This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/8x9EixpS_cTo1YUsFO5RBhE9yQg.roa File: 8x9EixpS_cTo1YUsFO5RBhE9yQg.roa (raw, json) Hash identifier: H+557dvreWM3Tp/NNdorNLcHs2h/JJEHvmmY5yieUec= Subject key identifier: F3:1F:44:8B:1A:52:FD:C4:E8:D5:85:2C:14:EE:51:06:11:3D:C9:08 Certificate issuer: /CN=61041121ccc6e65d933961fd572d59e261f21a31 Certificate serial: 019B77C76C906745F379A44F4E52A7611ED2 Authority key identifier: 61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/8x9EixpS_cTo1YUsFO5RBhE9yQg.roa Signing time: Thu 01 Jan 2026 04:18:36 +0000 ROA not before: Thu 01 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41960 IP address blocks: 185.160.4.0/22 maxlen: 24 2a02:d880::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6c:90:67:45:f3:79:a4:4f:4e:52:a7:61:1e:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61041121ccc6e65d933961fd572d59e261f21a31 Validity Not Before: Jan 1 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f31f448b1a52fdc4e8d5852c14ee5106113dc908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:40:23:d0:fe:8c:e0:dd:b6:e2:3d:89:5a:be: b5:af:ed:a3:4e:c9:2a:06:8a:14:79:25:fa:6d:26: 2a:6c:55:f9:4f:cb:c8:4d:9c:1f:80:7f:19:44:d2: 2b:0e:06:93:63:9e:b1:ba:a0:98:a8:38:36:25:70: d0:9c:a8:d4:41:61:80:4a:00:f2:e1:3c:33:c8:ec: 79:af:c7:dc:55:5a:3b:e0:a5:44:06:62:b1:7a:f5: 96:f7:5a:01:20:4c:ab:12:41:b1:d7:de:4a:d6:81: 82:ed:d1:52:f1:2f:23:e3:38:b8:5e:4d:a6:19:45: 53:ac:80:f8:6e:56:6a:b5:bf:f2:64:a7:26:de:87: ed:c0:c5:1f:84:30:db:7d:4e:37:95:29:a1:46:54: 4f:ea:3d:76:a3:19:d9:68:df:47:8c:19:d0:74:14: 77:80:92:8b:9c:7e:67:a6:d7:83:18:20:61:f3:28: 48:ab:16:6a:2f:bc:ca:67:69:e4:13:d4:a9:2f:d7: 25:e5:2c:b4:fa:1c:77:7d:a2:c8:5b:82:f0:45:e5: b0:4d:76:11:ee:7a:d8:8e:e7:fb:da:1e:13:e1:19: f3:45:6c:9e:26:4c:17:ba:67:59:2e:6a:98:1d:ec: 9d:be:33:4b:cb:b0:c9:40:45:c7:6b:a4:3f:e4:97: ed:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1F:44:8B:1A:52:FD:C4:E8:D5:85:2C:14:EE:51:06:11:3D:C9:08 X509v3 Authority Key Identifier: keyid:61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/8x9EixpS_cTo1YUsFO5RBhE9yQg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.160.4.0/22 IPv6: 2a02:d880::/32 Signature Algorithm: sha256WithRSAEncryption d0:af:8b:a7:c4:31:fc:5d:94:90:b0:5c:bf:0b:1f:c7:5a:9d: ba:9b:c5:52:1f:b9:24:e3:f0:d5:81:2d:94:a5:07:0f:db:cc: 02:88:f1:bc:be:13:dd:f2:35:c2:8d:32:8f:e7:26:b6:2a:a8: 