This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/8nl2mLa9KaQYd0gtNecXWVE84vs.roa File: 8nl2mLa9KaQYd0gtNecXWVE84vs.roa (raw, json) Hash identifier: e0ZLWW8LXQsY4AnPfxVi/bqwxVjXvo2BrP7yTMcokRY= Subject key identifier: F2:79:76:98:B6:BD:29:A4:18:77:48:2D:35:E7:17:59:51:3C:E2:FB Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Certificate serial: 019B78A2ECBFE1F626BB7DA7C629657CEEFB Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/8nl2mLa9KaQYd0gtNecXWVE84vs.roa Signing time: Thu 01 Jan 2026 08:18:21 +0000 ROA not before: Thu 01 Jan 2026 08:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 85.237.90.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ec:bf:e1:f6:26:bb:7d:a7:c6:29:65:7c:ee:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Validity Not Before: Jan 1 08:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2797698b6bd29a41877482d35e71759513ce2fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bd:96:1a:25:9f:c2:1e:4d:93:92:04:bc:62: 7a:06:bb:b7:14:1f:15:2e:a5:aa:81:29:2d:a1:a1: fc:02:24:5b:f7:59:62:cb:6f:c9:ed:aa:17:c0:b9: e2:04:af:d9:e4:76:19:ae:85:ce:03:6b:80:74:13: fa:e7:95:3e:a5:47:97:2f:95:bb:d6:30:1a:ff:5f: 19:43:34:0c:04:93:e5:37:71:c2:65:16:a4:59:47: d8:ef:c3:58:23:0f:b0:cd:dc:d5:f5:07:36:42:a0: 63:45:5d:03:4d:ec:f9:01:bf:30:ca:c8:0b:c6:75: 66:7a:ac:90:0c:db:42:4e:a1:d7:cc:ea:c4:63:f4: e9:9e:9b:b6:a5:b7:65:20:bb:47:52:1a:01:91:ba: ee:43:d4:5d:62:e9:91:b6:a9:70:00:fe:51:c3:18: c9:2d:01:49:4a:5f:fe:f9:71:85:f6:4c:55:60:9e: c0:8d:26:a4:35:4b:ce:a1:86:ab:19:a6:b0:fd:12: 27:45:62:9e:cd:e7:26:3d:f2:8c:f2:a3:6c:88:67: c5:06:d4:fb:16:3a:8c:3e:23:ba:ff:d6:fd:b6:60: c2:f4:b1:f7:10:ea:ba:64:2d:33:a6:f3:1f:5d:48: b5:41:6e:4f:70:c7:86:9a:1f:c9:bd:bc:17:9e:f4: 7c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:79:76:98:B6:BD:29:A4:18:77:48:2D:35:E7:17:59:51:3C:E2:FB X509v3 Authority Key Identifier: keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/8nl2mLa9KaQYd0gtNecXWVE84vs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.90.0/23 Signature Algorithm: sha256WithRSAEncryption 57:a9:95:b1:18:f5:52:74:65:00:9b:58:ef:9d:90:48:2f:69: 82:2c:ab:4f:e4:fc:29:d8:f4:ec:15:fb:a0:57:e0:17:ea:d7: bd:09:92:34:69:28:72:0d:c1:1c:eb:fa:96:42:80:ad:50:c8: a7:24:33:93:4b:7d:b4:6c:86:65:27:b0:82:5f:89:ee:35:10: e6:4a:fc:05:fa:88:2b:a7:bd:6b:7b:7b:8d:53:11:a5:63:ed: 48:31:2a:a3:dd:8b:9b:d6:52:be:98:7d:63:b2:f1:56:8f:71: ca:40:3d:07:59:97:56:f5:fe:0c:af:b3:56:2b:8f:1e:3b:91: fb:ab:16:22:23:a1:b7:cf:c0:32:52:05:30:99:fd:65:36:0c: a9:4c:e9:c9:87:6a:34:03:1b:32:bf:44:b5:cb:a0:e2:d4:ca: a1:b8:bc:f8:cf:18:b0:11:cd:0c:48:96:67:35:ab:9d:08:8e: ed:a0:67:49:88:e5:b7:ed:49:57:39:f8:91:a7:30:94:c2:48: 1f:d7:5c:7e:29:78:28:e1:ba:45:5e:33:d9:38:af:2b:c8:70: d7:52:c2:5b:09:93:e9:94:13:0a:df:69:c4:e3:65:71:ee:36: dc:45:2b:3f:9e:67:e6:95:42:b9:94:b0:8a:8a:a9:80:5a:d3: 8b:40:f4:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ouy/4fYmu32nxillfO77MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj YzE5NDEwHhcNMjYwMTAxMDgxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjc5NzY5OGI2YmQyOWE0MTg3NzQ4MmQzNWU3MTc1OTUxM2NlMmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj72WGiWfwh5Nk5IEvGJ6Bru3FB8V LqWqgSktoaH8AiRb91liy2/J7aoXwLniBK/Z5HYZroXOA2uAdBP655U+pUeXL5W7 1jAa/18ZQzQMBJPlN3HCZRakWUfY78NYIw+wzdzV9Qc2QqBjRV0DTez5Ab8wysgL xnVmeqyQDNtCTqHXzOrEY/Tpnpu2pbdlILtHUhoBkbruQ9RdYumRtqlwAP5RwxjJ LQFJSl/++XGF9kxVYJ7AjSakNUvOoYarGaaw/RInRWKezecmPfKM8qNsiGfFBtT7 FjqMPiO6/9b9tmDC9LH3EOq6ZC0zpvMfXUi1QW5PcMeGmh/JvbwXnvR8HwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPJ5dpi2vSmkGHdILTXnF1lRPOL7MB8GA1UdIwQY MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt NmZlNGQ4ZmVkMTYwLzEvOG5sMm1MYTlLYVFZZDBndE5lY1hXVkU4NHZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVe1aMA0G CSqGSIb3DQEBCwUAA4IBAQBXqZWxGPVSdGUAm1jvnZBIL2mCLKtP5Pwp2PTsFfug V+AX6te9CZI0aShyDcEc6/qWQoCtUMinJDOTS320bIZlJ7CCX4nuNRDmSvwF+ogr p71re3uNUxGlY+1IMSqj3Yub1lK+mH1jsvFWj3HKQD0HWZdW9f4Mr7NWK48eO5H7 qxYiI6G3z8AyUgUwmf1lNgypTOnJh2o0Axsyv0S1y6Di1MqhuLz4zxiwEc0MSJZn NaudCI7toGdJiOW37UlXOfiRpzCUwkgf11x+KXgo4bpFXjPZOK8ryHDXUsJbCZPp lBMK32nE42Vx7jbcRSs/nmfmlUK5lLCKiqmAWtOLQPQB -----END CERTIFICATE-----Generated at Mon Jan 19 16:52:05 2026 by rpki-client