This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/ip8Nz4oaOC3WF5YWfdlIj2uJ4es.roa File: ip8Nz4oaOC3WF5YWfdlIj2uJ4es.roa (raw, json) Hash identifier: L9aCvRxqO1gcLQJnMNhhLg422VtbcLvTCPUD+6YJIFc= Subject key identifier: 8A:9F:0D:CF:8A:1A:38:2D:D6:17:96:16:7D:D9:48:8F:6B:89:E1:EB Certificate issuer: /CN=893afc6efe62990a26932f40e150b27eed539c4b Certificate serial: 019B7CEE590772C6D995C7E723E247F61247 Authority key identifier: 89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/ip8Nz4oaOC3WF5YWfdlIj2uJ4es.roa Signing time: Fri 02 Jan 2026 04:19:13 +0000 ROA not before: Fri 02 Jan 2026 04:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34263 IP address blocks: 79.141.144.0/20 maxlen: 20 82.197.0.0/19 maxlen: 19 88.85.128.0/19 maxlen: 19 95.130.24.0/21 maxlen: 21 178.16.176.0/20 maxlen: 20 185.146.12.0/22 maxlen: 22 188.65.136.0/23 maxlen: 23 188.65.138.0/23 maxlen: 23 188.65.140.0/22 maxlen: 22 2a00:ae00::/29 maxlen: 29 2a00:ae00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:59:07:72:c6:d9:95:c7:e7:23:e2:47:f6:12:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893afc6efe62990a26932f40e150b27eed539c4b Validity Not Before: Jan 2 04:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a9f0dcf8a1a382dd61796167dd9488f6b89e1eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3e:cf:65:e4:f9:43:12:24:87:9d:aa:e6:f1: 90:80:58:ce:fc:0f:97:b3:1b:a8:af:f1:98:86:97: f3:04:8e:cc:6f:94:ac:9f:7d:6b:9c:ed:e0:13:6f: 5b:fb:c5:43:ab:df:90:1e:5c:74:74:e5:a0:53:f4: b9:28:ae:97:6f:4f:ad:ad:fc:e9:df:a4:22:9b:b5: 48:3b:b1:c9:a9:ce:e5:eb:6b:e1:d6:98:b0:57:aa: 10:c8:34:b4:06:3f:6c:5a:70:ee:97:c5:47:59:fc: 1d:c4:4c:df:84:b1:01:52:48:f4:6e:11:7e:91:9c: a2:42:24:13:c1:ac:2f:ad:51:4e:c8:0e:11:7c:45: f5:19:b7:a6:91:3a:87:9f:82:81:f9:67:dc:d9:bf: 8e:38:5b:05:28:a4:94:5f:bb:bb:55:6e:3a:13:3c: 59:a1:b4:57:50:b2:55:80:7f:31:83:e4:90:26:17: 3e:d3:ec:a5:fb:e7:44:a4:a4:65:b4:a5:34:90:70: 25:84:45:64:21:fc:b6:a1:43:79:4a:fa:e2:3b:6d: 55:bd:40:36:87:7f:72:be:4f:1b:47:5a:4e:62:35: b8:92:a3:c1:8a:c1:9b:56:80:59:8f:cd:ae:4e:c2: f8:3f:d4:60:73:f7:b8:eb:49:00:07:fc:0f:54:7b: a1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9F:0D:CF:8A:1A:38:2D:D6:17:96:16:7D:D9:48:8F:6B:89:E1:EB X509v3 Authority Key Identifier: keyid:89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/ip8Nz4oaOC3WF5YWfdlIj2uJ4es.