This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/8HOqsxKCS56C5l2TYH5vJenn9Uc.roa File: 8HOqsxKCS56C5l2TYH5vJenn9Uc.roa (raw, json) Hash identifier: r5GuTgTO8u43SvuFo8e3I9Qx7FDg9zvojI1lw4JUs+Y= Subject key identifier: F0:73:AA:B3:12:82:4B:9E:82:E6:5D:93:60:7E:6F:25:E9:E7:F5:47 Certificate issuer: /CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464 Certificate serial: 019B7C135E0CF1E8006EDA35AA7C2635FDFF Authority key identifier: 31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/8HOqsxKCS56C5l2TYH5vJenn9Uc.roa Signing time: Fri 02 Jan 2026 00:20:02 +0000 ROA not before: Fri 02 Jan 2026 00:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57763 IP address blocks: 37.75.136.0/21 maxlen: 21 37.75.136.0/22 maxlen: 22 37.75.140.0/24 maxlen: 24 37.75.141.0/24 maxlen: 24 37.75.142.0/23 maxlen: 23 91.224.66.0/23 maxlen: 23 185.63.0.0/22 maxlen: 22 185.63.0.0/24 maxlen: 24 185.63.1.0/24 maxlen: 24 185.63.2.0/24 maxlen: 24 185.63.3.0/24 maxlen: 24 2001:67c:2074::/48 maxlen: 48 2a01:5740::/32 maxlen: 32 2a01:5740::/48 maxlen: 48 2a01:5741::/32 maxlen: 32 2a01:5741::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:5e:0c:f1:e8:00:6e:da:35:aa:7c:26:35:fd:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464 Validity Not Before: Jan 2 00:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f073aab312824b9e82e65d93607e6f25e9e7f547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b8:cf:d8:8c:1c:c1:52:b6:33:a7:37:9a:45: d7:b5:d8:b3:71:d2:2c:d3:a6:77:a0:07:03:5e:a8: de:3d:52:37:36:49:89:fb:71:3c:58:a1:52:47:16: 22:dd:0f:a0:f6:17:43:fd:c1:38:fc:27:4b:f8:95: 88:e9:a3:e0:f0:ae:6a:b2:b0:13:63:c5:71:30:b1: 82:a4:a7:3b:e4:3e:a8:dd:3e:20:3d:20:2d:0a:d7: 75:b0:80:63:ef:5d:b9:e9:a0:03:26:14:3b:54:92: 17:24:60:f0:f8:74:14:5e:c0:99:97:02:75:8a:18: fb:16:98:e4:df:b8:1a:22:73:62:99:1d:63:9b:29: 73:4e:6c:58:a1:e7:64:05:b8:e5:f5:37:1f:11:1d: 04:f7:96:b1:ef:b8:df:08:2c:56:74:bf:0c:9b:e3: f3:dc:7b:d4:11:44:f5:1f:ee:36:d5:99:d3:2a:17: fe:e5:6e:75:18:92:55:40:db:18:75:9e:56:c8:8b: 42:3a:71:70:5b:b5:2c:f7:12:80:fa:91:f1:c0:2c: 4a:50:fd:63:a1:cc:34:fb:0d:71:20:e4:3b:55:cf: 5d:6e:ab:21:e8:39:cb:5d:77:36:b2:04:bd:55:94: 43:10:d6:5a:9e:28:50:96:b3:a2:55:bd:05:94:00: e8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:73:AA:B3:12:82:4B:9E:82:E6:5D:93:60:7E:6F:25:E9:E7:F5:47 X509v3 Authority Key Identifier: keyid:31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/8HOqsxKCS56C5l2TYH5vJenn9Uc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.75.136.0/21 91.224.66.0/23 185.63.0.0/22 IPv6: 2001:67c:2074::/48 2a01:5740::/31 Signature