This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/8CiwIwX0E5g2Q9ZTzxP1iNDAoUA.roa File: 8CiwIwX0E5g2Q9ZTzxP1iNDAoUA.roa (raw, json) Hash identifier: IPPB248lwbrp4GTrEGt/3IeWtg0h4LuOalLrUQZfNfw= Subject key identifier: F0:28:B0:23:05:F4:13:98:36:43:D6:53:CF:13:F5:88:D0:C0:A1:40 Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Certificate serial: 019B7CECFD546924E6C4D541D4FDCD12FFB0 Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/8CiwIwX0E5g2Q9ZTzxP1iNDAoUA.roa Signing time: Fri 02 Jan 2026 04:17:44 +0000 ROA not before: Fri 02 Jan 2026 04:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8991 IP address blocks: 83.212.249.0/24 maxlen: 24 83.212.250.0/24 maxlen: 24 195.251.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:fd:54:69:24:e6:c4:d5:41:d4:fd:cd:12:ff:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Validity Not Before: Jan 2 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f028b02305f413983643d653cf13f588d0c0a140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1f:25:38:f5:17:c9:5a:ad:cb:49:c9:70:7f: 98:d3:b5:00:46:bd:93:fe:9f:23:52:6c:12:79:2a: 22:ab:a6:7b:43:d0:a4:f1:b9:2e:e2:22:50:3a:91: 2b:3f:1f:ed:71:bd:8f:1f:ac:8a:90:68:6f:7c:0a: 4f:d0:ee:a5:33:b6:2b:d6:f3:89:62:c6:8d:2c:d7: 72:35:dd:88:90:7d:b5:e3:3a:48:64:09:8d:8a:31: ef:5b:5b:ec:f4:43:97:90:7e:5c:e2:7d:af:b2:80: 3c:e0:58:c7:33:6d:bd:e5:81:cf:2f:2f:5f:e6:fe: d7:c7:7d:db:e4:f2:5c:f2:ad:78:e3:ee:48:7b:03: b7:1e:39:51:44:64:21:88:62:9d:96:57:9f:e4:3a: 23:23:ad:70:02:bb:f7:88:9f:0b:1a:d3:14:36:0c: 59:97:6a:19:16:ec:f8:37:a8:37:62:2d:70:ad:48: 12:a7:79:93:29:9c:81:42:c6:f1:dc:a3:3d:01:7b: 82:b3:62:63:db:81:27:15:b5:39:67:24:b9:1c:8d: ba:b3:05:39:bc:99:17:e8:4f:37:a8:8f:52:d0:59: a1:e3:e6:94:81:3d:5d:33:2f:b7:49:d3:be:f4:1e: 70:1e:1b:e2:8f:14:08:b8:c3:94:2e:91:0a:cb:e1: ed:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:28:B0:23:05:F4:13:98:36:43:D6:53:CF:13:F5:88:D0:C0:A1:40 X509v3 Authority Key Identifier: keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/8CiwIwX0E5g2Q9ZTzxP1iNDAoUA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.212.249.0-83.212.250.255 195.251.36.0/23 Signature Algorithm: sha256WithRSAEncryption 01:de:94:e2:81:c0:67:7e:57:d5:aa:5c:9f:21:d3:c9:b4:d4: 05:31:8d:81:aa:8c:65:c4:a3:0b:e5:c3:ea:70:76:4b:9e:7a: aa:c6:d7:ab:9b:f4:ca:86:ce:1b:31:37:d5:28:35:0d:65:6a: 63:2d:eb:12:a9:6a:55:66:51:95:7b:89:55:35:8f:cc:cc:f1: 14:6b:81:bf:da:aa:4a:37:a2:b0:e2:40:3c:b0:5e:90:23:0e: f9:73:2f:9a:7b:d7:84:b4:db:e9:b7:d9:48:89:55:ac:7f:6c: 3c:23:87:af:90:3e:42:ff:71:28:6c:94:69:a8:61:ed:a2:65: 6c:21:0b:08:0b:6b:f2:1c:df:f4:06:34:d2:7a:b0:1c:9f:ad: f0:67:1b:e4:02:8e:25:0a:2e:84:05:4b:4b:c8:a1:be:f5:e0: 36:f6:dc:ca:39:26:f1:76:39:61:d4:b7:14:8f:57:ac:1e:c7: f6:55:e3:de:9a:d4:da:7e:a6:7a:b7:69:ff:70:82:c0:9c:53: b9:fe:e2:98:47:0e:3d:f1:b9:18:9e:11:45:03:6c:83:d1:8a: c3:e8:73:34:83:35:7e:f2:55:be:42:16:4c:fd:ce:12:96:87: 36:76:a9:64:16:ed:13:71:af:73:cd:42:71:08:bc:8b:92:72: b7:8c:b4:be -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt87P1UaSTmxNVB1P3NEv+wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1 MjlkYzMwHhcNMjYwMTAyMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDI4YjAyMzA1ZjQxMzk4MzY0M2Q2NTNjZjEzZjU4OGQwYzBhMTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1h8lOPUXyVqty0nJcH+Y07UARr2T /p8jUmwSeSoiq6Z7Q9Ck8bku4iJQOpErPx/tcb2PH6yKkGhvfApP0O6lM7Yr1vOJ YsaNLNdyNd2IkH214zpIZAmNijHvW1vs9EOXkH5c4n2vsoA84FjHM2295YHPLy9f 5v7Xx33b5PJc8q144+5IewO3HjlRRGQhiGKdllef5DojI61wArv3iJ8LGtMUNgxZ l2oZFuz4N6g3Yi1wrUgSp3mTKZyBQsbx3KM9AXuCs2Jj24EnFbU5ZyS5HI26swU5 vJkX6E83qI9S0Fmh4+aUgT1dMy+3SdO+9B5wHhvijxQIuMOULpEKy+HtnQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFPAosCMF9BOYNkPWU88T9YjQwKFAMB8GA1UdIwQY MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut YWFhNDU1M2QyYWJkLzEvOENpd0l3WDBFNWcyUTlaVHp4UDFpTkRBb1VBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABT1PkD BABT1PoDBAHD+yQwDQYJKoZIhvcNAQELBQADggEBAAHelOKBwGd+V9WqXJ8h08m0 1AUxjYGqjGXEowvlw+pwdkueeqrG16ub9MqGzhsxN9UoNQ1lamMt6xKpalVmUZV7 iVU1j8zM8RRrgb/aqko3orDiQDywXpAjDvlzL5p714S02+m32UiJVax/bDwjh6+Q PkL/cShslGmoYe2iZWwhCwgLa/Ic3/QGNNJ6sByfrfBnG+QCjiUKLoQFS0vIob71 4Db23Mo5JvF2OWHUtxSPV6wex/ZV496a1Np+pnq3af9wgsCcU7n+4phHDj3xuRie EUUDbIPRisPoczSDNX7yVb5CFkz9zhKWhzZ2qWQW7RNxr3PNQnEIvIuScreMtL4= -----END CERTIFICATE-----Generated at Mon Feb 2 09:39:24 2026 by rpki-client