This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/8x2lbzATa3H4_U7d408bsEgZzKw.roa File: 8x2lbzATa3H4_U7d408bsEgZzKw.roa (raw, json) Hash identifier: 53Kid1ogHSH7N2teYQIc9O6E1We0YD/42VIa5q1GrYE= Subject key identifier: F3:1D:A5:6F:30:13:6B:71:F8:FD:4E:DD:E3:4F:1B:B0:48:19:CC:AC Certificate issuer: /CN=62cbfa24a488327b730775e329d51a1921612531 Certificate serial: 019B7834BB669B35824C88D24458D35A8FBA Authority key identifier: 62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/8x2lbzATa3H4_U7d408bsEgZzKw.roa Signing time: Thu 01 Jan 2026 06:18:00 +0000 ROA not before: Thu 01 Jan 2026 06:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196956 IP address blocks: 109.71.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:bb:66:9b:35:82:4c:88:d2:44:58:d3:5a:8f:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62cbfa24a488327b730775e329d51a1921612531 Validity Not Before: Jan 1 06:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f31da56f30136b71f8fd4edde34f1bb04819ccac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:de:95:bf:db:00:b6:c9:78:c1:0e:71:a5:f6: da:4a:be:d3:c8:6d:52:15:46:1c:f9:01:72:0e:60: 07:72:cf:e2:73:95:b2:cb:47:cc:c8:26:22:d4:cb: fd:91:a4:68:12:a8:9d:c1:82:4c:df:9b:80:09:6b: bd:27:58:25:26:8c:8d:e8:e6:85:6b:26:61:fc:36: 1a:ab:31:ad:7f:08:41:2f:86:80:47:4e:6b:da:a9: 3b:aa:c7:f2:53:11:02:18:67:f4:72:6d:47:ca:ec: 01:1b:63:ef:0b:49:97:aa:c2:97:f3:a9:4d:d7:59: 59:5c:56:9e:b0:91:a9:d9:02:fd:58:bb:1f:1b:97: cf:79:e6:1d:35:ae:28:d0:4c:f3:49:ec:15:7d:ea: 6f:23:6c:05:7f:89:ed:2f:bf:06:dc:07:de:0c:bd: 07:97:89:1c:83:94:b0:48:c9:c4:0a:ee:09:2d:4f: ea:c5:f1:18:dc:da:da:ae:03:81:57:22:d5:1c:80: 6b:01:c3:45:4d:f6:59:8d:71:1c:ed:ff:39:6e:11: 9e:d8:07:98:98:ff:f9:a2:12:d3:7a:23:65:cf:a1: ff:0b:31:13:03:b1:c3:56:5e:36:76:8d:af:4e:03: 4e:13:66:4f:97:90:cb:8d:f8:11:42:84:2d:47:c7: 9b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1D:A5:6F:30:13:6B:71:F8:FD:4E:DD:E3:4F:1B:B0:48:19:CC:AC X509v3 Authority Key Identifier: keyid:62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/8x2lbzATa3H4_U7d408bsEgZzKw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.71.232.0/21 Signature Algorithm: sha256WithRSAEncryption 1e:3e:10:c7:68:ea:26:3f:c8:2d:77:e3:46:52:26:06:5e:77: a9:c1:16:eb:fb:09:75:64:e5:6f:18:c5:19:db:4d:b9:b4:99: 9f:22:35:19:57:e3:43:18:5e:13:dd:09:f0:72:b8:b4:32:b2: 51:f9:b8:a2:de:89:e1:13:ca:58:c9:f6:9c:dd:3b:26:40:4f: 89:70:38:41:41:cb:f2:10:35:bb:f9:d7:3b:70:f3:d0:23:f5: c5:be:99:67:78:af:77:4b:b7:69:7c:24:46:15:d6:7b:a3:52: cc:f5:ed:20:df:09:70:a2:8f:b8:be:22:c4:34:0e:b5:3d:34: 8c:1f:6b:d6:be:93:49:f8:bf:6c:cf:5d:d1:18:b1:22:05:ae: c3:88:e9:e1:b7:6f:1c:26:5d:f6:ee:47:20:dc:33:e5:f0:f4: 8b:9d:a1:40:a6:9e:41:44:26:4e:8c:91:60:27:c9:b1:91:ab: 61:7d:e4:6b:05:6a:fa:61:4f:a2:9f:2c:1d:48:fa:09:86:f5: f2:21:ae:ad:33:b8:db:a5:a7:aa:26:31:ef:d3:0f:dc:ae:18: 9f:6e:be:dc:66:d5:ab:63:8c:83:37:6e:a0:d7:79:48:66:7b: 0f:11:ff:62:04:b7:ad:69:6d:24:f6:01:77:db:a8:91:65:8f: 57:da:d8:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NLtmmzWCTIjSRFjTWo+6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyY2JmYTI0YTQ4ODMyN2I3MzA3NzVlMzI5ZDUxYTE5MjE2 MTI1MzEwHhcNMjYwMTAxMDYxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzFkYTU2ZjMwMTM2YjcxZjhmZDRlZGRlMzRmMWJiMDQ4MTljY2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut6Vv9sAtsl4wQ5xpfbaSr7TyG1S FUYc+QFyDmAHcs/ic5Wyy0fMyCYi1Mv9kaRoEqidwYJM35uACWu9J1glJoyN6OaF ayZh/DYaqzGtfwhBL4aAR05r2qk7qsfyUxECGGf0cm1HyuwBG2PvC0mXqsKX86lN 11lZXFaesJGp2QL9WLsfG5fPeeYdNa4o0EzzSewVfepvI2wFf4ntL78G3AfeDL0H l4kcg5SwSMnECu4JLU/qxfEY3NrargOBVyLVHIBrAcNFTfZZjXEc7f85bhGe2AeY mP/5ohLTeiNlz6H/CzETA7HDVl42do2vTgNOE2ZPl5DLjfgRQoQtR8eb1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPMdpW8wE2tx+P1O3eNPG7BIGcysMB8GA1UdIwQY MBaAFGLL+iSkiDJ7cwd14ynVGhkhYSUxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXN2NkpLU0lNbnR6QjNYaktkVWFHU0ZoSlRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8xNWZlZTctZDQxMS00YzFkLWE3Y2Qt NTcwZDE3ZjlmMmE1LzEvOHgybGJ6QVRhM0g0X1U3ZDQwOGJzRWdaekt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8xNWZlZTctZDQxMS00YzFkLWE3Y2QtNTcwZDE3ZjlmMmE1 LzEvWXN2NkpLU0lNbnR6QjNYaktkVWFHU0ZoSlRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbUfoMA0G CSqGSIb3DQEBCwUAA4IBAQAePhDHaOomP8gtd+NGUiYGXnepwRbr+wl1ZOVvGMUZ 2025tJmfIjUZV+NDGF4T3Qnwcri0MrJR+bii3onhE8pYyfac3TsmQE+JcDhBQcvy EDW7+dc7cPPQI/XFvplneK93S7dpfCRGFdZ7o1LM9e0g3wlwoo+4viLENA61PTSM H2vWvpNJ+L9sz13RGLEiBa7DiOnht28cJl327kcg3DPl8PSLnaFApp5BRCZOjJFg J8mxkathfeRrBWr6YU+inywdSPoJhvXyIa6tM7jbpaeqJjHv0w/crhifbr7cZtWr Y4yDN26g13lIZnsPEf9iBLetaW0k9gF326iRZY9X2tjW -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:07 2026 by rpki-client