This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/8xG2LUgGMoQo1E0oFZXCsLklpt8.roa File: 8xG2LUgGMoQo1E0oFZXCsLklpt8.roa (raw, json) Hash identifier: P+5MDoFv+VPER4lMcHzaG5Ao7rqloC0fCfPVJFO8gkg= Subject key identifier: F3:11:B6:2D:48:06:32:84:28:D4:4D:28:15:95:C2:B0:B9:25:A6:DF Certificate issuer: /CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7 Certificate serial: 019B797F3D07C6B3CB1538816AD91BECD0A2 Authority key identifier: 4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/8xG2LUgGMoQo1E0oFZXCsLklpt8.roa Signing time: Thu 01 Jan 2026 12:19:00 +0000 ROA not before: Thu 01 Jan 2026 12:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44644 IP address blocks: 92.43.192.0/21 maxlen: 24 2a01:9460::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:3d:07:c6:b3:cb:15:38:81:6a:d9:1b:ec:d0:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7 Validity Not Before: Jan 1 12:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f311b62d4806328428d44d281595c2b0b925a6df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b2:67:d5:91:b5:09:9a:bb:57:ad:9d:b3:da: 4e:c8:c6:bb:3c:b6:d7:8c:80:19:9d:7a:d4:b8:fc: bf:a7:5d:1c:29:2f:07:81:8b:a3:e1:03:42:83:91: 7b:35:af:6d:8b:a0:69:d7:5b:1d:b1:70:42:34:f0: 43:e8:a4:e0:7c:9e:98:bb:8e:6f:f6:05:af:16:ec: 31:b6:fd:ec:d2:d9:b1:fe:8d:4d:6a:6b:2e:42:6f: c3:b8:bf:8b:54:1d:77:b4:ba:1c:d4:80:de:b2:c0: f4:a8:5d:ca:87:b4:9e:9f:3b:81:bf:e7:3e:00:09: 4d:15:bb:67:6d:b4:56:4f:7d:3b:87:53:fb:94:1b: c6:97:65:bf:2f:8b:28:13:e5:2b:9b:aa:e3:56:32: b3:c9:b5:e8:7c:95:ac:b5:f7:8f:39:5c:f1:3e:fe: 1d:93:44:ab:f1:8a:58:3b:9a:7c:92:02:bb:3c:ce: 5c:10:e6:31:00:f5:78:b7:b8:6b:07:3f:31:fa:a2: 44:80:80:3b:0f:23:24:47:1b:50:4b:f0:2b:07:12: 69:2c:0d:d6:99:31:24:45:3c:ed:10:4a:90:12:03: 26:2a:17:89:8e:e1:0d:a8:e9:9a:d0:11:e7:2d:bb: 55:02:8b:8c:cb:71:1d:ff:c2:a2:4c:4e:87:67:52: 2f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:11:B6:2D:48:06:32:84:28:D4:4D:28:15:95:C2:B0:B9:25:A6:DF X509v3 Authority Key Identifier: keyid:4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/8xG2LUgGMoQo1E0oFZXCsLklpt8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.43.192.0/21 IPv6: 2a01:9460::/32 Signature Algorithm: sha256WithRSAEncryption 51:04:39:cb:27:bf:04:5f:65:a3:89:9e:64:ac:d1:45:38:58: 4a:13:01:b6:1b:ee:bd:b5:ce:28:70:b3:d3:90:54:7a:b0:2c: 52:c1:4b:63:94:b1:a0:71:d8:fc:21:0d:5b:c2:dc:0d:da:94: fd:7a:18:39:4c:13:bd:f5:99:7f:ad:22:9f:51:ec:ae:95:b9: 6c:53:b6:f9:3c:73:72:49:06:62:b9:90:0e:ec:d6:84:de:cc: 56:a8:c1:e9:b6:65:09:b3:5f:60:70:90:11:0d:8b:bd:66:cc: 1a:96:92:7f:ff:cf:68:84:37:d9:39:05:61:d6:22:df:62:f0: 6d:65:f3:3a:5f:66:cd:a6:6b:6a:61:37:f3:3e:20:50:9c:fa: f5:73:93:ac:3f:28:26:4d:24:1c:5b:ff:e5:10:ad:13:40:4a: 17:a6:eb:ec:17:ec:4d:b7:d2:e4:1a:cb:5b:65:5f:28:f3:a7: fb:8f:f3:17:59:d0:27:0d:56:0e:6e:89:0f:01:8f:88:f5:e4: 2e:4c:bd:0e:86:29:56:b2:86:26:37:0f:81:0b:78:cf:51:22: 52:7f:81:1b:e5:d9:c3:f2:9a:bf:39:b4:e7:0b:71:31:a0:2a: d0:e4:aa:ff:40:a9:49:9f:07:9d:3b:6e:fa:7c:a5:a8:2c:95: a2:5a:16:8a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fz0HxrPLFTiBatkb7NCiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZGQ2OTczNDkzY2UwYzM4NDliOGI5MTliNzUwMmJhNWZh MDEzZDcwHhcNMjYwMTAxMTIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzExYjYyZDQ4MDYzMjg0MjhkNDRkMjgxNTk1YzJiMGI5MjVhNmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrJn1ZG1CZq7V62ds9pOyMa7PLbX jIAZnXrUuPy/p10cKS8HgYuj4QNCg5F7Na9ti6Bp11sdsXBCNPBD6KTgfJ6Yu45v 9gWvFuwxtv3s0tmx/o1NamsuQm/DuL+LVB13tLoc1IDessD0qF3Kh7SenzuBv+c+ AAlNFbtnbbRWT307h1P7lBvGl2W/L4soE+Urm6rjVjKzybXofJWstfePOVzxPv4d k0Sr8YpYO5p8kgK7PM5cEOYxAPV4t7hrBz8x+qJEgIA7DyMkRxtQS/ArBxJpLA3W mTEkRTztEEqQEgMmKheJjuENqOma0BHnLbtVAouMy3Ed/8KiTE6HZ1IvJwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPMRti1IBjKEKNRNKBWVwrC5JabfMB8GA1UdIwQY MBaAFEzdaXNJPODDhJuLkZt1ArpfoBPXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE4xcGMwazg0TU9FbTR1Um0zVUN1bC1nRTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hMzVmN2YtMjE5NC00NmQzLTkxYmQt Y2MwZjUwYmRhMTU5LzEvOHhHMkxVZ0dNb1FvMUUwb0ZaWENzTGtscHQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hMzVmN2YtMjE5NC00NmQzLTkxYmQtY2MwZjUwYmRhMTU5 LzEvVE4xcGMwazg0TU9FbTR1Um0zVUN1bC1nRTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDXCvAMA0E AgACMAcDBQAqAZRgMA0GCSqGSIb3DQEBCwUAA4IBAQBRBDnLJ78EX2WjiZ5krNFF OFhKEwG2G+69tc4ocLPTkFR6sCxSwUtjlLGgcdj8IQ1bwtwN2pT9ehg5TBO99Zl/ rSKfUeyulblsU7b5PHNySQZiuZAO7NaE3sxWqMHptmUJs19gcJARDYu9ZswalpJ/ /89ohDfZOQVh1iLfYvBtZfM6X2bNpmtqYTfzPiBQnPr1c5OsPygmTSQcW//lEK0T QEoXpuvsF+xNt9LkGstbZV8o86f7j/MXWdAnDVYObokPAY+I9eQuTL0OhilWsoYm Nw+BC3jPUSJSf4Eb5dnD8pq/ObTnC3ExoCrQ5Kr/QKlJnwedO276fKWoLJWiWhaK -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:42 2026 by rpki-client