This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/8VffJRIzchhCe8rm2mAWoMqOrUw.roa File: 8VffJRIzchhCe8rm2mAWoMqOrUw.roa (raw, json) Hash identifier: ZlMVYfC0qcWAgUxCif3zol/JEVTmk18XMebsrNTaMMw= Subject key identifier: F1:57:DF:25:12:33:72:18:42:7B:CA:E6:DA:60:16:A0:CA:8E:AD:4C Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Certificate serial: 019B77C724B1263D77AB534DD706F9BDB243 Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/8VffJRIzchhCe8rm2mAWoMqOrUw.roa Signing time: Thu 01 Jan 2026 04:18:18 +0000 ROA not before: Thu 01 Jan 2026 04:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210099 IP address blocks: 212.64.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:24:b1:26:3d:77:ab:53:4d:d7:06:f9:bd:b2:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Validity Not Before: Jan 1 04:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f157df2512337218427bcae6da6016a0ca8ead4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4d:d2:8c:cd:bd:30:de:fe:f2:ef:f6:ab:65: 7d:e9:50:fc:3f:fc:7f:8c:99:52:74:a3:dc:20:a7: df:0c:8a:a3:5e:d5:22:0e:e6:6a:53:2f:52:bb:68: 29:60:da:81:54:b8:ca:d5:38:83:70:79:35:4a:60: bf:6e:85:33:6d:7a:5e:88:81:c6:b3:bb:05:1a:62: fa:45:d1:c8:ae:f3:d0:0c:1a:9d:de:81:68:a4:45: c8:40:76:79:f0:ff:5a:cd:63:3b:86:04:31:ce:3d: dd:dc:44:fd:5e:0c:6d:7f:5d:69:83:14:72:1e:3f: 22:a6:9f:d6:68:0e:7b:af:7f:a4:14:6e:31:a5:18: 63:81:4d:b1:06:10:f3:4d:49:c1:5a:94:18:d3:f9: 79:2f:d4:50:d5:23:1d:9d:ec:e5:0b:9a:d1:3e:d9: 59:61:7e:49:fa:f8:00:e5:a0:71:e8:2d:b4:fc:ec: 98:1d:e2:c7:f0:37:ed:e2:26:e3:d9:92:c0:fd:a7: c9:07:18:13:1d:77:22:3e:2d:5f:e6:9f:11:13:63: 90:d4:57:1b:8e:83:b2:45:6c:24:21:37:7f:82:c4: b0:16:e1:55:83:3a:09:00:47:a3:50:6b:08:56:33: f9:91:a9:50:66:a5:37:ce:3f:29:e8:98:4e:28:b1: 5d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:57:DF:25:12:33:72:18:42:7B:CA:E6:DA:60:16:A0:CA:8E:AD:4C X509v3 Authority Key Identifier: keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/8VffJRIzchhCe8rm2mAWoMqOrUw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.64.214.0/24 Signature Algorithm: sha256WithRSAEncryption 23:63:ba:38:81:05:2b:d5:53:6c:6f:e1:3b:a1:4e:0a:b0:4d: 6c:bd:03:fc:5c:bd:01:96:39:a4:76:55:21:96:ce:4e:1d:0f: 89:75:ae:c1:d6:72:12:74:f1:63:fc:a7:47:14:2c:b2:27:54: 88:1e:43:05:2e:32:b3:6d:4a:b0:86:2a:cb:fb:8f:ee:af:b2: 1b:e2:03:fa:8f:b3:d9:ae:8f:9d:1c:d5:b6:de:e8:5c:d7:c4: 68:88:99:71:6d:7e:98:14:eb:d8:f6:87:4b:32:22:77:35:9f: 02:3d:4d:2e:95:a0:2d:e8:15:59:af:f2:88:27:c0:11:5b:e9: 81:27:63:e4:0b:bc:29:20:bc:84:3f:00:bc:b4:89:4c:a2:4c: 37:ba:fa:f2:c3:44:22:a0:a7:b6:ab:b3:89:e0:05:06:be:95: a3:03:df:f4:51:e8:96:92:79:c0:56:70:a8:c0:a8:71:a3:f9: fd:31:f0:e8:8f:92:d1:b1:07:e4:bb:fc:c6:d1:3c:95:36:73: 9f:4d:a1:07:eb:fa:02:05:42:61:35:30:08:6f:49:72:c3:64: ff:9c:f8:b3:3d:9e:a2:c1:61:3a:38:e6:fa:39:f0:ff:0e:83: 8f:26:21:9b:bc:55:80:c5:4a:31:0d:54:c4:71:b4:f6:0e:07: c3:d3:e0:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xySxJj13q1NN1wb5vbJDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl NWY0YjkwHhcNMjYwMTAxMDQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTU3ZGYyNTEyMzM3MjE4NDI3YmNhZTZkYTYwMTZhMGNhOGVhZDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE3SjM29MN7+8u/2q2V96VD8P/x/ jJlSdKPcIKffDIqjXtUiDuZqUy9Su2gpYNqBVLjK1TiDcHk1SmC/boUzbXpeiIHG s7sFGmL6RdHIrvPQDBqd3oFopEXIQHZ58P9azWM7hgQxzj3d3ET9Xgxtf11pgxRy Hj8ipp/WaA57r3+kFG4xpRhjgU2xBhDzTUnBWpQY0/l5L9RQ1SMdnezlC5rRPtlZ YX5J+vgA5aBx6C20/OyYHeLH8Dft4ibj2ZLA/afJBxgTHXciPi1f5p8RE2OQ1Fcb joOyRWwkITd/gsSwFuFVgzoJAEejUGsIVjP5kalQZqU3zj8p6JhOKLFdDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPFX3yUSM3IYQnvK5tpgFqDKjq1MMB8GA1UdIwQY MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt NDRhYjdhOWQ3ZGVhLzEvOFZmZkpSSXpjaGhDZThybTJtQVdvTXFPclV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EDWMA0G CSqGSIb3DQEBCwUAA4IBAQAjY7o4gQUr1VNsb+E7oU4KsE1svQP8XL0BljmkdlUh ls5OHQ+Jda7B1nISdPFj/KdHFCyyJ1SIHkMFLjKzbUqwhirL+4/ur7Ib4gP6j7PZ ro+dHNW23uhc18RoiJlxbX6YFOvY9odLMiJ3NZ8CPU0ulaAt6BVZr/KIJ8ARW+mB J2PkC7wpILyEPwC8tIlMokw3uvryw0QioKe2q7OJ4AUGvpWjA9/0UeiWknnAVnCo wKhxo/n9MfDoj5LRsQfku/zG0TyVNnOfTaEH6/oCBUJhNTAIb0lyw2T/nPizPZ6i wWE6OOb6OfD/DoOPJiGbvFWAxUoxDVTEcbT2DgfD0+Dx -----END CERTIFICATE-----Generated at Wed Jan 21 16:14:50 2026 by rpki-client