This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/8jfqpIUKuOw3bEeNl0QjuTIts5w.roa File: 8jfqpIUKuOw3bEeNl0QjuTIts5w.roa (raw, json) Hash identifier: lA+JjzalnUsshqDeIEjkif9B6fmiylkMishkEuJTw+c= Subject key identifier: F2:37:EA:A4:85:0A:B8:EC:37:6C:47:8D:97:44:23:B9:32:2D:B3:9C Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 019B77C6C5D6AACBF5DFDCAA4E3520703BE5 Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/8jfqpIUKuOw3bEeNl0QjuTIts5w.roa Signing time: Thu 01 Jan 2026 04:17:54 +0000 ROA not before: Thu 01 Jan 2026 04:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48730 IP address blocks: 164.215.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c5:d6:aa:cb:f5:df:dc:aa:4e:35:20:70:3b:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Jan 1 04:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f237eaa4850ab8ec376c478d974423b9322db39c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:19:fd:ac:4a:22:e2:12:da:6e:35:89:04:a8: 39:ed:18:8c:6c:d8:37:1e:86:94:c3:52:7f:ea:b7: 3f:8c:e7:32:e4:3b:2a:69:c8:2f:21:7c:8c:41:7b: b7:59:7d:82:a4:30:1a:b0:b6:74:4c:3b:de:a1:e1: e7:18:b9:01:0a:89:fe:25:db:6d:60:f6:d1:ac:91: 7e:54:c1:89:95:5c:8a:6c:74:62:3b:c2:5e:7a:5f: 75:d1:c6:39:af:26:a9:f7:46:b3:8c:4c:2e:fb:79: 9a:50:70:da:5f:93:8d:06:73:c6:75:1c:22:94:d0: 6d:56:40:70:f2:43:69:41:fc:65:8c:4a:36:5d:20: 2d:c6:3f:31:11:7d:11:74:17:7f:1b:14:f3:61:9f: 06:af:83:8a:0c:12:1f:e7:36:9d:e3:02:1d:ff:e7: ae:be:7f:df:aa:1c:f9:2d:1e:c4:65:db:9b:f3:a3: f9:6a:1a:fd:9c:e1:de:a4:03:54:01:e4:5a:52:74: ad:ec:86:18:f5:c4:65:02:68:f0:54:d8:bd:60:2d: 93:21:eb:da:80:38:f1:70:f2:64:6b:82:c7:51:d9: 6b:61:c4:c9:15:87:26:0b:b8:04:47:56:eb:16:17: 43:af:75:81:fe:25:fe:4b:e9:1c:d6:07:51:a7:5b: b8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:37:EA:A4:85:0A:B8:EC:37:6C:47:8D:97:44:23:B9:32:2D:B3:9C X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/8jfqpIUKuOw3bEeNl0QjuTIts5w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.215.101.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:fe:d9:f9:b8:cf:09:ad:43:c7:8a:0e:c4:f6:db:1a:a0:9d: 95:0e:c2:88:6a:c1:32:53:b3:58:ad:bd:c3:40:2a:5a:e0:f0: 03:7d:ac:76:a1:64:e5:be:b1:01:1a:aa:29:a0:bd:04:41:c4: 16:6f:31:57:d0:fd:3a:ed:5d:5f:f6:2c:3d:44:7e:3b:5c:3e: 4f:c8:5f:cc:b1:e8:d2:ac:14:ba:f8:5b:0c:02:a7:f8:46:94: 6f:64:09:e0:04:38:e8:80:5d:f2:73:cb:c1:2a:95:bf:eb:bb: dc:0b:52:4b:c2:62:50:97:55:13:ea:a3:2f:3c:c3:62:13:85: bf:14:4c:22:95:6e:31:9f:32:8f:16:83:2c:35:25:85:7b:1a: 0b:ad:c2:8f:db:3c:58:ba:63:73:b2:b9:3b:de:d2:b8:ab:06: 9b:e7:58:c1:c7:52:f7:b8:2a:d5:59:ff:76:9e:38:16:3d:df: 35:b8:62:5d:69:e7:5c:88:a5:4b:93:e3:c7:b3:59:8e:41:a4: bc:fd:fd:63:63:79:d2:4c:63:91:97:9b:8a:48:b8:30:bc:31: 88:56:e8:c8:08:c2:1b:9c:fd:df:d2:4a:2d:8f:e7:bc:e3:1b: fa:01:ff:66:4a:a6:73:e2:b2:6d:62:f4:8d:96:b9:39:7e:85: d2:d8:6f:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xsXWqsv139yqTjUgcDvlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjYwMTAxMDQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjM3ZWFhNDg1MGFiOGVjMzc2YzQ3OGQ5NzQ0MjNiOTMyMmRiMzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshn9rEoi4hLabjWJBKg57RiMbNg3 HoaUw1J/6rc/jOcy5DsqacgvIXyMQXu3WX2CpDAasLZ0TDveoeHnGLkBCon+Jdtt YPbRrJF+VMGJlVyKbHRiO8Jeel910cY5ryap90azjEwu+3maUHDaX5ONBnPGdRwi lNBtVkBw8kNpQfxljEo2XSAtxj8xEX0RdBd/GxTzYZ8Gr4OKDBIf5zad4wId/+eu vn/fqhz5LR7EZdub86P5ahr9nOHepANUAeRaUnSt7IYY9cRlAmjwVNi9YC2TIeva gDjxcPJka4LHUdlrYcTJFYcmC7gER1brFhdDr3WB/iX+S+kc1gdRp1u4bwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPI36qSFCrjsN2xHjZdEI7kyLbOcMB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvOGpmcXBJVUt1T3czYkVlTmwwUWp1VEl0czV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApNdlMA0G CSqGSIb3DQEBCwUAA4IBAQBM/tn5uM8JrUPHig7E9tsaoJ2VDsKIasEyU7NYrb3D QCpa4PADfax2oWTlvrEBGqopoL0EQcQWbzFX0P067V1f9iw9RH47XD5PyF/MsejS rBS6+FsMAqf4RpRvZAngBDjogF3yc8vBKpW/67vcC1JLwmJQl1UT6qMvPMNiE4W/ FEwilW4xnzKPFoMsNSWFexoLrcKP2zxYumNzsrk73tK4qwab51jBx1L3uCrVWf92 njgWPd81uGJdaedciKVLk+PHs1mOQaS8/f1jY3nSTGORl5uKSLgwvDGIVujICMIb nP3f0kotj+e84xv6Af9mSqZz4rJtYvSNlrk5foXS2G/z -----END CERTIFICATE-----Generated at Wed Jan 21 12:20:13 2026 by rpki-client