This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/8McrGRfEqcovWnRSpklEmiBGADA.roa File: 8McrGRfEqcovWnRSpklEmiBGADA.roa (raw, json) Hash identifier: xszqUKxiKaCx1G5C+PDbNWuR86U3w6LgZy01FF25iiY= Subject key identifier: F0:C7:2B:19:17:C4:A9:CA:2F:5A:74:52:A6:49:44:9A:20:46:00:30 Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Certificate serial: 019B7EA6A1C9F1CCF77C2538C68E90C05165 Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/8McrGRfEqcovWnRSpklEmiBGADA.roa Signing time: Fri 02 Jan 2026 12:20:08 +0000 ROA not before: Fri 02 Jan 2026 12:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 157.23.248.0/24 maxlen: 24 157.23.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:a1:c9:f1:cc:f7:7c:25:38:c6:8e:90:c0:51:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Validity Not Before: Jan 2 12:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0c72b1917c4a9ca2f5a7452a649449a20460030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f9:97:a4:d9:68:ad:77:39:08:a6:26:5e:2d: c9:19:2f:7e:c0:d3:1d:71:1a:cf:e3:e9:ae:07:0b: cc:f1:6a:ec:a7:29:0a:38:6e:2b:75:a7:5c:c4:34: 76:86:89:27:32:63:9d:98:f6:d8:6e:9d:68:09:42: 1b:d6:a3:cb:90:d1:f3:a7:2d:ca:64:fc:ac:2c:e0: 29:2d:05:c8:b0:3e:ff:58:0b:2f:26:02:5a:63:0a: e1:80:0e:7d:a5:e7:ec:1d:0f:43:6f:03:a5:5b:74: e3:e3:03:ff:c2:46:e3:84:24:30:39:a6:c5:8d:a4: 7c:1f:e4:4a:f1:01:33:d4:d0:ea:d9:95:33:cc:5a: 47:45:ac:55:21:4f:d6:82:dc:48:77:97:fa:e1:25: 5c:78:1f:69:4d:19:31:05:cd:7a:b0:10:71:49:b0: 0c:44:62:e3:c3:5c:3d:ff:23:26:8e:55:e9:92:3d: 07:77:ff:24:ff:a8:e3:60:20:b6:f0:40:bb:97:d5: aa:be:b3:4f:f0:a7:1e:bc:e7:d4:7f:a5:f3:70:b7: b7:40:79:db:95:da:6e:01:15:9f:e3:1d:2f:d1:15: 07:ce:0b:24:6d:47:3b:d9:17:84:45:3e:20:40:57: 30:8e:f9:f4:7c:3f:5a:ac:7c:e1:47:66:48:f8:8f: 95:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C7:2B:19:17:C4:A9:CA:2F:5A:74:52:A6:49:44:9A:20:46:00:30 X509v3 Authority Key Identifier: keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/8McrGRfEqcovWnRSpklEmiBGADA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.23.248.0/24 157.23.251.0/24 Signature Algorithm: sha256WithRSAEncryption 40:44:f3:a8:9f:64:eb:08:a9:67:3c:6d:da:ce:af:37:a0:3b: 31:6c:c6:3c:ab:6c:33:98:8d:37:b9:b7:6f:fb:6f:b9:dc:47: af:4a:0f:1e:db:71:3b:9b:c8:fc:f8:d8:bd:90:ae:73:04:53: 9a:b5:86:bb:60:46:ca:e3:f1:9e:eb:ff:cb:a9:45:4c:fe:ce: 0b:a4:b1:85:60:7c:9d:98:17:57:d2:2c:d7:18:be:61:26:a8: 96:24:8b:f5:d1:9e:02:ba:e2:41:bb:51:5e:e7:6a:9a:e3:b7: ac:9b:ee:2e:96:df:1e:25:22:3e:64:49:5a:ec:16:8c:dc:ef: 1f:17:f7:49:7a:2e:7f:d5:e2:91:ff:35:8b:fb:f0:cd:23:1d: 6a:9f:e6:63:7c:21:16:61:c6:a0:b4:12:aa:12:6f:4f:63:f2: 1e:47:5e:40:17:95:c4:d3:19:13:f1:f3:5a:aa:c8:3a:d4:63: 3b:94:22:6d:54:97:36:33:00:44:d5:62:99:cd:f3:4a:8b:1c: d1:dd:28:b7:c8:55:3e:54:91:04:54:b0:69:89:b7:33:b5:e0: 9b:86:26:2a:82:1f:35:ea:39:5e:93:d6:a6:05:80:e1:5e:a2: c6:01:83:97:95:25:8b:3c:b8:bb:7e:94:eb:e8:e4:60:31:7b: b1:4d:75:6a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pqHJ8cz3fCU4xo6QwFFlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYTM1Y2Y4YWI2ZjNlYWEyYWViYWRkOWUyMzczZGVjMDg5 MzYyNWUwHhcNMjYwMTAyMTIyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGM3MmIxOTE3YzRhOWNhMmY1YTc0NTJhNjQ5NDQ5YTIwNDYwMDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvmXpNlorXc5CKYmXi3JGS9+wNMd cRrP4+muBwvM8WrspykKOG4rdadcxDR2hoknMmOdmPbYbp1oCUIb1qPLkNHzpy3K ZPysLOApLQXIsD7/WAsvJgJaYwrhgA59pefsHQ9DbwOlW3Tj4wP/wkbjhCQwOabF jaR8H+RK8QEz1NDq2ZUzzFpHRaxVIU/WgtxId5f64SVceB9pTRkxBc16sBBxSbAM RGLjw1w9/yMmjlXpkj0Hd/8k/6jjYCC28EC7l9WqvrNP8KcevOfUf6XzcLe3QHnb ldpuARWf4x0v0RUHzgskbUc72ReERT4gQFcwjvn0fD9arHzhR2ZI+I+V4wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPDHKxkXxKnKL1p0UqZJRJogRgAwMB8GA1UdIwQY MBaAFLujXPirbz6qKuut2eI3PewIk2JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMt NTk3YjZlMjQ5MmFiLzEvOE1jckdSZkVxY292V25SU3BrbEVtaUJHQURBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMtNTk3YjZlMjQ5MmFi LzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnRf4AwQA nRf7MA0GCSqGSIb3DQEBCwUAA4IBAQBARPOon2TrCKlnPG3azq83oDsxbMY8q2wz mI03ubdv+2+53EevSg8e23E7m8j8+Ni9kK5zBFOatYa7YEbK4/Ge6//LqUVM/s4L pLGFYHydmBdX0izXGL5hJqiWJIv10Z4CuuJBu1Fe52qa47esm+4ult8eJSI+ZEla 7BaM3O8fF/dJei5/1eKR/zWL+/DNIx1qn+ZjfCEWYcagtBKqEm9PY/IeR15AF5XE 0xkT8fNaqsg61GM7lCJtVJc2MwBE1WKZzfNKixzR3Si3yFU+VJEEVLBpibczteCb hiYqgh816jlek9amBYDhXqLGAYOXlSWLPLi7fpTr6ORgMXuxTXVq -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:01 2026 by rpki-client