This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/h8DfFuvqdUk7YoMeApQAXPJqjdk.roa File: h8DfFuvqdUk7YoMeApQAXPJqjdk.roa (raw, json) Hash identifier: ye1ky96HscedkMqsQUVtxrgYXUC8cIgsxg/lZeSLzu4= Subject key identifier: 87:C0:DF:16:EB:EA:75:49:3B:62:83:1E:02:94:00:5C:F2:6A:8D:D9 Certificate issuer: /CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5 Certificate serial: 019B797F26DE38631CD653F9B420C39D629C Authority key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/h8DfFuvqdUk7YoMeApQAXPJqjdk.roa Signing time: Thu 01 Jan 2026 12:18:54 +0000 ROA not before: Thu 01 Jan 2026 12:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34080 IP address blocks: 45.129.24.0/22 maxlen: 22 93.95.32.0/21 maxlen: 21 217.196.208.0/20 maxlen: 20 217.197.32.0/20 maxlen: 20 2a02:1f0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:26:de:38:63:1c:d6:53:f9:b4:20:c3:9d:62:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5 Validity Not Before: Jan 1 12:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87c0df16ebea75493b62831e0294005cf26a8dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2f:63:8e:63:8a:55:98:71:cd:65:70:20:8b: 57:1b:18:8f:f8:e2:95:38:d9:aa:80:ef:75:1c:1d: d0:d0:4a:5d:40:8d:02:1f:d5:b3:1a:c6:a3:84:37: c2:e2:29:8b:39:48:e0:52:58:4d:29:02:11:a4:b1: 98:8a:00:9d:93:a5:8b:ae:50:ea:e0:08:f9:11:97: 0e:5e:6c:bc:6a:db:83:6d:6f:0f:a9:fc:d6:f3:af: 04:1a:79:48:2f:a1:ca:1a:8f:78:63:8c:cd:73:9d: 32:61:7a:92:39:3e:29:e2:6f:25:96:88:04:04:7d: 94:cf:b6:a7:0a:28:90:bb:90:e5:7f:60:ec:bd:c3: a0:7f:66:0b:63:a8:1e:d0:ae:d2:e8:36:c8:10:1f: cb:db:f6:7a:4a:f9:8b:ca:a8:f6:82:e3:4c:18:4f: 79:64:f5:57:47:42:1d:13:f9:31:b2:ac:4e:f2:e2: 13:a7:61:c1:e8:72:ee:c5:0a:31:c9:ff:b7:6d:e0: 9f:45:7f:1b:69:1b:2d:b4:55:92:b4:a8:01:1f:59: a1:a6:89:fa:93:15:72:0a:77:9f:22:6a:41:1c:91: 76:ae:f1:ab:98:59:80:4f:2a:d6:b7:9d:73:0e:07: 4e:c8:5f:1c:9e:7f:f9:a0:72:0f:f9:80:0a:b5:f0: 94:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C0:DF:16:EB:EA:75:49:3B:62:83:1E:02:94:00:5C:F2:6A:8D:D9 X509v3 Authority Key Identifier: keyid:DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/h8DfFuvqdUk7YoMeApQAXPJqjdk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.24.0/22 93.95.32.0/21 217.196.208.0/20 217.197.32.0/20 IPv6: 2a02:1f0::/32 Signature Algorithm: sha256WithRSAEncryption 02:bc:79:a1:ae:19:53:a6:53:36:fd:3c:f6:51:04:21:b5:d8: b6:2d:40:1a:55:4c:16:42:f1:05:60:3f:1c:35:85:ef:6f:cc: 