This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/d8hxgCzh00P1vymqIssXJjsMEak.roa File: d8hxgCzh00P1vymqIssXJjsMEak.roa (raw, json) Hash identifier: QPYQOVq2qG5TE7J3ZZxvLlE+oFxwiuDzLiQ9NHEre64= Subject key identifier: 77:C8:71:80:2C:E1:D3:43:F5:BF:29:AA:22:CB:17:26:3B:0C:11:A9 Certificate issuer: /CN=b537115961c6abf5b87abe4a20053e4aca1b6ec2 Certificate serial: 019B7D5BA50C28D844A3C9C9AB0EDF3AA858 Authority key identifier: B5:37:11:59:61:C6:AB:F5:B8:7A:BE:4A:20:05:3E:4A:CA:1B:6E:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/d8hxgCzh00P1vymqIssXJjsMEak.roa Signing time: Fri 02 Jan 2026 06:18:36 +0000 ROA not before: Fri 02 Jan 2026 06:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207413 IP address blocks: 91.194.140.0/23 maxlen: 24 91.194.166.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:a5:0c:28:d8:44:a3:c9:c9:ab:0e:df:3a:a8:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b537115961c6abf5b87abe4a20053e4aca1b6ec2 Validity Not Before: Jan 2 06:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77c871802ce1d343f5bf29aa22cb17263b0c11a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7d:6a:8d:71:53:07:46:6a:1d:4a:85:37:e2: 2a:51:64:eb:93:49:c7:db:93:6a:6c:a8:d4:d6:b6: 99:73:ad:31:84:a2:d2:5b:72:c3:da:d4:bc:e6:40: 42:f9:73:7d:85:92:a8:b7:2a:28:cc:47:a5:64:0f: 3c:e7:0c:72:2d:24:71:02:f9:d6:99:00:13:ff:bc: f5:4c:0a:38:cc:c8:f6:46:31:8d:24:a7:35:1b:54: 37:4a:34:dd:4a:d3:4f:26:3b:0e:e8:cd:fe:ef:b7: 16:54:55:75:57:36:10:bf:f0:08:8f:5c:68:ed:bf: ec:13:54:d9:29:9c:f0:a3:dd:80:25:4d:cc:8e:81: 9c:fb:36:ab:69:d7:de:57:b5:24:76:a1:0f:9d:ea: a1:e9:4b:f3:6e:b3:74:9c:cc:25:48:b9:eb:cb:07: 48:4a:cb:84:60:56:1d:39:6e:84:8d:0c:6b:b8:2d: 0c:12:e7:12:72:9d:8a:1c:7a:31:92:13:3b:e5:10: 09:88:12:8e:1c:14:0a:0f:36:2f:f4:08:5c:a1:34: 3a:d7:c3:f4:17:a8:bd:7a:fc:81:26:e2:c2:01:c7: 7d:c0:f4:80:8b:08:7e:c5:1c:7f:e7:b4:98:5d:7c: b0:2c:56:9c:74:51:4f:5c:89:89:6c:bc:f1:30:a3: 88:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C8:71:80:2C:E1:D3:43:F5:BF:29:AA:22:CB:17:26:3B:0C:11:A9 X509v3 Authority Key Identifier: keyid:B5:37:11:59:61:C6:AB:F5:B8:7A:BE:4A:20:05:3E:4A:CA:1B:6E:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/d8hxgCzh00P1vymqIssXJjsMEak.