This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/8mWxZpiqXYwc3d_MoBh2vXCPi7w.roa File: 8mWxZpiqXYwc3d_MoBh2vXCPi7w.roa (raw, json) Hash identifier: NA3FUqEHCIv+2pO01YQheP5r4xdrvQYz2f0gz7kHjsU= Subject key identifier: F2:65:B1:66:98:AA:5D:8C:1C:DD:DF:CC:A0:18:76:BD:70:8F:8B:BC Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019B79101E14DDE27EC6BE2240F2E8D94F56 Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/8mWxZpiqXYwc3d_MoBh2vXCPi7w.roa Signing time: Thu 01 Jan 2026 10:17:37 +0000 ROA not before: Thu 01 Jan 2026 10:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152672 IP address blocks: 46.37.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:1e:14:dd:e2:7e:c6:be:22:40:f2:e8:d9:4f:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 1 10:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f265b16698aa5d8c1cdddfcca01876bd708f8bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:71:a3:01:6b:d9:16:e7:33:72:da:e4:50:61: 75:3b:28:f6:14:77:3d:ad:53:57:8d:9d:9f:f1:50: 02:e6:67:2a:c9:55:9a:5f:d6:8f:ce:13:00:00:fd: 85:5a:66:86:04:99:78:14:c5:7c:df:bd:36:b3:f0: fa:79:5a:c7:20:0b:9a:98:9e:09:16:80:be:dd:df: 5d:c7:9d:47:ef:b5:9f:2e:25:b3:66:5b:d9:7a:5e: 43:7b:04:b6:64:38:b9:86:f3:88:25:b3:b4:07:65: 2c:a6:7e:c3:31:92:2b:52:8d:50:28:17:2b:3f:38: 87:9e:8b:03:02:e7:b2:bf:60:a2:02:7d:54:85:d3: cc:e7:c8:66:f5:0c:08:a0:f9:0e:35:bc:9c:f3:ae: c3:0a:2f:50:81:2b:12:57:c2:05:aa:85:25:ff:9c: 34:95:73:6e:f5:b8:ab:38:7a:6a:24:36:58:71:21: 29:42:18:bf:ba:7a:f2:23:88:8c:f8:6e:ef:e2:b0: 11:56:45:2e:5b:5b:47:ab:7e:63:52:36:66:d5:6a: 3c:6e:cd:b1:97:2a:c2:35:a2:cc:1a:7f:79:28:93: 4c:36:ac:8d:ad:2a:91:7f:cb:b5:98:73:d3:c4:55: d9:bf:5b:17:6a:75:91:d7:31:0e:f3:8f:35:a8:51: 5a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:65:B1:66:98:AA:5D:8C:1C:DD:DF:CC:A0:18:76:BD:70:8F:8B:BC X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/8mWxZpiqXYwc3d_MoBh2vXCPi7w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.112.0/24 Signature Algorithm: sha256WithRSAEncryption 25:35:fb:ad:ae:30:5f:97:4f:5c:2d:67:0a:a3:f2:52:4c:0f: 12:76:c7:a3:e9:28:68:6f:33:88:c1:47:e1:2f:9d:8c:6c:22: 62:40:8a:eb:65:c7:67:49:16:16:c4:ea:c9:1b:37:ef:81:9f: 86:ec:93:78:19:8e:f3:87:a2:34:00:eb:0f:42:03:43:42:b5: be:54:ed:e5:47:4d:48:a7:81:37:b7:e2:a6:c1:12:7a:69:54: 0f:65:f7:33:cf:3e:03:9a:03:ac:76:cb:93:6f:30:49:e6:68: 05:28:8b:6e:78:b6:a2:01:9a:89:4c:a2:f9:39:2e:1f:5c:4a: 98:01:59:83:9c:56:db:cc:d1:7c:49:e4:de:26:55:ab:5d:63: 34:d1:48:e1:df:84:18:10:75:a3:88:14:f2:ef:06:4c:fc:53: 67:31:18:4d:d7:4e:7c:b1:59:37:12:27:e1:1c:36:83:18:fb: 5c:57:d1:dc:8b:d9:63:51:ea:f0:be:be:ed:a6:78:92:48:30: 22:18:5d:ab:51:b2:1a:fe:15:8d:62:24:4b:a2:5b:3f:5f:c7: 89:89:10:09:c8:12:5c:9f:cb:02:07:14:9a:a3:68:ac:67:ed: ea:d7:f5:a1:0c:96:52:f7:93:0e:8b:c0:23:c1:18:65:ad:f7: 1f:53:5e:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EB4U3eJ+xr4iQPLo2U9WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTAxMTAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjY1YjE2Njk4YWE1ZDhjMWNkZGRmY2NhMDE4NzZiZDcwOGY4YmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnGjAWvZFuczctrkUGF1Oyj2FHc9 rVNXjZ2f8VAC5mcqyVWaX9aPzhMAAP2FWmaGBJl4FMV83702s/D6eVrHIAuamJ4J FoC+3d9dx51H77WfLiWzZlvZel5DewS2ZDi5hvOIJbO0B2Uspn7DMZIrUo1QKBcr PziHnosDAueyv2CiAn1UhdPM58hm9QwIoPkONbyc867DCi9QgSsSV8IFqoUl/5w0 lXNu9birOHpqJDZYcSEpQhi/unryI4iM+G7v4rARVkUuW1tHq35jUjZm1Wo8bs2x lyrCNaLMGn95KJNMNqyNrSqRf8u1mHPTxFXZv1sXanWR1zEO8481qFFaIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPJlsWaYql2MHN3fzKAYdr1wj4u8MB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEvOG1XeFpwaXFYWXdjM2RfTW9CaDJ2WENQaTd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiVwMA0G CSqGSIb3DQEBCwUAA4IBAQAlNfutrjBfl09cLWcKo/JSTA8Sdsej6ShobzOIwUfh L52MbCJiQIrrZcdnSRYWxOrJGzfvgZ+G7JN4GY7zh6I0AOsPQgNDQrW+VO3lR01I p4E3t+KmwRJ6aVQPZfczzz4DmgOsdsuTbzBJ5mgFKItueLaiAZqJTKL5OS4fXEqY AVmDnFbbzNF8SeTeJlWrXWM00Ujh34QYEHWjiBTy7wZM/FNnMRhN1058sVk3Eifh HDaDGPtcV9Hci9ljUerwvr7tpniSSDAiGF2rUbIa/hWNYiRLols/X8eJiRAJyBJc n8sCBxSao2isZ+3q1/WhDJZS95MOi8AjwRhlrfcfU16w -----END CERTIFICATE-----Generated at Sat Jan 10 12:49:26 2026 by rpki-client