This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/8nV4vFfsDdbYHG_8dhnhA4saFx4.roa File: 8nV4vFfsDdbYHG_8dhnhA4saFx4.roa (raw, json) Hash identifier: yK23USlyZ4ypyu72ZSS+wzmBEI3NT4eQI2K3BvZ7Rr8= Subject key identifier: F2:75:78:BC:57:EC:0D:D6:D8:1C:6F:FC:76:19:E1:03:8B:1A:17:1E Certificate issuer: /CN=99ce77f7d916513b84914849950fe43f55694fda Certificate serial: 019B791090C9EA6D68A22BEB9B8296F8396B Authority key identifier: 99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/8nV4vFfsDdbYHG_8dhnhA4saFx4.roa Signing time: Thu 01 Jan 2026 10:18:07 +0000 ROA not before: Thu 01 Jan 2026 10:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208424 IP address blocks: 5.102.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:90:c9:ea:6d:68:a2:2b:eb:9b:82:96:f8:39:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ce77f7d916513b84914849950fe43f55694fda Validity Not Before: Jan 1 10:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f27578bc57ec0dd6d81c6ffc7619e1038b1a171e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0e:93:f8:41:f2:0c:65:f6:c9:ac:13:08:1c: 1c:36:d2:95:f7:17:84:dc:26:8c:ea:dd:84:1f:d8: 4b:b7:4e:b1:3d:6e:21:45:92:21:e5:3b:38:5c:f1: 85:fe:9b:0e:19:f4:8e:85:4c:28:94:da:a3:bb:82: d4:20:ef:e8:a1:46:4c:bb:36:08:0b:ac:22:7b:e3: 05:80:27:09:18:e2:62:76:4a:e3:b5:b9:7f:f3:5a: 1a:df:b2:a1:99:75:05:b8:55:cd:5a:d9:b5:05:3c: 8f:ef:ec:a9:b0:93:70:d8:d8:5c:e5:39:be:2e:c9: 42:6b:80:88:17:90:9f:45:19:60:d8:68:fa:62:3c: 6a:84:38:1c:0d:64:54:77:04:67:7b:41:0d:57:c2: 91:eb:66:16:19:12:cc:d3:68:ec:4f:61:87:6a:95: 45:19:65:f8:b1:88:31:cc:f7:6b:77:ce:99:35:57: 5c:50:06:5f:d3:dd:f2:13:1d:88:b0:10:e0:b6:43: 60:20:9e:94:56:13:c7:17:59:6e:ce:ec:5a:2b:af: f2:ba:b3:ac:f2:74:99:7c:1b:29:c2:96:4c:99:cd: bd:c2:b4:ae:41:0d:8c:b5:3f:ca:90:6d:2b:c9:ce: 3b:da:dd:e9:c3:0f:21:81:77:56:48:79:de:39:ac: 38:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:75:78:BC:57:EC:0D:D6:D8:1C:6F:FC:76:19:E1:03:8B:1A:17:1E X509v3 Authority Key Identifier: keyid:99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/8nV4vFfsDdbYHG_8dhnhA4saFx4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.102.47.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:8e:31:e8:19:7f:40:6a:c1:20:c3:d9:ec:30:ad:db:34:ba: 5b:a7:cd:e1:47:35:13:c1:41:c7:1f:d8:67:ab:4d:c1:69:24: a5:43:fb:e1:38:4a:41:a0:03:30:23:8c:ec:80:53:90:7c:f8: 12:50:9a:25:12:9f:59:5f:b4:8c:f6:63:0c:cb:24:e7:c5:d5: 54:75:f1:8b:d3:2a:1f:0a:37:2d:2e:b8:cc:21:eb:1c:b3:e3: 37:7f:4b:36:9b:cc:43:96:db:65:fd:2c:70:01:45:10:7b:6e: 67:cd:a6:e0:a4:03:b4:b6:ed:1a:3d:e5:4a:ba:ab:d6:92:db: a0:38:43:da:e8:22:0c:c4:19:1c:89:81:07:8c:85:cb:38:b7: 9a:11:bd:84:b1:e6:99:c1:2c:1e:b9:c0:1c:51:bd:c6:03:80: fa:37:7c:4d:8c:70:5e:dd:e2:21:9e:dd:4e:2a:d3:d0:7c:c1: b5:d1:eb:e8:20:69:8a:b2:cf:f0:57:db:a1:c9:d4:57:83:c5: b4:43:f7:6e:70:7c:d5:2d:94:93:36:6d:d3:a4:9c:97:61:4a: 49:be:54:79:26:dc:6d:0d:b2:85:34:c2:07:f5:58:43:c5:ff: a2:b3:14:a0:d4:0a:dc:a2:8d:6c:70:d2:eb:84:7a:9b:29:5a: 02:b9:61:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EJDJ6m1ooivrm4KW+DlrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2U3N2Y3ZDkxNjUxM2I4NDkxNDg0OTk1MGZlNDNmNTU2 OTRmZGEwHhcNMjYwMTAxMTAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjc1NzhiYzU3ZWMwZGQ2ZDgxYzZmZmM3NjE5ZTEwMzhiMWExNzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA6T+EHyDGX2yawTCBwcNtKV9xeE 3CaM6t2EH9hLt06xPW4hRZIh5Ts4XPGF/psOGfSOhUwolNqju4LUIO/ooUZMuzYI C6wie+MFgCcJGOJidkrjtbl/81oa37KhmXUFuFXNWtm1BTyP7+ypsJNw2Nhc5Tm+ LslCa4CIF5CfRRlg2Gj6YjxqhDgcDWRUdwRne0ENV8KR62YWGRLM02jsT2GHapVF GWX4sYgxzPdrd86ZNVdcUAZf093yEx2IsBDgtkNgIJ6UVhPHF1luzuxaK6/yurOs 8nSZfBspwpZMmc29wrSuQQ2MtT/KkG0ryc472t3pww8hgXdWSHneOaw4vwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPJ1eLxX7A3W2Bxv/HYZ4QOLGhceMB8GA1UdIwQY MBaAFJnOd/fZFlE7hJFISZUP5D9VaU/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWM1Mzk5a1dVVHVFa1VoSmxRX2tQMVZwVDlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81Y2MzMzctYmM1Ni00NzY2LWE0NTAt ZjM1MzczZGE3ZGViLzEvOG5WNHZGZnNEZGJZSEdfOGRobmhBNHNhRng0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS81Y2MzMzctYmM1Ni00NzY2LWE0NTAtZjM1MzczZGE3ZGVi LzEvbWM1Mzk5a1dVVHVFa1VoSmxRX2tQMVZwVDlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWYvMA0G CSqGSIb3DQEBCwUAA4IBAQBtjjHoGX9AasEgw9nsMK3bNLpbp83hRzUTwUHHH9hn q03BaSSlQ/vhOEpBoAMwI4zsgFOQfPgSUJolEp9ZX7SM9mMMyyTnxdVUdfGL0yof CjctLrjMIescs+M3f0s2m8xDlttl/SxwAUUQe25nzabgpAO0tu0aPeVKuqvWktug OEPa6CIMxBkciYEHjIXLOLeaEb2EseaZwSweucAcUb3GA4D6N3xNjHBe3eIhnt1O KtPQfMG10evoIGmKss/wV9uhydRXg8W0Q/ducHzVLZSTNm3TpJyXYUpJvlR5Jtxt DbKFNMIH9VhDxf+isxSg1Arcoo1scNLrhHqbKVoCuWGG -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:40 2026 by rpki-client