77:d1:5b:f4:5f:6d:8e:e9:d6:99:2e:cc:38:03:e7:cf:4a:c0: aa:76:1f:fa:b9:52:78:db:54:0e:3a:97:f9:53:36:dc:08:dc: a8:aa:93:92:97:ea:c5:d2:e2:5e:20:bc:d4:e9:0a:c6:00:2f: ee:a2:47:b0:32:87:70:25:3e:03:dd:75:e4:10:f2:77:09:99: fb:04:e6:b6:5f:ab:60:b1:f3:75:93:b4:e6:6d:ba:71:1d:fd: 41:19:b7:54:72:78:f1:02:bd:cb:82:d1:41:eb:b2:85:33:fd: ba:74:5d:92:ae:45:ea:5d:bc:84:53:15:cc:c1:0f:b8:4a:5b: 87:81:cb:48:72:4c:d5:cc:21:40:d7:ad:42:b7:0a:b6:72:dd: 6f:dc:5b:92:fd:25:0c:c0:fc:c3:92:bf:45:14:25:60:96:75: 2b:fd:87:80:b2:18:ff:b4:d2:c4:5d:27:27:b7:26:a2:e7:e8: 0a:52:5b:07:fc:ba:79:b7:5f:54:bc:39:8f:ba:77:d9:00:4c: 82:08:07:41:32:97:aa:74:ab:1e:72:fe:46:83:aa:18:a0:77: 4f:87:73:89 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt5fybeOGMc1lP5tCDDnWKcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkOTE1OGUzZTQxZjYwZmZiZjdlY2FmZjcyMzA3ZDNkYzk1 Mjc3ZjUwHhcNMjYwMTAxMTIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2MwZGYxNmViZWE3NTQ5M2I2MjgzMWUwMjk0MDA1Y2YyNmE4ZGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy9jjmOKVZhxzWVwIItXGxiP+OKV ONmqgO91HB3Q0EpdQI0CH9WzGsajhDfC4imLOUjgUlhNKQIRpLGYigCdk6WLrlDq 4Aj5EZcOXmy8atuDbW8PqfzW868EGnlIL6HKGo94Y4zNc50yYXqSOT4p4m8llogE BH2Uz7anCiiQu5Dlf2DsvcOgf2YLY6ge0K7S6DbIEB/L2/Z6SvmLyqj2guNMGE95 ZPVXR0IdE/kxsqxO8uITp2HB6HLuxQoxyf+3beCfRX8baRsttFWStKgBH1mhpon6 kxVyCnefImpBHJF2rvGrmFmATyrWt51zDgdOyF8cnn/5oHIP+YAKtfCUMQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFIfA3xbr6nVJO2KDHgKUAFzyao3ZMB8GA1UdIwQY MBaAFN2RWOPkH2D/v37K/3IwfT3JUnf1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1pGWTQtUWZZUC1fZnNyX2NqQjlQY2xTZF9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82NjkwYzEtMGE2NC00MjJkLWJiMGUt NDNkN2ViNzI1NTFkLzEvaDhEZkZ1dnFkVWs3WW9NZUFwUUFYUEpxamRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC82NjkwYzEtMGE2NC00MjJkLWJiMGUtNDNkN2ViNzI1NTFk LzEvM1pGWTQtUWZZUC1fZnNyX2NqQjlQY2xTZF9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCLYEYAwQD XV8gAwQE2cTQAwQE2cUgMA0EAgACMAcDBQAqAgHwMA0GCSqGSIb3DQEBCwUAA4IB AQACvHmhrhlTplM2/Tz2UQQhtdi2LUAaVUwWQvEFYD8cNYXvb8x30Vv0X22O6daZ Lsw4A+fPSsCqdh/6uVJ421QOOpf5UzbcCNyoqpOSl+rF0uJeILzU6QrGAC/uokew ModwJT4D3XXkEPJ3CZn7BOa2X6tgsfN1k7TmbbpxHf1BGbdUcnjxAr3LgtFB67KF M/26dF2SrkXqXbyEUxXMwQ+4SluHgctIckzVzCFA161Ctwq2ct1v3FuS/SUMwPzD kr9FFCVglnUr/YeAshj/tNLEXScntyai5+gKUlsH/Lp5t19UvDmPunfZAEyCCAdB MpeqdKsecv5Gg6oYoHdPh3OJ -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:52 2026 by rpki-client