:f2:2e:43:7d:44:87:e9:79:4d:be:57: 56:b7:66:81:b6:f2:21:c5:71:26:b2:d3:28:94:00: 1b:ef:7e:ee:23:3a:56:d1:0c:c7:ec:4e:4b:28:f1: 7a:24:7e:de:c7:54:8a:18:8e:79:15:cc:d1:a8:a8: 05:ae:fe:d0:b0:0d:ce:42:01:d9:ab:2f:d5:84:9d: 82:c5:fc:af:41:24:f6:be:95:9c:b4:58:cc:02:e3: 1f:85:91:c2:60:09:89:2c:bc:2d:e9:08:9a:7f:9f: cd:7c:b2:0e:3c:41:ca:07:15:fb:cf:f9:d0:0d:f6: 8a:f5:9e:11:65:c7:ac:09:97:bc:6f:e3:87:01:be: ad:37:0a:68:a3:40:63:c2:0c:97:09:8d:bb:b1:a4: 91:c5:df:f5:07:ef:ba:87:e2:fa:b0:2f:0c:d3:14: 0c:29:8b:b0:b9:a8:ad:7e:22:5e:37:e0:73:23:c4: 6f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:BF:2D:0D:F1:06:FB:7A:60:21:4E:E4:7D:22:A7:7F:D7:DF:2E:4D X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1-L8tDfEG-3pgIU7kfSKnf9ffLk0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.104.209.0/24 Signature Algorithm: sha256WithRSAEncryption 28:39:e5:62:e5:cc:49:ec:5a:ba:02:e4:2d:8d:cc:be:f2:89: a3:98:2d:ca:5a:60:91:67:22:c9:b0:95:1d:c1:f4:98:85:ac: 61:b6:92:ff:19:85:25:d2:82:50:5e:74:68:79:f3:1f:c0:00: 2a:99:42:8d:f6:7e:93:a2:31:84:33:30:b4:93:47:7a:fe:a6: 18:4d:68:b1:73:54:16:7d:9c:da:fb:d9:2c:4c:92:e0:ce:88: 18:81:e4:19:7e:0f:e6:f8:2a:e1:8d:df:64:72:d9:1c:a7:6c: db:65:9e:31:29:4b:9f:0c:d0:75:a1:e1:2d:98:ad:ef:e8:d8: ec:12:74:3e:1a:43:5f:c1:09:0a:41:ca:5b:52:28:b4:da:aa: 3e:f7:39:de:19:4c:e3:a7:02:33:f1:47:68:7a:aa:37:e7:e0: 61:f4:73:43:84:3b:11:c3:5d:16:c6:b5:43:68:13:45:c4:8d: 43:cb:ca:26:36:23:bf:26:6e:88:96:b1:1a:34:be:b0:50:93: 95:94:9f:2b:af:a5:e8:2b:9e:66:cc:1f:62:11:9d:1e:66:a0: 3b:5d:84:65:2f:43:7d:bb:7d:93:d7:fd:6e:97:6f:24:e1:c2: 65:b3:e5:84:72:b9:53:87:42:ed:79:1c:6e:c5:a5:2b:09:6a: 8d:91:10:d1 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3x1L5a4Cd9N1nhYex8KQnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMTAxMDQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGJmMmQwZGYxMDZmYjdhNjAyMTRlZTQ3ZDIyYTc3ZmQ3ZGYyZTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeqopkgq/r8YxvctKhW1l+/4U/3h rs0jxKyJIiCGlGzw3aQ5IwiamaxMioKnNj2LumOFlsWyQ4MFQWdoosDnXwwHoSHS 3YKe+RX4uEHA8i5DfUSH6XlNvldWt2aBtvIhxXEmstMolAAb737uIzpW0QzH7E5L KPF6JH7ex1SKGI55FczRqKgFrv7QsA3OQgHZqy/VhJ2CxfyvQST2vpWctFjMAuMf hZHCYAmJLLwt6Qiaf5/NfLIOPEHKBxX7z/nQDfaK9Z4RZcesCZe8b+OHAb6tNwpo o0BjwgyXCY27saSRxd/1B++6h+L6sC8M0xQMKYuwuaitfiJeN+BzI8RvtQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPi/LQ3xBvt6YCFO5H0ip3/X3y5NMB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvMS1MOHREZkVHLTNwZ0lVN2tmU0tuZjlmZkxrMC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYjkvNGJiNWE3LTM0NmMtNDE5NS05ZDBmLTU5ZjU5ODRiNjRl YS8xLzFJb245RXNRUUV4Uzl2X0U0STNJS19pMTN1US5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFZo0TAN BgkqhkiG9w0BAQsFAAOCAQEAKDnlYuXMSexaugLkLY3MvvKJo5gtylpgkWciybCV HcH0mIWsYbaS/xmFJdKCUF50aHnzH8AAKplCjfZ+k6IxhDMwtJNHev6mGE1osXNU Fn2c2vvZLEyS4M6IGIHkGX4P5vgq4Y3fZHLZHKds22WeMSlLnwzQdaHhLZit7+jY 7BJ0PhpDX8EJCkHKW1IotNqqPvc53hlM46cCM/FHaHqqN+fgYfRzQ4Q7EcNdFsa1 Q2gTRcSNQ8vKJjYjvyZuiJaxGjS+sFCTlZSfK6+l6CueZswfYhGdHmagO12EZS9D fbt9k9f9bpdvJOHCZbPlhHK5U4dC7XkcbsWlKwlqjZEQ0Q== -----END CERTIFICATE-----Generated at Thu Jan 1 20:23:16 2026 by rpki-client