This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8nyc8D2U6ZLNC1jg1xTgLIB5O08.roa File: 8nyc8D2U6ZLNC1jg1xTgLIB5O08.roa (raw, json) Hash identifier: UjE3wubUY3p3vPXEL528/Y/zzZrPn9j4CkCZh6HPAm8= Subject key identifier: F2:7C:9C:F0:3D:94:E9:92:CD:0B:58:E0:D7:14:E0:2C:80:79:3B:4F Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 019B7DCA459B9FCCFEE3544D3809956730FD Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8nyc8D2U6ZLNC1jg1xTgLIB5O08.roa Signing time: Fri 02 Jan 2026 08:19:26 +0000 ROA not before: Fri 02 Jan 2026 08:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209201 IP address blocks: 83.150.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:45:9b:9f:cc:fe:e3:54:4d:38:09:95:67:30:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: Jan 2 08:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f27c9cf03d94e992cd0b58e0d714e02c80793b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:52:4a:db:ce:d5:a1:d9:b9:22:a1:74:b0:bd: e9:6f:78:be:12:b1:1c:1e:90:be:ff:13:9c:e3:f5: 04:f1:9d:29:1d:3b:15:24:3d:ab:a9:19:06:f1:f8: 8b:07:74:27:0d:e6:eb:ae:74:fc:18:4f:14:27:d3: e4:21:b1:1c:d7:76:c3:d6:95:ac:a0:f8:ff:02:ad: ea:e5:01:eb:75:b3:7b:00:82:ee:31:dd:5d:84:16: fb:fd:8a:10:8e:14:50:19:ac:5f:2b:e6:58:d9:76: d6:76:4c:f2:97:02:9a:c5:e0:02:e8:6b:08:c2:bb: d0:48:ab:d9:c2:4c:b0:40:fc:7c:00:c5:22:4b:ca: ab:b8:cf:36:ed:77:3f:f3:0a:73:95:cb:7a:69:54: 83:80:42:f8:76:f1:0b:c2:2d:d7:3b:ac:55:c6:a2: 85:38:d9:cc:d9:2a:64:b3:a3:15:10:5c:7f:09:12: 0f:d2:12:9b:39:73:65:6e:db:69:b4:89:87:7a:f9: 81:02:b4:63:50:17:58:25:b8:44:cd:f0:c9:64:92: 42:d9:89:ff:9c:92:8c:ba:2e:9c:85:81:0f:4a:87: 9c:db:5d:94:a2:50:08:8d:42:ab:e5:e9:50:1a:c2: 84:b2:74:89:0b:73:45:5c:24:49:df:2d:82:4b:15: e9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:7C:9C:F0:3D:94:E9:92:CD:0B:58:E0:D7:14:E0:2C:80:79:3B:4F X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8nyc8D2U6ZLNC1jg1xTgLIB5O08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.150.237.0/24 Signature Algorithm: sha256WithRSAEncryption 00:f2:da:dc:da:dc:88:71:9a:89:54:08:6d:33:6b:e1:61:36: 66:31:c1:bf:2b:a2:47:5d:96:df:71:32:23:ce:bd:04:ce:44: f3:cd:15:41:f7:27:7a:36:18:cf:2f:b1:ed:f8:dc:dd:cc:7b: ca:6d:fc:60:fd:07:df:81:a2:c2:43:e9:8f:73:70:4b:b7:70: 90:6f:d6:b3:7f:e0:ad:a2:d4:70:ee:ef:8b:92:30:69:1a:8a: 17:a2:b7:64:6f:90:19:f4:21:4d:1b:15:db:13:83:d9:51:8f: d4:94:c5:2f:5c:ae:4b:2d:3b:c5:da:3d:94:77:e9:33:02:f4: 68:4f:93:83:81:61:62:45:ab:23:0a:98:30:94:d2:a2:5d:62: d2:fd:77:01:7d:fd:f2:1d:be:9d:90:23:7a:f2:8a:ad:9f:61: 4a:2d:8b:76:ee:93:76:46:31:05:5b:02:1e:2d:56:18:a2:c9: 91:c8:21:c5:a0:e6:f1:53:f5:9f:ee:b9:2e:3f:df:1c:5c:de: dc:3f:90:1f:3a:f1:ea:0f:a0:9c:0d:9f:23:72:1b:79:5d:6e: fb:ec:4b:59:1d:82:ea:af:ff:70:1d:94:df:c6:85:2a:9c:00: 61:0c:aa:d1:d5:79:15:6a:99:1d:57:33:38:84:e9:e3:fc:fd: 6d:0b:e5:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ykWbn8z+41RNOAmVZzD9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjYwMTAyMDgxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjdjOWNmMDNkOTRlOTkyY2QwYjU4ZTBkNzE0ZTAyYzgwNzkzYjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVJK287Vodm5IqF0sL3pb3i+ErEc HpC+/xOc4/UE8Z0pHTsVJD2rqRkG8fiLB3QnDebrrnT8GE8UJ9PkIbEc13bD1pWs oPj/Aq3q5QHrdbN7AILuMd1dhBb7/YoQjhRQGaxfK+ZY2XbWdkzylwKaxeAC6GsI wrvQSKvZwkywQPx8AMUiS8qruM827Xc/8wpzlct6aVSDgEL4dvELwi3XO6xVxqKF ONnM2Spks6MVEFx/CRIP0hKbOXNlbttptImHevmBArRjUBdYJbhEzfDJZJJC2Yn/ nJKMui6chYEPSoec212UolAIjUKr5elQGsKEsnSJC3NFXCRJ3y2CSxXpYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPJ8nPA9lOmSzQtY4NcU4CyAeTtPMB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvOG55YzhEMlU2WkxOQzFqZzF4VGdMSUI1TzA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU5btMA0G CSqGSIb3DQEBCwUAA4IBAQAA8trc2tyIcZqJVAhtM2vhYTZmMcG/K6JHXZbfcTIj zr0EzkTzzRVB9yd6NhjPL7Ht+NzdzHvKbfxg/QffgaLCQ+mPc3BLt3CQb9azf+Ct otRw7u+LkjBpGooXordkb5AZ9CFNGxXbE4PZUY/UlMUvXK5LLTvF2j2Ud+kzAvRo T5ODgWFiRasjCpgwlNKiXWLS/XcBff3yHb6dkCN68oqtn2FKLYt27pN2RjEFWwIe LVYYosmRyCHFoObxU/Wf7rkuP98cXN7cP5AfOvHqD6CcDZ8jcht5XW777EtZHYLq r/9wHZTfxoUqnABhDKrR1XkVapkdVzM4hOnj/P1tC+UZ -----END CERTIFICATE-----Generated at Mon Jan 26 14:11:54 2026 by rpki-client