This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/8vxStV176PVhHBrk8PFYjrws9_k.roa File: 8vxStV176PVhHBrk8PFYjrws9_k.roa (raw, json) Hash identifier: Li2gh8hFqhoK1B3KxIba5052K8TBHeXZ0m+Xe9NeavQ= Subject key identifier: F2:FC:52:B5:5D:7B:E8:F5:61:1C:1A:E4:F0:F1:58:8E:BC:2C:F7:F9 Certificate issuer: /CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9 Certificate serial: 019B797E83E94C42AD29AEB6EC5BFAFEA652 Authority key identifier: 36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/8vxStV176PVhHBrk8PFYjrws9_k.roa Signing time: Thu 01 Jan 2026 12:18:12 +0000 ROA not before: Thu 01 Jan 2026 12:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 91.239.147.0/24 maxlen: 24 2001:67c:1240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:83:e9:4c:42:ad:29:ae:b6:ec:5b:fa:fe:a6:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9 Validity Not Before: Jan 1 12:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2fc52b55d7be8f5611c1ae4f0f1588ebc2cf7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a4:fb:70:d5:47:73:06:e3:f6:75:20:50:c7: 53:51:b4:ed:b2:b0:51:b9:a7:2e:d3:6c:fb:6c:02: 7c:d1:17:63:1b:80:2b:2e:e9:7e:b6:58:6c:4d:a8: 1e:73:20:b6:36:5c:c1:57:be:26:4b:1f:c9:c8:6a: 9e:e5:18:82:32:f5:f1:18:d1:99:10:88:70:2e:cd: 35:01:57:bf:db:88:da:4e:6d:32:5d:40:7a:ec:a0: 27:69:e6:39:ff:ee:ce:14:24:fb:e0:99:44:6c:83: 02:83:96:21:61:cd:95:ce:37:a6:c9:bd:aa:ef:bb: 69:e3:2f:4d:8d:d8:25:76:a5:3a:0b:8d:cd:42:5c: 0c:8c:a4:30:85:12:8f:33:68:b7:3c:8f:de:7a:f1: a5:b6:a8:53:83:8b:c8:67:14:e3:f2:f4:84:00:c3: 4b:3a:7f:70:fd:94:4f:ac:52:92:89:5a:1a:d5:fd: 57:b3:15:07:1a:83:09:6a:64:aa:9f:16:36:e4:6d: 1b:57:0c:78:90:b2:78:d1:e7:df:cf:94:d0:30:20: b5:56:97:52:b4:28:51:b6:6a:34:ea:92:18:03:c5: a4:4d:e0:14:63:8e:ea:6d:18:35:4f:09:8a:72:bc: 43:db:b1:ab:ac:b3:51:7f:02:7a:67:0b:95:0e:9d: 67:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:FC:52:B5:5D:7B:E8:F5:61:1C:1A:E4:F0:F1:58:8E:BC:2C:F7:F9 X509v3 Authority Key Identifier: keyid:36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/8vxStV176PVhHBrk8PFYjrws9_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.147.0/24 IPv6: 2001:67c:1240::/48 Signature Algorithm: sha256WithRSAEncryption 64:c3:ae:6a:fa:c3:17:be:7f:ad:68:35:ff:d9:95:8c:c4:c6: 32:ef:34:69:36:5d:92:6e:36:68:f6:4d:b6:ba:14:33:6a:5c: c8:d1:13:3e:1d:0a:d5:55:96:62:12:94:ed:48:21:fd:2c:63: ef:b9:0c:9c:b3:b1:47:a4:43:fd:50:2f:0c:97:7d:7a:5e:8f: 75:12:13:23:7f:ba:98:05:f3:56:08:1c:52:80:99:b9:74:22: a9:ec:07:ac:ca:de:28:68:74:1f:c5:c8:9f:da:cd:5d:da:12: c0:96:7a:4d:ce:65:4a:1d:ec:fd:01:a7:42:7c:81:ee:21:b6: d4:9f:c6:16:3a:c3:23:7d:77:c1:00:8c:a5:ba:0f:ea:35:1f: 8b:f3:45:5e:11:46:79:5b:af:99:9c:9b:a6:1a:0f:89:fa:9a: 9c:1b:cd:cf:15:3d:81:5a:0e:b2:58:06:e0:a8:ac:e0:13:85: fe:2c:8f:2b:3e:69:5a:13:9b:17:95:5e:f8:6a:17:62:7f:e8: d6:11:12:1e:7d:11:fd:ed:91:c3:f6:71:91:40:a3:f2:6f:08: 27:40:83:9f:61:25:b1:27:8e:84:46:f3:f5:b2:b2:17:db:43: 32:e4:12:26:f1:97:00:5d:a3:ad:b3:79:61:21:4c:fe:c6:fd: 7e:08:2e:36 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5foPpTEKtKa627Fv6/qZSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MWFkZjU3YzhkY2I3YmZkMzRlOWFlY2Q4M2UzNjM0MmVj M2EzYzkwHhcNMjYwMTAxMTIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmZjNTJiNTVkN2JlOGY1NjExYzFhZTRmMGYxNTg4ZWJjMmNmN2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKT7cNVHcwbj9nUgUMdTUbTtsrBR uacu02z7bAJ80RdjG4ArLul+tlhsTagecyC2NlzBV74mSx/JyGqe5RiCMvXxGNGZ EIhwLs01AVe/24jaTm0yXUB67KAnaeY5/+7OFCT74JlEbIMCg5YhYc2Vzjemyb2q 77tp4y9NjdgldqU6C43NQlwMjKQwhRKPM2i3PI/eevGltqhTg4vIZxTj8vSEAMNL On9w/ZRPrFKSiVoa1f1XsxUHGoMJamSqnxY25G0bVwx4kLJ40effz5TQMCC1VpdS tChRtmo06pIYA8WkTeAUY47qbRg1TwmKcrxD27GrrLNRfwJ6ZwuVDp1nawIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFPL8UrVde+j1YRwa5PDxWI68LPf5MB8GA1UdIwQY MBaAFDYa31fI3Le/006a7Ng+NjQuw6PJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmhyZlY4amN0N19UVHByczJENDJOQzdEbzhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lMGY4YzYtYWFkYy00YzMxLWI5MmIt MWExODczOGI0NzQxLzEvOHZ4U3RWMTc2UFZoSEJyazhQRllqcndzOV9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9lMGY4YzYtYWFkYy00YzMxLWI5MmItMWExODczOGI0NzQx LzEvTmhyZlY4amN0N19UVHByczJENDJOQzdEbzhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW++TMA8E AgACMAkDBwAgAQZ8EkAwDQYJKoZIhvcNAQELBQADggEBAGTDrmr6wxe+f61oNf/Z lYzExjLvNGk2XZJuNmj2Tba6FDNqXMjREz4dCtVVlmISlO1IIf0sY++5DJyzsUek Q/1QLwyXfXpej3USEyN/upgF81YIHFKAmbl0IqnsB6zK3ihodB/FyJ/azV3aEsCW ek3OZUod7P0Bp0J8ge4httSfxhY6wyN9d8EAjKW6D+o1H4vzRV4RRnlbr5mcm6Ya D4n6mpwbzc8VPYFaDrJYBuCorOAThf4sjys+aVoTmxeVXvhqF2J/6NYREh59Ef3t kcP2cZFAo/JvCCdAg59hJbEnjoRG8/WyshfbQzLkEibxlwBdo62zeWEhTP7G/X4I LjY= -----END CERTIFICATE-----Generated at Fri Jan 2 11:03:55 2026 by rpki-client