This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/8sd6i61fK2pFKRyKUFXIcecWNdA.roa File: 8sd6i61fK2pFKRyKUFXIcecWNdA.roa (raw, json) Hash identifier: 0lP2EukbQ7lxiIB/1dg6Wt6kXv3T/8YmxZYQdbkSyU4= Subject key identifier: F2:C7:7A:8B:AD:5F:2B:6A:45:29:1C:8A:50:55:C8:71:E7:16:35:D0 Certificate issuer: /CN=3646142ce3290ab6786d3d30f26b5e41fd684dde Certificate serial: 019B79EC6971EB495A87C1D72508FEB0A214 Authority key identifier: 36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/8sd6i61fK2pFKRyKUFXIcecWNdA.roa Signing time: Thu 01 Jan 2026 14:18:15 +0000 ROA not before: Thu 01 Jan 2026 14:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56416 IP address blocks: 91.224.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:69:71:eb:49:5a:87:c1:d7:25:08:fe:b0:a2:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3646142ce3290ab6786d3d30f26b5e41fd684dde Validity Not Before: Jan 1 14:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2c77a8bad5f2b6a45291c8a5055c871e71635d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:60:3d:70:a6:e3:b0:91:d1:31:42:ce:31:20: 4d:ed:e1:3d:c4:e5:ef:6f:2d:8a:8d:ce:f4:b1:c5: aa:d5:d5:62:5d:9d:20:19:63:ad:12:7d:9b:34:10: f1:8f:f4:ee:b4:58:e0:a0:01:8a:22:29:af:9d:e3: 22:43:5f:a6:91:b9:6c:75:04:1c:fa:1f:1f:60:f5: 1f:5d:28:4f:41:5a:30:e7:37:97:9c:a4:af:57:13: 4b:6b:c9:30:26:c5:22:9c:97:dc:c8:a8:17:f7:8d: 67:7a:9a:32:c0:7f:79:63:59:ca:40:22:d6:53:c0: 47:19:f1:27:b0:92:86:78:9d:8a:97:cc:8f:3f:8d: a5:0d:99:05:9d:d8:77:50:39:94:a7:ef:4e:24:5c: 50:b9:3a:80:3d:16:bd:ce:ef:db:2e:1c:96:7e:f0: 21:52:66:53:cc:3f:f1:9c:49:4a:7e:0a:d2:70:e2: a2:e6:60:0b:53:c8:e1:2f:e6:1e:d6:f4:0b:d7:fc: 90:47:eb:94:ae:12:01:2e:dc:f8:89:01:b8:52:62: d9:70:fd:39:aa:e3:44:09:14:75:9e:27:cf:48:a0: c4:7a:0f:c3:4b:05:ef:cc:e9:00:47:e2:1a:64:ff: 26:13:21:a3:8a:25:b2:55:bd:86:78:a5:b8:6b:a5: 6c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C7:7A:8B:AD:5F:2B:6A:45:29:1C:8A:50:55:C8:71:E7:16:35:D0 X509v3 Authority Key Identifier: keyid:36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/8sd6i61fK2pFKRyKUFXIcecWNdA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.112.0/24 Signature Algorithm: sha256WithRSAEncryption 23:82:d4:cd:bb:b0:a4:f2:df:75:d4:a7:14:33:84:11:82:18: 7e:2f:6b:98:1f:5d:d1:0e:78:6c:5b:fc:24:62:63:91:06:9b: 7a:3d:3c:98:3b:26:f2:6f:f4:97:e9:78:3b:36:40:28:8e:b6: 6a:98:e6:81:28:8a:4e:41:09:e0:7e:c8:a9:0c:a3:a5:c3:a6: 41:e3:08:ea:ea:87:04:bf:1e:51:d7:fd:ab:89:01:9a:32:8d: c4:12:42:a0:bd:da:96:bd:b3:64:a4:5e:19:5e:73:62:8d:af: 30:46:fd:ad:41:a7:d2:2e:4d:39:69:a8:88:96:f0:c0:8f:3d: d5:b1:c3:1a:7c:37:03:99:19:df:4f:aa:55:f6:60:02:83:9c: 34:a8:34:b2:6e:bc:31:60:6b:be:e7:73:7e:04:a7:e5:d1:d5: 60:fa:23:f4:74:5b:2b:fd:69:7b:e4:b7:4e:e6:27:8b:5e:c8: ce:0b:a4:db:22:c0:59:53:1a:c1:1e:b8:5e:41:94:23:4d:7c: 9c:3f:ba:57:f3:d0:c0:81:18:ff:ac:d6:e1:62:d3:76:7d:45: c4:1a:e1:72:83:7d:54:8b:ec:06:ea:cc:da:6e:20:22:ca:10: e5:7d:95:c0:d9:9e:db:6d:de:47:c4:0c:4b:57:0b:92:1a:ed: 8e:ad:d4:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Glx60lah8HXJQj+sKIUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NDYxNDJjZTMyOTBhYjY3ODZkM2QzMGYyNmI1ZTQxZmQ2 ODRkZGUwHhcNMjYwMTAxMTQxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmM3N2E4YmFkNWYyYjZhNDUyOTFjOGE1MDU1Yzg3MWU3MTYzNWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WA9cKbjsJHRMULOMSBN7eE9xOXv by2Kjc70scWq1dViXZ0gGWOtEn2bNBDxj/TutFjgoAGKIimvneMiQ1+mkblsdQQc +h8fYPUfXShPQVow5zeXnKSvVxNLa8kwJsUinJfcyKgX941nepoywH95Y1nKQCLW U8BHGfEnsJKGeJ2Kl8yPP42lDZkFndh3UDmUp+9OJFxQuTqAPRa9zu/bLhyWfvAh UmZTzD/xnElKfgrScOKi5mALU8jhL+Ye1vQL1/yQR+uUrhIBLtz4iQG4UmLZcP05 quNECRR1nifPSKDEeg/DSwXvzOkAR+IaZP8mEyGjiiWyVb2GeKW4a6Vs2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPLHeoutXytqRSkcilBVyHHnFjXQMB8GA1UdIwQY MBaAFDZGFCzjKQq2eG09MPJrXkH9aE3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmtZVUxPTXBDclo0YlQwdzhtdGVRZjFvVGQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jZDgyMDYtNzY0ZS00YTMxLWFjZTct ZDMwODU0MmExZDg2LzEvOHNkNmk2MWZLMnBGS1J5S1VGWEljZWNXTmRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9jZDgyMDYtNzY0ZS00YTMxLWFjZTctZDMwODU0MmExZDg2 LzEvTmtZVUxPTXBDclo0YlQwdzhtdGVRZjFvVGQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+BwMA0G CSqGSIb3DQEBCwUAA4IBAQAjgtTNu7Ck8t911KcUM4QRghh+L2uYH13RDnhsW/wk YmORBpt6PTyYOybyb/SX6Xg7NkAojrZqmOaBKIpOQQngfsipDKOlw6ZB4wjq6ocE vx5R1/2riQGaMo3EEkKgvdqWvbNkpF4ZXnNija8wRv2tQafSLk05aaiIlvDAjz3V scMafDcDmRnfT6pV9mACg5w0qDSybrwxYGu+53N+BKfl0dVg+iP0dFsr/Wl75LdO 5ieLXsjOC6TbIsBZUxrBHrheQZQjTXycP7pX89DAgRj/rNbhYtN2fUXEGuFyg31U i+wG6szabiAiyhDlfZXA2Z7bbd5HxAxLVwuSGu2OrdRN -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:07 2026 by rpki-client