This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/8M8YMfi0h_G2D7NTU4bpPcwvRYU.roa File: 8M8YMfi0h_G2D7NTU4bpPcwvRYU.roa (raw, json) Hash identifier: CZCGZ/lTIHM50UQeqzvjgM1bhMMP8aMbAEQl+Vqm5GE= Subject key identifier: F0:CF:18:31:F8:B4:87:F1:B6:0F:B3:53:53:86:E9:3D:CC:2F:45:85 Certificate issuer: /CN=4ca13bdea54f76b8a85712afdb615186b33838c1 Certificate serial: 019BBCC3AC968F8EECDBF970020D3E8EF5DB Authority key identifier: 4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/8M8YMfi0h_G2D7NTU4bpPcwvRYU.roa Signing time: Wed 14 Jan 2026 13:48:18 +0000 ROA not before: Wed 14 Jan 2026 13:48:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47309 IP address blocks: 130.0.20.0/23 maxlen: 23 130.0.22.0/23 maxlen: 23 194.8.90.0/23 maxlen: 23 212.99.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bc:c3:ac:96:8f:8e:ec:db:f9:70:02:0d:3e:8e:f5:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca13bdea54f76b8a85712afdb615186b33838c1 Validity Not Before: Jan 14 13:48:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0cf1831f8b487f1b60fb3535386e93dcc2f4585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4e:37:f1:6d:f8:dd:02:a2:b7:21:f1:f3:8a: 32:0b:7c:ac:29:d5:4b:92:0e:b0:6f:56:55:4a:cc: 3a:db:5a:75:92:59:ca:59:12:41:4f:7f:40:a8:40: 05:b5:09:48:c9:2b:14:20:72:73:71:de:14:46:10: 78:13:d4:52:22:b8:a9:69:8c:0d:dd:cc:1c:e9:37: 1c:46:5b:4c:a5:fd:a8:64:27:9f:72:b5:ed:97:91: c3:02:78:f2:74:90:81:05:f3:d1:3c:e1:62:92:d3: 2e:a6:60:f9:f5:48:01:0e:6a:81:01:75:8c:33:37: fe:5d:ed:cf:18:9f:34:35:c8:f7:13:be:05:ad:b6: bb:b7:e0:f0:3e:75:de:30:0b:45:b2:ca:1d:76:2c: 4f:03:d9:bb:1c:4f:f3:aa:12:eb:36:2e:65:5d:eb: 6b:c1:f0:9d:c2:f9:1c:ec:5c:9c:90:a1:83:96:1c: 7f:24:9d:fe:c0:c6:1f:ec:f9:72:a6:7b:5d:cd:a9: 54:6e:a1:fa:85:f7:59:67:ce:a0:37:d4:1e:63:61: b2:62:57:31:ec:9d:0d:49:86:48:54:c7:20:4e:98: 2e:b2:db:ac:ac:40:72:7c:fd:7e:34:a0:de:0f:57: 37:c8:c3:c2:ed:4b:73:d0:55:b7:79:82:91:fa:6d: fe:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:CF:18:31:F8:B4:87:F1:B6:0F:B3:53:53:86:E9:3D:CC:2F:45:85 X509v3 Authority Key Identifier: keyid:4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/8M8YMfi0h_G2D7NTU4bpPcwvRYU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.0.20.0/22 194.8.90.0/23 212.99.177.