This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/f8-DGeBP35-N3w51zaELLHTWQhA.roa File: f8-DGeBP35-N3w51zaELLHTWQhA.roa (raw, json) Hash identifier: p45bmNjagtDF3HgTTRtJcWFVXkd0k7P3PfW1B+YfWgs= Subject key identifier: 7F:CF:83:19:E0:4F:DF:9F:8D:DF:0E:75:CD:A1:0B:2C:74:D6:42:10 Certificate issuer: /CN=dd48d508215340eac0f14f0b74749d1c8ec9f566 Certificate serial: 019B77C6A8446456CFAA7132528F31E5EA46 Authority key identifier: DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/f8-DGeBP35-N3w51zaELLHTWQhA.roa Signing time: Thu 01 Jan 2026 04:17:46 +0000 ROA not before: Thu 01 Jan 2026 04:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39294 IP address blocks: 91.234.108.0/22 maxlen: 22 213.5.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a8:44:64:56:cf:aa:71:32:52:8f:31:e5:ea:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd48d508215340eac0f14f0b74749d1c8ec9f566 Validity Not Before: Jan 1 04:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fcf8319e04fdf9f8ddf0e75cda10b2c74d64210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8c:aa:cb:31:c7:a0:ca:0f:4e:31:26:3a:db: e3:47:b9:5a:a4:ab:01:b6:01:d0:24:8b:21:8f:6e: 88:38:55:a3:83:c2:94:98:dd:82:54:b9:d3:aa:d2: 44:0c:98:aa:de:96:a4:4e:86:87:03:79:98:db:a5: f9:d3:46:44:56:4f:60:44:8c:49:65:ed:af:b3:74: c4:2f:af:21:3c:d4:5c:0b:de:95:cc:73:63:de:e5: a2:da:aa:4c:cb:12:a8:db:62:05:70:87:78:97:ad: e2:d1:c7:25:41:04:87:11:8e:48:b8:b6:c4:93:5e: 46:3d:c9:7d:be:b5:4a:38:7f:cf:e4:8e:db:3d:cc: 10:7d:3e:d9:88:9f:5f:83:30:3a:cd:66:e0:3d:a1: 3d:b6:63:20:6c:77:90:76:44:c4:0b:f4:34:b3:cf: 20:39:b5:a1:d7:11:03:11:29:ee:db:f9:74:40:1e: 58:1b:cf:6e:6b:a5:1a:ca:52:2e:78:b6:6a:82:e3: 49:06:25:89:71:d7:41:43:e2:08:7b:88:32:80:46: df:28:63:42:bb:73:08:c2:5a:84:e4:98:05:19:73: 1b:c9:16:1b:3f:08:a4:72:83:24:fd:07:d2:ee:ca: 05:7c:6c:39:32:7e:19:01:74:e9:bb:b0:6f:7c:e1: cf:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:CF:83:19:E0:4F:DF:9F:8D:DF:0E:75:CD:A1:0B:2C:74:D6:42:10 X509v3 Authority Key Identifier: keyid:DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/f8-DGeBP35-N3w51zaELLHTWQhA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.108.0/22 213.5.76.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:9f:39:0e:a1:8c:ff:c4:7b:47:61:dd:ef:4b:a9:e0:ab:57: 61:7e:26:43:19:59:f6:c3:79:05:13:0c:b9:4b:48:b0:e7:8d: b8:64:e4:01:54:ab:e6:ca:f2:b8:10:b2:c3:22:54:8b:d9:60: f1:f9:30:27:f2:73:ad:d1:c5:a4:89:de:22:0f:fd:a3:c7:b2: c1:e8:9d:39:fa:c1:73:60:47:29:27:4b:d4:66:96:ba:1d:9d: 5a:35:c6:b3:33:b4:6f:af:f9:12:ce:b5:7f:db:fb:58:89:68: 8c:32:41:09:81:3c:52:4b:66:33:00:31:d4:b4:05:05:21:01: 5d:93:90:e4:73:8e:f0:38:18:c7:24:54:b9:4f:18:22:9c:f6: 24:46:7d:6a:ae:a5:2e:15:38:10:c4:7a:e0:4b:fe:fb:20:21: 34:4c:3c:54:7b:87:d0:00:61:5d:e5:85:05:89:0d:92:c5:e6: cb:e2:3c:a7:e9:73:4a:90:ee:53:a3:9d:49:59:25:b8:b6:fa: 07:be:95:a6:29:5e:a9:39:6f:c6:e9:87:6d:16:30:27:02:98: 3a:48:f3:14:ae:df:87:0d:5c:6c:9d:18:19:23:a1:24:3e:77: 26:80:d0:2f:aa:a4:14:41:00:5a:05:33:6a:47:25:a8:75:1b: 98:63:c6:dc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xqhEZFbPqnEyUo8x5epGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNDhkNTA4MjE1MzQwZWFjMGYxNGYwYjc0NzQ5ZDFjOGVj OWY1NjYwHhcNMjYwMTAxMDQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmNmODMxOWUwNGZkZjlmOGRkZjBlNzVjZGExMGIyYzc0ZDY0MjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYyqyzHHoMoPTjEmOtvjR7lapKsB tgHQJIshj26IOFWjg8KUmN2CVLnTqtJEDJiq3pakToaHA3mY26X500ZEVk9gRIxJ Ze2vs3TEL68hPNRcC96VzHNj3uWi2qpMyxKo22IFcId4l63i0cclQQSHEY5IuLbE k15GPcl9vrVKOH/P5I7bPcwQfT7ZiJ9fgzA6zWbgPaE9tmMgbHeQdkTEC/Q0s88g ObWh1xEDESnu2/l0QB5YG89ua6UaylIueLZqguNJBiWJcddBQ+IIe4gygEbfKGNC u3MIwlqE5JgFGXMbyRYbPwikcoMk/QfS7soFfGw5Mn4ZAXTpu7BvfOHP2QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFH/PgxngT9+fjd8Odc2hCyx01kIQMB8GA1UdIwQY MBaAFN1I1QghU0DqwPFPC3R0nRyOyfVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1VqVkNDRlRRT3JBOFU4TGRIU2RISTdKOVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iYTE2YmEtYThjOC00NDJhLWJhYjkt NDVlNDc0MDAyM2RiLzEvZjgtREdlQlAzNS1OM3c1MXphRUxMSFRXUWhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9iYTE2YmEtYThjOC00NDJhLWJhYjktNDVlNDc0MDAyM2Ri LzEvM1VqVkNDRlRRT3JBOFU4TGRIU2RISTdKOVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW+psAwQC 1QVMMA0GCSqGSIb3DQEBCwUAA4IBAQArnzkOoYz/xHtHYd3vS6ngq1dhfiZDGVn2 w3kFEwy5S0iw5424ZOQBVKvmyvK4ELLDIlSL2WDx+TAn8nOt0cWkid4iD/2jx7LB 6J05+sFzYEcpJ0vUZpa6HZ1aNcazM7Rvr/kSzrV/2/tYiWiMMkEJgTxSS2YzADHU tAUFIQFdk5Dkc47wOBjHJFS5TxginPYkRn1qrqUuFTgQxHrgS/77ICE0TDxUe4fQ AGFd5YUFiQ2SxebL4jyn6XNKkO5To51JWSW4tvoHvpWmKV6pOW/G6YdtFjAnApg6 SPMUrt+HDVxsnRgZI6EkPncmgNAvqqQUQQBaBTNqRyWodRuYY8bc -----END CERTIFICATE-----Generated at Mon Feb 9 23:43:09 2026 by rpki-client