Algorithm: sha256WithRSAEncryption 12:81:7a:e6:9c:e4:51:17:e4:f0:95:9e:69:6b:85:bd:88:92: 38:b4:58:e9:ca:d4:84:9d:1a:81:5b:c7:14:14:62:70:61:a1: 35:26:56:9b:26:90:33:71:8c:4f:24:58:70:6f:81:5b:bf:f7: 15:6a:bc:1c:d5:13:28:35:a8:66:99:f0:27:2c:d9:92:b1:22: fc:ff:8c:33:a5:10:ca:43:83:0f:93:c3:60:aa:73:df:de:6f: e1:e8:b7:18:ee:29:05:4a:61:f2:7f:64:5e:63:bf:93:55:46: a2:d8:9b:c0:e7:74:92:68:f1:99:99:de:65:f5:c4:74:eb:7d: 11:3e:63:4e:08:ed:a5:29:a5:81:15:a1:c0:a0:6b:86:bc:57: 4b:ac:06:8a:6e:60:00:3e:e0:41:c3:57:86:41:ec:f3:25:41: 8c:e7:08:9d:10:90:b9:3e:e2:ce:64:31:5d:09:e4:af:f3:32: 75:ef:e6:a4:c8:36:1c:84:13:ec:87:05:b0:55:84:f2:73:a4: 15:f7:8d:eb:c6:88:e8:a4:d7:dd:c9:e2:b1:28:c0:5b:5e:9e: 7a:55:ab:a6:e6:97:c7:ee:0a:d8:e4:0c:e8:96:bf:82:c4:04: 86:61:b3:5a:8d:f2:09:1d:5e:f9:b0:61:fe:e2:2f:0e:ee:bb: d5:82:da:e5 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt8E14M8egAbto1qnwmNf3/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxOTIxYjZmZjFhYzQ0OWJhM2U3Zjg5MmNmMDgzMmQxY2Vi N2Q0NjQwHhcNMjYwMTAyMDAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDczYWFiMzEyODI0YjllODJlNjVkOTM2MDdlNmYyNWU5ZTdmNTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLjP2IwcwVK2M6c3mkXXtdizcdIs 06Z3oAcDXqjePVI3NkmJ+3E8WKFSRxYi3Q+g9hdD/cE4/CdL+JWI6aPg8K5qsrAT Y8VxMLGCpKc75D6o3T4gPSAtCtd1sIBj71256aADJhQ7VJIXJGDw+HQUXsCZlwJ1 ihj7Fpjk37gaInNimR1jmylzTmxYoedkBbjl9TcfER0E95ax77jfCCxWdL8Mm+Pz 3HvUEUT1H+421ZnTKhf+5W51GJJVQNsYdZ5WyItCOnFwW7Us9xKA+pHxwCxKUP1j ocw0+w1xIOQ7Vc9dbqsh6DnLXXc2sgS9VZRDENZanihQlrOiVb0FlADoqQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFPBzqrMSgkueguZdk2B+byXp5/VHMB8GA1UdIwQY MBaAFDGSG2/xrESbo+f4ks8IMtHOt9RkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVpJYmJfR3NSSnVqNV9pU3p3Z3kwYzYzMUdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jZTA0M2UtMmRkYi00OGE3LTg5ODMt OWQ3YTg4NzJiNDU0LzEvOEhPcXN4S0NTNTZDNWwyVFlINXZKZW5uOVVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9jZTA0M2UtMmRkYi00OGE3LTg5ODMtOWQ3YTg4NzJiNDU0 LzEvTVpJYmJfR3NSSnVqNV9pU3p3Z3kwYzYzMUdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAYBAIAATASAwQDJUuIAwQB W+BCAwQCuT8AMBYEAgACMBADBwAgAQZ8IHQDBQEqAVdAMA0GCSqGSIb3DQEBCwUA A4IBAQASgXrmnORRF+TwlZ5pa4W9iJI4tFjpytSEnRqBW8cUFGJwYaE1JlabJpAz cYxPJFhwb4Fbv/cVarwc1RMoNahmmfAnLNmSsSL8/4wzpRDKQ4MPk8NgqnPf3m/h 6LcY7ikFSmHyf2ReY7+TVUai2JvA53SSaPGZmd5l9cR0630RPmNOCO2lKaWBFaHA oGuGvFdLrAaKbmAAPuBBw1eGQezzJUGM5widEJC5PuLOZDFdCeSv8zJ17+akyDYc hBPshwWwVYTyc6QV943rxojopNfdyeKxKMBbXp56Vaum5pfH7grY5Azolr+CxASG YbNajfIJHV75sGH+4i8O7rvVgtrl -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:36 2026 by rpki-client