This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/P8rBCs2H7HxpxtlvaoFTbqVkHsU.roa File: P8rBCs2H7HxpxtlvaoFTbqVkHsU.roa (raw, json) Hash identifier: Qm44ePgg82K36X8yasC1ueusZGoMnFdEjkvoWJ3eT58= Subject key identifier: 3F:CA:C1:0A:CD:87:EC:7C:69:C6:D9:6F:6A:81:53:6E:A5:64:1E:C5 Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a Certificate serial: 019B7EA5329D1ED5D870D0BBA0E061CDFAB5 Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/P8rBCs2H7HxpxtlvaoFTbqVkHsU.roa Signing time: Fri 02 Jan 2026 12:18:34 +0000 ROA not before: Fri 02 Jan 2026 12:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50013 IP address blocks: 109.160.48.0/24 maxlen: 24 109.160.49.0/24 maxlen: 24 109.160.50.0/24 maxlen: 24 109.160.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:32:9d:1e:d5:d8:70:d0:bb:a0:e0:61:cd:fa:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a Validity Not Before: Jan 2 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fcac10acd87ec7c69c6d96f6a81536ea5641ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4b:27:66:58:f8:14:b9:73:f7:da:ae:87:d1: 52:bd:d3:ef:22:96:ea:95:75:ed:a7:02:7b:68:a1: d7:07:b7:f1:ed:64:83:d9:39:4f:7e:a3:71:97:a6: 07:f8:55:37:0a:29:2c:02:48:88:47:f2:47:3e:62: 03:ba:27:cd:c2:0a:20:45:08:29:c6:36:1c:fd:24: f5:e3:98:0f:0e:57:b7:97:c7:80:f7:ed:a3:56:20: ad:ae:37:c4:5d:b5:e8:e4:4c:8d:d3:67:10:0f:b7: 3f:1b:18:74:6b:0f:48:54:d0:59:39:b3:c4:98:da: 3a:35:85:e5:20:da:85:6e:39:6d:10:08:d6:ed:ec: b6:85:94:27:cc:93:82:bf:ae:4f:34:ef:88:b4:ba: df:d5:a6:90:9f:af:71:16:ff:3a:a1:e7:39:f0:f3: f9:7c:df:32:70:ed:2b:2a:45:c4:4f:82:46:23:52: db:ad:56:33:62:e6:8d:0f:23:5b:22:f5:41:ea:d7: f5:1e:42:a6:79:12:f2:68:02:f0:2d:eb:1e:6a:a8: 6b:91:1b:61:3c:b6:4b:99:80:6e:80:55:fb:b5:12: 6b:da:fd:36:4b:bf:75:7a:64:60:aa:7e:dd:90:32: 54:42:2b:ce:a3:55:d7:60:69:e3:b0:bd:07:d1:7a: 13:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CA:C1:0A:CD:87:EC:7C:69:C6:D9:6F:6A:81:53:6E:A5:64:1E:C5 X509v3 Authority Key Identifier: keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/P8rBCs2H7HxpxtlvaoFTbqVkHsU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.160.48.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:96:db:40:dc:58:cc:f5:eb:47:fa:40:71:73:cc:bc:30:7e: a1:c4:33:c2:e0:b8:98:1c:8c:dc:21:e6:3a:6a:13:13:39:11: 68:ba:bb:ae:8a:4d:4c:93:14:76:88:14:93:fe:19:27:7f:49: 81:28:e6:9d:90:40:28:02:12:e8:15:c2:2f:0c:aa:ed:b1:d7: a2:55:92:c6:32:92:71:a2:5e:9f:b8:74:5a:27:37:0b:14:ff: cf:f7:ec:e3:e2:39:24:37:3b:14:8a:6e:80:a2:d4:43:94:83: c9:69:56:97:3d:ce:75:05:df:6d:67:8e:3b:4f:8c:b1:9e:65: 2f:4c:83:88:d0:c8:ee:d5:99:6f:23:75:7e:0d:88:c0:d4:ae: 26:18:9f:26:6e:5e:4b:2b:93:27:bf:36:13:ca:46:83:50:0f: 78:79:4b:52:2a:9e:76:35:e2:19:56:57:52:2d:0c:67:55:ab: 46:28:f2:fe:b5:00:a4:51:2e:1a:fb:83:65:63:6a:2a:2f:a2: f8:f2:97:43:7f:e8:48:eb:b5:02:ab:9f:47:04:0a:f9:57:f8: e7:05:f6:6a:c5:da:26:2c:2a:0f:f6:4d:74:18:33:89:68:85: dd:e0:e7:4e:fc:96:b7:55:f3:6f:0c:22:f2:4d:0c:80:13:34: 90:75:74:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pTKdHtXYcNC7oOBhzfq1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My ODc3M2EwHhcNMjYwMTAyMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmNhYzEwYWNkODdlYzdjNjljNmQ5NmY2YTgxNTM2ZWE1NjQxZWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUsnZlj4FLlz99quh9FSvdPvIpbq lXXtpwJ7aKHXB7fx7WSD2TlPfqNxl6YH+FU3CiksAkiIR/JHPmIDuifNwgogRQgp xjYc/ST145gPDle3l8eA9+2jViCtrjfEXbXo5EyN02cQD7c/Gxh0aw9IVNBZObPE mNo6NYXlINqFbjltEAjW7ey2hZQnzJOCv65PNO+ItLrf1aaQn69xFv86oec58PP5 fN8ycO0rKkXET4JGI1LbrVYzYuaNDyNbIvVB6tf1HkKmeRLyaALwLeseaqhrkRth PLZLmYBugFX7tRJr2v02S791emRgqn7dkDJUQivOo1XXYGnjsL0H0XoTYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD/KwQrNh+x8acbZb2qBU26lZB7FMB8GA1UdIwQY MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt YTU1OGVlNjU0MzFmLzEvUDhyQkNzMkg3SHhweHRsdmFvRlRicVZrSHNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbaAwMA0G CSqGSIb3DQEBCwUAA4IBAQCalttA3FjM9etH+kBxc8y8MH6hxDPC4LiYHIzcIeY6 ahMTORFouruuik1MkxR2iBST/hknf0mBKOadkEAoAhLoFcIvDKrtsdeiVZLGMpJx ol6fuHRaJzcLFP/P9+zj4jkkNzsUim6AotRDlIPJaVaXPc51Bd9tZ447T4yxnmUv TIOI0Mju1ZlvI3V+DYjA1K4mGJ8mbl5LK5MnvzYTykaDUA94eUtSKp52NeIZVldS LQxnVatGKPL+tQCkUS4a+4NlY2oqL6L48pdDf+hI67UCq59HBAr5V/jnBfZqxdom LCoP9k10GDOJaIXd4OdO/Ja3VfNvDCLyTQyAEzSQdXR7 -----END CERTIFICATE-----Generated at Tue Jan 20 03:33:28 2026 by rpki-client