This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/8gWzaeDABO7wCNwooaWqq2l0qys.roa File: 8gWzaeDABO7wCNwooaWqq2l0qys.roa (raw, json) Hash identifier: k5/q/OksSf7TirAwZJIrNY4rVRnFn9uS5QcNTBdJb7A= Subject key identifier: F2:05:B3:69:E0:C0:04:EE:F0:08:DC:28:A1:A5:AA:AB:69:74:AB:2B Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019B7C808FF00053E6324DA84494C9A10B6B Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/8gWzaeDABO7wCNwooaWqq2l0qys.roa Signing time: Fri 02 Jan 2026 02:19:18 +0000 ROA not before: Fri 02 Jan 2026 02:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216475 IP address blocks: 46.243.3.0/24 maxlen: 24 95.81.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:8f:f0:00:53:e6:32:4d:a8:44:94:c9:a1:0b:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Jan 2 02:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f205b369e0c004eef008dc28a1a5aaab6974ab2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:90:60:03:c8:00:99:8d:ea:39:fc:26:af:0a: 2d:ef:0c:4a:8d:e2:d9:90:c8:28:a1:f7:02:ca:a1: 72:6a:77:7a:29:19:b8:18:a8:26:c1:c2:bc:e5:9f: 9c:80:6d:81:bb:6d:73:8b:84:71:2b:06:bf:08:69: 7f:4a:50:e0:0d:ff:dd:75:56:11:66:6d:70:1f:e4: a6:39:56:93:52:b0:09:0e:87:2c:ff:03:f5:46:cc: fe:0c:dc:1e:e6:05:ec:e9:57:97:b1:29:45:96:f3: fb:58:0f:3b:b6:f9:80:81:98:9f:08:75:64:b5:32: 93:a0:78:74:96:f7:5f:5b:74:68:49:b8:5d:b2:5d: 3c:e7:ea:a6:76:23:3f:c9:6f:9b:8e:1c:11:2f:34: 88:af:f7:86:dc:12:7a:00:8f:58:7b:a8:6c:25:dd: 59:40:e9:92:22:b6:46:61:07:d9:c7:3f:8d:ae:48: 21:1c:33:4c:33:bd:dc:6d:1d:65:0a:61:a7:7f:9b: c4:4b:1d:02:f2:c7:cb:6e:b0:9c:24:63:7e:1c:bc: 77:0e:68:37:f9:49:e6:ee:16:bf:7c:e6:70:35:a3: 9a:79:f4:fb:ae:8e:f7:0e:82:72:12:1c:99:5d:35: f6:96:04:c4:2f:5e:25:06:25:a3:d0:95:b2:d0:3a: 61:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:05:B3:69:E0:C0:04:EE:F0:08:DC:28:A1:A5:AA:AB:69:74:AB:2B X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/8gWzaeDABO7wCNwooaWqq2l0qys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.3.0/24 95.81.118.0/24 Signature Algorithm: sha256WithRSAEncryption 71:39:8f:f8:1e:4c:e0:18:ac:09:5d:a9:82:c9:9b:e6:67:f2: 36:ff:d7:55:60:a3:45:9e:2d:b1:88:c7:d0:e4:fa:7e:f9:14: ac:3e:f5:26:a0:57:bd:69:90:6a:08:05:5a:50:9f:46:67:a7: 65:4b:96:55:9a:ef:3f:24:ed:16:97:59:cb:ea:48:52:13:1d: 62:6d:98:25:fd:53:5c:06:01:b4:43:f3:d8:df:4d:ee:50:d6: d9:50:c8:e2:fe:ba:4a:e0:3d:d1:3d:22:a8:ee:a3:3a:8d:61: 58:99:a5:0c:00:77:c7:35:3e:5c:ec:74:43:2d:b1:92:f8:bf: bf:b4:b9:7d:9c:7f:de:bd:6a:09:a5:3a:84:5b:b2:1e:b0:8b: 89:22:ea:17:b4:24:86:b1:02:13:39:07:b9:bc:ad:6c:b7:40: 33:1f:8e:0e:b8:e8:28:07:57:73:6e:3c:54:8c:16:14:5c:b6: 30:a9:fe:55:be:59:15:ae:d6:a7:3b:ac:1a:83:df:83:78:b3: 90:f8:1c:cd:7e:a3:5d:58:43:ca:88:34:7d:0b:61:8c:a4:04: 26:b5:32:3f:9b:6b:ff:95:57:6b:77:37:3c:9b:1a:85:46:98: 29:20:b4:f8:4b:1a:4d:af:f5:4d:83:19:b9:a3:21:1d:9e:fb: e0:38:09:28 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gI/wAFPmMk2oRJTJoQtrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjYwMTAyMDIxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjA1YjM2OWUwYzAwNGVlZjAwOGRjMjhhMWE1YWFhYjY5NzRhYjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJBgA8gAmY3qOfwmrwot7wxKjeLZ kMgoofcCyqFyand6KRm4GKgmwcK85Z+cgG2Bu21zi4RxKwa/CGl/SlDgDf/ddVYR Zm1wH+SmOVaTUrAJDocs/wP1Rsz+DNwe5gXs6VeXsSlFlvP7WA87tvmAgZifCHVk tTKToHh0lvdfW3RoSbhdsl085+qmdiM/yW+bjhwRLzSIr/eG3BJ6AI9Ye6hsJd1Z QOmSIrZGYQfZxz+NrkghHDNMM73cbR1lCmGnf5vESx0C8sfLbrCcJGN+HLx3Dmg3 +Unm7ha/fOZwNaOaefT7ro73DoJyEhyZXTX2lgTEL14lBiWj0JWy0DphmQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPIFs2ngwATu8AjcKKGlqqtpdKsrMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvOGdXemFlREFCTzd3Q053b29hV3FxMmwwcXlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALvMDAwQA X1F2MA0GCSqGSIb3DQEBCwUAA4IBAQBxOY/4HkzgGKwJXamCyZvmZ/I2/9dVYKNF ni2xiMfQ5Pp++RSsPvUmoFe9aZBqCAVaUJ9GZ6dlS5ZVmu8/JO0Wl1nL6khSEx1i bZgl/VNcBgG0Q/PY303uUNbZUMji/rpK4D3RPSKo7qM6jWFYmaUMAHfHNT5c7HRD LbGS+L+/tLl9nH/evWoJpTqEW7IesIuJIuoXtCSGsQITOQe5vK1st0AzH44OuOgo B1dzbjxUjBYUXLYwqf5VvlkVrtanO6wag9+DeLOQ+BzNfqNdWEPKiDR9C2GMpAQm tTI/m2v/lVdrdzc8mxqFRpgpILT4SxpNr/VNgxm5oyEdnvvgOAko -----END CERTIFICATE-----Generated at Wed Jan 21 08:05:18 2026 by rpki-client