This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/8w0JG59IpMi8alFdKMpnRDTJUH8.roa File: 8w0JG59IpMi8alFdKMpnRDTJUH8.roa (raw, json) Hash identifier: i7FzplWF7Sx+q0x1yIHwIdtoYznQ/rW3pQWsXuEmrLY= Subject key identifier: F3:0D:09:1B:9F:48:A4:C8:BC:6A:51:5D:28:CA:67:44:34:C9:50:7F Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Certificate serial: 019B7C7F4FC8110667247ACBDEB6584C0A9C Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/8w0JG59IpMi8alFdKMpnRDTJUH8.roa Signing time: Fri 02 Jan 2026 02:17:56 +0000 ROA not before: Fri 02 Jan 2026 02:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25154 IP address blocks: 212.91.18.0/24 maxlen: 24 212.91.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:4f:c8:11:06:67:24:7a:cb:de:b6:58:4c:0a:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Validity Not Before: Jan 2 02:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f30d091b9f48a4c8bc6a515d28ca674434c9507f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8c:cd:e7:d5:c5:ff:eb:8b:1b:24:b8:50:bd: cd:83:ba:f0:62:28:cd:ba:d0:e1:b7:ae:c0:35:ac: 05:c3:5b:fb:e6:d7:81:46:77:f7:2e:46:e2:2c:95: 59:86:5c:0b:4f:42:a8:86:53:34:c9:b3:79:6b:2c: 19:48:4d:32:61:82:7d:ff:40:6a:02:17:5a:61:cf: 5f:f0:78:8f:f0:4f:45:e6:27:9a:e5:cb:00:df:f4: 53:ce:2d:cf:7c:13:d4:c3:fe:7e:1f:bf:81:c3:6a: 22:87:41:e3:b2:69:5b:c4:90:2f:6f:bf:4b:50:21: e1:19:1a:f9:7c:31:7e:38:34:99:46:75:4e:63:74: ac:f9:1a:9c:47:8e:da:2a:f1:f8:81:e7:10:a0:a8: 23:8a:53:27:00:d7:b6:ee:82:04:3d:1f:25:d9:ef: 54:86:79:c3:77:da:61:95:ef:18:e3:32:04:f3:ba: f6:89:19:b3:ac:34:5e:e5:4f:43:85:32:0a:94:f3: 3c:6c:8a:c1:29:a8:b7:01:57:04:ac:ec:f1:9f:5d: 6b:82:35:77:75:58:51:3f:3e:e6:e4:96:24:30:ba: d1:6c:f7:7d:42:c3:13:ef:48:ae:12:75:23:33:33: ed:3b:a3:06:28:76:72:27:28:34:a6:bf:a6:fa:ee: 5f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:0D:09:1B:9F:48:A4:C8:BC:6A:51:5D:28:CA:67:44:34:C9:50:7F X509v3 Authority Key Identifier: keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/8w0JG59IpMi8alFdKMpnRDTJUH8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.91.18.0/23 Signature Algorithm: sha256WithRSAEncryption 70:0a:ef:03:fd:10:89:24:d2:4c:de:e8:4a:a5:55:9f:c4:b4: 53:98:59:e7:ad:75:d6:f9:7f:c6:39:2e:88:dc:50:8b:aa:d8: d3:8d:9e:16:20:16:ba:28:7c:ed:51:17:15:ba:46:c1:81:b8: 40:ef:c8:0a:84:36:73:da:ca:ec:98:8e:d1:87:b2:3c:46:83: 49:79:5b:5f:d6:74:d0:4b:6b:d5:e2:33:8a:bb:bc:41:4b:0f: b5:2f:43:45:73:d9:f8:01:af:6f:92:f1:2f:6d:c7:3d:0f:f9: 92:22:8e:ae:8d:9a:6a:ac:c9:30:4b:6e:98:db:e1:6d:4a:d8: 4c:19:37:d2:ba:d1:09:cd:47:f3:8e:6c:bb:e4:27:24:8e:c5: 38:b5:8d:24:e3:5a:18:4a:84:6f:73:ea:5a:63:80:94:aa:15: 4a:b5:50:5f:5c:e9:05:d7:de:ce:99:fd:43:66:ca:11:bb:d4: 3f:84:5f:85:a8:c6:b0:ec:45:cb:ba:2b:46:92:93:d2:c6:19: f3:2f:f0:f1:59:e1:62:c5:56:dc:54:1c:86:e9:f2:4e:e3:82: 83:78:0b:06:a7:5b:3f:2d:f2:f8:f2:7c:39:1b:26:50:fd:7e: a2:b8:62:c9:23:21:dc:52:e7:5b:ec:12:4b:60:ec:75:f7:a9: 9a:4c:6e:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f0/IEQZnJHrL3rZYTAqcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz MzBjNWIwHhcNMjYwMTAyMDIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzBkMDkxYjlmNDhhNGM4YmM2YTUxNWQyOGNhNjc0NDM0Yzk1MDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxozN59XF/+uLGyS4UL3Ng7rwYijN utDht67ANawFw1v75teBRnf3LkbiLJVZhlwLT0KohlM0ybN5aywZSE0yYYJ9/0Bq AhdaYc9f8HiP8E9F5iea5csA3/RTzi3PfBPUw/5+H7+Bw2oih0HjsmlbxJAvb79L UCHhGRr5fDF+ODSZRnVOY3Ss+RqcR47aKvH4gecQoKgjilMnANe27oIEPR8l2e9U hnnDd9phle8Y4zIE87r2iRmzrDRe5U9DhTIKlPM8bIrBKai3AVcErOzxn11rgjV3 dVhRPz7m5JYkMLrRbPd9QsMT70iuEnUjMzPtO6MGKHZyJyg0pr+m+u5fUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPMNCRufSKTIvGpRXSjKZ0Q0yVB/MB8GA1UdIwQY MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt NWQ2NjVlOTk4ZjZhLzEvOHcwSkc1OUlwTWk4YWxGZEtNcG5SRFRKVUg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1FsSMA0G CSqGSIb3DQEBCwUAA4IBAQBwCu8D/RCJJNJM3uhKpVWfxLRTmFnnrXXW+X/GOS6I 3FCLqtjTjZ4WIBa6KHztURcVukbBgbhA78gKhDZz2srsmI7Rh7I8RoNJeVtf1nTQ S2vV4jOKu7xBSw+1L0NFc9n4Aa9vkvEvbcc9D/mSIo6ujZpqrMkwS26Y2+FtSthM GTfSutEJzUfzjmy75CckjsU4tY0k41oYSoRvc+paY4CUqhVKtVBfXOkF197Omf1D ZsoRu9Q/hF+FqMaw7EXLuitGkpPSxhnzL/DxWeFixVbcVByG6fJO44KDeAsGp1s/ LfL48nw5GyZQ/X6iuGLJIyHcUudb7BJLYOx196maTG69 -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:34 2026 by rpki-client