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.141.144.0/20 82.197.0.0/19 88.85.128.0/19 95.130.24.0/21 178.16.176.0/20 185.146.12.0/22 188.65.136.0/21 IPv6: 2a00:ae00::/29 Signature Algorithm: sha256WithRSAEncryption b4:5d:75:ef:c2:e2:06:5e:ad:ec:4b:bf:59:99:2e:a1:4c:f6: 9b:be:a0:e7:a1:c4:dd:a9:e6:4f:b5:24:57:91:d1:98:06:f6: 69:88:f7:f7:b4:c8:12:c1:03:9e:8c:b3:93:b7:68:3d:48:c0: 52:f1:d8:3d:9d:2b:1a:ef:f0:98:20:c9:7a:2b:17:a6:61:e3: 1d:7f:b7:f5:75:21:55:56:29:59:9a:b4:1b:4e:a3:9b:54:68: 1c:e4:48:05:b5:65:2c:1e:10:1f:58:28:0e:64:64:ad:03:99: 41:e1:a4:5b:f4:f7:eb:2e:07:45:3b:98:eb:cb:9b:13:79:5b: c6:0d:88:b5:41:41:04:f5:ac:8d:b1:43:fa:b4:01:39:89:d0: 6f:f8:9a:0e:0e:24:42:2b:e7:01:d8:22:26:52:69:3c:57:03: 1d:85:df:2f:26:0a:14:02:70:a7:2c:71:06:5a:52:e6:48:2f: c6:5e:d8:c5:ac:e4:61:fb:51:4d:ae:96:b3:7d:95:46:f1:94: 67:93:fd:3b:94:36:39:e1:fc:14:cb:95:56:10:a3:bd:52:36: b2:3d:fc:33:46:42:28:39:b9:83:53:06:b8:64:90:e6:91:f6: fe:8d:20:3d:96:d8:ee:cf:c7:f9:9a:1c:08:b4:e2:0a:cd:fb: 68:0b:fe:b5 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt87lkHcsbZlcfnI+JH9hJHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5M2FmYzZlZmU2Mjk5MGEyNjkzMmY0MGUxNTBiMjdlZWQ1 MzljNGIwHhcNMjYwMTAyMDQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTlmMGRjZjhhMWEzODJkZDYxNzk2MTY3ZGQ5NDg4ZjZiODllMWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT7PZeT5QxIkh52q5vGQgFjO/A+X sxuor/GYhpfzBI7Mb5Ssn31rnO3gE29b+8VDq9+QHlx0dOWgU/S5KK6Xb0+trfzp 36Qim7VIO7HJqc7l62vh1piwV6oQyDS0Bj9sWnDul8VHWfwdxEzfhLEBUkj0bhF+ kZyiQiQTwawvrVFOyA4RfEX1GbemkTqHn4KB+Wfc2b+OOFsFKKSUX7u7VW46EzxZ obRXULJVgH8xg+SQJhc+0+yl++dEpKRltKU0kHAlhEVkIfy2oUN5SvriO21VvUA2 h39yvk8bR1pOYjW4kqPBisGbVoBZj82uTsL4P9Rgc/e460kAB/wPVHuh8wIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFIqfDc+KGjgt1heWFn3ZSI9rieHrMB8GA1UdIwQY MBaAFIk6/G7+YpkKJpMvQOFQsn7tU5xLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVRyOGJ2NWltUW9ta3k5QTRWQ3lmdTFUbkVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83ZTE4ZjAtYWYxZC00N2MxLThkYjUt NWE1MjMzZGMwY2UwLzEvaXA4Tno0b2FPQzNXRjVZV2ZkbElqMnVKNGVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi83ZTE4ZjAtYWYxZC00N2MxLThkYjUtNWE1MjMzZGMwY2Uw LzEvaVRyOGJ2NWltUW9ta3k5QTRWQ3lmdTFUbkVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQET42QAwQF UsUAAwQFWFWAAwQDX4IYAwQEshCwAwQCuZIMAwQDvEGIMA0EAgACMAcDBQMqAK4A MA0GCSqGSIb3DQEBCwUAA4IBAQC0XXXvwuIGXq3sS79ZmS6hTPabvqDnocTdqeZP tSRXkdGYBvZpiPf3tMgSwQOejLOTt2g9SMBS8dg9nSsa7/CYIMl6KxemYeMdf7f1 dSFVVilZmrQbTqObVGgc5EgFtWUsHhAfWCgOZGStA5lB4aRb9PfrLgdFO5jry5sT eVvGDYi1QUEE9ayNsUP6tAE5idBv+JoODiRCK+cB2CImUmk8VwMdhd8vJgoUAnCn LHEGWlLmSC/GXtjFrORh+1FNrpazfZVG8ZRnk/07lDY54fwUy5VWEKO9UjayPfwz RkIoObmDUwa4ZJDmkfb+jSA9ltjuz8f5mhwItOIKzftoC/61 -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:11 2026 by rpki-client