93:36:a8:bf:0b:1b:81:a1:6a:5b:30:14:d1:b6:33:b6:d1:b0: 81:e9:ad:8c:10:0c:e4:ce:5f:6d:09:54:47:3e:88:2c:1c:81: f2:42:73:f3:3c:ce:03:86:50:c9:a4:40:64:a2:db:93:4b:34: 52:ca:54:18:29:9c:1f:b9:32:d3:75:dc:cf:ab:40:73:df:11: 09:07:7b:30:0f:30:63:12:ab:f9:70:37:ad:0b:3d:2a:90:cd: 07:b4:e9:3d:10:54:64:65:7e:2f:72:3f:db:95:80:39:c2:bc: fd:0a:de:99:b2:b3:0b:b3:31:a9:e0:a6:4f:d4:3f:d4:17:46: b9:44:9e:8f:f6:b7:9e:f0:b5:8c:43:f2:62:a9:54:a7:6f:d4: d3:c1:60:c0:96:e6:5e:b1:05:fb:d2:1e:ad:25:63:47:f4:5c: 5f:81:7d:6d:72:8b:77:82:df:17:ba:f7:90:0d:f1:24:dc:2f: 54:e1:84:bc:8d:59:f8:fc:51:ee:37:3a:6f:61:94:a1:87:5e: 54:43:0f:c9 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3x2yQZ0XzeaRPTlKnYR7SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMDQxMTIxY2NjNmU2NWQ5MzM5NjFmZDU3MmQ1OWUyNjFm MjFhMzEwHhcNMjYwMTAxMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzFmNDQ4YjFhNTJmZGM0ZThkNTg1MmMxNGVlNTEwNjExM2RjOTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEAj0P6M4N224j2JWr61r+2jTskq BooUeSX6bSYqbFX5T8vITZwfgH8ZRNIrDgaTY56xuqCYqDg2JXDQnKjUQWGASgDy 4TwzyOx5r8fcVVo74KVEBmKxevWW91oBIEyrEkGx195K1oGC7dFS8S8j4zi4Xk2m GUVTrID4blZqtb/yZKcm3oftwMUfhDDbfU43lSmhRlRP6j12oxnZaN9HjBnQdBR3 gJKLnH5npteDGCBh8yhIqxZqL7zKZ2nkE9SpL9cl5Sy0+hx3faLIW4LwReWwTXYR 7nrYjuf72h4T4RnzRWyeJkwXumdZLmqYHeydvjNLy7DJQEXHa6Q/5Jft0wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPMfRIsaUv3E6NWFLBTuUQYRPckIMB8GA1UdIwQY MBaAFGEEESHMxuZdkzlh/VctWeJh8hoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVFRUkljekc1bDJUT1dIOVZ5MVo0bUh5R2pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zODNiZTYtN2MzMS00ZGNhLWIzYzEt ZGJhNmQ3NTk0YzE5LzEvOHg5RWl4cFNfY1RvMVlVc0ZPNVJCaEU5eVFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zODNiZTYtN2MzMS00ZGNhLWIzYzEtZGJhNmQ3NTk0YzE5 LzEvWVFRUkljekc1bDJUT1dIOVZ5MVo0bUh5R2pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaAEMA0E AgACMAcDBQAqAtiAMA0GCSqGSIb3DQEBCwUAA4IBAQDQr4unxDH8XZSQsFy/Cx/H Wp26m8VSH7kk4/DVgS2UpQcP28wCiPG8vhPd8jXCjTKP5ya2KqiTNqi/CxuBoWpb MBTRtjO20bCB6a2MEAzkzl9tCVRHPogsHIHyQnPzPM4DhlDJpEBkotuTSzRSylQY KZwfuTLTddzPq0Bz3xEJB3swDzBjEqv5cDetCz0qkM0HtOk9EFRkZX4vcj/blYA5 wrz9Ct6ZsrMLszGp4KZP1D/UF0a5RJ6P9ree8LWMQ/JiqVSnb9TTwWDAluZesQX7 0h6tJWNH9FxfgX1tcot3gt8XuveQDfEk3C9U4YS8jVn4/FHuNzpvYZShh15UQw/J -----END CERTIFICATE-----Generated at Mon Jan 26 23:48:46 2026 by rpki-client