This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/8cg2nEVG8Xzu0RX4ymhKb5woKRk.roa File: 8cg2nEVG8Xzu0RX4ymhKb5woKRk.roa (raw, json) Hash identifier: kcwFv0RR8Ptv5DePTusLmAIEM0ACWY+zBbPUnnsVU90= Subject key identifier: F1:C8:36:9C:45:46:F1:7C:EE:D1:15:F8:CA:68:4A:6F:9C:28:29:19 Certificate issuer: /CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e Certificate serial: 019B78A2B921CD0E90359DF413BB81549F29 Authority key identifier: 8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/8cg2nEVG8Xzu0RX4ymhKb5woKRk.roa Signing time: Thu 01 Jan 2026 08:18:08 +0000 ROA not before: Thu 01 Jan 2026 08:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198126 IP address blocks: 91.231.228.0/24 maxlen: 24 2001:678:3bc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:b9:21:cd:0e:90:35:9d:f4:13:bb:81:54:9f:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e Validity Not Before: Jan 1 08:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1c8369c4546f17ceed115f8ca684a6f9c282919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:27:87:f8:60:41:e3:7a:8c:ba:1a:b0:0a:06: ec:99:12:d9:a2:02:5c:01:ac:99:38:89:c2:7b:f6: 60:8c:ea:5f:e4:e1:f1:cb:a1:ed:44:03:fc:00:7f: b7:d6:bc:3e:63:24:a1:ab:f5:96:21:5e:89:22:e9: dc:ee:cd:b9:a1:9f:4e:e4:91:3d:5f:8c:42:6f:75: 6a:07:e1:bd:a6:e8:33:25:4d:e6:6e:f2:42:23:93: 7c:25:17:bc:eb:8b:48:d4:fe:72:6e:be:94:c8:35: 9b:39:08:d3:1b:a0:b5:cb:53:0f:fc:65:62:b7:26: e6:c1:0b:00:58:8b:4b:63:df:b2:8b:38:b2:d0:1c: b8:60:e6:28:35:13:ed:d0:10:de:bc:0d:1b:58:88: 2d:d1:e7:13:03:ba:44:c9:2a:74:0f:dc:4b:5f:0e: c0:0e:38:dd:d8:40:4f:16:08:15:2d:21:4c:70:10: e1:7c:4a:3c:6e:5b:78:26:cd:37:7b:6b:3d:e9:36: df:cc:63:56:2a:71:5e:76:94:53:07:1c:77:8a:33: 4a:03:75:6a:b6:24:05:e7:66:bb:cb:dc:b0:0f:6f: 53:9f:f1:66:60:f4:43:bc:07:db:d1:7c:1a:14:c3: 38:51:fb:40:8a:e9:0a:b5:29:8e:36:fc:48:7f:c6: 55:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C8:36:9C:45:46:F1:7C:EE:D1:15:F8:CA:68:4A:6F:9C:28:29:19 X509v3 Authority Key Identifier: keyid:8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/8cg2nEVG8Xzu0RX4ymhKb5woKRk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.231.228.0/24 IPv6: 2001:678:3bc::/48 Signature Algorithm: sha256WithRSAEncryption 12:b3:33:a6:d6:de:9b:50:0a:8a:e3:ce:d2:2c:61:a3:19:4e: 18:f7:e2:2d:64:c6:c0:07:22:e7:d1:70:15:72:b3:f9:ff:5b: 97:9c:9c:b1:35:20:7c:59:23:26:ee:5d:b1:db:50:fe:f8:e7: 1e:90:3a:5a:0a:31:db:76:20:fe:e6:53:c3:f5:86:39:42:ee: 77:cc:4d:c1:bd:d9:03:ae:a4:38:13:f3:e7:76:e3:d0:ca:ce: 44:e8:3c:4a:27:7c:cc:47:19:36:0d:47:2d:64:59:0f:23:02: 7e:cb:a6:c8:14:2b:7d:ba:43:af:29:ef:22:ac:02:77:98:b7: 9f:cf:a0:82:c8:34:40:74:6d:98:e1:e7:5c:a0:18:bd:26:c9: 67:7e:b4:3e:9c:7e:37:e5:7b:a8:3b:14:c6:40:05:82:bf:56: 20:47:78:45:2d:2d:65:cc:c7:81:9f:c2:cf:f7:20:67:18:0b: 4b:35:22:a1:bd:37:a8:65:e2:08:23:cc:80:3c:5f:e3:7d:3d: 06:0e:63:b5:ef:aa:08:9e:2d:a8:91:a6:59:fd:29:7e:fe:17: c7:e2:28:f3:4a:a9:a4:04:2b:af:9a:4e:98:02:39:9a:f4:7b: ed:bb:f0:6f:72:5f:38:48:c7:c1:d6:08:87:c9:d7:d0:d6:5c: 4b:9a:d5:2b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4orkhzQ6QNZ30E7uBVJ8pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlN2ZjZWQ0ZjM0ZTdmMzdlNzUxYjViNDVmMzBiOTljNjMx MWY5N2UwHhcNMjYwMTAxMDgxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWM4MzY5YzQ1NDZmMTdjZWVkMTE1ZjhjYTY4NGE2ZjljMjgyOTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCeH+GBB43qMuhqwCgbsmRLZogJc AayZOInCe/ZgjOpf5OHxy6HtRAP8AH+31rw+YyShq/WWIV6JIunc7s25oZ9O5JE9 X4xCb3VqB+G9pugzJU3mbvJCI5N8JRe864tI1P5ybr6UyDWbOQjTG6C1y1MP/GVi tybmwQsAWItLY9+yiziy0By4YOYoNRPt0BDevA0bWIgt0ecTA7pEySp0D9xLXw7A Djjd2EBPFggVLSFMcBDhfEo8blt4Js03e2s96TbfzGNWKnFedpRTBxx3ijNKA3Vq tiQF52a7y9ywD29Tn/FmYPRDvAfb0XwaFMM4UftAiukKtSmONvxIf8ZV5QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFPHINpxFRvF87tEV+MpoSm+cKCkZMB8GA1UdIwQY MBaAFI5/ztTzTn8351G1tF8wuZxjEfl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam5fTzFQTk9memZuVWJXMFh6QzVuR01SLVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS85MTNjZDctNTkzZi00ZTk5LWI1ZWUt MGQwNTAzNThlNjU2LzEvOGNnMm5FVkc4WHp1MFJYNHltaEtiNXdvS1JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS85MTNjZDctNTkzZi00ZTk5LWI1ZWUtMGQwNTAzNThlNjU2 LzEvam5fTzFQTk9memZuVWJXMFh6QzVuR01SLVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW+fkMA8E AgACMAkDBwAgAQZ4A7wwDQYJKoZIhvcNAQELBQADggEBABKzM6bW3ptQCorjztIs YaMZThj34i1kxsAHIufRcBVys/n/W5ecnLE1IHxZIybuXbHbUP745x6QOloKMdt2 IP7mU8P1hjlC7nfMTcG92QOupDgT8+d249DKzkToPEonfMxHGTYNRy1kWQ8jAn7L psgUK326Q68p7yKsAneYt5/PoILINEB0bZjh51ygGL0myWd+tD6cfjfle6g7FMZA BYK/ViBHeEUtLWXMx4Gfws/3IGcYC0s1IqG9N6hl4ggjzIA8X+N9PQYOY7Xvqgie LaiRpln9KX7+F8fiKPNKqaQEK6+aTpgCOZr0e+278G9yXzhIx8HWCIfJ19DWXEua 1Ss= -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:19 2026 by rpki-client