This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/8-89J-VDYbXo5QJ6KxQpyalUIfY.roa File: 8-89J-VDYbXo5QJ6KxQpyalUIfY.roa (raw, json) Hash identifier: 6ikDySot4sJSAZPqWZ7X36wEO/TGRKEez0qZEAZB7js= Subject key identifier: F3:EF:3D:27:E5:43:61:B5:E8:E5:02:7A:2B:14:29:C9:A9:54:21:F6 Certificate issuer: /CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a Certificate serial: 019B7D5C694E9EA8FDC1EF1DBE0F84F73B4E Authority key identifier: 0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/8-89J-VDYbXo5QJ6KxQpyalUIfY.roa Signing time: Fri 02 Jan 2026 06:19:26 +0000 ROA not before: Fri 02 Jan 2026 06:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210101 IP address blocks: 85.117.224.0/22 maxlen: 22 2a0d:b4c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:69:4e:9e:a8:fd:c1:ef:1d:be:0f:84:f7:3b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a Validity Not Before: Jan 2 06:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3ef3d27e54361b5e8e5027a2b1429c9a95421f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bb:dd:d6:1c:23:65:82:10:31:22:1a:69:26: cd:ab:b3:1d:c3:21:b5:a0:99:f9:63:83:4a:6f:57: e7:84:a8:4a:3c:96:94:3e:6d:e5:61:fe:23:c2:81: 75:1c:0b:a8:5b:ae:7e:5a:f1:17:73:95:4a:87:c3: 87:f7:a7:0a:e4:87:b8:69:57:de:46:50:b4:49:9d: af:73:3a:8e:c8:75:e3:69:bc:b3:0d:6c:65:83:67: f7:f5:a0:66:63:c2:75:32:0d:b7:ea:b6:50:93:e5: 51:f0:35:0d:ec:87:d2:5f:07:70:d5:7d:a2:ed:bb: 02:18:ab:5e:78:04:b2:7e:3f:47:78:65:a1:01:8c: 89:2e:5a:f9:70:1f:23:81:7e:ea:68:15:e8:53:b3: e7:a1:dc:c6:63:1d:fc:13:15:13:ac:15:2f:3a:57: f3:7e:d8:97:e6:55:4f:73:73:f5:3d:97:63:c1:21: 31:57:70:38:1c:3f:a6:c6:7b:e6:80:ee:52:70:34: 5c:1b:62:41:15:0b:df:48:6b:0f:6b:00:7c:2c:0a: 83:8d:c2:d6:96:ca:a6:c6:38:96:3a:16:1b:3e:4b: ce:ca:6b:a4:a1:35:a8:44:e0:c3:8a:d0:c5:45:fe: fb:b3:bc:7a:c3:ef:d4:7a:e4:4f:c2:84:c3:86:a2: 38:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:EF:3D:27:E5:43:61:B5:E8:E5:02:7A:2B:14:29:C9:A9:54:21:F6 X509v3 Authority Key Identifier: keyid:0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/8-89J-VDYbXo5QJ6KxQpyalUIfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.117.224.0/22 IPv6: 2a0d:b4c0::/29 Signature Algorithm: sha256WithRSAEncryption 4f:8b:5d:be:2a:64:31:fb:aa:a8:51:34:2b:30:0f:6f:42:ff: 56:32:52:ce:b4:6f:10:2e:f6:80:67:a3:d8:ab:ad:fb:27:46: 4a:ae:1d:41:b1:f8:06:0b:57:87:8d:20:be:88:3b:7a:64:1b: de:5f:76:93:ba:69:99:70:5b:94:02:87:1b:6b:9f:d3:4e:62: ad:9e:5e:17:6f:c6:84:ca:20:7c:f1:cd:43:fa:fe:cd:90:9f: 9f:8e:bb:d2:ce:7c:c4:3b:a8:02:42:71:81:a7:07:55:d9:8f: 0d:82:2a:7c:bf:b2:ab:fa:4a:b6:a1:f7:a2:c2:2d:49:51:aa: ab:da:25:8c:49:89:72:c6:6b:32:be:69:5b:e8:b0:d0:af:17: 8e:29:52:71:f7:53:61:62:e2:59:bc:27:de:c1:7b:b4:78:fe: 3e:02:7f:b0:0b:23:25:75:7c:a7:40:4c:db:f2:42:6b:fd:53: 8f:a6:c2:4d:ce:4d:c9:47:58:b6:b8:08:95:b7:88:0b:fe:35: 4a:9f:c7:c9:2b:e6:68:57:44:23:9a:3e:08:1c:90:b3:a0:5b: 48:76:f6:31:20:9e:68:4c:e2:5a:c1:04:13:89:ad:20:c7:18: 16:07:09:17:74:99:eb:56:1c:3d:c8:9f:be:f9:cb:05:63:0e: a2:15:8f:c1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XGlOnqj9we8dvg+E9ztOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNWVjNmUwNjYwZGI2ZjYyNWI5NzhiZTBkNWVlNzFjMmRj ZDQ2NWEwHhcNMjYwMTAyMDYxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2VmM2QyN2U1NDM2MWI1ZThlNTAyN2EyYjE0MjljOWE5NTQyMWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrvd1hwjZYIQMSIaaSbNq7MdwyG1 oJn5Y4NKb1fnhKhKPJaUPm3lYf4jwoF1HAuoW65+WvEXc5VKh8OH96cK5Ie4aVfe RlC0SZ2vczqOyHXjabyzDWxlg2f39aBmY8J1Mg236rZQk+VR8DUN7IfSXwdw1X2i 7bsCGKteeASyfj9HeGWhAYyJLlr5cB8jgX7qaBXoU7PnodzGYx38ExUTrBUvOlfz ftiX5lVPc3P1PZdjwSExV3A4HD+mxnvmgO5ScDRcG2JBFQvfSGsPawB8LAqDjcLW lsqmxjiWOhYbPkvOymukoTWoRODDitDFRf77s7x6w+/UeuRPwoTDhqI4MwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPPvPSflQ2G16OUCeisUKcmpVCH2MB8GA1UdIwQY MBaAFApexuBmDbb2Jbl4vg1e5xwtzUZaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2w3RzRHWU50dllsdVhpLURWN25IQzNOUmxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy81Nzc2YTMtMDZkZC00OTgwLThmNmYt ZDNlM2M3OGU3YzQ0LzEvOC04OUotVkRZYlhvNVFKNkt4UXB5YWxVSWZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy81Nzc2YTMtMDZkZC00OTgwLThmNmYtZDNlM2M3OGU3YzQ0 LzEvQ2w3RzRHWU50dllsdVhpLURWN25IQzNOUmxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCVXXgMA0E AgACMAcDBQMqDbTAMA0GCSqGSIb3DQEBCwUAA4IBAQBPi12+KmQx+6qoUTQrMA9v Qv9WMlLOtG8QLvaAZ6PYq637J0ZKrh1BsfgGC1eHjSC+iDt6ZBveX3aTummZcFuU Aocba5/TTmKtnl4Xb8aEyiB88c1D+v7NkJ+fjrvSznzEO6gCQnGBpwdV2Y8Ngip8 v7Kr+kq2ofeiwi1JUaqr2iWMSYlyxmsyvmlb6LDQrxeOKVJx91NhYuJZvCfewXu0 eP4+An+wCyMldXynQEzb8kJr/VOPpsJNzk3JR1i2uAiVt4gL/jVKn8fJK+ZoV0Qj mj4IHJCzoFtIdvYxIJ5oTOJawQQTia0gxxgWBwkXdJnrVhw9yJ+++csFYw6iFY/B -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:32 2026 by rpki-client