This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/w87GjgQoLaYeZX3VpqHI7Xq3LF4.roa File: w87GjgQoLaYeZX3VpqHI7Xq3LF4.roa (raw, json) Hash identifier: u8EvZ7sZjq6P1Wyu+J9n9xS5J9Sdw9tfnALdi/q2jLI= Subject key identifier: C3:CE:C6:8E:04:28:2D:A6:1E:65:7D:D5:A6:A1:C8:ED:7A:B7:2C:5E Certificate issuer: /CN=8e57b1447642c14f11c04b641cf1d8de8adac784 Certificate serial: 019B7EA6438521F90159864F65B3A036A91B Authority key identifier: 8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/w87GjgQoLaYeZX3VpqHI7Xq3LF4.roa Signing time: Fri 02 Jan 2026 12:19:43 +0000 ROA not before: Fri 02 Jan 2026 12:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35213 IP address blocks: 91.201.168.0/24 maxlen: 24 91.205.64.0/22 maxlen: 22 91.205.64.0/24 maxlen: 24 91.205.65.0/24 maxlen: 24 91.205.66.0/24 maxlen: 24 91.205.67.0/24 maxlen: 24 91.239.136.0/22 maxlen: 22 91.239.136.0/24 maxlen: 24 91.239.137.0/24 maxlen: 24 91.239.138.0/24 maxlen: 24 91.239.139.0/24 maxlen: 24 176.111.51.0/24 maxlen: 24 193.0.247.0/24 maxlen: 24 2001:678:31c::/48 maxlen: 48 2a13:61c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:43:85:21:f9:01:59:86:4f:65:b3:a0:36:a9:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e57b1447642c14f11c04b641cf1d8de8adac784 Validity Not Before: Jan 2 12:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3cec68e04282da61e657dd5a6a1c8ed7ab72c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:06:c4:32:ed:15:62:c9:d0:9d:b3:36:05:16: 77:6a:57:33:fc:43:c6:f9:cf:6e:64:96:e3:da:e3: 58:1d:00:11:4b:e6:1e:fa:14:a6:bc:a5:cc:6b:fe: d6:6a:ca:b9:0b:c6:bf:a0:2d:e2:55:4e:23:80:26: 7d:76:57:59:e8:8e:65:2c:ba:92:f7:10:6e:c7:17: 49:81:13:3a:6c:36:4d:fd:b6:09:21:ec:83:23:3f: 89:ee:16:ed:11:75:ec:69:e3:9b:16:16:58:3d:5f: 91:13:91:99:e9:6a:0a:d0:8c:76:8f:98:95:ca:59: 20:df:f2:84:c3:75:cc:8b:c0:dc:73:c4:8d:7a:31: 0d:b7:90:58:12:31:3d:75:8e:8d:c3:95:41:f3:49: 68:49:4c:f4:33:87:67:c6:a0:99:55:6b:3a:bf:d1: 2b:54:a7:14:50:d8:5a:d2:73:79:c8:12:7f:37:3a: 9e:06:a3:b0:e4:1a:14:32:20:75:fc:a2:e6:cc:15: c0:19:b8:93:34:2f:1e:95:26:74:e9:ab:54:94:5d: 1f:21:c2:83:38:6c:b8:b9:78:65:9b:f6:fc:93:40: 00:6e:2e:30:30:a8:2e:a4:aa:ed:70:8c:64:ee:1d: 3f:32:69:a3:0e:f3:c9:90:1d:30:0a:08:a1:c0:ff: 87:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CE:C6:8E:04:28:2D:A6:1E:65:7D:D5:A6:A1:C8:ED:7A:B7:2C:5E X509v3 Authority Key Identifier: keyid:8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/w87GjgQoLaYeZX3VpqHI7Xq3LF4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.201.168.0/24 91.205.64.0/22 91.239.136.0/22 176.111.51.0/24 193.0.247.0/24 IPv6: 2001:678:31c::/48 2a13:61c0::/29 