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.140.0/23 91.194.166.0/23 Signature Algorithm: sha256WithRSAEncryption 06:5a:b2:f7:18:5d:32:65:d6:f4:98:22:55:cb:33:2e:45:2d: 7d:cb:2c:f1:0b:f4:80:02:d6:a5:a6:63:0a:ec:20:87:56:e6: 07:c5:c0:52:53:7b:93:5a:2d:b5:24:03:6f:d2:da:3b:b6:11: 67:9c:56:c2:35:5c:ab:40:49:09:b2:6e:62:6c:8b:dc:6e:27: 02:4f:31:ed:27:73:c0:27:11:53:8a:07:e0:26:b9:8c:b8:16: 05:3d:30:eb:2e:c7:01:63:65:52:61:ef:75:a9:de:0c:64:a2: 52:c9:01:2a:c2:65:72:c9:a0:2e:47:39:30:68:69:ec:6c:00: a7:f3:ee:82:30:45:4f:b5:93:7f:91:e3:c1:a0:48:a7:39:0e: 9c:a0:d9:95:f3:d0:e9:78:d8:92:65:83:6c:54:b4:10:b4:33: 72:73:55:48:08:12:1b:e8:64:f3:71:08:0b:eb:ce:99:46:70: 0c:7a:ce:05:25:3e:27:d4:f8:3f:2c:62:59:e7:f9:3e:29:45: 50:ad:c3:96:e6:0a:81:99:25:f1:07:a2:7b:2c:34:1a:5f:23: f0:1b:c7:3b:3b:e7:c4:fd:41:d2:d5:0f:7d:78:21:41:f4:da: 14:0e:3a:57:ab:22:b0:2f:89:50:b6:32:c6:aa:76:4e:16:d5: 88:ec:74:07 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9W6UMKNhEo8nJqw7fOqhYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MzcxMTU5NjFjNmFiZjViODdhYmU0YTIwMDUzZTRhY2Ex YjZlYzIwHhcNMjYwMTAyMDYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2M4NzE4MDJjZTFkMzQzZjViZjI5YWEyMmNiMTcyNjNiMGMxMWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1X1qjXFTB0ZqHUqFN+IqUWTrk0nH 25NqbKjU1raZc60xhKLSW3LD2tS85kBC+XN9hZKotyoozEelZA885wxyLSRxAvnW mQAT/7z1TAo4zMj2RjGNJKc1G1Q3SjTdStNPJjsO6M3+77cWVFV1VzYQv/AIj1xo 7b/sE1TZKZzwo92AJU3MjoGc+zaradfeV7UkdqEPneqh6UvzbrN0nMwlSLnrywdI SsuEYFYdOW6EjQxruC0MEucScp2KHHoxkhM75RAJiBKOHBQKDzYv9AhcoTQ618P0 F6i9evyBJuLCAcd9wPSAiwh+xRx/57SYXXywLFacdFFPXImJbLzxMKOIgQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHfIcYAs4dND9b8pqiLLFyY7DBGpMB8GA1UdIwQY MBaAFLU3EVlhxqv1uHq+SiAFPkrKG27CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFRjUldXSEdxX1c0ZXI1S0lBVS1Tc29iYnNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8yNmNjNmEtNmYxNy00MGE5LWI5ODct NmZjNzE3MTc1ZTU4LzEvZDhoeGdDemgwMFAxdnltcUlzc1hKanNNRWFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8yNmNjNmEtNmYxNy00MGE5LWI5ODctNmZjNzE3MTc1ZTU4 LzEvdFRjUldXSEdxX1c0ZXI1S0lBVS1Tc29iYnNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW8KMAwQB W8KmMA0GCSqGSIb3DQEBCwUAA4IBAQAGWrL3GF0yZdb0mCJVyzMuRS19yyzxC/SA AtalpmMK7CCHVuYHxcBSU3uTWi21JANv0to7thFnnFbCNVyrQEkJsm5ibIvcbicC TzHtJ3PAJxFTigfgJrmMuBYFPTDrLscBY2VSYe91qd4MZKJSyQEqwmVyyaAuRzkw aGnsbACn8+6CMEVPtZN/kePBoEinOQ6coNmV89DpeNiSZYNsVLQQtDNyc1VICBIb 6GTzcQgL686ZRnAMes4FJT4n1Pg/LGJZ5/k+KUVQrcOW5gqBmSXxB6J7LDQaXyPw G8c7O+fE/UHS1Q99eCFB9NoUDjpXqyKwL4lQtjLGqnZOFtWI7HQH -----END CERTIFICATE-----Generated at Tue Feb 10 02:22:34 2026 by rpki-client