This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/8r944bJqG_LM17rTDE1uGAYMcO4.roa File: 8r944bJqG_LM17rTDE1uGAYMcO4.roa (raw, json) Hash identifier: US/6Z/+ktv9Mac1FJpsH2XS8YNAZ76aWDA9Ebr1o3lU= Subject key identifier: F2:BF:78:E1:B2:6A:1B:F2:CC:D7:BA:D3:0C:4D:6E:18:06:0C:70:EE Certificate issuer: /CN=642794c2d2cfa054638ba950a5f668e87601412d Certificate serial: 019B79ED2FF858E9680EFDE933AE3F3FC8DC Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/8r944bJqG_LM17rTDE1uGAYMcO4.roa Signing time: Thu 01 Jan 2026 14:19:05 +0000 ROA not before: Thu 01 Jan 2026 14:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60662 IP address blocks: 37.122.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:2f:f8:58:e9:68:0e:fd:e9:33:ae:3f:3f:c8:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d Validity Not Before: Jan 1 14:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2bf78e1b26a1bf2ccd7bad30c4d6e18060c70ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9c:88:b9:f6:de:8e:4b:5b:92:2f:3b:fc:0e: 48:93:f5:4e:bd:6d:d3:f4:83:2f:74:bc:5a:a6:4d: a1:0f:19:b0:bd:d0:3c:ae:a8:02:ab:f9:3d:f8:23: 8a:97:25:75:ae:76:61:89:98:df:26:dc:d9:5d:94: eb:f4:de:02:a6:25:1f:d7:6c:51:42:de:e0:ae:95: 14:41:a7:f5:a3:74:b4:44:c8:6d:d8:a1:d0:2c:43: b8:d9:25:25:2d:d3:0a:86:9a:a5:52:f0:36:56:5c: 7b:91:eb:74:d9:eb:b6:30:44:cc:f7:17:2b:65:63: c4:d5:94:00:d8:53:0d:f3:ee:05:7a:77:4f:39:7e: 02:79:8b:a3:5b:23:fa:a8:22:cc:6e:38:54:14:de: 51:25:eb:dd:af:50:29:0b:a2:76:f0:79:58:ac:9b: d6:5d:21:52:c2:bc:fc:bf:c2:3f:f4:f1:a4:43:64: 1e:7c:06:43:a8:ac:a1:3f:02:12:79:d2:00:35:dd: 49:09:12:52:4f:39:c6:37:bf:78:2c:71:e2:3e:84: 37:10:15:3b:94:9e:96:4d:f0:b3:3e:25:31:91:63: 29:88:12:39:f4:61:6a:b6:33:e5:27:8b:71:3d:25: 8e:92:28:2d:c6:f6:dd:bf:a4:54:89:f3:56:e9:a9: bf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BF:78:E1:B2:6A:1B:F2:CC:D7:BA:D3:0C:4D:6E:18:06:0C:70:EE X509v3 Authority Key Identifier: keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/8r944bJqG_LM17rTDE1uGAYMcO4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.122.144.0/22 Signature Algorithm: sha256WithRSAEncryption c8:fa:e4:9d:f9:12:e0:d4:c1:d2:b1:be:34:a2:3a:0d:a1:ea: 45:b4:7f:37:d0:bc:2c:8c:fd:cc:ba:fe:33:c1:da:6f:14:52: 4f:3a:06:96:bd:80:cd:74:95:dd:8a:9c:52:65:61:5c:57:84: 9d:17:7d:81:a1:4d:97:65:92:c5:57:cb:71:da:a0:e9:de:d9: 2f:df:12:f7:76:47:fd:14:19:87:13:c6:73:56:94:4d:61:2f: 4e:e2:3d:7a:c6:ed:8c:89:b8:21:c0:20:83:5c:9c:4f:19:4d: a6:e6:ee:89:5f:06:62:b5:d0:a3:d7:87:ca:0c:b9:d9:97:55: da:4c:95:be:67:9f:30:80:78:46:82:df:fd:98:bb:b1:98:d2: c2:54:d8:2b:73:c7:ff:cd:8a:0a:5c:69:46:cb:e3:d7:de:15: 51:fe:49:06:27:b3:65:d2:e7:41:a4:b5:ef:1a:39:17:2a:a9: 74:e5:eb:10:bb:e2:8e:da:ba:f0:71:a1:2d:f6:34:73:3e:c3: ee:97:40:79:d5:1b:77:35:9a:a2:a2:d1:5c:62:3a:35:50:08: 1c:15:97:19:dc:62:c4:85:a4:30:24:dd:99:ab:5a:56:44:88: ef:24:ea:76:a9:22:d8:8f:b8:38:25:0f:57:1c:d8:56:63:a6: fb:12:35:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57S/4WOloDv3pM64/P8jcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0Mjc5NGMyZDJjZmEwNTQ2MzhiYTk1MGE1ZjY2OGU4NzYw MTQxMmQwHhcNMjYwMTAxMTQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmJmNzhlMWIyNmExYmYyY2NkN2JhZDMwYzRkNmUxODA2MGM3MGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZyIufbejktbki87/A5Ik/VOvW3T 9IMvdLxapk2hDxmwvdA8rqgCq/k9+COKlyV1rnZhiZjfJtzZXZTr9N4CpiUf12xR Qt7grpUUQaf1o3S0RMht2KHQLEO42SUlLdMKhpqlUvA2Vlx7ket02eu2METM9xcr ZWPE1ZQA2FMN8+4FendPOX4CeYujWyP6qCLMbjhUFN5RJevdr1ApC6J28HlYrJvW XSFSwrz8v8I/9PGkQ2QefAZDqKyhPwISedIANd1JCRJSTznGN794LHHiPoQ3EBU7 lJ6WTfCzPiUxkWMpiBI59GFqtjPlJ4txPSWOkigtxvbdv6RUifNW6am/7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPK/eOGyahvyzNe60wxNbhgGDHDuMB8GA1UdIwQY MBaAFGQnlMLSz6BUY4upUKX2aOh2AUEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkNlVXd0TFBvRlJqaTZsUXBmWm82SFlCUVMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNzBhOWMtMTUyOC00ZTY2LWI3YTYt MDYxNjM5ODEyYzc0LzEvOHI5NDRiSnFHX0xNMTdyVERFMXVHQVlNY080LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mNzBhOWMtMTUyOC00ZTY2LWI3YTYtMDYxNjM5ODEyYzc0 LzEvWkNlVXd0TFBvRlJqaTZsUXBmWm82SFlCUVMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJXqQMA0G CSqGSIb3DQEBCwUAA4IBAQDI+uSd+RLg1MHSsb40ojoNoepFtH830LwsjP3Muv4z wdpvFFJPOgaWvYDNdJXdipxSZWFcV4SdF32BoU2XZZLFV8tx2qDp3tkv3xL3dkf9 FBmHE8ZzVpRNYS9O4j16xu2MibghwCCDXJxPGU2m5u6JXwZitdCj14fKDLnZl1Xa TJW+Z58wgHhGgt/9mLuxmNLCVNgrc8f/zYoKXGlGy+PX3hVR/kkGJ7Nl0udBpLXv GjkXKql05esQu+KO2rrwcaEt9jRzPsPul0B51Rt3NZqiotFcYjo1UAgcFZcZ3GLE haQwJN2Zq1pWRIjvJOp2qSLYj7g4JQ9XHNhWY6b7EjX+ -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:56 2026 by rpki-client