This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/8nPl3AcrOpCxoPHI-yYhk20Z4jo.roa File: 8nPl3AcrOpCxoPHI-yYhk20Z4jo.roa (raw, json) Hash identifier: xYCGhk8KRGNgVElrhL//wuDH3rNsau4dVCz023td3io= Subject key identifier: F2:73:E5:DC:07:2B:3A:90:B1:A0:F1:C8:FB:26:21:93:6D:19:E2:3A Certificate issuer: /CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70 Certificate serial: 019B797F39F22478A91595A7D5BEDFDDD8EC Authority key identifier: E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/8nPl3AcrOpCxoPHI-yYhk20Z4jo.roa Signing time: Thu 01 Jan 2026 12:18:59 +0000 ROA not before: Thu 01 Jan 2026 12:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8426 IP address blocks: 138.248.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:39:f2:24:78:a9:15:95:a7:d5:be:df:dd:d8:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70 Validity Not Before: Jan 1 12:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f273e5dc072b3a90b1a0f1c8fb2621936d19e23a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b6:bb:b9:8c:c4:49:94:ad:5f:bf:00:ca:c3: 46:c1:6b:c2:fb:2f:89:76:cf:59:84:1f:d1:a5:ef: 4b:cd:76:60:0e:17:d5:b8:0e:48:9a:76:95:ce:e0: 73:13:89:7a:ff:12:eb:73:29:1b:b2:27:88:7a:e2: 3c:30:4d:60:fb:2a:53:a5:6b:29:97:c1:b7:05:d4: 7c:24:fa:62:7d:95:32:78:e1:68:46:bf:4e:25:5e: 97:ed:6a:2e:13:0b:2d:c0:a8:7e:30:4b:19:60:db: 92:04:6b:14:0b:2d:56:8e:a8:9e:89:87:a1:a0:ad: f9:0a:7a:f6:c5:06:40:ec:1c:32:15:83:8a:48:b9: 15:42:8f:af:29:22:21:8e:4a:b1:a8:21:a6:57:c7: c3:ae:f8:30:c2:31:dc:47:46:b6:cb:d5:c3:ef:15: 09:c9:c9:d8:86:67:3d:dc:3b:42:33:46:5e:16:f8: 0d:58:ee:9a:67:5a:83:d7:9c:dd:89:69:ce:6a:92: 6a:15:a9:cf:dc:11:4b:b1:e6:a1:77:e3:2e:78:7b: fc:fd:c3:2d:d6:44:9a:3e:d7:3b:98:ba:61:7f:e5: 5f:07:c0:61:fe:0c:52:fb:ee:40:6e:81:a4:6f:2b: 38:27:b1:17:93:b4:3e:00:0b:e7:4a:b4:1d:4b:ae: 9d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:73:E5:DC:07:2B:3A:90:B1:A0:F1:C8:FB:26:21:93:6D:19:E2:3A X509v3 Authority Key Identifier: keyid:E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/8nPl3AcrOpCxoPHI-yYhk20Z4jo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.248.0.0/20 Signature Algorithm: sha256WithRSAEncryption 03:32:4a:ec:90:4c:23:2f:52:01:ae:45:1b:4a:d7:b5:c0:6b: c1:b8:9d:96:51:15:df:54:9c:8e:a8:0c:af:4a:a0:8a:04:8a: 75:09:9d:fe:81:7b:04:01:44:74:c4:c4:ac:0e:d2:8d:9f:18: 27:16:41:55:20:74:b9:8a:06:5e:32:aa:df:8f:c7:f1:b0:46: 38:2e:ef:66:7d:36:fb:4a:29:a9:12:1f:48:f4:8e:0c:eb:59: 8f:06:74:a3:08:81:62:01:89:5d:64:78:26:32:18:85:16:5c: f7:aa:b1:f9:b8:62:ff:4f:82:78:74:d5:f0:e3:99:c3:f3:2d: 74:32:3f:2b:4d:bb:dc:9e:4e:27:9c:06:48:65:b0:dd:a9:8c: 75:24:22:02:98:06:86:2a:bc:13:58:dd:30:07:ae:9a:d1:d4: f6:73:0c:28:77:ed:1a:8a:ed:fa:21:bd:91:dc:0b:c6:6a:54: 1d:a6:00:66:e5:37:0f:3c:75:e6:cd:ed:4b:22:cf:1c:fb:2e: 48:cd:de:ad:22:12:19:dd:99:05:a8:53:56:19:f2:1a:37:d0: 89:a2:c6:c2:86:28:7d:75:f6:c6:f1:26:e3:fd:f8:5c:4d:28: 14:2e:06:6a:ad:00:18:45:30:24:de:d2:de:dd:e1:6f:c8:12: 94:6c:50:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fznyJHipFZWn1b7f3djsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmE5MWQ2MjY1MDRjY2JjNjRkODk3NDBiNjNjYjJlYjQy MzRmNzAwHhcNMjYwMTAxMTIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjczZTVkYzA3MmIzYTkwYjFhMGYxYzhmYjI2MjE5MzZkMTllMjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ba7uYzESZStX78AysNGwWvC+y+J ds9ZhB/Rpe9LzXZgDhfVuA5ImnaVzuBzE4l6/xLrcykbsieIeuI8ME1g+ypTpWsp l8G3BdR8JPpifZUyeOFoRr9OJV6X7WouEwstwKh+MEsZYNuSBGsUCy1WjqieiYeh oK35Cnr2xQZA7BwyFYOKSLkVQo+vKSIhjkqxqCGmV8fDrvgwwjHcR0a2y9XD7xUJ ycnYhmc93DtCM0ZeFvgNWO6aZ1qD15zdiWnOapJqFanP3BFLseahd+MueHv8/cMt 1kSaPtc7mLphf+VfB8Bh/gxS++5AboGkbys4J7EXk7Q+AAvnSrQdS66dUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPJz5dwHKzqQsaDxyPsmIZNtGeI6MB8GA1UdIwQY MBaAFOS6kdYmUEzLxk2JdAtjyy60I09wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUxxUjFpWlFUTXZHVFlsMEMyUExMclFqVDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy84ODdlOTQtZWI5Ny00MTA5LTlkYTgt Y2JmMThkMmQ2NmMzLzEvOG5QbDNBY3JPcEN4b1BISS15WWhrMjBaNGpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy84ODdlOTQtZWI5Ny00MTA5LTlkYTgtY2JmMThkMmQ2NmMz LzEvNUxxUjFpWlFUTXZHVFlsMEMyUExMclFqVDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEivgAMA0G CSqGSIb3DQEBCwUAA4IBAQADMkrskEwjL1IBrkUbSte1wGvBuJ2WURXfVJyOqAyv SqCKBIp1CZ3+gXsEAUR0xMSsDtKNnxgnFkFVIHS5igZeMqrfj8fxsEY4Lu9mfTb7 SimpEh9I9I4M61mPBnSjCIFiAYldZHgmMhiFFlz3qrH5uGL/T4J4dNXw45nD8y10 Mj8rTbvcnk4nnAZIZbDdqYx1JCICmAaGKrwTWN0wB66a0dT2cwwod+0aiu36Ib2R 3AvGalQdpgBm5TcPPHXmze1LIs8c+y5Izd6tIhIZ3ZkFqFNWGfIaN9CJosbChih9 dfbG8Sbj/fhcTSgULgZqrQAYRTAk3tLe3eFvyBKUbFD5 -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:48 2026 by rpki-client