This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/8lF-x6f7B2bwP5qOnFQwpxn9L0I.roa File: 8lF-x6f7B2bwP5qOnFQwpxn9L0I.roa (raw, json) Hash identifier: ciLzKnjSavNPyQD1IQHv/gt0vWyFhjCiKLjRitLPEkE= Subject key identifier: F2:51:7E:C7:A7:FB:07:66:F0:3F:9A:8E:9C:54:30:A7:19:FD:2F:42 Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Certificate serial: 019B7BA3DB6D64FDE34663042FD3636FB5CD Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/8lF-x6f7B2bwP5qOnFQwpxn9L0I.roa Signing time: Thu 01 Jan 2026 22:18:14 +0000 ROA not before: Thu 01 Jan 2026 22:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201664 IP address blocks: 81.90.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:db:6d:64:fd:e3:46:63:04:2f:d3:63:6f:b5:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Validity Not Before: Jan 1 22:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2517ec7a7fb0766f03f9a8e9c5430a719fd2f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:74:d3:0a:81:ad:3c:e9:d0:01:30:c3:70:33: c1:20:01:12:8b:8d:e0:e5:2a:cf:9a:b4:67:ab:d1: 15:20:e2:6c:a2:96:32:6c:59:0c:8f:40:e3:3d:37: 9a:89:30:dd:43:fc:5d:b7:a2:23:91:d1:d8:a8:c6: b9:59:bc:6b:fe:0c:dd:06:90:b1:bc:50:f2:97:ef: f9:2f:9f:84:7d:59:78:75:99:2b:37:4e:f5:cc:d3: 85:c7:95:cd:35:bc:3f:82:31:2f:d0:b2:b2:98:27: 74:4d:b9:0c:2d:69:8d:04:ff:6b:72:3c:04:d1:6b: 9a:86:ca:19:b5:7e:52:f5:7e:96:eb:d7:f0:9e:34: 0b:88:32:f4:76:46:bf:e1:69:44:75:9a:71:1b:67: 60:5c:0f:a2:d1:28:18:f1:7b:0a:f0:ca:62:67:f3: 44:69:8b:3b:9c:78:cf:85:bb:7d:9f:12:fb:b0:a1: 07:48:e4:00:3a:2e:40:8e:1e:1b:97:80:92:20:04: 72:08:60:34:ec:71:16:53:f2:a7:50:84:b2:73:a3: 83:32:16:99:46:3b:20:12:89:c9:6d:a9:29:87:5d: b9:7c:75:eb:4a:6e:75:e6:92:8b:f5:22:d2:c9:48: 72:35:53:14:49:28:3d:64:75:38:47:c2:64:67:77: 87:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:51:7E:C7:A7:FB:07:66:F0:3F:9A:8E:9C:54:30:A7:19:FD:2F:42 X509v3 Authority Key Identifier: keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/8lF-x6f7B2bwP5qOnFQwpxn9L0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.90.30.0/24 Signature Algorithm: sha256WithRSAEncryption a7:55:06:d4:b6:b8:21:73:b5:49:81:c7:d4:51:4f:7a:03:b7: 6d:ae:5c:99:3f:b9:65:05:86:1c:db:3a:9f:d1:f3:d0:52:50: 01:1c:39:a0:6d:7b:07:b2:b8:85:57:0b:63:16:fb:6a:32:8a: 43:23:55:bf:e3:20:25:e5:a6:d8:a1:f7:6a:2b:98:af:26:1b: 19:74:0f:c8:26:aa:d3:da:1b:ec:cc:e6:51:5b:ee:25:4c:66: 70:cf:fc:52:f9:9f:75:45:c8:88:cb:39:ba:43:44:35:4b:c4: d8:09:d2:8a:5c:bc:3e:46:a2:15:08:a2:e6:3e:5e:00:29:81: 09:bc:b6:e2:a4:90:44:28:1b:32:50:92:48:6d:ab:34:76:d3: 76:ae:78:ee:85:a6:5c:bd:b9:c0:c7:11:38:0c:47:1b:46:84: 20:08:8c:57:b0:bb:ea:57:84:00:62:72:9f:1c:11:2c:41:13: 19:09:10:1d:39:c2:4d:5b:2d:a7:49:4e:21:f9:1b:5b:2c:0f: 23:20:a5:6e:cd:54:c5:11:31:ee:c6:f6:1c:2f:79:62:35:69: 2b:42:58:88:ae:3b:a8:b2:4d:dc:b1:43:dc:47:ea:2c:5b:90: 37:29:03:75:6c:c9:4f:6b:86:bb:ea:e5:60:c1:c5:7c:27:41: 15:ca:e2:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o9ttZP3jRmMEL9Njb7XNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj NjNlMjQwHhcNMjYwMTAxMjIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjUxN2VjN2E3ZmIwNzY2ZjAzZjlhOGU5YzU0MzBhNzE5ZmQyZjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3TTCoGtPOnQATDDcDPBIAESi43g 5SrPmrRnq9EVIOJsopYybFkMj0DjPTeaiTDdQ/xdt6IjkdHYqMa5Wbxr/gzdBpCx vFDyl+/5L5+EfVl4dZkrN071zNOFx5XNNbw/gjEv0LKymCd0TbkMLWmNBP9rcjwE 0WuahsoZtX5S9X6W69fwnjQLiDL0dka/4WlEdZpxG2dgXA+i0SgY8XsK8MpiZ/NE aYs7nHjPhbt9nxL7sKEHSOQAOi5Ajh4bl4CSIARyCGA07HEWU/KnUISyc6ODMhaZ RjsgEonJbakph125fHXrSm515pKL9SLSyUhyNVMUSSg9ZHU4R8JkZ3eHsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPJRfsen+wdm8D+ajpxUMKcZ/S9CMB8GA1UdIwQY MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt MGRiYmMyNDllNjU3LzEvOGxGLXg2ZjdCMmJ3UDVxT25GUXdweG45TDBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3 LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUVoeMA0G CSqGSIb3DQEBCwUAA4IBAQCnVQbUtrghc7VJgcfUUU96A7dtrlyZP7llBYYc2zqf 0fPQUlABHDmgbXsHsriFVwtjFvtqMopDI1W/4yAl5abYofdqK5ivJhsZdA/IJqrT 2hvszOZRW+4lTGZwz/xS+Z91RciIyzm6Q0Q1S8TYCdKKXLw+RqIVCKLmPl4AKYEJ vLbipJBEKBsyUJJIbas0dtN2rnjuhaZcvbnAxxE4DEcbRoQgCIxXsLvqV4QAYnKf HBEsQRMZCRAdOcJNWy2nSU4h+RtbLA8jIKVuzVTFETHuxvYcL3liNWkrQliIrjuo sk3csUPcR+osW5A3KQN1bMlPa4a76uVgwcV8J0EVyuKn -----END CERTIFICATE-----Generated at Mon Feb 2 17:17:23 2026 by rpki-client