This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/c8WfLNf4xTxCCbxAjn70Gwql9Gg.roa File: c8WfLNf4xTxCCbxAjn70Gwql9Gg.roa (raw, json) Hash identifier: hwrFbab5BoZuqfENjshm0vbXFEFJ4w163YDTAfFsvyM= Subject key identifier: 73:C5:9F:2C:D7:F8:C5:3C:42:09:BC:40:8E:7E:F4:1B:0A:A5:F4:68 Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 019B7758FBB54DAFCACBE9EF8C1728FBCC78 Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/c8WfLNf4xTxCCbxAjn70Gwql9Gg.roa Signing time: Thu 01 Jan 2026 02:17:58 +0000 ROA not before: Thu 01 Jan 2026 02:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2856 IP address blocks: 84.55.17.0/24 maxlen: 24 84.55.22.0/24 maxlen: 24 95.173.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:fb:b5:4d:af:ca:cb:e9:ef:8c:17:28:fb:cc:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: Jan 1 02:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73c59f2cd7f8c53c4209bc408e7ef41b0aa5f468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9f:3f:c1:84:e9:c2:cb:68:d9:ba:09:e7:76: 56:ff:dd:2b:8b:8e:f5:7b:6d:94:db:bf:ce:77:18: 6c:10:0c:de:f3:3f:1e:1e:51:29:ed:fe:f2:67:93: b1:c2:76:85:6f:87:1a:60:ca:fd:c2:84:43:f7:86: c2:83:a6:eb:d0:28:d1:04:4a:b8:8d:bf:64:ae:79: 1f:37:e3:ea:d9:f5:1e:b6:be:b3:c9:73:bb:98:2a: 63:61:c4:54:ae:de:d1:4b:50:62:33:49:d8:a3:6d: 3a:39:16:2d:16:27:e9:12:1b:3b:c9:fb:27:94:ff: 62:f1:75:39:2f:9f:9d:cc:4a:67:85:b8:07:3b:15: e3:1f:e0:03:18:f5:46:d4:97:f3:9f:b0:b7:a3:0c: d9:84:0b:72:32:e6:11:af:61:b9:c5:b0:d8:64:9e: ed:b8:65:55:66:49:77:82:85:06:f7:04:c4:1c:e5: 64:c7:c1:ee:39:2a:35:d8:eb:c4:c3:12:a8:50:35: 1a:9a:e6:4b:0d:52:3c:f5:e9:d0:f2:e0:e7:cd:9a: 52:57:ca:42:58:0e:04:e4:18:56:19:e6:d8:8a:a3: fa:44:24:4c:d4:16:c2:7f:80:4a:6d:bb:07:a1:75: 16:9c:6e:a4:25:65:da:4a:65:28:bb:a6:75:30:13: a5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C5:9F:2C:D7:F8:C5:3C:42:09:BC:40:8E:7E:F4:1B:0A:A5:F4:68 X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/c8WfLNf4xTxCCbxAjn70Gwql9Gg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.55.17.0/24 84.55.22.0/24 95.173.59.0/24 Signature Algorithm: sha256WithRSAEncryption 92:6c:8e:6f:22:2a:7a:4d:aa:bc:3f:b7:81:a4:cc:f3:e8:b7: a6:5d:12:73:f6:4b:33:f3:e9:dc:53:d8:cf:d0:a7:a1:f5:a5: 9e:c9:40:1a:52:57:71:58:57:ce:9d:75:61:49:fe:42:b5:e9: 03:87:5d:75:c4:40:35:4d:4a:03:9f:62:29:01:38:05:db:a0: 8e:21:6f:55:ef:6d:b7:3a:08:9e:23:27:78:5a:a6:ed:99:dd: 04:73:41:c4:56:c0:7b:b6:7d:84:95:4e:52:e5:72:14:b9:7e: 77:ca:ef:a4:32:e5:b5:26:e6:cf:ec:44:75:b2:fa:67:8e:51: 98:39:79:a6:cc:71:a9:16:72:fd:93:70:77:27:1f:f0:a6:98: 1d:e5:ef:53:16:3b:d5:60:a7:92:b5:85:d3:cf:7b:42:8d:13: 67:bf:28:30:f7:06:6d:8e:4a:24:6d:57:2c:12:9c:b3:24:f3: cf:8e:82:30:d4:a2:e9:72:09:5f:3f:3e:47:80:3e:e7:e6:ac: 5b:e1:50:4b:00:80:ef:cd:bf:b8:7f:5a:e7:a0:53:ca:e8:f6: 2c:e2:ed:f6:41:31:74:ab:19:03:5e:45:56:e9:6f:b7:c4:ed: 83:4d:bf:db:6d:7d:33:aa:92:17:94:8f:99:20:11:35:9b:99: e6:36:3d:79 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3WPu1Ta/Ky+nvjBco+8x4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjYwMTAxMDIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2M1OWYyY2Q3ZjhjNTNjNDIwOWJjNDA4ZTdlZjQxYjBhYTVmNDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZ8/wYTpwsto2boJ53ZW/90ri471 e22U27/OdxhsEAze8z8eHlEp7f7yZ5OxwnaFb4caYMr9woRD94bCg6br0CjRBEq4 jb9krnkfN+Pq2fUetr6zyXO7mCpjYcRUrt7RS1BiM0nYo206ORYtFifpEhs7yfsn lP9i8XU5L5+dzEpnhbgHOxXjH+ADGPVG1Jfzn7C3owzZhAtyMuYRr2G5xbDYZJ7t uGVVZkl3goUG9wTEHOVkx8HuOSo12OvEwxKoUDUamuZLDVI89enQ8uDnzZpSV8pC WA4E5BhWGebYiqP6RCRM1BbCf4BKbbsHoXUWnG6kJWXaSmUou6Z1MBOlHQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHPFnyzX+MU8Qgm8QI5+9BsKpfRoMB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEvYzhXZkxOZjR4VHhDQ2J4QWpuNzBHd3FsOUdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVDcRAwQA VDcWAwQAX607MA0GCSqGSIb3DQEBCwUAA4IBAQCSbI5vIip6Taq8P7eBpMzz6Lem XRJz9ksz8+ncU9jP0Keh9aWeyUAaUldxWFfOnXVhSf5CtekDh111xEA1TUoDn2Ip ATgF26COIW9V7223OgieIyd4Wqbtmd0Ec0HEVsB7tn2ElU5S5XIUuX53yu+kMuW1 JubP7ER1svpnjlGYOXmmzHGpFnL9k3B3Jx/wppgd5e9TFjvVYKeStYXTz3tCjRNn vygw9wZtjkokbVcsEpyzJPPPjoIw1KLpcglfPz5HgD7n5qxb4VBLAIDvzb+4f1rn oFPK6PYs4u32QTF0qxkDXkVW6W+3xO2DTb/bbX0zqpIXlI+ZIBE1m5nmNj15 -----END CERTIFICATE-----Generated at Thu Jan 8 17:33:28 2026 by rpki-client