Signature Algorithm: sha256WithRSAEncryption 5d:6b:66:65:c8:10:16:61:6a:30:82:7e:4a:a1:da:cf:4b:78: 98:85:87:00:79:e9:c4:6d:d5:7d:2f:96:f3:9f:2d:fc:9b:1b: 3d:86:e4:05:61:7a:bf:da:25:fe:42:7e:d7:b6:41:25:a3:a1: f2:4c:c0:5f:a8:db:13:ae:ec:50:39:e2:c7:14:6d:94:95:57: e3:f6:7e:e6:fb:95:d6:12:db:d4:ce:9e:93:ad:3e:c4:5a:ea: ea:ba:fb:75:94:91:83:55:ce:f6:0c:94:13:d4:3e:d6:cf:49: 20:b5:eb:cc:74:02:89:f9:34:33:b1:a2:ca:89:c6:df:d6:ef: ac:bd:82:bb:52:a8:77:c2:76:e6:4d:1a:65:27:46:43:a2:99: c8:e2:a7:ec:57:04:de:de:23:5a:c6:ea:f9:30:48:80:18:00: b4:90:60:a4:42:02:fc:23:2c:7f:b2:dc:9d:66:e1:c0:c8:97: 72:23:eb:c8:4f:82:ca:7c:b3:3c:f1:ac:6a:2a:bc:80:dd:ad: ff:48:e9:d2:a5:cd:18:7d:14:11:ff:c9:ce:f4:54:92:62:d7: 8e:33:18:df:7c:d0:b6:1b:12:ec:89:9a:d4:60:c8:64:2d:57: 78:03:51:fd:5b:6e:09:87:d5:99:6e:a8:22:25:88:35:e1:d1: 79:8f:72:9a -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt+pkOFIfkBWYZPZbOgNqkbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNTdiMTQ0NzY0MmMxNGYxMWMwNGI2NDFjZjFkOGRlOGFk YWM3ODQwHhcNMjYwMTAyMTIxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2NlYzY4ZTA0MjgyZGE2MWU2NTdkZDVhNmExYzhlZDdhYjcyYzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwbEMu0VYsnQnbM2BRZ3alcz/EPG +c9uZJbj2uNYHQARS+Ye+hSmvKXMa/7Wasq5C8a/oC3iVU4jgCZ9dldZ6I5lLLqS 9xBuxxdJgRM6bDZN/bYJIeyDIz+J7hbtEXXsaeObFhZYPV+RE5GZ6WoK0Ix2j5iV ylkg3/KEw3XMi8Dcc8SNejENt5BYEjE9dY6Nw5VB80loSUz0M4dnxqCZVWs6v9Er VKcUUNha0nN5yBJ/NzqeBqOw5BoUMiB1/KLmzBXAGbiTNC8elSZ06atUlF0fIcKD OGy4uXhlm/b8k0AAbi4wMKgupKrtcIxk7h0/MmmjDvPJkB0wCgihwP+HFQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFMPOxo4EKC2mHmV91aahyO16tyxeMB8GA1UdIwQY MBaAFI5XsUR2QsFPEcBLZBzx2N6K2seEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamxleFJIWkN3VThSd0V0a0hQSFkzb3JheDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lMWM3YzktY2M4MC00NWQ3LWE2ZDgt YWYzMzRhMGExZTkzLzEvdzg3R2pnUW9MYVllWlgzVnBxSEk3WHEzTEY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9lMWM3YzktY2M4MC00NWQ3LWE2ZDgtYWYzMzRhMGExZTkz LzEvamxleFJIWkN3VThSd0V0a0hQSFkzb3JheDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjAkBAIAATAeAwQAW8moAwQC W81AAwQCW++IAwQAsG8zAwQAwQD3MBYEAgACMBADBwAgAQZ4AxwDBQMqE2HAMA0G CSqGSIb3DQEBCwUAA4IBAQBda2ZlyBAWYWowgn5KodrPS3iYhYcAeenEbdV9L5bz ny38mxs9huQFYXq/2iX+Qn7XtkElo6HyTMBfqNsTruxQOeLHFG2UlVfj9n7m+5XW EtvUzp6TrT7EWurquvt1lJGDVc72DJQT1D7Wz0kgtevMdAKJ+TQzsaLKicbf1u+s vYK7Uqh3wnbmTRplJ0ZDopnI4qfsVwTe3iNaxur5MEiAGAC0kGCkQgL8Iyx/styd ZuHAyJdyI+vIT4LKfLM88axqKryA3a3/SOnSpc0YfRQR/8nO9FSSYteOMxjffNC2 GxLsiZrUYMhkLVd4A1H9W24Jh9WZbqgiJYg14dF5j3Ka -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:11 2026 by rpki-client