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:b8:e8:7d:74:46:4b:af:3c:b1:e5:cb:87:0b:21:34:5b:31: d4:54:fb:96:b2:de:84:0c:34:4e:63:f2:49:21:ba:91:21:05: 8f:18:0e:c6:d1:73:8a:ab:94:9d:36:1d:74:9b:f2:33:36:1a: cc:50:92:be:20:75:13:13:2b:1e:77:77:dc:e9:d0:8c:1e:a8: 5f:45:28:3f:4b:69:a9:ec:3c:ea:a7:1d:87:d5:2b:c0:5b:df: 28:59:55:03:9b:25:cf:67:15:8c:0b:a5:f5:6f:3b:ec:66:99: 01:cf:cb:27:f4:88:60:5e:0b:c0:74:d4:6f:75:4c:9d:ef:c2: a4:61:bb:37:07:ea:9d:76:7e:78:1b:ec:d5:45:c7:93:7e:4b: 43:cc:ab:6d:3d:74:30:0c:24:f4:19:b5:7a:e6:33:72:67:1a: 39:b7:be:8a:29:a0:53:4d:2f:a0:84:35:a7:55:03:fe:e6:e0: a1:38:9a:a4:b4:78:86:dc:86:53:f0:ee:6f:23:f1:9e:bc:39: 3d:7b:71:80:f5:16:f6:fe:3c:e4:45:e4:aa:ca:8f:bb:55:53: c2:35:e9:06:37:18:b1:55:11:59:4d:57:2b:6b:3e:5f:96:86: 78:ac:a6:cc:e6:1d:58:67:b6:89:3f:ea:af:ac:9c:11:4d:d0: cd:d4:1f:5c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZu8w6yWj47s2/lwAg0+jvXbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTEzYmRlYTU0Zjc2YjhhODU3MTJhZmRiNjE1MTg2YjMz ODM4YzEwHhcNMjYwMTE0MTM0ODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGNmMTgzMWY4YjQ4N2YxYjYwZmIzNTM1Mzg2ZTkzZGNjMmY0NTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE438W343QKityHx84oyC3ysKdVL kg6wb1ZVSsw621p1klnKWRJBT39AqEAFtQlIySsUIHJzcd4URhB4E9RSIripaYwN 3cwc6TccRltMpf2oZCefcrXtl5HDAnjydJCBBfPRPOFiktMupmD59UgBDmqBAXWM Mzf+Xe3PGJ80Ncj3E74Frba7t+DwPnXeMAtFssoddixPA9m7HE/zqhLrNi5lXetr wfCdwvkc7FyckKGDlhx/JJ3+wMYf7PlypntdzalUbqH6hfdZZ86gN9QeY2GyYlcx 7J0NSYZIVMcgTpgustusrEByfP1+NKDeD1c3yMPC7Utz0FW3eYKR+m3+vQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPDPGDH4tIfxtg+zU1OG6T3ML0WFMB8GA1UdIwQY MBaAFEyhO96lT3a4qFcSr9thUYazODjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtFNzNxVlBkcmlvVnhLdjIyRlJock00T01FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNjJkMTMtN2YwMy00ZDE5LThiNDYt ZmM5MTQzM2QzNjdkLzEvOE04WU1maTBoX0cyRDdOVFU0YnBQY3d2UllVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNjJkMTMtN2YwMy00ZDE5LThiNDYtZmM5MTQzM2QzNjdk LzEvVEtFNzNxVlBkcmlvVnhLdjIyRlJock00T01FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCggAUAwQB wghaAwQA1GOxMA0GCSqGSIb3DQEBCwUAA4IBAQAfuOh9dEZLrzyx5cuHCyE0WzHU VPuWst6EDDROY/JJIbqRIQWPGA7G0XOKq5SdNh10m/IzNhrMUJK+IHUTEysed3fc 6dCMHqhfRSg/S2mp7Dzqpx2H1SvAW98oWVUDmyXPZxWMC6X1bzvsZpkBz8sn9Ihg XgvAdNRvdUyd78KkYbs3B+qddn54G+zVRceTfktDzKttPXQwDCT0GbV65jNyZxo5 t76KKaBTTS+ghDWnVQP+5uChOJqktHiG3IZT8O5vI/GevDk9e3GA9Rb2/jzkReSq yo+7VVPCNekGNxixVRFZTVcraz5floZ4rKbM5h1YZ7aJP+qvrJwRTdDN1B9c -----END CERTIFICATE-----Generated at Mon Jan 26 05:33:44 2026 by rpki-client