This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/S8CzuNBRlFxh0RCxcEYtrsSnrsU.roa File: S8CzuNBRlFxh0RCxcEYtrsSnrsU.roa (raw, json) Hash identifier: etDBZKFL1Nfc+kBaajeV+YtDevN2RBSTQ7egtdVU0rg= Subject key identifier: 4B:C0:B3:B8:D0:51:94:5C:61:D1:10:B1:70:46:2D:AE:C4:A7:AE:C5 Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881 Certificate serial: 019B7B369761E54D2E1436CBCAB57BDB865D Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/S8CzuNBRlFxh0RCxcEYtrsSnrsU.roa Signing time: Thu 01 Jan 2026 20:18:53 +0000 ROA not before: Thu 01 Jan 2026 20:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8352 IP address blocks: 78.153.250.0/24 maxlen: 24 95.143.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:97:61:e5:4d:2e:14:36:cb:ca:b5:7b:db:86:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881 Validity Not Before: Jan 1 20:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bc0b3b8d051945c61d110b170462daec4a7aec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0e:9d:6f:97:6f:19:e2:d0:0a:11:26:92:63: 78:fd:9a:10:ef:38:9b:70:d4:d0:e0:af:b9:f8:ce: a0:f7:6e:47:1e:62:d3:94:b6:ad:51:30:fe:48:56: 8c:5c:03:ae:21:98:0c:14:37:9a:46:71:6d:a3:aa: b6:b7:43:fd:d4:eb:4e:00:45:47:fb:ed:39:82:84: d3:06:9f:64:a6:4a:0b:4f:86:e0:3e:4e:26:17:0c: a0:46:92:91:7e:34:87:80:6f:84:79:e2:d5:f5:33: f8:e8:eb:97:7d:e1:1d:d7:6a:6d:86:0b:cd:6d:07: 93:df:ed:07:5c:e1:19:fc:ca:d6:d3:a2:86:8b:71: 82:6b:b4:27:01:f5:4c:4e:77:11:fc:8d:dd:72:8b: 18:78:86:57:75:86:a3:f0:ec:35:26:ea:4a:d3:89: f4:ee:46:81:20:b3:05:ff:27:37:1d:fa:06:6b:8c: f2:2b:7b:5e:5e:a6:87:a2:ea:00:65:68:f7:e6:e8: b4:c2:55:8c:44:a3:e9:77:a0:f9:4d:10:5a:32:64: 82:48:34:e7:69:89:8a:76:ac:80:ff:be:3d:fb:7f: 52:cf:18:46:fe:84:29:1a:28:c6:97:bc:dc:dc:d5: 3e:e1:ff:86:f5:b2:76:b5:db:93:0f:b4:58:ad:a9: 24:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C0:B3:B8:D0:51:94:5C:61:D1:10:B1:70:46:2D:AE:C4:A7:AE:C5 X509v3 Authority Key Identifier: keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/S8CzuNBRlFxh0RCxcEYtrsSnrsU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.153.250.0/24 95.143.75.0/24 Signature Algorithm: sha256WithRSAEncryption 53:16:a4:1f:89:a7:d0:6b:86:6d:b4:4b:d1:5b:de:47:9f:d0: 75:cd:b5:16:62:4e:6d:0c:3a:01:10:bd:f3:e4:3d:67:c5:60: 0d:f2:25:e6:3b:07:24:71:9d:89:50:c9:8f:15:56:41:1c:b8: d8:23:0b:24:50:b9:98:c4:08:9c:39:aa:eb:7e:e5:8a:78:58: ab:3a:13:f0:ce:77:5c:cd:47:3c:d7:11:c1:6e:bf:55:be:84: b9:00:b8:2e:e0:c1:a8:77:41:95:47:d1:96:bf:ab:4f:bc:b2: e2:dd:8a:8e:ff:d0:a9:af:9f:6c:75:51:5e:60:aa:be:a6:3c: 4d:3c:9e:65:c9:a7:ea:cc:38:19:23:1b:c5:41:00:a0:e4:ae: ff:97:13:d2:63:b7:ad:cf:49:dd:f4:f1:40:04:75:5a:a8:f4: 13:6f:06:8b:4a:27:86:87:cc:75:60:fe:a6:2e:a1:c1:9e:c5: c7:1d:06:43:af:f8:79:56:f9:f2:9a:94:c3:d9:2c:1b:6a:73: 52:59:18:4d:29:b6:7f:06:94:b5:f8:f7:2c:0d:7f:ad:65:25: 95:b0:84:6f:b5:e5:73:39:c0:f5:1f:07:31:fd:47:1c:cc:36: c5:f2:9b:0d:fd:34:25:62:a5:4d:cd:90:8a:fa:d5:04:a1:3e: f0:1a:b3:16 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Npdh5U0uFDbLyrV724ZdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MDllZTNkNjE4OTc0ZGEwY2JkODA1YTJkYTgwNDEwYTQ5 ODk4ODEwHhcNMjYwMTAxMjAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmMwYjNiOGQwNTE5NDVjNjFkMTEwYjE3MDQ2MmRhZWM0YTdhZWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ6db5dvGeLQChEmkmN4/ZoQ7zib cNTQ4K+5+M6g925HHmLTlLatUTD+SFaMXAOuIZgMFDeaRnFto6q2t0P91OtOAEVH ++05goTTBp9kpkoLT4bgPk4mFwygRpKRfjSHgG+EeeLV9TP46OuXfeEd12pthgvN bQeT3+0HXOEZ/MrW06KGi3GCa7QnAfVMTncR/I3dcosYeIZXdYaj8Ow1JupK04n0 7kaBILMF/yc3HfoGa4zyK3teXqaHouoAZWj35ui0wlWMRKPpd6D5TRBaMmSCSDTn aYmKdqyA/749+39SzxhG/oQpGijGl7zc3NU+4f+G9bJ2tduTD7RYrakkjQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEvAs7jQUZRcYdEQsXBGLa7Ep67FMB8GA1UdIwQY MBaAFOkJ7j1hiXTaDL2AWi2oBBCkmJiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEt ZGQxMTVmOWUzMzAxLzEvUzhDenVOQlJsRnhoMFJDeGNFWXRyc1NucnNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEtZGQxMTVmOWUzMzAx LzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATpn6AwQA X49LMA0GCSqGSIb3DQEBCwUAA4IBAQBTFqQfiafQa4ZttEvRW95Hn9B1zbUWYk5t DDoBEL3z5D1nxWAN8iXmOwckcZ2JUMmPFVZBHLjYIwskULmYxAicOarrfuWKeFir OhPwzndczUc81xHBbr9VvoS5ALgu4MGod0GVR9GWv6tPvLLi3YqO/9Cpr59sdVFe YKq+pjxNPJ5lyafqzDgZIxvFQQCg5K7/lxPSY7etz0nd9PFABHVaqPQTbwaLSieG h8x1YP6mLqHBnsXHHQZDr/h5VvnympTD2SwbanNSWRhNKbZ/BpS1+PcsDX+tZSWV sIRvteVzOcD1Hwcx/UcczDbF8psN/TQlYqVNzZCK+tUEoT7wGrMW -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:24 2026 by rpki-client